Functional Requirements for Decentralized and Self-Sovereign Identities

• URL: http://arxiv.org/abs/2603.24250v1
• Date: Wed, 25 Mar 2026 12:41:27 GMT
• Title: Functional Requirements for Decentralized and Self-Sovereign Identities
• Abstract summary: Identity management systems continuously experience security and privacy challenges.<n>Despite privacy and security benefits to users, the adoption of DI/SSI systems remains limited.
• Score: 1.7924920920347915
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Centralized identity management systems continuously experience security and privacy challenges, motivating the exploration of Decentralized Identity (DI) and Self-Sovereign Identity (SSI) as alternatives. Despite privacy and security benefits to users, the adoption of DI/SSI systems remains limited. One contributing reason is the lack of reproducible approaches to evaluate system compliance with its promised qualities. Derivation of functional requirements (FR) is the first and necessary step to develop such an evaluation approach. Previous literature on DI/SSI significantly lacks the systematic operationalization of existing non-functional requirements (NFR) or SSI principles. This work addresses this research gap by deriving FR for a generalized DI/SSI use case, which encompasses the fundamental operations of the system. The paper details operationalization methodology, introduces a formalized functional model, and presents a comprehensive set of FR, that can be used for future development and evaluation of DI/SSI systems. As a result, establishing the fundamental step toward a reproducible evaluation framework, rooted in established requirements engineering methods.

Related papers

• Beyond Model Readiness: Institutional Readiness for AI Deployment in Public Systems [0.0]
  Many public-sector artificial intelligence systems fail not at the point of model development, but at the point of deployment.<n>Existing responsible AI and model evaluation frameworks are valuable, but they primarily assess models, datasets, and developer-side processes.<n>We introduce Institutional Alignment Readiness (IAR), a five-dimensional framework for assessing deployment readiness in public systems.
  arXiv  Detail & Related papers  (2026-05-17T00:11:09Z)
• From High-Dimensional Spaces to Verifiable ODD Coverage for Safety-Critical AI-based Systems [0.7285647284266376]
  Current EASA guidelines mandate complete coverage of the AI/ML constituent's Operational Design Domain (ODD)<n>No standardized engineering method exists to bridge the gap between abstract ODD definitions and verifiable evidence.<n>This paper proposes a method that integrates parameter discretization, constraint-based filtering, and criticality-based dimension reduction into a structured, multi-step ODD coverage verification process.
  arXiv  Detail & Related papers  (2026-04-02T15:52:35Z)
• Rethinking Self-Sovereign Identity Principles: An Actor-Oriented Categorization of Requirements [1.7924920920347915]
  This work addresses the gap by embedding a user perspective into the requirements engineering process for DI/SSI systems.<n>A dependency model is introduced to formalize relationships between actors.<n>By integrating user-centered requirements, responsibility allocation, ownership specification, and dependency modeling, this work provides the first structured model for DI/SSI system architectures.
  arXiv  Detail & Related papers  (2026-03-24T13:24:37Z)
• Safe and Certifiable AI Systems: Concepts, Challenges, and Lessons Learned [45.44933002008943]
  This white paper presents the T"UV AUSTRIA Trusted AI framework.<n>It is an end-to-end audit catalog and methodology for assessing and certifying machine learning systems.<n>Building on three pillars - Secure Software Development, Functional Requirements, and Ethics & Data Privacy - it translates the high-level obligations of the EU AI Act into specific, testable criteria.
  arXiv  Detail & Related papers  (2025-09-08T17:52:08Z)
• Formalizing Operational Design Domains with the Pkl Language [0.4349640169711269]
  The deployment of automated functions that can operate without direct human supervision has changed safety evaluation in domains seeking higher levels of automation.<n>To make a convincing safety claim, the developer must present a thorough justification argument, supported by evidence, that a function is free from unreasonable risk when operated in its intended context.<n>This paper presents a way to formalize an Operational Design Domain specification (ODD) in the Pkl language.
  arXiv  Detail & Related papers  (2025-09-02T11:41:27Z)
• A Scalable Framework for the Management of STPA Requirements: a Case Study on eVTOL Operations [1.3898092652070853]
  System-Theoretic Process Analysis (STPA) is a recommended method for analysing complex systems.<n>The absence of a structured framework for managing and prioritising requirements presents challenges in fast-paced development environments.<n>This paper introduces a scalable framework for prioritising aSTPA-derived requirements.
  arXiv  Detail & Related papers  (2025-08-22T13:26:00Z)
• Assessing the Trustworthiness of Electronic Identity Management Systems: Framework and Insights from Inception to Deployment [9.132025152225447]
  This paper introduces an integrated Digital Identity Systems Trustworthiness Assessment Framework (DISTAF)<n>It is supported by over 65 mechanisms and over 400 metrics derived from international standards and technical guidelines.<n>We demonstrate the application of DISTAF through a real-world implementation using a Modular Open Source Identity Platform (MOSIP) instance.
  arXiv  Detail & Related papers  (2025-02-15T11:26:30Z)
• A Methodology for Evaluating RAG Systems: A Case Study On Configuration Dependency Validation [6.544757635738911]
  Retrieval-augmented generation (RAG) is an umbrella of different components, design decisions, and domain-specific adaptations. There is currently no generally accepted methodology for RAG evaluation despite a growing interest in this technology. We propose a first blueprint of a methodology for a sound and reliable evaluation of RAG systems.
  arXiv  Detail & Related papers  (2024-10-11T13:36:13Z)
• Trustworthiness in Retrieval-Augmented Generation Systems: A Survey [59.26328612791924]
  Retrieval-Augmented Generation (RAG) has quickly grown into a pivotal paradigm in the development of Large Language Models (LLMs) We propose a unified framework that assesses the trustworthiness of RAG systems across six key dimensions: factuality, robustness, fairness, transparency, accountability, and privacy.
  arXiv  Detail & Related papers  (2024-09-16T09:06:44Z)
• A Domain-Agnostic Approach for Characterization of Lifelong Learning Systems [128.63953314853327]
  "Lifelong Learning" systems are capable of 1) Continuous Learning, 2) Transfer and Adaptation, and 3) Scalability. We show that this suite of metrics can inform the development of varied and complex Lifelong Learning systems.
  arXiv  Detail & Related papers  (2023-01-18T21:58:54Z)
• Recursively Feasible Probabilistic Safe Online Learning with Control Barrier Functions [60.26921219698514]
  We introduce a model-uncertainty-aware reformulation of CBF-based safety-critical controllers. We then present the pointwise feasibility conditions of the resulting safety controller. We use these conditions to devise an event-triggered online data collection strategy.
  arXiv  Detail & Related papers  (2022-08-23T05:02:09Z)
• SMT-Based Safety Verification of Data-Aware Processes under Ontologies (Extended Version) [71.12474112166767]
  We introduce a variant of one of the most investigated models in this spectrum, namely simple artifact systems (SASs) This DL, enjoying suitable model-theoretic properties, allows us to define SASs to which backward reachability can still be applied, leading to decidability in PSPACE of the corresponding safety problems.
  arXiv  Detail & Related papers  (2021-08-27T15:04:11Z)
• Towards an Interface Description Template for AI-enabled Systems [77.34726150561087]
  Reuse is a common system architecture approach that seeks to instantiate a system architecture with existing components. There is currently no framework that guides the selection of necessary information to assess their portability to operate in a system different than the one for which the component was originally purposed. We present ongoing work on establishing an interface description template that captures the main information of an AI-enabled component.
  arXiv  Detail & Related papers  (2020-07-13T20:30:26Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.