Abstract
Digital identity has importance in the digital world representing users in a comparable manner to that of the physical identity in the real world. Digital identity comprises certain personal and confidential attributes related to identity owners, managed through an Identity Management (IDM) system. In most IDM systems, identity owners do not control their own identity and its related personal data. However, Self-Sovereign Identity (SSI) is an emerging IDM system which offers users the ownership and full control over their personal data. In the European Union, General Data Protection Regulation (GDPR) is the basic regulatory environment for anyone involved in processing personal data, whilst SSI is concerned with the requirement of managing identity and its associated personal data. If an SSI system could comply with the key GDPR principles then it could become both a desirable and appropriate IDM solution legally and universally. This paper evaluates this aspect of SSI and analyses SSI compliance and alignment with the key principles of GDPR. Furthermore, it investigates two different types of SSI ecosystems public permissionless blockchain based SSI ecosystem uPort and public permissioned blockchain based SSI ecosystem Sovrin, according to the various defined roles and their compatibility with GDPR roles. Finally, this paper performs the comparative analysis of uPort and Sovrin to assess their compliance with the key principles of GDPR.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of 2020 7th IEEE International Conference on Behavioural and Social Computing, BESC 2020 |
| Publisher | IEEE |
| Pages | 1-6 |
| ISBN (Electronic) | 978-1-7281-8605-4 |
| ISBN (Print) | 978-1-7281-8606-1 |
| DOIs | |
| Publication status | Published - 16 Feb 2021 |
| Event | 2020 7th International Conference on Behavioural and Social Computing (BESC) - Bournemouth, United Kingdom Duration: 5 Nov 2020 → 7 Nov 2020 |
Conference
| Conference | 2020 7th International Conference on Behavioural and Social Computing (BESC) |
|---|---|
| Abbreviated title | BESC |
| Country/Territory | United Kingdom |
| City | Bournemouth |
| Period | 5/11/20 → 7/11/20 |
Bibliographical note
© 2020 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.Keywords
- Self-Sovereign Identity
- SSI
- General Data Protection Regulation
- GDPR
- Distributed Ledger
- Blockchain
- Identity Management System
- IDM
- uPort/Serto
- Sovrin
- uPort