Designing a Framework for Digital KYC Processes Built on Blockchain-Based Self-Sovereign Identity

Schlatt, Vincent; Sedlmeir, Johannes; Feulner, Simon; Urbach, Nils

doi:10.1016/j.im.2021.103553

Cited by 45 publications

(34 citation statements)

References 56 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…VCs make claims about an entity -for instance, regarding attributes (e.g., name, age), relationships (e.g., mother, daughter), or entitlements (e.g., memberships, legal status) -cryptographically provable (Preukschat & Reed, 2021;Sporny et al, 2021). No third party is needed for storing and transferring the information, allowing for the confidential sharing of verifiable personal information in bilateral interactions (Schlatt et al, 2021) (Fig. 1).…”

Section: Self-sovereign Identitymentioning

confidence: 99%

“…However, a trust relationship between a verifier and the credential issuer must first be established (Mühle et al, 2018). Some projects also use publicly available infrastructures such as blockchains as a technical backbone for managing trust relationships by recording institutions' public keys (Ehrlich et al, 2021;Schlatt et al, 2021). Moreover, to avoid the need for communication with the credential issuer or another dedicated third party when the verifier wants to check VCs' revocation status during a VP, revocation information is often published on a blockchainbased public registry.…”

Section: Self-sovereign Identitymentioning

confidence: 99%

“…In some approaches, the revocation status is referenced through VCs' unique serial numbers revealed in a VP, so the relying party can look it up during a VP. However, since a VC's revocation status can be sensitive and personally identifiable, there are privacyoriented revocation registries where only a cryptographic accumulator is published that allows holders to create proofs of inclusion/exclusion without revealing their VC's serial number (Schlatt et al, 2021).…”

Section: Self-sovereign Identitymentioning

confidence: 99%

“…SSI can also help to protect data. Since the identity information is stored by the user, data honey pots -which aggregate identity information and are a popular target for attacks -can be avoided (Schlatt et al, 2021). With selective disclosure and ZKPs, only the minimum of data required for a use case can be transmitted, so SSI also resonates with the GDPR's privacy requirements of privacy by design and by default (Der et al, 2017).…”

Section: Self-sovereign Identitymentioning

confidence: 99%

“…Soltani and Nguyen (2018) presented a novel SSI-based eKYC onboarding design and evaluated their solution against Allen's principles of SSI (Allen, 2016). Compared to the architecture presented by Soltani and Nguyen that builds on one very specific technology stack, namely Hyperledger Indy, Schlatt et al (2021) emphasize the degrees of freedom in blockchain-based SSI from a technical perspective, such as what data needs to be stored on a blockchain, also regarding nascent standards that are being actively developed by the World Wide Web Consortium (W3C), and take this degree of freedom into discussions with experts. Liu et al (2020) identified 12 design patterns for blockchain-based SSI, addressing key management, decentralized identifier management, and credential design.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Exploring the use of self-sovereign identity for event ticketing systems

et al. 2022

Self Cite

View full text Add to dashboard Cite

Ticket fraud and ticket scalping activities often cause high costs as well as trust concerns for fans buying event tickets, especially in the secondary ticketing market. To address these issues, several publications and projects have proposed using blockchain technology to enable digital trust and ticket verifiability and thus to improve event ticketing systems. However, these approaches exhibit considerable privacy challenges and fall short concerning reliable, efficient visitor identification, which is necessary for controlling secondary market transactions. We demonstrate how a novel paradigm for end-user digital identity management, called self-sovereign identity (SSI), can be utilized to gain secondary market control. To do so, we follow a rigorous design science research approach to build and evaluate an SSI-based event ticketing framework. Our findings demonstrate that SSI-based event ticketing can enable efficient secondary market control by facilitating a practical implementation of the centralized exchange model. To generalize our results, we derive design principles for the efficient, reliable, and privacy-oriented ticket and identity verification and the use of revocation registries.

show abstract

Section: Self-sovereign Identitymentioning

confidence: 99%