poster

Self-sovereign identity on public blockchains and the GDPR

Authors:

Jörn ErbguthAuthors Info & Claims

SAC '20: Proceedings of the 35th Annual ACM Symposium on Applied Computing

Pages 342 - 345

https://doi.org/10.1145/3341105.3374066

Published: 30 March 2020 Publication History

Abstract

This paper studies three existing technical solutions for a self-sovereign identity on blockchains and analyzes the arising issues related to the General Data Protection Regulation (GDPR) of the European Union (EU). In particular, the paper provides an overview of the existing Sovrin self-sovereign identity on the Hyperledger Indy public permissioned blockchain as well as uPort and Jolocom on the Ethereum public permissionless blockchain. The paper then concludes with a discussion on the GDPR-compliance of the blockchain-based identity concepts.

References

[1]

EU Blockchain Observatory and Forum, "Blockchain and Digital Identity," 2019. Available at https://www.eublockchainforum.eu/reports (All links accessed December 2019)

[2]

F. Zbinden and G. Kondova, "Economic Development in Mexico and the Role of Blockchain," Advances in Economics and Business, vol. 7, no. 1, pp. 55--64, Jan. 2019.

[3]

D. He et al., "Virtual Currencies and Beyond: Initial Considerations," IMF Staff Discussion Notes, vol. 16, no. 03, p. 1, 2016.

[4]

EU Blockchain Observatory and Forum, "Blockchain and the GDPR," 2019. Available at https://www.eublockchainforum.eu/reports

[5]

World Wide Web Consortium (W3C), "Decentralized Identifiers (DIDs) v1.0: Core Data Model and Syntaxes," 2019. Available at https://w3c.github.io/did-core/#did-document

[6]

World Wide Web Consortium (W3C), "DID Method Registry", 2019. Available at https://w3c-ccg.github.io/did-method-registry/

[7]

Sovrin Foundation, "Sovrin: A Protocol and Token for Self-Sovereign Identity and Decentralized Trust," 2018. Available at https://sovrin.org/library/sovrin-protocol-and-token-white-paper/

[8]

A. Tobin, "Sovrin: What Goes on the Ledger?," Evernym White Paper, 2018. Available at https://www.evernym.com/wp-content/uploads/2017/07/What-Goes-On-The-Ledger.pdf

[9]

uPort Specs, 2019. Available at: https://github.com/uport-project/specs

[10]

uPort PKI, 2019. Available at: https://github.com/uport-project/specs/blob/develop/pki/index.md

[11]

Jolocom, A Decentralized, Open Source Solution for Digital Identity and Access Management, Whitepaper 2.1, December 2019. Available at https://jolocom.io/wp-content/uploads/2019/12/Jolocom-Whitepaper-v2.1-A-Decentralized-Open-Source-Solution-for-Digital-Identity-and-Access-Management.pdf

[12]

General Data Protection Regulation (GDPR), 2016. Available at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679

[13]

aepd EDPS, Introduction to the Hash Function as a Personal Data Pseudonymisation Technique, October 2019. Available at https://edps.europa.eu/sites/edp/files/publication/19-10-30_aepd-edps_paper_hash_final_en.pdf

[14]

J. Erbguth, "Datenschutzkonforme Verwendung von Hashwerten auf Blockchains," Multimedia und Recht 2019, no. 10, pp. 654--660.

[15]

J. Erbguth, "Five Ways to GDPR-Compliant Use of Blockchains," European Data Protection Law Review 2019, no. 3, pp. 427--433.

[16]

Article 29 Working Party, "Opinion 1/2010 on the concepts of 'controller' and 'processor'," 2010, 00264/10/EN WP 169, 9, endorsed by the European Data Protection Board on 25 May 2018. Available at https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2010/wp169_en.pdf

[17]

B. G. Rauber, "Grzeszick/Rauber: Anwendbarkeit der DS-GVO durch Einschaltung Dritter?," Zeitschrift für Datenschutz, no. 12, pp. 560--564, 2018.

[18]

CNIL, "Premiers éléments d'analyse de la CNIL - Blockchain," Sep-2018. Available at https://www.cnil.fr/sites/default/files/atoms/files/la_blockchain.pdf

[19]

J. Erbguth and J. Galileo, "Erbguth/Fasching: Wer ist Verantwortlicher einer Bitcoin-Transaktion?," Zeitschrift für Datenschutz, no. 12, pp. 560--565, 201.

[20]

European Court of Justice, Case C-101/01 Lindqvist (2003) ECR I-12971

Cited By

Costa RRupino Da Cunha P(2024)Blockchain-Based Self-Sovereign Identities: Current Landscape and Research OpportunitiesProceedings of the 32nd International Conference on Information Systems Development10.62036/ISD.2024.20Online publication date: 2024
https://doi.org/10.62036/ISD.2024.20
MORIYAMA KOTSUKA A(2024)Permissionless Blockchain-Based Sybil-Resistant Self-Sovereign Identity Utilizing Attested Execution Secure ProcessorsIEICE Transactions on Information and Systems10.1587/transinf.2023BCI0001E107.D:9(1112-1122)Online publication date: 1-Sep-2024
https://doi.org/10.1587/transinf.2023BCI0001
Yao WDu WGu JYe JDeek FWang G(2024)Establishing a Baseline for Evaluating Blockchain-Based Self-Sovereign Identity Systems: A Systematic Approach to Assess Capability, Compatibility and InteroperabilityProceedings of the 2024 6th Blockchain and Internet of Things Conference10.1145/3688225.3688239(108-119)Online publication date: 19-Jul-2024
https://dl.acm.org/doi/10.1145/3688225.3688239
Show More Cited By

