TY - JOUR
T1 - FutureDID
T2 - A Fully Decentralized Identity System with Multi-Party Verification
AU - Deng, Haotian
AU - Liang, Jinwen
AU - Zhang, Chuan
AU - Liu, Ximeng
AU - Zhu, Liehuang
AU - Guo, Song
N1 - Publisher Copyright:
© 1968-2012 IEEE.
PY - 2024
Y1 - 2024
N2 - Decentralized identity (DID) systems conforming to the World Wide Web Consortium (W3C) Decentralized Identifiers (DIDs) and Verifiable Credentials Data Model recommendations have recently attracted attention due to their better autonomy, interoperability, and openness design. However, those W3C recommendations lack a design for addressing the single point of failure (SPOF) and identity revocation, which could seriously compromise the robustness and practicality of DID systems. To remedy these limitations, we propose FutureDID, a DID system that enables multiple parties to jointly issue credentials and efficiently revoke DID identities, providing a robust and practical DID system. FutureDID is designed with a multi-party credential issuing mechanism based on distributed key generation technology, which transforms trust from a single entity to distributed committees and facilitates authentication between issuers, making it more resistant to SPOF. Moreover, the underlying blockchain system is built on a chameleon hash function to ensure tamper-proof and enable efficient identity revocation. We have implemented a prototype system using FISCO BCOS and conducted extensive evaluations to demonstrate the effectiveness and practicality of our system. Our evaluations have shown that FutureDID provides a significant improvement in efficiency, achieving at least a 60 × efficiency improvement in identity revocation compared to state-of-the-art systems.
AB - Decentralized identity (DID) systems conforming to the World Wide Web Consortium (W3C) Decentralized Identifiers (DIDs) and Verifiable Credentials Data Model recommendations have recently attracted attention due to their better autonomy, interoperability, and openness design. However, those W3C recommendations lack a design for addressing the single point of failure (SPOF) and identity revocation, which could seriously compromise the robustness and practicality of DID systems. To remedy these limitations, we propose FutureDID, a DID system that enables multiple parties to jointly issue credentials and efficiently revoke DID identities, providing a robust and practical DID system. FutureDID is designed with a multi-party credential issuing mechanism based on distributed key generation technology, which transforms trust from a single entity to distributed committees and facilitates authentication between issuers, making it more resistant to SPOF. Moreover, the underlying blockchain system is built on a chameleon hash function to ensure tamper-proof and enable efficient identity revocation. We have implemented a prototype system using FISCO BCOS and conducted extensive evaluations to demonstrate the effectiveness and practicality of our system. Our evaluations have shown that FutureDID provides a significant improvement in efficiency, achieving at least a 60 × efficiency improvement in identity revocation compared to state-of-the-art systems.
KW - blockchain
KW - chameleon hash function
KW - Decentralized identity
KW - distributed key generation
KW - identity revocation
UR - http://www.scopus.com/inward/record.url?scp=85192759607&partnerID=8YFLogxK
U2 - 10.1109/TC.2024.3398509
DO - 10.1109/TC.2024.3398509
M3 - Article
AN - SCOPUS:85192759607
SN - 0018-9340
VL - 73
SP - 2051
EP - 2065
JO - IEEE Transactions on Computers
JF - IEEE Transactions on Computers
IS - 8
ER -