Self-Sovereign Identity in Decentralized Federated Identity Management: A Framework for Secure and Scalable Access Control

Abstract

Self-Sovereign Identity (SSI) in Decentralized Federated Identity Management (DFIM) point out some serious issues regarding interoperability, security, and privacy in digital identity systems. In proposed architecture, blockchain is used as a trust anchor to enable Verifiable Credentials (CVs), Decentralized Identifiers (DIDs), comprehensive and robust governance framework. The proposed framework has some key components including Issuers, Identity Owners, Verifiers, Identity Hubs, and Decentralized Identity Ledger. The main focus of the framework is on privacy. The privacy is ensuring through zero-knowledge proofs and secure credential handling while supporting federated authentication across domains. Essential use-cases recommended by experienced professionals from software industry were designed and used for the validation. These scenario-based user-cases demonstrate the architecture's feasibility across multiple domains. The obtained results revealed that Security and Privacy are the top concerns to address after the comparative analysis of applied use cases. Moreover, the priority in framework is given to the user control, scalability, and compliance for decentralized federated identity management.