Index Terms

Self-sovereign identity on public blockchains and the GDPR
1. Computer systems organization
  1. Architectures
    1. Distributed architectures
      1. Peer-to-peer architectures

Recommendations

Design Patterns for Blockchain-based Self-Sovereign Identity
EuroPLoP '20: Proceedings of the European Conference on Pattern Languages of Programs 2020

Self-sovereign identity is a new identity management paradigm that allows entities to really have the ownership of their identity data and control their use without involving any intermediary. Blockchain is an enabling technology for building self-...
Blockchain-Based Self-Sovereign Identity: Survey, Requirements, Use-Cases, and Comparative Study
WI-IAT '21: IEEE/WIC/ACM International Conference on Web Intelligence and Intelligent Agent Technology

Identity is at the heart of digital transformation. Successful digital transformation requires confidence in and protection of digital identities. On the Internet, however, there is no unique and standard identity layer. Consequently, a variety of ...
Tension between GDPR and Public Blockchains: A Data-Driven Analysis of Online Discussions
SIN 2020: 13th International Conference on Security of Information and Networks

Since coming into effect in May 2018, the EU General Data Protection Regulation (GDPR) has raised serious concerns among users of public (permissionless) blockchain systems. Such concerns are triggered by a tension between some unique characteristics ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

SAC '20: Proceedings of the 35th Annual ACM Symposium on Applied Computing

March 2020

2348 pages

ISBN:9781450368667

DOI:10.1145/3341105

Conference Chairs:
Chih-Cheng Hung
Kennesaw State University
,
Tomas Cerny
Baylor University
,
Program Chairs:
Dongwan Shin
New Mexico Tech
,
Alessio Bechini
University of Pisa, Italy

Copyright © 2020 Owner/Author.

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Sponsors

SIGAPP: ACM Special Interest Group on Applied Computing

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 30 March 2020

Check for updates

Author Tags

Qualifiers

Poster

Conference

SAC '20

Sponsor:

SIGAPP

SAC '20: The 35th ACM/SIGAPP Symposium on Applied Computing

March 30 - April 3, 2020

Brno, Czech Republic

Acceptance Rates

Overall Acceptance Rate 1,650 of 6,669 submissions, 25%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

46
Total Citations
View Citations
2,115
Total Downloads

Downloads (Last 12 months)138
Downloads (Last 6 weeks)15

Reflects downloads up to 09 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

Costa RRupino Da Cunha P(2024)Blockchain-Based Self-Sovereign Identities: Current Landscape and Research OpportunitiesProceedings of the 32nd International Conference on Information Systems Development10.62036/ISD.2024.20Online publication date: 2024
https://doi.org/10.62036/ISD.2024.20
MORIYAMA KOTSUKA A(2024)Permissionless Blockchain-Based Sybil-Resistant Self-Sovereign Identity Utilizing Attested Execution Secure ProcessorsIEICE Transactions on Information and Systems10.1587/transinf.2023BCI0001E107.D:9(1112-1122)Online publication date: 1-Sep-2024
https://doi.org/10.1587/transinf.2023BCI0001
Yao WDu WGu JYe JDeek FWang G(2024)Establishing a Baseline for Evaluating Blockchain-Based Self-Sovereign Identity Systems: A Systematic Approach to Assess Capability, Compatibility and InteroperabilityProceedings of the 2024 6th Blockchain and Internet of Things Conference10.1145/3688225.3688239(108-119)Online publication date: 19-Jul-2024
https://dl.acm.org/doi/10.1145/3688225.3688239
Hofmeier MPöhn DHommel W(2024)DistIN: Analysis and Validation of a Concept and Protocol for Distributed Identity Information NetworksProceedings of the 19th International Conference on Availability, Reliability and Security10.1145/3664476.3669930(1-10)Online publication date: 30-Jul-2024
https://dl.acm.org/doi/10.1145/3664476.3669930
Biedermann BScerri MKozlova VEllul J(2024)A Systematisation of Knowledge: Connecting European Digital Identities with Web32024 IEEE International Conference on Blockchain (Blockchain)10.1109/Blockchain62396.2024.00089(605-610)Online publication date: 19-Aug-2024
https://doi.org/10.1109/Blockchain62396.2024.00089
Satybaldy AFerdous MNowostawski M(2024)A Taxonomy of Challenges for Self-Sovereign Identity SystemsIEEE Access10.1109/ACCESS.2024.335794012(16151-16177)Online publication date: 2024
https://doi.org/10.1109/ACCESS.2024.3357940
Bochnia RRichter DAnke J(2024)Self-Sovereign Identity for Organizations: Requirements for Enterprise SoftwareIEEE Access10.1109/ACCESS.2023.334909512(7637-7660)Online publication date: 2024
https://doi.org/10.1109/ACCESS.2023.3349095
Zeydan EMangues-Bafalluy JArslan STurk Y(2024)Blockchain-based Self-Sovereign Identity Solution for Aerial Base Station Integrated NetworksVehicular Communications10.1016/j.vehcom.2024.100759(100759)Online publication date: Mar-2024
https://doi.org/10.1016/j.vehcom.2024.100759
Luo HLuo JVasilakos A(2024)BC4LLM: A perspective of trusted artificial intelligence when blockchain meets large language modelsNeurocomputing10.1016/j.neucom.2024.128089599(128089)Online publication date: Sep-2024
https://doi.org/10.1016/j.neucom.2024.128089
Buccafurri FDe Angelis VNardone R(2024)How can the holder trust the verifier? A CP-ABPRE-based solution to control the access to claims in a self-sovereign-identity scenarioBlockchain: Research and Applications10.1016/j.bcra.2024.100196(100196)Online publication date: Apr-2024
https://doi.org/10.1016/j.bcra.2024.100196
Show More Cited By

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents