Trust Me If You Can: Trusted Transformation Between (JSON) Schemas to Support Global Authentication of Education Credentials

More, Stefan; Grassberger, Peter; Hörandner, Felix; Abraham, Andreas; Klausner, Lukas Daniel

doi:10.1007/978-3-030-78120-0_2

Cited by 1 publication

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the Self-Sovereign Identity (SSI) world, this is often realized using a revocation registry in form of a list stored on a DL. Other examples are projects that use a DL to establish a Web of Trust as a distributed trust store and storage for credential schema information (FutureTrust Consortium, 2020;More et al, 2021). Challenge: Availability & Privacy To retrieve DL-based data, the verifier communicates with the API of a DL node it trusts.…”

Section: Introductionmentioning

confidence: 99%

Offline-verifiable Data from Distributed Ledger-based Registries

Heher

Walluschek

2022

Proceedings of the 19th International Conference on Security and Cryptography

Self Cite

View full text Add to dashboard Cite

Trust management systems often use registries to authenticate data, or form trust decisions. Examples are revocation registries and trust status lists. By introducing distributed ledgers (DLs), it is also possible to create decentralized registries. A verifier then queries a node of the respective ledger, e.g., to retrieve trust status information during the verification of a credential. While this ensures trustworthy information, the process requires the verifier to be online and the ledger node available. Additionally, the connection from the verifier to the registry poses a privacy issue, as it leaks information about the user's behavior. In this paper, we resolve these issues by extending existing ledger APIs to support results that are trustworthy even in an offline setting. We do this by introducing attestations of the ledger's state, issued by ledger nodes, aggregatable into a collective attestation by all nodes. This attestation enables a user to prove the provenance of DL-based data to an offline verifier. Our approach is generic. So once deployed it serves as a basis for any use case with an offline verifier. We also provide an implementation for the Ethereum stack and evaluate it, demonstrating the practicability of our approach.

show abstract

Section: Introductionmentioning

confidence: 99%