PRETTINESS -- Privacy pResErving aTTrIbute maNagEment SyStem

• URL: http://arxiv.org/abs/2603.23221v1
• Date: Tue, 24 Mar 2026 13:59:00 GMT
• Title: PRETTINESS -- Privacy pResErving aTTrIbute maNagEment SyStem
• Abstract summary: European Digital Identity (EUDI) Wallet aims to provide end users with a way to get attested credentials from issuers.<n>We propose a generic credential revocation system which relies on a single server and secure transmission channels between parties.
• Score: 0.42970700836450476
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: European Digital Identity (EUDI) Wallet aims to provide end users with a way to get attested credentials from issuers, and present them to different relying parties. An important property mentioned in the regulatory frameworks is the possibility to revoke a previously issued credential. While it is possible to issue a short-lived credential, in some cases it may be inconvenient, and a separate revocation service which allows to revoke a credential at any time may be necessary. In this work, we propose a full end-to-end description of a generic credential revocation system, which technically relies on a single server and secure transmission channels between parties. We prove security of the proposed revocation functionality in the universal composability model, and estimate its efficiency based on a proof-of-concept implementation.

Related papers

• Vaulted Passkeys: A Device-Bound Proposal for Authenticated Credential Export and Import [0.6091702876917279]
  Existing guidance for device-bound credentials commonly reduces recovery risk by registering an additional authenticator before failure.<n>This paper addresses the resulting recovery gap by exporting protected credential state while the source is available and restoring it to hardware acquired later.<n>We propose Vaulted Passkeys, a device-bound architecture in which a random 256-bit Kvault protects authenticated PKV1 credential envelopes through HKDF-separated keys and four explicit AEAD profiles.
  arXiv  Detail & Related papers  (2026-08-13T22:32:49Z)
• Achieving Flexible and Secure Authentication with Strong Privacy in Decentralized Networks [13.209703999398805]
  IRAC is a flexible credential model that unifies credentials from heterogeneous issuers.<n>We design a secure decentralized revocation mechanism where holders prove non-revocation by demonstrating their credential's revocation within a gap in the issuer's sorted list.
  arXiv  Detail & Related papers  (2025-12-23T10:49:05Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Secure and Efficient Out-of-band Call Metadata Transmission [7.351131814642663]
  We present Sidecar, a distributed, privacy-preserving system with tunable decentralization.<n>Compared to the current solution, Sidecar 1) protects the confidentiality of subscriber identity and provider trade secrets.<n>Sidecar can be extended to provide the same security guarantees for arbitrary call metadata.
  arXiv  Detail & Related papers  (2025-09-16T02:20:26Z)
• zkToken: Empowering Holders to Limit Revocation Checks for Verifiable Credentials [0.0]
  We propose a novel framework for time-limited continuous verification.<n>The system guarantees proven untraceability of the revocation status after the verification period expires.<n>In addition to theoretically proving security, we evaluate the approach analytically and experimentally.
  arXiv  Detail & Related papers  (2025-09-15T13:48:41Z)
• Compact and Selective Disclosure for Verifiable Credentials [42.799793508708426]
  Self-Sovereign Identity (SSI) is a novel identity model that empowers individuals with full control over their data.<n>EUDI Regulation will enable all European citizens to seamlessly access services using Verifiable Credentials (VCs)<n>This paper proposes a novel mechanism designed to achieve Compact and Selective Disclosure for VCs (CSD-JWT)
  arXiv  Detail & Related papers  (2025-05-30T21:53:07Z)
• Towards Privacy-Preserving Revocation of Verifiable Credentials with Time-Flexibility [0.36832029288386137]
  Self-Sovereign Identity (SSI) is an emerging paradigm for authentication and credential presentation.<n>The EUDI Digital Identity wallet is about to become a concrete implementation of this paradigm.<n>We propose the basis of a novel method that customizes the use of anonymous hierarchical identity-based encryption.
  arXiv  Detail & Related papers  (2025-03-27T21:58:32Z)
• Balancing Confidentiality and Transparency for Blockchain-based Process-Aware Information Systems [43.253676241213626]
  We propose an architecture for blockchain-based PAISs to preserve confidentiality and transparency.<n>Smart contracts enact, enforce and store public interactions, while attribute-based encryption techniques are adopted to specify access grants to confidential information.<n>We assess the security of our solution through a systematic threat model analysis and evaluate its practical feasibility.
  arXiv  Detail & Related papers  (2024-12-07T20:18:36Z)
• ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check [98.34702864029796]
  Recent security incidents in safety-critical industries exposed how the lack of proper message authentication enables attackers to inject malicious commands or alter system behavior.<n>These shortcomings have prompted new regulations that emphasize the pressing need to strengthen cybersecurity.<n>We introduce ACRIC, a message authentication solution to secure legacy industrial communications.
  arXiv  Detail & Related papers  (2024-11-21T18:26:05Z)
• Towards Credential-based Device Registration in DApps for DePINs with ZKPs [46.08150780379237]
  We propose a credential-based device registration (CDR) mechanism that verifies device credentials on the blockchain. We present a general system model, and technically evaluate CDR using zkSNARKs with Groth16 and Marlin.
  arXiv  Detail & Related papers  (2024-06-27T09:50:10Z)
• Lifecycle Management of Resumés with Decentralized Identifiers and Verifiable Credentials [0.0]
  This paper introduces a trust framework for managing digital resum'e credentials. We propose a framework for real-time issuance, storage and verification of Verifiable Credentials without intermediaries.
  arXiv  Detail & Related papers  (2024-06-17T13:37:44Z)
• A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols [92.81385447582882]
  The Controller Area Network (CAN) bus leaves in-vehicle communications inherently non-secure. This paper reviews and compares the 15 most prominent authentication protocols for the CAN bus. We evaluate protocols based on essential operational criteria that contribute to ease of implementation.
  arXiv  Detail & Related papers  (2024-01-19T14:52:04Z)
• Combining Decentralized IDentifiers with Proof of Membership to Enable Trust in IoT Networks [44.99833362998488]
  The paper proposes and discusses an alternative (mutual) authentication process for IoT nodes under the same administration domain. The main idea is to combine the Decentralized IDentifier (DID)-based verification of private key ownership with the verification of a proof that the DID belongs to an evolving trusted set.
  arXiv  Detail & Related papers  (2023-10-12T09:33:50Z)
• FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature [60.99054146321459]
  Federated learning allows multiple parties to collaborate in learning a global model without revealing private data. We propose a cryptographic signature-based federated learning model ownership verification scheme named FedSOV.
  arXiv  Detail & Related papers  (2023-05-10T12:10:02Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.