{"id":"https://openalex.org/W4416798358","doi":"https://doi.org/10.1109/tifs.2025.3636051","title":"Benchmarking Selective Disclosure Mechanisms for Verifiable Credentials: A Systematic Comparison for Security and Privacy","display_name":"Benchmarking Selective Disclosure Mechanisms for Verifiable Credentials: A Systematic Comparison for Security and Privacy","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416798358","doi":"https://doi.org/10.1109/tifs.2025.3636051"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3636051","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3636051","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://cris.unibo.it/bitstream/11585/1038253/1/TIFS_Sok_SD-1.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119876033","display_name":"Alessandro Buldini","orcid":null},"institutions":[{"id":"https://openalex.org/I9360294","display_name":"University of Bologna","ror":"https://ror.org/01111rn36","country_code":"IT","type":"education","lineage":["https://openalex.org/I9360294"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessandro Buldini","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Bologna, Bologna, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Bologna, Bologna, Italy","institution_ids":["https://openalex.org/I9360294"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046445668","display_name":"Carlo Mazzocca","orcid":"https://orcid.org/0000-0001-8949-2221"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Carlo Mazzocca","raw_affiliation_strings":["Department of Information and Electrical Engineering and Applied Mathematics, University of Salerno, Fisciano, Italy"],"raw_orcid":"https://orcid.org/0000-0001-8949-2221","affiliations":[{"raw_affiliation_string":"Department of Information and Electrical Engineering and Applied Mathematics, University of Salerno, Fisciano, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005379518","display_name":"Rebecca Montanari","orcid":"https://orcid.org/0000-0002-3687-0361"},"institutions":[{"id":"https://openalex.org/I9360294","display_name":"University of Bologna","ror":"https://ror.org/01111rn36","country_code":"IT","type":"education","lineage":["https://openalex.org/I9360294"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Rebecca Montanari","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Bologna, Bologna, Italy"],"raw_orcid":"https://orcid.org/0000-0002-3687-0361","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Bologna, Bologna, Italy","institution_ids":["https://openalex.org/I9360294"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Selcuk Uluagac","raw_affiliation_strings":["Cyber-Physical Systems Security Laboratory, School of Computing and Information Sciences, Florida International University, Miami, FL, USA","School of Computing and Information Science, Cyber-Physical Systems Security Lab, Florida International University, Miami, Florida, United States"],"raw_orcid":"https://orcid.org/0000-0002-9823-3464","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Laboratory, School of Computing and Information Sciences, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"School of Computing and Information Science, Cyber-Physical Systems Security Lab, Florida International University, Miami, Florida, United States","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4336771,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"13205","last_page":"13220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.732200026512146,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.732200026512146,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.058400001376867294,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.038100000470876694,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.6029999852180481},{"id":"https://openalex.org/keywords/european-union","display_name":"European union","score":0.5070000290870667},{"id":"https://openalex.org/keywords/digital-identity","display_name":"Digital identity","score":0.4830000102519989},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.45969998836517334},{"id":"https://openalex.org/keywords/license","display_name":"License","score":0.4456000030040741},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.43939998745918274},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4357999861240387},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.41339999437332153},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.4023999869823456},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.39079999923706055}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7475000023841858},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6171000003814697},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.6029999852180481},{"id":"https://openalex.org/C2910001868","wikidata":"https://www.wikidata.org/wiki/Q458","display_name":"European union","level":2,"score":0.5070000290870667},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5030999779701233},{"id":"https://openalex.org/C2779813694","wikidata":"https://www.wikidata.org/wiki/Q528053","display_name":"Digital identity","level":3,"score":0.4830000102519989},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.45969998836517334},{"id":"https://openalex.org/C2780560020","wikidata":"https://www.wikidata.org/wiki/Q79719","display_name":"License","level":2,"score":0.4456000030040741},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.43939998745918274},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4357999861240387},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.41339999437332153},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.4023999869823456},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39079999923706055},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.38100001215934753},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3797999918460846},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3700999915599823},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.3314000070095062},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3240000009536743},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3149000108242035},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.3089999854564667},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.30720001459121704},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.3000999987125397},{"id":"https://openalex.org/C2776007630","wikidata":"https://www.wikidata.org/wiki/Q2798912","display_name":"Accountability","level":2,"score":0.2976999878883362},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.29420000314712524},{"id":"https://openalex.org/C66989864","wikidata":"https://www.wikidata.org/wiki/Q594646","display_name":"Paillier