Digital Identities are playing an essential role in our digital lives. Today, used Digital Identities are based on central architectures. Central Digital Identity providers control and know our data and, thereby, our Identity. Self Sovereign Identities (SSI) are based on a decentralized data storage and data exchange architecture, where the user is in sole control of his data and identity. Most of the issued credentials need the possibility of revocation. For a Central Digital Identity, revocation is easy. In decentral architectures, revocation is more challenging. Revocation can be done with different methods e.g. lists, compressed lists and cryptographic accumulators. A revocation method must be privacy preserving and must scale. This paper gives an overview about the available revocation methods, include a survey to define requirements, assess different revocation groups against the requirements, highlights shortcomings of the methods and introduce a new revocation method called Linked Validity Verifiable Credentials.
翻译:数字身份在我们的数字生活中正在发挥不可或缺的作用。 今天, 使用的数字身份以中央结构为基础。 中央数字身份提供者控制并了解我们的数据, 从而了解我们的身份。 自我主权身份(SSI)以分散的数据存储和数据交换结构为基础, 用户独自控制着他的数据和身份。 大多数签发的证书都需要撤销的可能性。 对于中央数字身份来说, 撤销是容易的。 在中央结构中, 撤销更具挑战性。 取消可以采用不同的方法, 如列表、 压缩名单和密码收集器。 取消方法必须是隐私保护, 并且必须规模化。 本文概述了现有的撤销方法, 包括一项调查, 以界定要求, 评估不同的撤销组, 根据要求评估不同的撤销组, 突出方法的缺陷, 并引入一种名为 " 链接有效证书 " 的新的撤销方法。