{"authors":[{"id":"orcid_______::e37eb5519ae2404eca7688fd9814a00f","fullName":"Benjamin Larsen","name":null,"surname":null,"rank":1,"pid":{"id":{"scheme":"orcid","value":"0000-0002-6067-9970"},"provenance":null}},{"id":null,"fullName":"Nada El Kassem","name":null,"surname":null,"rank":2,"pid":null},{"id":"orcid_______::1eb4e9bd38ba5ba529558c92904d0610","fullName":"Thanassis Giannetsos","name":null,"surname":null,"rank":3,"pid":{"id":{"scheme":"orcid","value":"0000-0003-0663-2263"},"provenance":null}},{"id":null,"fullName":"Ioannis Krontiris","name":null,"surname":null,"rank":4,"pid":null},{"id":null,"fullName":"Stefanos Vasileiadis","name":null,"surname":null,"rank":5,"pid":null},{"id":null,"fullName":"Liqun Chen 0002","name":null,"surname":null,"rank":6,"pid":null}],"openAccessColor":null,"publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"und","label":"Undetermined"},"countries":null,"subjects":[{"subject":{"scheme":"keyword","value":"anonymous credentials"},"provenance":null},{"subject":{"scheme":"keyword","value":"trusted computing"},"provenance":null},{"subject":{"scheme":"keyword","value":"identity wallet"},"provenance":null},{"subject":{"scheme":"FOS","value":"0102 computer and information sciences"},"provenance":null},{"subject":{"scheme":"FOS","value":"01 natural sciences"},"provenance":null},{"subject":{"scheme":"keyword","value":"selective disclosure"},"provenance":null}],"mainTitle":"Achieving Higher Level of Assurance in Privacy Preserving Identity Wallets","subTitle":null,"descriptions":["Recent advances in decentralized digital identity based on Verifiable Credentials utilize identity wallets to ensure that the identity data control remains with the user. However, they still lack higher Level of Assurance guarantees, restricting their full potential. In this paper, we design and showcase DOOR, a scheme that enables identity wallets to utilize a hardware root of trust and bring them in alignment with emerging regulations and standards that require higher level of assurances for services (e.g. eIDAS). At the same time, we make sure that privacy-enhancing properties like selective-disclosure are fully supported, in order to make the wallet compliant with privacy regulations (e.g. GDPR). To achieve all these we have designed an enhanced variant of DAA-A crypto protocol to offer anonymity, unlinkability, and unforgeability, while being the first to offer strong guarantees on the Wallet’s integrity when constructing attribute attestations. We formally prove the security properties of DOOR and evaluate the performance of its implementation for every phase of the credential management.","First submission version"],"publicationDate":"2023-11-01","publisher":"IEEE","embargoEndDate":null,"sources":["Crossref","2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)"],"formats":null,"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","issnPrinted":null,"issnOnline":null,"issnLinking":null,"ep":"1059","iss":null,"sp":"1049","vol":null,"edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::436f85bab9e85c00d3faeaa8372c33fc","originalIds":["10.1109/trustcom60117.2023.00146","50|doiboost____|436f85bab9e85c00d3faeaa8372c33fc","50|datacite____::bb278a76596e201a01353c8d74a24c31","10.5281/zenodo.8215222","oai:zenodo.org:8215222","50|od______2659::bb278a76596e201a01353c8d74a24c31","50|datacite____::defe7057ad2152a6f6f1b37aaca48c70","10.5281/zenodo.8215221","50|dblp________::6e0b9c3a80acb4824461a2e81f0a6ee7","50|r3c4b2081b22::7dba834603792585b8820dc93355193e","10.5281/ZENODO.8215222","50|r3c4b2081b22::987bf30106a114ddf63c6c0449446cf3","10.1109/TRUSTCOM60117.2023.00146","50|r3c4b2081b22::bb278a76596e201a01353c8d74a24c31","50|sygma_______::436f85bab9e85c00d3faeaa8372c33fc","50|sygma_______::bb278a76596e201a01353c8d74a24c31"],"pids":[{"scheme":"doi","value":"10.1109/trustcom60117.2023.00146"},{"scheme":"doi","value":"10.5281/zenodo.8215222"},{"scheme":"doi","value":"10.5281/zenodo.8215221"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":3.0,"influence":2.715106E-9,"popularity":3.78774E-9,"impulse":3.0,"citationClass":"C5","influenceClass":"C4","impulseClass":"C5","popularityClass":"C4"}},"projects":[{"id":"corda__h2020::17d08d2bc0faf4145a2cb28271f45fbc","code":"952697","acronym":"ASSURED","title":"Future