pith. sign in

arxiv: 2601.19837 · v2 · submitted 2026-01-27 · 💻 cs.CR · cs.CY· cs.DC· cs.ET

Self-Sovereign Identity and eIDAS 2.0: An Analysis of Control, Privacy, and Legal Implications

Pith reviewed 2026-05-16 10:27 UTC · model grok-4.3

classification 💻 cs.CR cs.CYcs.DCcs.ET
keywords Self-Sovereign IdentityeIDAS 2.0Digital IdentityPrivacyControlLegal FrameworkGap AnalysisEU Regulation
0
0 comments X

The pith

eIDAS 2.0 can be developed to better support Self-Sovereign Identity by addressing gaps in control and privacy.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The paper examines the compatibility of Self-Sovereign Identity with the eIDAS 2.0 regulation through a structured analysis of its provisions and reference framework. It uses a scoring matrix to perform gap analysis and normative evaluation to highlight limitations and opportunities. A reader would care because this informs how European laws might adapt to decentralized identity systems that give users more control over their data. The work concludes that the current legal foundations provide a basis for future enhancements to integrate SSI principles.

Core claim

The analysis demonstrates that while eIDAS 2.0 has some alignment with SSI properties, there are significant gaps in areas like user control and data minimization, but these can be bridged by developing the regulation further using existing provisions in the Architecture and Reference Framework.

What carries the argument

A defined scoring matrix that quantifies the compatibility between SSI properties such as control and privacy with specific eIDAS 2.0 articles and recitals, supported by systematic literature review and normative analysis.

Load-bearing premise

The scoring matrix used for the gap analysis accurately and objectively reflects the compatibility between Self-Sovereign Identity properties and eIDAS 2.0 without subjective bias in the evaluation.

What would settle it

A re-evaluation of the compatibility using an independent scoring process or actual pilot implementations of SSI under eIDAS 2.0 that contradict the identified gaps and opportunities.

Figures

Figures reproduced from arXiv: 2601.19837 by Francesco Bruschi, Marco Esposito, Nacereddine Sitouah.

Figure 1
Figure 1. Figure 1: Identity, Security and Privacy trifecta for an IDMS. [PITH_FULL_IMAGE:figures/full_fig_p005_1.png] view at source ↗
Figure 2
Figure 2. Figure 2: eIDAS 2.0 Time Line Summary Until Adoption [PITH_FULL_IMAGE:figures/full_fig_p007_2.png] view at source ↗
Figure 3
Figure 3. Figure 3: Existing related research SLR flowchart The findings reveal significant inconsistencies across the literature. Although the issue under consideration is widely acknowledged, no contributions to date ex￾plicitly address SSI compatibility following the amendment of eIDAS 2.0. Prior to this amendment, several researchers assumed that Self-Sovereign Identity (SSI) would ultimately be recognized under eIDAS 2.0… view at source ↗
Figure 4
Figure 4. Figure 4: SSI-based identity lifecycle showing: (1) DID generation and legal recognition process, [PITH_FULL_IMAGE:figures/full_fig_p015_4.png] view at source ↗
Figure 5
Figure 5. Figure 5: DID-VC system interaction model showing how users can preserve their autonomy, [PITH_FULL_IMAGE:figures/full_fig_p027_5.png] view at source ↗
Figure 6
Figure 6. Figure 6: Graphical representation of research interest on eIDAS 2.0 conformity per each relevant [PITH_FULL_IMAGE:figures/full_fig_p044_6.png] view at source ↗
read the original abstract

European digital identity initiatives are grounded in regulatory frameworks designed to ensure interoperability and robust, harmonized security standards. The evolution of these frameworks culminates in eIDAS 2.0, whose origins trace back to the Electronic Signatures Directive 1999/93/EC, the first EU-wide legal foundation for the use of electronic signatures in cross-border electronic transactions. As technological capabilities advanced, the initial eIDAS 1.0 framework was increasingly criticized for its limitations and lack of comprehensiveness. Emerging decentralized approaches further exposed these shortcomings and introduced the possibility of integrating innovative identity paradigms, such as Self-Sovereign Identity (SSI) models. In this article, we contribute to the ongoing legal and policy debate on the European Digital Identity Framework by analyzing key provisions of eIDAS 2.0 and its accompanying recitals, drawing on a systematic literature review guided by defined Research Questions (RQ). This work employs a structured methodological approach that combines descriptive and comparative analysis, systematic gap analysis supported by a defined scoring matrix, and normative analysis to evaluate the compatibility of SSI properties with eIDAS 2.0 regulation, as operationalized via its Architecture and Reference Framework (ARF). Furthermore, we assess the ARF's guidelines and examine the extent to which it aligns with SSI. The analysis adopts a complementary perspective demonstrating how the regulation can be further developed to better support SSI in the future by identifying existing limitations and potential adoption opportunities within the current legal foundations of the framework.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Referee Report

