How can the holder trust the verifier?A CP-ABPRE-based solution to control the access to claims in a Self-Sovereign-Identity scenario  

作　　者：Francesco Buccafurri Vincenzo De Angelis Roberto Nardone 

机构地区：[1]University of Reggio Calabria,89124 Reggio Calabria,Italy [2]University of Calabria,87036 Arcavacata di Rende(CS),Italy [3]University of Naples“Parthenope”,80143 Naples,Italy

出　　处：《Blockchain(Research and Applications)》2024年第3期22-41,共20页区块链研究（英文）

基　　金：supported by the project STRIDE included in the Spoke 5(Cryptography and Distributed Systems Security)of the Re-search and Innovation Program PE00000014-H73C22000880001,“SE-curity and RIghts in the CyberSpace(SERICS)”,under the National Recovery and Resilience Plan,funded by the European Union,NextGen-erationEU.

摘　　要：The interest in Self-Sovereign Identity(SSI)in research,industry,and governments is rapidly increasing.SSI is a paradigm where users hold their identity and credentials issued by authorized entities.SSI is revolutionizing the concept of digital identity and enabling the definition of a trust framework wherein a service provider(verifier)validates the claims presented by a user(holder)for accessing services.However,current SSI solutions primarily focus on the presentation and verification of claims,overlooking a dual aspect:ensuring that the verifier is authorized to access the holder’s claims.Addressing this gap,this paper introduces an innovative SSI-based solution that integrates decentralized wallets with Ciphertext-Policy Attribute-Based Proxy Re-Encryption(CP-ABPRE).This combination effectively addresses the challenge of verifier authorization.Our solution,implemented on the Ethereum platform,enhances accountability by notarizing key operations through a smart contract.This paper also offers a prototype demonstrating the practicality of the proposed approach.Furthermore,it provides an extensive evaluation of the solution’s performance,emphasizing its feasibility and efficiency in real-world applications.

关 键 词：Blockchain IPFS Self Sovereign Identity Smart contract Access control 

分 类 号：O17[理学—数学]