Proofing of ICT Trust Chains: Sustainable Operational Assurance and Verification Remote Guards for Systems-of-Systems Security and Privacy","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/952697"}]},{"id":"corda_____he::f71d8e93546f654b37ff8cab1933492f","code":"101095634","acronym":"ENTRUST","title":"ENsuring Secure and Safe CMD Design with Zero TRUST Principles","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101095634"}]},{"id":"corda_____he::1b7ef0c7ec1c57e0dd062d4892c6a391","code":"101070627","acronym":"REWIRE","title":"REWiring the ComposItional Security  VeRification and AssurancE of Systems of Systems Lifecycle","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101070627"}]},{"id":"corda_____he::9ce4795c43250f481c709ae85d41b183","code":"101086308","acronym":"DUCA","title":"Data Usage Control for empowering digital sovereignty for All citizens","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101086308"}]}],"organizations":[{"legalName":"University of Surrey","acronym":"University of Surrey","id":"openorgs____::04f2a72edae373707d26aee745cb35c8","pids":[{"scheme":"ISNI","value":"0000000404074824"},{"scheme":"GRID","value":"grid.5475.3"},{"scheme":"FundRef","value":"501100004353"},{"scheme":"ROR","value":"https://ror.org/00ks66431"},{"scheme":"UKPRN","value":"10007160"},{"scheme":"fundref","value":"501100019674"},{"scheme":"Wikidata","value":"Q546976"},{"scheme":"wikidata","value":"Q546976"},{"scheme":"RRID","value":"RRID:SCR_001001"},{"scheme":"PIC","value":"999985223"},{"scheme":"mag_id","value":"28290843"},{"scheme":"OrgRef","value":"167774"},{"scheme":"OrgRef","value":"16241388"},{"scheme":"FundRef","value":"501100003513"},{"scheme":"HESA","value":"0161"},{"scheme":"RRID","value":"RRID:nlx_157977"},{"scheme":"fundref","value":"501100003513"},{"scheme":"fundref","value":"501100004353"},{"scheme":"OrgReg","value":"UK0118"},{"scheme":"FundRef","value":"501100019674"},{"scheme":"UCAS","value":"S85"}],"countries":[{"code":"GB","label":"United Kingdom"}],"websiteurl":"http://www.surrey.ac.uk/"},{"legalName":"Technical University of Denmark","acronym":"DTU","id":"openorgs____::b15b534e576535e50a702454bb728cca","pids":[{"scheme":"fundref","value":"501100006262"},{"scheme":"OrgReg","value":"DK0006"},{"scheme":"GRID","value":"grid.5170.3"},{"scheme":"Wikidata","value":"Q2118480"},{"scheme":"OrgRef","value":"144200"},{"scheme":"ROR","value":"https://ror.org/04qtj9h94"},{"scheme":"ISNI","value":"0000000121818870"},{"scheme":"RRID","value":"RRID:SCR_011559"},{"scheme":"FundRef","value":"501100005192"},{"scheme":"Wikidata","value":"Q2570097"},{"scheme":"wikidata","value":"Q1269766"},{"scheme":"Wikidata","value":"Q56612529"},{"scheme":"FundRef","value":"501100006262"},{"scheme":"wikidata","value":"Q2118480"},{"scheme":"PIC","value":"999990655"},{"scheme":"mag_id","value":"96673099"},{"scheme":"fundref","value":"501100005191"},{"scheme":"FundRef","value":"501100005191"},{"scheme":"wikidata","value":"Q56612529"},{"scheme":"fundref","value":"501100005192"},{"scheme":"Wikidata","value":"Q1269766"}],"countries":[{"code":"DK","label":"Denmark"}],"websiteurl":"http://www.dtu.dk/english"}],"communities":[{"code":"eu-conexus","label":"European University for Smart Urban Coastal Sustainability","provenance":null},{"code":"eosc","label":"EOSC","provenance":null},{"code":"uarctic","label":"UArctic","provenance":null}],"collectedFrom":[{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"},{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"},{"key":"opendoar____::358aee4cc897452c00244351e4d91f69","value":"ZENODO"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1109/trustcom60117.2023.00146"}],"license":"STM Policy #29","accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1109/trustcom60117.2023.00146"],"publicationDate":"2023-11-01","refereed":"peerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"pids":[{"scheme":"doi","value":"10.5281/zenodo.8215222"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://dx.doi.org/10.5281/zenodo.8215222"],"publicationDate":"2023-08-04","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::358aee4cc897452c00244351e4d91f69","value":"ZENODO"},"collectedFrom":{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"}},{"pids":[{"scheme":"doi","value":"10.5281/zenodo.8215222"}],"alternateIdentifiers":[{"scheme":"oai","value":"oai:zenodo.org:8215222"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["http://dx.doi.org/10.5281/zenodo.8215222","https://zenodo.org/records/8215222"],"publicationDate":"2023-08-04","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::358aee4cc897452c00244351e4d91f69","value":"ZENODO"},"collectedFrom":{"key":"opendoar____::358aee4cc897452c00244351e4d91f69","value":"ZENODO"}},{"pids":[{"scheme":"doi","value":"10.5281/zenodo.8215221"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://dx.doi.org/10.5281/zenodo.8215221"],"publicationDate":"2023-08-04","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::358aee4cc897452c00244351e4d91f69","value":"ZENODO"},"collectedFrom":{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/trustcom60117.2023.00146"}],"type":"Conference object","urls":["https://dblp.org/rec/conf/trustcom/LarsenKGKV023.html","https://doi.org/10.1109/TrustCom60117.2023.00146"],"refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.5281/zenodo.8215222"}],"type":"Conference object","urls":["http://dx.doi.org/10.5281/ZENODO.8215222"],"publicationDate":"2023-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/trustcom60117.2023.00146"}],"type":"Conference object","urls":["http://dx.doi.org/10.1109/TRUSTCOM60117.2023.00146"],"publicationDate":"2023-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.5281/zenodo.8215222"}],"type":"Conference object","urls":["http://dx.doi.org/10.5281/zenodo.8215222"],"publicationDate":"2023-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/trustcom60117.2023.00146"}],"license":"STM Policy #29","type":"Conference object","urls":["http://dx.doi.org/10.1109/trustcom60117.2023.00146"],"refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.5281/zenodo.8215222"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.5281/zenodo.8215222"],"publicationDate":"2023-08-04","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda__h2020::17d08d2bc0faf4145a2cb28271f45fbc","relatedRecordType":"project","relationProvenance":"sysimport:actionset","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::a55eb91348674d853191f4f4fd73d078","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon 2020"}],"projectTitle":"Future Proofing of ICT Trust Chains: Sustainable Operational Assurance and Verification Remote Guards for Systems-of-Systems Security and Privacy","code":"952697","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::H2020","description":"Horizon 2020 Framework Programme","name":"H2020"},"level1":{"id":"ec__________::EC::H2020::RIA","description":"Research and Innovation action","name":"RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2020-09-01","endDate":"2023-08-31"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::f71d8e93546f654b37ff8cab1933492f","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"ENsuring Secure and Safe CMD Design with Zero TRUST Principles","code":"101095634","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-01-01","endDate":"2025-12-31"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::1b7ef0c7ec1c57e0dd062d4892c6a391","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"REWiring the ComposItional Security  VeRification and AssurancE of Systems of Systems Lifecycle","code":"101070627","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2022-10-01","endDate":"2025-09-30"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::9ce4795c43250f481c709ae85d41b183","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"Data Usage Control for empowering digital sovereignty for All citizens","code":"101086308","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-TMA-MSCA-SE","description":"HORIZON TMA MSCA Staff Exchanges","name":"HORIZON-TMA-MSCA-SE"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-01-01","endDate":"2026-12-31"}],"otherTitles":null,"inDiamondJournal":false,"green":true,"isGreen":true,"isInDiamondJournal":false}