2 major / 1 minor

Summary. The paper analyzes key provisions of eIDAS 2.0 and its recitals via a systematic literature review, combining descriptive, comparative, gap, and normative analysis to evaluate compatibility between SSI properties (control, privacy) and the regulation as operationalized in the Architecture and Reference Framework (ARF). It identifies existing limitations in the framework and potential adoption opportunities for future regulatory development to better support SSI.

Significance. If the gap analysis holds, the work provides a structured bridge between EU regulatory frameworks and decentralized identity models, offering concrete guidance on refining eIDAS 2.0 to enhance user control and privacy. The explicit use of the ARF and a scoring matrix for systematic evaluation strengthens the policy relevance and could support falsifiable recommendations for legal evolution.

major comments (2)
  1. [Methodology / gap analysis section] The section describing the systematic gap analysis supported by a defined scoring matrix: the matrix converts qualitative legal text from eIDAS 2.0 articles/recitals into numeric compatibility scores with SSI properties, but the rules for distinguishing categories such as 'partial support' versus 'limitation' are normative and interpretive rather than mechanical, so shifts in scoring can materially change the list of identified limitations and adoption opportunities.
  2. [Normative analysis] The normative analysis section that concludes the regulation can be further developed to better support SSI: this central claim rests directly on the gap-analysis outcomes; without demonstrated reproducibility or inter-rater validation of the scoring matrix, the recommendations for future development lack sufficient grounding and could vary across readers.
minor comments (1)
  1. [Abstract] The abstract references defined Research Questions (RQ) guiding the literature review but does not enumerate them; listing the RQs explicitly would improve traceability to the subsequent analysis.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for the constructive comments regarding the methodology and normative analysis sections. We address each point below and indicate the revisions we will incorporate to improve transparency and grounding.

read point-by-point responses
  1. Referee: [Methodology / gap analysis section] The section describing the systematic gap analysis supported by a defined scoring matrix: the matrix converts qualitative legal text from eIDAS 2.0 articles/recitals into numeric compatibility scores with SSI properties, but the rules for distinguishing categories such as 'partial support' versus 'limitation' are normative and interpretive rather than mechanical, so shifts in scoring can materially change the list of identified limitations and adoption opportunities.

    Authors: We acknowledge that the scoring matrix incorporates interpretive elements, as is typical in qualitative legal and policy research. The category distinctions (e.g., 'partial support' versus 'limitation') were derived from the systematic literature review on SSI properties and direct textual analysis of eIDAS 2.0 provisions and the ARF. In the revised version, we will expand the methodology section with explicit decision rules, concrete examples of scoring for at least three key articles/recitals, and a brief discussion of how reasonable alternative interpretations could affect the identified gaps. This will make the process more transparent while preserving the original findings. revision: yes

  2. Referee: [Normative analysis] The normative analysis section that concludes the regulation can be further developed to better support SSI: this central claim rests directly on the gap-analysis outcomes; without demonstrated reproducibility or inter-rater validation of the scoring matrix, the recommendations for future development lack sufficient grounding and could vary across readers.

    Authors: The normative recommendations are explicitly tied to the gaps identified through the scoring process. We agree that inter-rater validation would strengthen reproducibility but lies outside the scope of this paper. We will revise the normative section to include a dedicated limitations paragraph that discusses the interpretive nature of the matrix, provides additional citations to the SSI literature used in defining criteria, and links each recommendation directly to specific scored provisions. This will improve the grounding without requiring new empirical validation. revision: partial

Circularity Check

0 steps flagged

No significant circularity; analysis rests on external regulatory texts and literature review

full rationale

The paper's central claims derive from a systematic literature review, descriptive/comparative analysis, and gap analysis applied to eIDAS 2.0 provisions and its ARF. The scoring matrix is an author-constructed analytical instrument for rating compatibility, not a self-referential definition that reduces outputs to inputs by construction. No equations, fitted parameters, or self-citation chains are load-bearing; the identification of limitations and opportunities follows directly from comparison against the external legal framework. The derivation chain is therefore self-contained against external benchmarks.

