Decentralized Self-sovereign Identity Management System: Empowering Datacenters Through Compact Cancelable Template Generation

Junwei Yu, Shaowen Li, Yepeng Ding, Hiroyuki Sato

Abstract: Digital identity management functions as a critical infrastructure for various information and communications technologies. However, traditional centralized systems are raising security concerns due to their reliance on trusted intermediaries, which prompts the development of self-sovereign identity (SSI). However, SSI still face challenges regarding network pressures, blockchain costs, and security vulnerabilities. In this paper, we propose Coconut, a novel system leveraging a decentralized SSI management architecture to facilitate the establishment of secure, localized digital identity and credential verification mechanisms, while obviating the necessity for reliance on trusted intermediaries and blockchain technologies. Coconut reduces the storage overhead by minimizing the responsibility of data centers and enabling them to solely store public keys. On the end-user side, individuals retain the prerogative to store their verifiable credentials within local environments. Besides, we introduce a compact cancelable template generation algorithm to enhance security and efficiency. Additionally, our experiments demonstrate the effectiveness and performance of Coconut.