DSR Knowledge LibraryReusable design knowledge and grounded research support
HomeLibraryChatGive feedback ↗

DSR Knowledge Library

Research prototype · Native Open Knowledge Format

LibraryChatImprintPrivacyEvaluation survey ↗
Library/Papers/Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

Research paper

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

Following DSR, the authors derive eight design objectives and design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes, deriving four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.

Paper
OverviewDSR gridPaper design mapDesign knowledgePublication metadata

01

Overview

Publication metadata and narrative from the current library record.

Authors
Tobias Guggenberger, Daniela Kühne, Vincent Schlatt, Nils Urbach
Year
2023
Venue
Electronic Markets 33:3 (2023)
Methodology
Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.
DOI
10.1007/s12525-023-00620-z
Design knowledge
View design knowledge on GitHub
blockchaincross-org-identity-ssidesign-science-researcheidasidentity-ssipublic-sectorverifiable-credentials

Summary

Following DSR, the authors derive eight design objectives and design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes, deriving four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.

Artifact

A self-sovereign identity (SSI) system presenting tax attributes of online retailers.

Methodology

Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.

02

DSR grid

Six dimensions represented in the current paper record.

01

Problem description

Enterprise identity management is fragmented, and although self-sovereign identity (SSI) is promising, real-world organizational applications and design theory are rare.

02

Input knowledge

The self-sovereign identity concept; eIDAS regulation; decentralized-identity best practices (Rieger et al.); verifiable credentials and DIDs.

03

Research process

Design science research: workshops, a prototype implemented by an IT service provider, and eight expert interviews for evaluation.

04

Key concepts

Blockchain, identity management, self-sovereign identity, public sector, eIDAS, digital wallet.

05

Solution description

An SSI system presenting online-retailer tax attributes, publishing public DIDs only for issuers. Solution-space representation: Instantiation (prototype) plus eight design objectives and four nascent design principles.

06

Output knowledge

Eight design objectives for the SSI system (issuance, verification, revocation, audit, decentralization, data confidentiality, data availability, usability) and four nascent design principles for SSI applications (role multiplicity, credential reuse, holder as controller, public DIDs for issuers only).

03

Paper design map

The default semantic design map canonicalizes stored design relationships; Raw links retains the complete technical Markdown-link view.

Design-knowledge map

12 stored concepts / 0 canonical semantic relationships

Concept types
Design Objectives
Design Principles
Press enter or space to select a node.You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.
Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.

04

Design knowledge

Directly linked concepts, grouped by their represented design-knowledge category.

8 Design Objectives

design-knowledge/cross-org-identity-ssi-do1

DO1 - Issuance

The system should allow the issuance of 1) a certificate to prove the retailer's identity and 2) a certificate to prove that the retailer is correctly registered at the tax authority.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do2

DO2 - Verification

The system should facilitate the tax authority and the marketplace to verify certificates. For verification, it is necessary to check the validity, signature, and integrity of the certificate.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do3

DO3 - Revocation

Suppose the underlying information of a certificate has expired, e.g., the retailer's address or status changes. In that case, the system must allow the issuing party to mark the certificate as invalid. The revocation should ensure that the verifier knows that the certificate is not valid anymore.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do4

DO4 - Audit

The tax authority should be able to audit the verification process of the online marketplace. Thus, it should be possible for the tax authority to confirm that the marketplace complies with the law and requests and verifies the tax registration of its retailers.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do5

DO5 - Decentralization

No central authority should oversee all documents and attributes, thus requiring a decentralized and interoperable IdM approach.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do6

DO6 - Data confidentiality

Confidentiality defines the property of data or information intended only for specific recipients. It must be ensured that data about individual parties is only accessible to them and the parties directly involved in the process.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do7

DO7 - Data availability

Availability describes the probability that a system can provide the service at a certain point in time. The system should ensure constant availability.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-do8

DO8 - Usability

The usability dimension describes how easily and intuitively the end-user can use the system. The application and handling of a certificate should be designed as intuitively as possible concerning the present use case.

cross-org-identity-ssidesign-objectiveeidasidentity-ssi+2

4 Design Principles

design-knowledge/cross-org-identity-ssi-dp1

DP1 - Use the multiplicity of roles of actors for scaling the identity ecosystem

Such systems should be designed so that one party can take on each of the three named roles (issuer, holder, verifier) at any time, using the multiplicity of roles of actors for scaling the identity ecosystem.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-dp2

DP2 - Consider credentials for multiple applications to facilitate additional use cases

Issue verifiable credentials in a context-independent, general-purpose manner so that the same credential can facilitate additional use cases and reduce friction.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-dp3

DP3 - Recognize the identity holder as the primary controller to ensure seamless processes

Design applications so that the identity holder is an active participant in almost all processes, since all processes start with or require approval from the holder.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2
design-knowledge/cross-org-identity-ssi-dp4

DP4 - Use public DIDs only for credential issuers to minimize privacy issues

Publish public DIDs only for credential issuers and exchange DIDs bilaterally for all other parties, minimizing on-chain transactions and privacy risks.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2

05

Publication metadata

Additional metadata represented in the current library record.

Show additional metadata+
{
  "type": "paper",
  "title": "Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes",
  "description": "Following DSR, the authors derive eight design objectives and design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes, deriving four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.",
  "resource": "https://doi.org/10.1007/s12525-023-00620-z",
  "authors": "Tobias Guggenberger, Daniela Kühne, Vincent Schlatt, Nils Urbach",
  "year": 2023,
  "venue": "Electronic Markets 33:3 (2023)",
  "methodology": "Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.",
  "dsr_grid": true,
  "dsr_solution_space": "Instantiation (prototype) plus eight design objectives and four nascent design principles.",
  "tags": [
    "cross-org-identity-ssi",
    "identity-ssi",
    "public-sector",
    "verifiable-credentials",
    "eidas",
    "design-science-research",
    "blockchain"
  ]
}