Axiom & Free-Parameter Ledger

0 free parameters · 1 axioms · 0 invented entities

The central claim rests on standard definitions of SSI properties and eIDAS provisions drawn from prior literature; no free parameters or invented entities are introduced.

axioms (1)
  • domain assumption SSI models possess specific properties of user control, privacy, and decentralization that can be systematically compared to regulatory frameworks.
    Invoked in the compatibility evaluation and gap analysis sections described in the abstract.

pith-pipeline@v0.9.0 · 5589 in / 1125 out tokens · 18111 ms · 2026-05-16T10:27:08.978757+00:00 · methodology

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Lean theorems connected to this paper

Citations machine-checked in the Pith Canon. Every link opens the source theorem in the public Lean library.

What do these tags mean?
matches
The paper's claim is directly supported by a theorem in the formal canon.
supports
The theorem supports part of the paper's argument, but the paper may add assumptions or extra steps.
extends
The paper goes beyond the formal theorem; the theorem is a base layer rather than the whole result.
uses
The paper appears to rely on the theorem as machinery.
contradicts
The paper's claim conflicts with a theorem or certificate in the canon.
unclear
Pith found a possible connection, but the passage is too broad, indirect, or ambiguous to say the theorem truly supports the claim.

Reference graph

Works this paper leans on

140 extracted references · 140 canonical work pages · 1 internal anchor

  1. [1]

    The general data protection regulation (gdpr), the data protection law enforcement directive and other rules concerning the protection of per- sonal data

    , 2016. The general data protection regulation (gdpr), the data protection law enforcement directive and other rules concerning the protection of per- sonal data. regulation (eu) 2016/679. Official Journal of the European Union URL:https://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=CELEX:32016R0679

  2. [2]

    zk–snarks for ecdsa (part 1).https://0xparc

    0xPARC, 2021. zk–snarks for ecdsa (part 1).https://0xparc. org/blog/zk-ecdsa-1. URL:https://0xparc.org/blog/ zk-ecdsa-1. accessed: 2026-01-??

  3. [3]

    Ahmed, S.A., Phuyal, S., Bezerra, R.C., Lewerenz, S., Jørgensen, K.P., Ferreira, J.C., Martins, H., 2025. A distributed ledger architecture for cross-jurisdictional healthcare professional authentication and track- ing in universal ehr systems, in: 2025 IEEE 2nd International Confer- ence on Blockchain, Smart Healthcare and Emerging Technologies (Smart- B...

  4. [4]

    The role of ebsi in eidas-how qualified ledger with governmental trust anchor could shape eidas ecosystem, in: Open Identity Summit 2025, Gesellschaft für Informatik eV

    Alamillo, I., Schwalm, S., 2025. The role of ebsi in eidas-how qualified ledger with governmental trust anchor could shape eidas ecosystem, in: Open Identity Summit 2025, Gesellschaft für Informatik eV . pp. 29–40

  5. [5]

    Privacy- preserving biometrics authentication systems using fully homomorphic en- cryption

    Alberto Torres, W.A., Bhattacharjee, N., Srinivasan, B., 2015. Privacy- preserving biometrics authentication systems using fully homomorphic en- cryption. International Journal of Pervasive Computing and Communica- tions 11, 151–168

  6. [6]

    Cryptoscape: Navigating data en- cryption for hyperscale growth, in: 2025 International Conference on Smart Applications, Communications and Networking (SmartNets), IEEE

    Alfughi, Z., Aref, Y ., Ouda, A., 2025. Cryptoscape: Navigating data en- cryption for hyperscale growth, in: 2025 International Conference on Smart Applications, Communications and Networking (SmartNets), IEEE. pp. 1– 6

  7. [7]

    Comparative analysis of decentralized identity approaches

    Alizadeh, M., Andersson, K., Schelén, O., 2022. Comparative analysis of decentralized identity approaches. IEEE Access 10, 92273–92283

  8. [8]

    The path to self-sovereign identity URL: http://www.lifewithalacrity.com/2016/04/ the-path-to-self-soverereign-identity.html

    Allen, C., 2016. The path to self-sovereign identity URL: http://www.lifewithalacrity.com/2016/04/ the-path-to-self-soverereign-identity.html

  9. [9]

    Mutual consent in the age of smart contracts: A mixed- methods analysis of legal challenges

    Althabhawi, N.M., Aburoub, R.F., Abd Rahman, M.R., Mihna, F.K.H., Sal- lal, H.A., 2025. Mutual consent in the age of smart contracts: A mixed- methods analysis of legal challenges. IEEE Access

