{"id":"https://openalex.org/W4396757506","doi":"https://doi.org/10.1145/3589334.3645426","title":"SSI, from Specifications to Protocol? Formally Verify Security!","display_name":"SSI, from Specifications to Protocol? Formally Verify Security!","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4396757506","doi":"https://doi.org/10.1145/3589334.3645426"},"language":"en","primary_location":{"id":"doi:10.1145/3589334.3645426","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645426","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589334.3645426?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3589334.3645426?download=true","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027059952","display_name":"Christoph H.-J. Braun","orcid":"https://orcid.org/0000-0002-5843-0316"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Christoph H.-J. Braun","raw_affiliation_strings":["Karlsruhe Institute of Technology, Karlsruhe, Germany","Institute of ,","University of ,","of -- ,"],"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"Institute of ,","institution_ids":[]},{"raw_affiliation_string":"University of ,","institution_ids":[]},{"raw_affiliation_string":"of -- ,","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087967629","display_name":"Ross Horne","orcid":"https://orcid.org/0000-0003-0162-1901"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]},{"id":"https://openalex.org/I181647926","display_name":"University of Strathclyde","ror":"https://ror.org/00n3w3b69","country_code":"GB","type":"education","lineage":["https://openalex.org/I181647926"]}],"countries":["DE","GB"],"is_corresponding":false,"raw_author_name":"Ross Horne","raw_affiliation_strings":["University of Strathclyde, Glasgow, United Kingdom","Institute of ,","of -- ,","Karlsruhe Institute of Technology Karlsruhe, Germany"],"affiliations":[{"raw_affiliation_string":"University of Strathclyde, Glasgow, United Kingdom","institution_ids":["https://openalex.org/I181647926"]},{"raw_affiliation_string":"Institute of ,","institution_ids":[]},{"raw_affiliation_string":"of -- ,","institution_ids":[]},{"raw_affiliation_string":"Karlsruhe Institute of Technology Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016367496","display_name":"Tobias K\u00e4fer","orcid":"https://orcid.org/0000-0003-0576-7457"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias K\u00e4fer","raw_affiliation_strings":["Karlsruhe Institute of Technology, Karlsruhe, Germany","Institute of ,","University of ,","of -- ,"],"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"Institute of ,","institution_ids":[]},{"raw_affiliation_string":"University of ,","institution_ids":[]},{"raw_affiliation_string":"of -- ,","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024602195","display_name":"Sjouke Mauw","orcid":"https://orcid.org/0000-0002-2818-4433"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]},{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["DE","LU"],"is_corresponding":false,"raw_author_name":"Sjouke Mauw","raw_affiliation_strings":["University of Luxemburg, Esch-sur-Alzette, Luxembourg","Karlsruhe Institute of Technology Karlsruhe, Germany","of -- ,","Institute of ,"],"affiliations":[{"raw_affiliation_string":"University of Luxemburg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"Karlsruhe Institute of Technology Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"of -- ,","institution_ids":[]},{"raw_affiliation_string":"Institute of ,","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5027059952"],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":1.0247,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.76295385,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1620","last_page":"1631"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8152334690093994},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.6613015532493591},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.650052547454834},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6417197585105896},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.552045464515686},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.5493995547294617},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.49042531847953796},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.4744632840156555},{"id":"https://openalex.org/keywords/cryptographic-nonce","display_name":"Cryptographic