{"id":"https://openalex.org/W6963152172","doi":"https://doi.org/10.18420/oid2024_08","title":"Towards Building GDPR-Friendly Consent Management Systems on Top of Self-Sovereign Identity Ecosystems","display_name":"Towards Building GDPR-Friendly Consent Management Systems on Top of Self-Sovereign Identity Ecosystems","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W6963152172","doi":"https://doi.org/10.18420/oid2024_08"},"language":"en","primary_location":{"id":"doi:10.18420/oid2024_08","is_oa":true,"landing_page_url":"https://doi.org/10.18420/oid2024_08","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.18420/oid2024_08","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Schramm, Julia","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Schramm, Julia","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Eichinger, Tobias","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Eichinger, Tobias","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.63693741,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.36910000443458557,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.36910000443458557,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.1387999951839447,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.11840000003576279,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.6355999708175659},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.5205000042915344},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5196999907493591},{"id":"https://openalex.org/keywords/informed-consent","display_name":"Informed consent","score":0.5058000087738037},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.5005000233650208},{"id":"https://openalex.org/keywords/identity-management","display_name":"Identity management","score":0.4742000102996826},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.46779999136924744},{"id":"https://openalex.org/keywords/discretion","display_name":"Discretion","score":0.4584999978542328},{"id":"https://openalex.org/keywords/personal-identity","display_name":"Personal identity","score":0.38029998540878296}],"concepts":[{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.6355999708175659},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5637000203132629},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5483999848365784},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.5205000042915344},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5196999907493591},{"id":"https://openalex.org/C68122502","wikidata":"https://www.wikidata.org/wiki/Q764527","display_name":"Informed consent","level":3,"score":0.5058000087738037},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.5005000233650208},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.4742000102996826},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.46779999136924744},{"id":"https://openalex.org/C2777632292","wikidata":"https://www.wikidata.org/wiki/Q315515","display_name":"Discretion","level":2,"score":0.4584999978542328},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4147000014781952},{"id":"https://openalex.org/C47188148","wikidata":"https://www.wikidata.org/wiki/Q2254571","display_name":"Personal identity","level":3,"score":0.38029998540878296},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.34869998693466187},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.34380000829696655},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.3280999958515167},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.31929999589920044},{"id":"https://openalex.org/C143095724","wikidata":"https://www.wikidata.org/wiki/Q515895","display_name":"Odds","level":3,"score":0.3018999993801117},{"id":"https://openalex.org/C2777188754","wikidata":"https://www.wikidata.org/wiki/Q5140822","display_name":"Coercion (linguistics)","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C65414064","wikidata":"https://www.wikidata.org/wiki/Q484105","display_name":"Autonomy","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C198783460","wikidata":"https://www.wikidata.org/wiki/Q629173","display_name":"Management system","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.26409998536109924},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2603999972343445}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18420/oid2024_08","is_oa":true,"landing_page_url":"https://doi.org/10.18420/oid2024_08","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.18420/oid2024_08","is_oa":true,"landing_page_url":"https://doi.org/10.18420/oid2024_08","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Consent":[0],"is":[1,37,64,102,116,149],"a":[2,24,57,81,118,146,177,189,193],"legal":[3],"basis":[4],"that":[5,38,46,117,157],"legitimizes":[6],"the":[7,13,71,77,107,127,135,163],"processing":[8,72],"of":[9,34,59,73,111,126],"personal":[10,74],"data":[11,75],"under":[12],"General":[14],"Data":[15],"Protection":[16],"Regulation":[17],"(GDPR).":[18],"Implementing":[19],"consent":[20,60,89,119,178,186,198],"management":[21,179],"systems":[22],"in":[23,92,145,174,181,208],"GDPR-compliant":[25],"fashion":[26],"has":[27,84,122,137],"proven":[28],"difficult.":[29],"A":[30],"major":[31],"pain":[32],"point":[33],"current":[35],"implementations":[36],"users":[39,183],"only":[40,133],"have":[41],"insufficient":[42],"means":[43],"to":[44,69,87,94,123,192],"prove":[45],"they":[47,142],"withdrew":[48],"consent.":[49],"Controllers":[50],"can,":[51],"therefore,":[52],"plausibly":[53],"deny":[54],"having":[55],"received":[56,138],"notification":[58],"withdrawal":[61,90,120],"and":[62,171,195],"it":[63,83],"thus":[65],"at":[66,104,165],"their":[67],"discretion":[68],"continue":[70],"against":[76],"user\u2019s":[78],"will.":[79],"As":[80],"remedy,":[82],"been":[85],"proposed":[86],"log":[88],"events":[91],"blockchains":[93,153],"make":[95],"them":[96],"non-repudiable":[97],"by":[98,187,199],"controllers.":[99],"This":[100],"approach":[101],"typically":[103],"odds":[105],"with":[106],"GDPR\u2019s":[108],"fundamental":[109],"principle":[110],"Storage":[112],"Limitation.":[113],"The":[114],"issue":[115,170],"event":[121],"permit":[124],"identification":[125,148],"user":[128],"who":[129],"submitted":[130],"it,":[131],"yet":[132],"until":[134],"controller":[136,194],"it.":[139,201],"However,":[140],"if":[141],"are":[143,154,205],"logged":[144],"blockchain,":[147],"possible":[150],"indefinitely,":[151],"as":[152],"append-only":[155],"databases":[156],"do":[158],"not":[159],"facilitate":[160],"deletion.":[161],"In":[162],"paper":[164],"hand,":[166],"we":[167],"alleviate":[168],"this":[169],"present":[172],"work":[173],"progress":[175],"on":[176],"system":[180],"which":[182],"(i)":[184],"give":[185],"issuing":[188],"verifiable":[190],"credential":[191],"(ii)":[196],"withdraw":[197],"revoking":[200],"These":[202],"two":[203],"functions":[204],"natively":[206],"provided":[207],"Self-Sovereign":[209],"Identity":[210],"(SSI)":[211],"ecosystems.":[212]},"counts_by_year":[],"updated_date":"2025-11-06T06:51:31.235846","created_date":"2025-10-10T00:00:00"}