  10. [10]

    Anonymous self-credentials and their application to single-sign- on

    Alupotha, J., Barbaraci, M., Kaklamanis, I., Rawat, A., Cachin, C., Zhang, F., 2025. Anonymous self-credentials and their application to single-sign- on. Cryptology ePrint Archive

  11. [11]

    Privacy evaluation of the eu- ropean digital identity wallet’s architecture and reference framework

    Álvarez, I.A., Hölzmer, P., Sedlmeir, J., 2025. Privacy evaluation of the eu- ropean digital identity wallet’s architecture and reference framework. Com- puters & Security , 104707

  12. [12]

    The basics of information security: understanding the fundamentals of InfoSec in theory and practice

    Andress, J., 2014. The basics of information security: understanding the fundamentals of InfoSec in theory and practice. Syngress

  13. [13]

    Web3-based identity and kyc innovations for next-generation fintech

    Arshad, U., Tubaishat, A., Anwar, S., Halim, Z., Abualkishik, A., Ullah, A., 2025. Web3-based identity and kyc innovations for next-generation fintech. ACM Transactions on the Web . 48

  14. [14]

    Analyt- ical study of hardware-rooted security standards and their implementation techniques in mobile

    Ashraf, N., Masood, A., Abbas, H., Latif, R., Shafqat, N., 2020. Analyt- ical study of hardware-rooted security standards and their implementation techniques in mobile. Telecommunication Systems 74, 379–403

  15. [15]

    URS–A universal revocation service for applying in self-sovereign identity

    Azeem, M.S.A., 2023. URS–A universal revocation service for applying in self-sovereign identity. Ph.D. thesis. Graz University of Technology

  16. [16]

    Self-sovereign identity and digital wallets

    Babel, M., Willburger, L., Lautenschlager, J., Völter, F., Guggenberger, T., Körner, M.F., Sedlmeir, J., Strüker, J., Urbach, N., 2025. Self-sovereign identity and digital wallets. Electronic Markets 35, 1–14

  17. [17]

    Document fraud: Will your identity be secure in the twenty-first century? European Journal on Criminal Policy and Research 26, 379–398

    Baechler, S., 2020. Document fraud: Will your identity be secure in the twenty-first century? European Journal on Criminal Policy and Research 26, 379–398

  18. [18]

    Understanding online privacy—a sys- tematic review of privacy visualizations and privacy by design guidelines

    Barth, S., Ionita, D., Hartel, P., 2022. Understanding online privacy—a sys- tematic review of privacy visualizations and privacy by design guidelines. ACM Computing Surveys (CSUR) 55, 1–37

  19. [19]

    An evaluation of x

    Berbecaru, D.G., Lioy, A., 2023. An evaluation of x. 509 certificate revo- cation and related privacy issues in the web pki ecosystem. IEEE Access 11, 79156–79175

  20. [20]

    Security issues with certificate au- thorities, in: 2017 IEEE 8th Annual Ubiquitous Computing, Electronics and Mobile Communication Conference (UEMCON), IEEE

    Berkowsky, J.A., Hayajneh, T., 2017. Security issues with certificate au- thorities, in: 2017 IEEE 8th Annual Ubiquitous Computing, Electronics and Mobile Communication Conference (UEMCON), IEEE. pp. 449–455

  21. [21]

    Identity management: Concepts, tech- nologies, and systems

    Bertino, E., Takahashi, K., 2010. Identity management: Concepts, tech- nologies, and systems. Artech House

  22. [22]

    Selective disclo- sure in digital credentials: A review

    Šeila Be ´cirovi´c Rami ´c, Cogo, E., Prazina, I., Cogo, E., Turkanovi ´c, M., Mulahasanovi ´c, R.T., Mrdovi ´c, S., 2024. Selective disclo- sure in digital credentials: A review. ICT Express 10, 916–

  23. [23]

    URL:https://www.sciencedirect.com/science/ article/pii/S2405959524000614, doi:https://doi.org/ 10.1016/j.icte.2024.05.011

  24. [24]

    A multi-dimensional review on hand- written signature verification: strengths and gaps

    Bhavani, S., Bharathi, R., 2024. A multi-dimensional review on hand- written signature verification: strengths and gaps. Multimedia Tools and Applications 83, 2853–2894. 49

  25. [25]

    A systematisa- tion of knowledge: Connecting european digital identities with web3, in: 2024 IEEE International Conference on Blockchain (Blockchain), IEEE