nonce","score":0.43728697299957275},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.4369443953037262},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.23181608319282532},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2287694215774536},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1406979262828827},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.1122245192527771}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8152334690093994},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.6613015532493591},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.650052547454834},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6417197585105896},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.552045464515686},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.5493995547294617},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.49042531847953796},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.4744632840156555},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.43728697299957275},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.4369443953037262},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.23181608319282532},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2287694215774536},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1406979262828827},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.1122245192527771},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3589334.3645426","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645426","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589334.3645426?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},{"id":"pmh:oai:strathprints.strath.ac.uk:89386","is_oa":false,"landing_page_url":"https://strathprints.strath.ac.uk/view/author/1501631.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306402226","display_name":"Strathprints: The University of Strathclyde institutional repository (University of Strathclyde)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I181647926","host_organization_name":"University of Strathclyde","host_organization_lineage":["https://openalex.org/I181647926"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"NonPeerReviewed"}],"best_oa_location":{"id":"doi:10.1145/3589334.3645426","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645426","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589334.3645426?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1519701930","display_name":null,"funder_award_id":"CA19134","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G352791218","display_name":null,"funder_award_id":"(BMBF)","funder_id":"https://openalex.org/F4320321114","funder_display_name":"Bundesministerium f\u00fcr Bildung und Forschung"},{"id":"https://openalex.org/G5620127113","display_name":null,"funder_award_id":"16DTM107B","funder_id":"https://openalex.org/F4320321114","funder_display_name":"Bundesministerium f\u00fcr Bildung und Forschung"}],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4396757506.pdf"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W2029693536","https://openalex.org/W2145415641","https://openalex.org/W2167816957","https://openalex.org/W2295240905","https://openalex.org/W2522035104","https://openalex.org/W2737727228","https://openalex.org/W2787222284","https://openalex.org/W2787789774","https://openalex.org/W3024823144","https://openalex.org/W3131828745","https://openalex.org/W3159869585","https://openalex.org/W3168032238","https://openalex.org/W3202149324","https://openalex.org/W3211650682","https://openalex.org/W3214935373","https://openalex.org/W4206948549","https://openalex.org/W4225851476","https://openalex.org/W4312674866","https://openalex.org/W4367046672","https://openalex.org/W4384557877","https://openalex.org/W6637416399"],"related_works":["https://openalex.org/W37362883","https://openalex.org/W2394384873","https://openalex.org/W2112047017","https://openalex.org/W4297064236","https://openalex.org/W2809524033","https://openalex.org/W2416115311","https://openalex.org/W2956602083","https://openalex.org/W2612627043","https://openalex.org/W2585563416","https://openalex.org/W3013119816"],"abstract_inverted_index":{"We":[0,20,50],"evaluate":[1],"a":[2,48],"bundle":[3],"of":[4,37,95],"specifications":[5,88],"from":[6,54],"the":[7,18,38,61,81],"Self-Sovereign":[8],"Identity":[9],"(SSI)":[10],"paradigm":[11],"to":[12,43,78,89,91],"construct":[13],"an":[14],"authentication":[15],"protocol":[16],"for":[17],"Web.":[19],"demonstrate":[21],"how":[22],"relevant":[23],"standards":[24],"such":[25],"as":[26],"W3C":[27,31],"Verifiable":[28],"Credentials":[29],"(VC),":[30],"Decentralised":[32],"Identifiers":[33],"(DIDs),":[34],"and":[35,64,67,73],"components":[36],"Hyperledger":[39],"Aries":[40],"Framework":[41],"are":[42],"be":[44],"assembled":[45],"methodologically":[46],"into":[47],"protocol.":[49],"make":[51],"those":[52],"assumptions":[53],"standard":[55],"trust":[56],"models":[57],"explicit":[58],"that":[59,84,93],"underlie":[60],"derived":[62],"protocol,":[63],"verify":[65],"security":[66],"privacy":[68],"properties,":[69],"notably":[70],"secrecy,":[71],"authentication,":[72],"unlinkability.":[74],"This":[75],"enables":[76],"us":[77],"formally":[79],"justify":[80],"additional":[82],"precision":[83],"we":[85],"urge":[86],"these":[87],"consider,":[90],"ensure":[92],"implementors":[94],"SSI-based":[96],"systems":[97],"do":[98],"not":[99],"neglect":[100],"security-critical":[101],"controls.":[102]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-04-14T08:04:32.555800","created_date":"2025-10-10T00:00:00"}
