Preprint
Anonymous Self-Credentials and their Application to Single-Sign-On
Cryptology ePrint Archive , Vol.11 April 2025
International Association for Cryptologic Research (IACR)
2025
Abstract
Modern life makes having a digital identity no longer optional, whether one needs to manage a bank account or subscribe to a newspaper. As the number of online services increases, it is fundamental to safeguard user privacy and equip service providers (SP) with mechanisms enforcing Sybil resistance, i.e., preventing a single entity from showing as many. Current approaches, such as anonymous credentials and self-sovereign identities, typically rely on identity providers or identity registries trusted not to track users' activities. However, this assumption of trust is no longer appropriate in a world where user data is considered a valuable asset. To address this challenge, we introduce a new cryptographic notion, Anonymous Self-Credentials (ASC) along with two implementations. This approach enables users to maintain their privacy within an anonymity set while allowing SPs to obtain Sybil resistance. Then, we present a User-issued Unlinkable Single Sign-On (U2SSO) implemented from ASC that solely relies on an identity registry to immutably store identities. A U2SSO solution allows users to generate unlinkable child credentials for each SP using only one set of master credentials. We demonstrate the practicality and efficiency of our U2SSO solution by providing a complete proof-of-concept.
Details
- Title
- Anonymous Self-Credentials and their Application to Single-Sign-On
- Authors
- Jayamine Alupotha - University of BernMariarosaria Barbaraci - University of BernIoannis Kaklamanis - Yale UniversityAbhimanyu Rawat - Universitat Pompeu FabraChristian Cachin - University of Bern
- Publication details
- Cryptology ePrint Archive , Vol.11 April 2025
- Publisher
- International Association for Cryptologic Research (IACR)
- Date published
- 2025
- Organisation Unit
- School of Science, Technology and Engineering
- Language
- English
- Record Identifier
- 991235801402621
- Output Type
- Preprint
Metrics
1 Record Views