    Biedermann, B., Scerri, M., Kozlova, V ., Ellul, J., 2024. A systematisa- tion of knowledge: Connecting european digital identities with web3, in: 2024 IEEE International Conference on Blockchain (Blockchain), IEEE. pp. 605–610

  26. [26]

    Aggregating dig- ital identities through bridging: An integration of open authentication pro- tocols for web3 identifiers

    Biedermann, B., Scerri, M., Kozlova, V ., Ellul, J., 2025. Aggregating dig- ital identities through bridging: An integration of open authentication pro- tocols for web3 identifiers. Distributed Ledger Technologies: Research and Practice 5, 1–17

  27. [27]

    Privacy preserving biometric authentica- tion for fingerprints and beyond, in: Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy, pp

    Blanton, M., Murphy, D., 2024. Privacy preserving biometric authentica- tion for fingerprints and beyond, in: Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy, pp. 367–378

  28. [28]

    What is blockchain? URL: https://ethereum.org/en/developers/docs/ intro-to-ethereum/#what-is-a-blockchain

    is blockchain, W., 2023. What is blockchain? URL: https://ethereum.org/en/developers/docs/ intro-to-ethereum/#what-is-a-blockchain

  29. [29]

    Bochnia, R., Anke, J., 2024. Long-lived verifiable credentials: Ensuring durability beyond the issuer’s lifetime, in: Proceedings of the 19th Interna- tional Conference on Availability, Reliability and Security, pp. 1–9

  30. [30]

    Self-sovereign identity for organi- zations: Requirements for enterprise software

    Bochnia, R., Richter, D., Anke, J., 2024. Self-sovereign identity for organi- zations: Requirements for enterprise software. IEEE access 12, 7637–7660

  31. [31]

    Boi, B., Cirillo, F., De Santis, M., Esposito, C., 2025. User-centric and privacy-preserving attribute-based authentication in healthcare systems leveraging zk-snarks and soulbound tokens, in: 2025 28th International Symposium on Real-Time Distributed Computing (ISORC), IEEE. pp. 1– 10

  32. [32]

    Bukhari, A., Miettinen, J., Rajarajan, M., 2024. Defining unified signa- ture api library for mobile apps to integrate with secure signature creation devices (sscds), in: 2024 IEEE International Conference on Blockchain (Blockchain), IEEE. pp. 619–624

  33. [33]

    Untraceable secret credentials: Trust establishment with privacy, in: IEEE Annual Conference on Perva- sive Computing and Communications Workshops, 2004

    Bussard, L., Roudier, Y ., Molva, R., 2004. Untraceable secret credentials: Trust establishment with privacy, in: IEEE Annual Conference on Perva- sive Computing and Communications Workshops, 2004. Proceedings of the Second, IEEE. pp. 122–126. 50

  34. [34]

    Cambarieri, M., Viadana, A., Rached Galera, S., Jauge, M., Gar- cía Martínez, N., 2024. Explorando el potencial de las microcredenciales y la tecnología blockchain para la transformación digital en la educación superior, in: XXX Congreso Argentino de Ciencias de la Computación (CACIC)(La Plata, 7 al 11 de octubre de 2024)

  35. [35]

    Privacy concerns and measures in metaverse: A review, in: 2022 15th international conference on information security and cryptography (ISCTURKEY), IEEE

    Canbay, Y ., Utku, A., Canbay, P., 2022. Privacy concerns and measures in metaverse: A review, in: 2022 15th international conference on information security and cryptography (ISCTURKEY), IEEE. pp. 80–85

  36. [36]

    A survey of identity management technology, in: 2010 IEEE International Conference on Information Theory and Informa- tion Security, IEEE

    Cao, Y ., Yang, L., 2010. A survey of identity management technology, in: 2010 IEEE International Conference on Information Theory and Informa- tion Security, IEEE. pp. 287–293

  37. [37]

    How-to conduct a systematic literature review: A quick guide for computer science research

    Carrera-Rivera, A., Ochoa, W., Larrinaga, F., Lasa, G., 2022. How-to conduct a systematic literature review: A quick guide for computer science research. MethodsX 9, 101895. URL: https://www.sciencedirect.com/science/article/ pii/S2215016122002746, doi:https://doi.org/10.1016/ j.mex.2022.101895

  38. [38]

    Verifiable credentials implementation guidelines 1.0

    Chadwick, D., Longley, D., Sporny, M., Terbu, O., Zagidulin, D., Zun- del, B., 2019. Verifiable credentials implementation guidelines 1.0. W3C Working Group Note

