Self-Sovereign Identity (SSI) is an identity model centered on the user. The user maintains and controls their data in this model. When a service provider requests data from the user, the user sends it directly to the service provider, bypassing third-party intermediaries. Thus, SSI reduces identity providers' involvement in the identification, authentication, and authorization, thereby increasing user privacy. Additionally, users can share portions of their personal information with service providers, significantly improving user privacy. This identity model has drawn the attention of researchers and organizations worldwide, resulting in an increase in both scientific and non-scientific literature on the subject. This study conducts a comprehensive and rigorous systematic review of the literature and a systematic mapping of theoretical and practical advances in SSI. We identified and analyzed evidence from reviewed materials to address four research questions, resulting in a novel SSI taxonomy used to categorize and review publications. Additionally, open challenges are discussed, along with recommendations for future work.
翻译:用户在这种模式中维护并控制其数据。当服务提供者要求用户提供数据时,用户将数据直接发送给服务提供者,绕过第三方中间人,从而减少身份提供者参与识别、认证和授权,从而增加用户隐私。此外,用户可以与服务提供者分享其个人信息的一部分,大大改善用户隐私。这种身份模式吸引了全世界的研究人员和组织的关注,导致科学文献和非科学文献的增加。这项研究对文献进行全面和严格的系统审查,并系统地绘制SSI的理论和实践进展图。我们查明并分析了从经审查的材料中获得的证据,以解决四个研究问题,从而产生了用于对出版物进行分类和审查的新的SSI分类。此外,还讨论了公开的挑战,并就未来工作提出了建议。