Abstract:The blockchain-based digital identity system (BDIS) has emerged as a promising alternative to centralized digital identity systems. While BDISs offer numerous advantages such as decentralization and enhanced security, traditional implementations still exhibit weaknesses in ensuring identity authenticity, controllability, and auditability while maintaining privacy. This paper aims to address these challenges by proposing novel approaches. It separates the functions of verifying physical identity and issuing digital credentials into two distinct roles: the identity verifier and the credential provider, employing linkable ring signatures to obscure the verifier's identity and significantly mitigate the risk of identity information leakage—a common issue in traditional schemes where a single entity performs both tasks. Additionally, this paper addresses the overlooked aspect of identity controllability in traditional schemes, especially proactive and passive revocation with privacy in mind, by integrating cryptographic commitments, zero-knowledge proofs, PS randomized signatures, cryptographic accumulators, and AES encryption. This approach ensures privacy while enabling both types of revocation. Furthermore, it tackles the neglected auditability of identity privacy in traditional schemes by combining linkable ring signatures with smart contract events and other technologies, ensuring auditable privacy protection. Fourth, a blockchain smart contract is utilized to manage system parameters and implement on-chain verification of privacy-protected identities, ensuring cross-platform capability, transparent verification, and resilience against single-point failures. A use case is provided, evaluating the system's performance. Comparative analysis and security discussions suggest that the proposed system rectifies deficiencies in current BDISs and offers improved applicability, execution performance, and security.

The Review and Comparison between Centralized and Decentralized Digital Identity Systems

A review of the application of digital identity in the metaverse

Blockchain-driven Decentralized Identity Management: an Interdisciplinary Review and Research Agenda

A Survey on Decentralized Identifiers and Verifiable Credentials

A Systematisation of Knowledge: Connecting European Digital Identities with Web3

Blockchain-based identity management systems: A review

A Decentralised Digital Identity Architecture

A Comparative Survey on Blockchain Based Self Sovereign Identity System

Secure Decentralized Machine Identifiers For Internet Of Things

Supervised and Revocable Decentralized Identity Privacy Protection Scheme

Survey on Digital Sovereignty and Identity: From Digitization to Digitalization

Digital identity architectures: comparing goals and vulnerabilities

An Identity Management Framework for Internet of Things

A Study on Trusted Internet Identity Management and Its Application

A Review of Recent Advances in Identity Identification Technology Based on Biological Features.

Analysis of Digital Sovereignty and Identity: From Digitization to Digitalization

A Blockchain-Based Digital Identity System with Privacy, Controllability, and Auditability

Comparative Analysis of Technical and Legal Frameworks of Various National Digial Identity Solutions

A Survey on Digital Twins: Architecture, Enabling Technologies, Security and Privacy, and Future Prospects

Design Aspects of Decentralized Identifiers and Self-Sovereign Identity Systems

On the Relevance of Blockchain in Identity Management