  39. [39]

    A map of witness maps: New definitions and connections, in: IACR International Conference on Public-Key Cryptography, Springer

    Chakraborty, S., Prabhakaran, M., Wichs, D., 2023. A map of witness maps: New definitions and connections, in: IACR International Conference on Public-Key Cryptography, Springer. pp. 635–662

  40. [40]

    Sok: Web3 recovery mechanisms

    Chatzigiannis, P., Chalkias, K., Kate, A., Mangipudi, E.V ., Minaei, M., Mondal, M., 2023. Sok: Web3 recovery mechanisms. Cryptology ePrint Archive

  41. [41]

    Will passports be replaced by biometrics? The New York Times (Digital Edition) , NA–NA

    Chung, C., 2024. Will passports be replaced by biometrics? The New York Times (Digital Edition) , NA–NA

  42. [42]

    Hardware security for internet of things identity assurance

    Cirne, A., Sousa, P.R., Resende, J.S., Antunes, L., 2024. Hardware security for internet of things identity assurance. IEEE Communications Surveys & Tutorials 26, 1041–1079. 51

  43. [43]

    Did and vc URL:https://www.w3.org/TR/ did-core/

    Credentials, V ., 2021. Did and vc URL:https://www.w3.org/TR/ did-core/

  44. [44]

    Towards the classification of self-sovereign identity properties

    Cucko, S., Becirovic, S., Kamisalic, A., Mrdovic, S., Turkanovic, M., 2022. Towards the classification of self-sovereign identity properties. IEEE Ac- cess 10, 88306–88329. doi:10.1109/ACCESS.2022.3199414

  45. [45]

    Eap methods for wireless networks

    Dantu, R., Clothier, G., Atri, A., 2007. Eap methods for wireless networks. Computer Standards & Interfaces 29, 289–301

  46. [46]

    Distributed ledger technology URL:https://www.investopedia.com/terms/d/ distributed-ledger-technology

    is DLT, W., 2023. Distributed ledger technology URL:https://www.investopedia.com/terms/d/ distributed-ledger-technology

  47. [47]

    Secure and reliable digital wallets: A threat model for secure storage in eidas 2.0, in: IFIP Annual Conference on Data and Applications Security and Privacy, Springer

    Ebadi Ansaroudi, Z., Sharif, A., Sciarretta, G., Antonio Marino, F., Ranise, S., 2025. Secure and reliable digital wallets: A threat model for secure storage in eidas 2.0, in: IFIP Annual Conference on Data and Applications Security and Privacy, Springer. pp. 271–289

  48. [48]

    Verifiable secret sharing scheme using merkle tree, in: 2020 International Symposium on Computer Engi- neering and Intelligent Communications (ISCEIC), IEEE

    Fang, Y .q., Liao, J.b., Lai, L.y., 2020. Verifiable secret sharing scheme using merkle tree, in: 2020 International Symposium on Computer Engi- neering and Intelligent Communications (ISCEIC), IEEE. pp. 1–4

  49. [49]

    In search of self- sovereign identity leveraging blockchain technology

    Ferdous, M.S., Chowdhury, F., Alassafi, M.O., 2019. In search of self- sovereign identity leveraging blockchain technology. IEEE access 7, 103059–103079

  50. [50]

    Towards a standardized model for privacy-preserving verifiable credentials, in: Proceedings of the 16th International Conference on Avail- ability, Reliability and Security, pp

    García-Rodríguez, J., Torres Moreno, R., Bernal Bernabé, J., Skarmeta, A., 2021. Towards a standardized model for privacy-preserving verifiable credentials, in: Proceedings of the 16th International Conference on Avail- ability, Reliability and Security, pp. 1–6

  51. [51]

    Towards a password-free future: Analyzing and comparing eid solutions under eidas, in: 8th IEEE International Congress on Information Science and Technology Proceed- ing, pp

    Gösslbauer, T., Pinter, K., Grechenig, T., 2025. Towards a password-free future: Analyzing and comparing eid solutions under eidas, in: 8th IEEE International Congress on Information Science and Technology Proceed- ing, pp. 517–522

  52. [52]

    Greschbach, B., Kreitz, G., Buchegger, S., 2012. The devil is in the meta- data—new privacy challenges in decentralised online social networks, in: 2012 IEEE international conference on pervasive computing and commu- nications workshops, IEEE. pp. 333–339. 52

