Search papers, labs, and topics across Lattice.
This paper introduces COD-ssi, a novel framework for enforcing mutual privacy in Self-Sovereign Identity (SSI) credential exchanges. It addresses the problem of Verifiers inadvertently revealing sensitive information to credential Holders through their claim requests. COD-ssi leverages Oblivious Pseudorandom Functions (OPRFs) to allow Verifiers to selectively access claims without revealing which claims were accessed, achieving mutual privacy with moderate overhead.
Stop leaking your business logic to users: this new framework lets you selectively verify SSI credentials without revealing *which* claims you're checking.
The Self-Sovereign Identity (SSI) paradigm is instrumental for decentralised identity management, allowing an entity to create, manage, and present their digital credentials without relying on centralised authorities. Credential selective disclosure is one of the most attractive privacy-preserving features of SSI, allowing users to reveal only the minimum necessary information from their credentials. However, current selective disclosure mechanisms primarily focus on protecting the privacy of credential Holders, while offering limited protection to the Verifiers of credentials. Indeed, the specific credential information requested by a Verifier can inadvertently reveal to credential Holders sensitive information, including internal decision-making criteria, business rules, or strategic plans. In this work, we address this threat by proposing, to the best of our knowledge, the first approach that enforces mutual privacy in credential exchanges. To this end, we introduce COD-ssi (Claim Oblivious Disclosure for SSI), a novel framework that leverages Oblivious Pseudorandom Functions to allow Verifiers to selectively access a subset of claims without revealing which specific claims were accessed to the credential Holder. The security of our solution is formally verified and its feasibility is assessed through the experimental evaluation of our open-source prototype implementation. These results show that provable mutual privacy in the context of SSI can be achieved with just moderate computational and communication overhead.