cryptosystem","level":5,"score":0.2915000021457672},{"id":"https://openalex.org/C2780102126","wikidata":"https://www.wikidata.org/wiki/Q10928179","display_name":"Online and offline","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.27790001034736633},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C522325796","wikidata":"https://www.wikidata.org/wiki/Q471880","display_name":"Identity theft","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C52487910","wikidata":"https://www.wikidata.org/wiki/Q911488","display_name":"Data Protection Directive","level":4,"score":0.2705000042915344},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.2700999975204468},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.2612000107765198},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.25279998779296875}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3636051","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3636051","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:cris.unibo.it:11585/1038253","is_oa":true,"landing_page_url":"https://hdl.handle.net/11585/1038253","pdf_url":"https://cris.unibo.it/bitstream/11585/1038253/1/TIFS_Sok_SD-1.pdf","source":{"id":"https://openalex.org/S4306402579","display_name":"Archivio istituzionale della ricerca (Alma Mater Studiorum Universit\u00e0 di Bologna)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210117483","host_organization_name":"Istituto di Ematologia di Bologna","host_organization_lineage":["https://openalex.org/I4210117483"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:cris.unibo.it:11585/1038253","is_oa":true,"landing_page_url":"https://hdl.handle.net/11585/1038253","pdf_url":"https://cris.unibo.it/bitstream/11585/1038253/1/TIFS_Sok_SD-1.pdf","source":{"id":"https://openalex.org/S4306402579","display_name":"Archivio istituzionale della ricerca (Alma Mater Studiorum Universit\u00e0 di Bologna)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210117483","host_organization_name":"Istituto di Ematologia di Bologna","host_organization_lineage":["https://openalex.org/I4210117483"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G507880695","display_name":null,"funder_award_id":"PE00000014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416798358.pdf","grobid_xml":"https://content.openalex.org/works/W4416798358.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1500810532","https://openalex.org/W1521092767","https://openalex.org/W1589034595","https://openalex.org/W1607188293","https://openalex.org/W1851031742","https://openalex.org/W1885156594","https://openalex.org/W2029693536","https://openalex.org/W2117362057","https://openalex.org/W2144752539","https://openalex.org/W2166670067","https://openalex.org/W2172174332","https://openalex.org/W2400148870","https://openalex.org/W2884325794","https://openalex.org/W3004375621","https://openalex.org/W3023180901","https://openalex.org/W3032917738","https://openalex.org/W3082122021","https://openalex.org/W3129627790","https://openalex.org/W3184916135","https://openalex.org/W3196010960","https://openalex.org/W3197151956","https://openalex.org/W3197312228","https://openalex.org/W4206502564","https://openalex.org/W4288722582","https://openalex.org/W4312340736","https://openalex.org/W4360995212","https://openalex.org/W4385412238","https://openalex.org/W4385950423","https://openalex.org/W4391165740","https://openalex.org/W4394775456","https://openalex.org/W4397030432","https://openalex.org/W4399009664","https://openalex.org/W4405272723","https://openalex.org/W4407691625","https://openalex.org/W4415368556"],"related_works":[],"abstract_inverted_index":{"In":[0,54],"a":[1,79,144],"world":[2],"where":[3],"digitalization":[4],"is":[5],"<italic":[6],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[7],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">reshaping</i>":[8],"every":[9],"aspect":[10],"of":[11,147],"society,":[12],"digital":[13],"identity":[14],"has":[15],"become":[16],"more":[17],"crucial":[18],"than":[19],"ever":[20],"to":[21,87,112,169],"establish":[22],"trust":[23],"and":[24,48,91,94,162,165,201],"accountability":[25],"across":[26,192],"all":[27,75],"entities,":[28],"whether":[29],"human,":[30],"organizational,":[31],"or":[32],"machine-based.":[33],"Numerous":[34],"initiatives":[35],"are":[36],"emerging":[37],"worldwide,":[38],"such":[39],"as":[40],"the":[41,57,64,109,116,134,139,148,167,178],"United":[42],"States":[43],"mobile":[44],"driver\u2019s":[45],"license":[46],"(mDLs)":[47],"Singapore\u2019s":[49],"National":[50],"Digital":[51,66,81],"Identity":[52,67,82],"(NDI).":[53],"May":[55],"2024,":[56],"European":[58,65,76,80],"Union":[59],"introduced":[60],"Regulation":[61],"2024/1183,":[62],"establishing":[63],"Framework.":[68],"By":[69],"2026,":[70],"this":[71],"framework":[72],"will":[73],"provide":[74],"citizens":[77],"with":[78],"Wallet":[83],"(EUDIW),":[84],"allowing":[85],"them":[86],"access":[88,113],"both":[89],"online":[90],"offline":[92],"public":[93],"private":[95],"services":[96],"while":[97],"maintaining":[98],"full":[99],"control":[100],"over":[101],"their":[102],"data.":[103],"Individuals":[104],"can":[105],"selectively":[106],"disclose":[107],"only":[108],"required":[110],"information":[111],"services.":[114],"However,":[115],"current":[117],"EUDIW":[118],"design":[119],"relies":[120],"on":[121],"Selective":[122],"Disclosure":[123],"for":[124],"JSON":[125],"Web":[126],"Token":[127],"(SD-JWT),":[128],"which":[129,170],"does":[130],"not":[131],"fully":[132],"meet":[133],"privacy":[135,163],"requirements":[136],"outlined":[137],"in":[138,176],"regulation.":[140],"This":[141],"paper":[142],"presents":[143],"comprehensive":[145],"comparison":[146],"main":[149],"selective":[150,190],"disclosure":[151,191],"mechanisms.":[152],"Specifically,":[153],"we":[154,182],"identify":[155],"relevant":[156],"threat":[157],"models,":[158],"formalize":[159],"associated":[160],"security":[161],"properties,":[164],"assess":[166],"extent":[168],"existing":[171],"mechanisms":[172],"satisfy":[173],"these":[174],"properties":[175],"mitigating":[177],"identified":[179],"threats.":[180],"Furthermore,":[181],"introduce":[183],"an":[184],"open-source":[185],"benchmark":[186],"that":[187],"evaluates":[188],"multiple":[189],"key":[193],"performance":[194],"indicators,":[195],"including":[196],"computational":[197],"latency,":[198],"bandwidth":[199],"consumption,":[200],"storage":[202],"requirements.":[203]},"counts_by_year":[],"updated_date":"2025-12-19T00:32:22.182498","created_date":"2025-11-28T00:00:00"}