  53. [53]

    Uppresso: Untraceable and unlinkable privacy-preserving single sign-on services

    Guo, C., Lin, J., Cai, Q., Wang, W., Zhu, W., Jing, J., Wang, Q., Zhao, B., Li, F., 2021. Uppresso: Untraceable and unlinkable privacy-preserving single sign-on services. arXiv preprint arXiv:2110.10396

  54. [54]

    Transparency tools for user-controlled identity management, in: Proceed- ings of the 17th eChallenges Conference (e-2007), pp

    Hansen, M., Fischer-Hübner, S., Pettersson, J.S., Bergmann, M., 2007. Transparency tools for user-controlled identity management, in: Proceed- ings of the 17th eChallenges Conference (e-2007), pp. 1360–1367

  55. [55]

    Cryptocurrency, a successful application of blockchain technology

    Hashemi Joo, M., Nishikawa, Y ., Dandapani, K., 2020. Cryptocurrency, a successful application of blockchain technology. Managerial Finance 46, 715–733

  56. [56]

    Herbke, P., Cory, T., Migliardi, M., 2024. Decentralized credential status management: A paradigm shift in digital trust, in: 2024 6th Conference on Blockchain Research & Applications for Innovative Networks and Services (BRAINS), IEEE. pp. 1–10

  57. [57]

    Toward a formal schol- arly understanding of blockchain-mediated decentralization: A systematic review and a framework

    Hoffman, M.R., Ibáñez, L.D., Simperl, E., 2020. Toward a formal schol- arly understanding of blockchain-mediated decentralization: A systematic review and a framework. Frontiers in Blockchain 3, 35

  58. [58]

    Con- siderations for trustworthy cross-border interoperability of digital identity systems in developing countries

    Ibor, A., Hooper, M., Maple, C., Crowcroft, J., Epiphaniou, G., 2025. Con- siderations for trustworthy cross-border interoperability of digital identity systems in developing countries. AI & society 40, 2729–2750

  59. [59]

    Role of identity, identification, and receipts for consent, in: Open Identity Summit 2021, Gesellschaft für Informatik eV

    J Pandit, H., Jesus, V ., Ammai, S., Lizar, M., D’Agostino, S., 2021. Role of identity, identification, and receipts for consent, in: Open Identity Summit 2021, Gesellschaft für Informatik eV . pp. 211–216

  60. [60]

    Privacy policies and consent management platforms: Growth and users’ interactions over time

    Jha, N., Trevisan, M., Mellia, M., Fernandez, D., Irarrazaval, R., 2025. Privacy policies and consent management platforms: Growth and users’ interactions over time. ACM Transactions on the Web 19, 1–25

  61. [61]

    Anarkey: A new approach to (socially) recover keys

    Kate, A., Mukherjee, P., Saleem, H., Sarkar, P., Roberts, B., 2025. Anarkey: A new approach to (socially) recover keys. Cryptology ePrint Archive

  62. [62]

    A critical view on blockchain rollups, in: Security and Privacy in Smart Environ- ments

    Katsika, A., Negka, L., Spathoulas, G., Plagianakos, V ., 2024. A critical view on blockchain rollups, in: Security and Privacy in Smart Environ- ments. Springer, pp. 204–239. 53

  63. [63]

    Khongbantabam, D., Mathur, G., Kravchenko, O., Sampath, N., 2025. Hi- erarchical batch optimized merkle trees: An efficient blockchain based ap- proach for credential revocation in ssi system, in: 2025 6th International Conference on Inventive Research in Computing Applications (ICIRCA), IEEE. pp. 349–355

  64. [64]

    Guidelines for performing Sys- tematic Literature Reviews in Software Engineering

    Kitchenham, B.A., Charters, S., 2007. Guidelines for performing Sys- tematic Literature Reviews in Software Engineering. Technical Re- port EBSE 2007-001. Keele University and Durham University Joint Report. URL:https://www.elsevier.com/__data/promis_ misc/525444systematicreviewsguide.pdf

  65. [65]

    Evolution of sim cards–what’s next?, in: 2018 International Conference on Advances in Computing, Communica- tions and Informatics (ICACCI), IEEE

    Koshy, D.G., Rao, S.N., 2018. Evolution of sim cards–what’s next?, in: 2018 International Conference on Advances in Computing, Communica- tions and Informatics (ICACCI), IEEE. pp. 1963–1967

  66. [66]

    Pseudonymization and reporters’ pro- tection by design in the eu whistleblower directive

    Kutyłowski, M., Wechta, G., 2025. Pseudonymization and reporters’ pro- tection by design in the eu whistleblower directive. Journal of Cybersecu- rity 11, tyaf028

  67. [67]

    Kyriakoulis, N., Dimopoulos, C., Daniil, G., Lampropoulos, K., Prevelakis, V ., Karantzias, P., Popescu, A.B., Fuentes-Exposito, A., Nikolaou, N., Pa- pastergiou, S., et al., 2025. Consentis-an innovative framework for identity and consent management for eu digital and data strategies, in: 2025 IEEE International Conference on Cyber Security and Resilienc...

  68. [68]

    Self-sovereign identity adoption: Antecedents and potential outcomes

    Laatikainen, G., Mustak, M., Hickman, N., 2025. Self-sovereign identity adoption: Antecedents and potential outcomes. Technology in Society , 102859URL:https://www.sciencedirect.com/ science/article/pii/S0160791X25000491, doi:https:// doi.org/10.1016/j.techsoc.2025.102859

  69. [69]

    A Survey on the Applications of Zero-Knowledge Proofs

    Lavin, R., Liu, X., Mohanty, H., Norman, L., Zaarour, G., Krishnamachari, B., 2024. A survey on the applications of zero-knowledge proofs. arXiv preprint arXiv:2408.00243

  70. [70]

    Aligning eidas and trust over ip: a mapping approach, in: Proceedings of the 19th International Conference on Availability, Reliability and Security, pp

    Lepore, C., Laborde, R., Eynard, J., 2024. Aligning eidas and trust over ip: a mapping approach, in: Proceedings of the 19th International Conference on Availability, Reliability and Security, pp. 1–9. 54

  71. [71]

    Blockchain gdpr privacy by design

    Lima, C., 2018. Blockchain gdpr privacy by design. IEEE blockchain group 4

  72. [72]

    Certification of the eu digital identity wallets and its challenges in the era of ai, in: 2025 MIPRO 48th ICT and Electronics Convention, IEEE

    Loutock `y, P., Stupka, V ., Kasl, F., 2025. Certification of the eu digital identity wallets and its challenges in the era of ai, in: 2025 MIPRO 48th ICT and Electronics Convention, IEEE. pp. 1–6

  73. [73]

    Blockchain and the gdpr, in: The European Union Blockchain Observatory and Forum, pp

    Lyons, T., Courcelas, L., Timsit, K., 2018. Blockchain and the gdpr, in: The European Union Blockchain Observatory and Forum, pp. 44–46

  74. [74]

    Ha-caap: Hardware-assisted continuous authentica- tion and attestation protocol for iot based on blockchain

    Malamas, V ., Kotzanikolaou, P., Nomikos, K., Zonios, C., Tenentes, V ., Psarakis, M., 2025. Ha-caap: Hardware-assisted continuous authentica- tion and attestation protocol for iot based on blockchain. IEEE Internet of Things Journal

  75. [75]

    Vulner- ability analysis of extensible authentication protocol (eap) dos attack over wireless networks

    Malekzadeh, M., Ghani, A.A.A., Desa, J., Subramaniam, S., 2009. Vulner- ability analysis of extensible authentication protocol (eap) dos attack over wireless networks. ICGST International Journal on Computer Network and Internet Research CNIR 9, 39–46

  76. [76]

    Can security be decentralised? the case of the pgp web of trust, in: International Workshop on Socio-Technical Aspects in Security, Springer

    Mathew, A.J., 2021. Can security be decentralised? the case of the pgp web of trust, in: International Workshop on Socio-Technical Aspects in Security, Springer. pp. 67–85

  77. [77]

    Mattei, L., Morpurgo, F., Occhipinti, C., Ratto Vaquer, L.M., Vasylieva, T.,

  78. [78]

    Digital Society 3, 25

    Self-sovereign identity model: Ethics and legal principles. Digital Society 3, 25

  79. [79]

    A survey on decentralized identifiers and verifiable credentials

    Mazzocca, C., Acar, A., Uluagac, S., Montanari, R., Bellavista, P., Conti, M., 2025. A survey on decentralized identifiers and verifiable credentials. IEEE Communications Surveys & Tutorials

  80. [80]

    Aaa protocols: authentication, authorization, and account- ing for the internet

    Metz, C., 2002. Aaa protocols: authentication, authorization, and account- ing for the internet. IEEE Internet Computing 3, 75–79

Showing first 80 references.