Research paper

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

Following DSR, the authors design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes and derive four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.

PaperOpen source resource ↗

Overview

Publication metadata and narrative from the current library record.

Authors: Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach
Year: 2023
Venue: Electronic Markets 33:3 (2023)
Methodology: Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.

blockchaincross-org-identity-ssidesign-science-researcheidasidentity-ssipublic-sectorverifiable-credentials

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

Authors: Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach
Venue: Electronic Markets 33:3 (2023)
Link: https://doi.org/10.1007/s12525-023-00620-z (opens in a new tab)

Summary

Artifact

A self-sovereign identity (SSI) system presenting tax attributes of online retailers.

Methodology

Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.

Citations

[1] Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach. Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes. Electronic Markets 33:3 (2023). https://doi.org/10.1007/s12525-023-00620-z (opens in a new tab) [2] Source document: Designing a cross‑organizational identity management system.pdf

DSR grid

Six dimensions represented in the current paper record.

Problem description

Enterprise identity management is fragmented, and although self-sovereign identity (SSI) is promising, real-world organizational applications and design theory are rare.

Input knowledge

The self-sovereign identity concept; eIDAS regulation; decentralized-identity best practices (Rieger et al.); verifiable credentials and DIDs.

Research process

Design science research: workshops, a prototype implemented by an IT service provider, and eight expert interviews for evaluation.

Key concepts

Blockchain, identity management, self-sovereign identity, public sector, eIDAS, digital wallet.

Solution description

An SSI system presenting online-retailer tax attributes, publishing public DIDs only for issuers. Solution-space representation: Instantiation (prototype) plus four nascent design principles.

Output knowledge

Four nascent design principles for SSI applications (role multiplicity, credential reuse, holder as controller, public DIDs for issuers only).

Design knowledge

Directly linked concepts, grouped by their represented design-knowledge category.

Design Principle

Design Principle4

Design Principle

design-knowledge/cross-org-identity-ssi-dp1

DP1 - Use the multiplicity of actor roles for scaling

Design SSI systems so that any party can take on the issuer, holder or verifier role at any time, using the multiplicity of roles to scale the identity ecosystem.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2

Design Principle

design-knowledge/cross-org-identity-ssi-dp2

DP2 - Consider credentials for multiple applications

Issue verifiable credentials in a context-independent, general-purpose manner so that the same credential can facilitate additional use cases and reduce friction.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2

Design Principle

design-knowledge/cross-org-identity-ssi-dp3

DP3 - Recognize the identity holder as primary controller

Design applications so that the identity holder is an active participant in almost all processes, since all processes start with or require approval from the holder.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2

Design Principle

design-knowledge/cross-org-identity-ssi-dp4

DP4 - Use public DIDs only for credential issuers

Publish public DIDs only for credential issuers and exchange DIDs bilaterally for all other parties, minimizing on-chain transactions and privacy risks.

cross-org-identity-ssidesign-principleeidasidentity-ssi+2

Paper design map

The default semantic design map canonicalizes stored design relationships; Raw links retains the complete technical Markdown-link view.

Design-knowledge map

4 stored concepts / 0 canonical semantic relationships

Concept types

Show relationship labels

Publication metadata

Additional metadata represented in the current library record.

Show additional metadata

{
  "type": "paper",
  "title": "Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes",
  "description": "Following DSR, the authors design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes and derive four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.",
  "resource": "https://doi.org/10.1007/s12525-023-00620-z",
  "authors": "Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach",
  "year": 2023,
  "venue": "Electronic Markets 33:3 (2023)",
  "methodology": "Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.",
  "dsr_grid": true,
  "dsr_solution_space": "Instantiation (prototype) plus four nascent design principles.",
  "tags": [
    "cross-org-identity-ssi",
    "identity-ssi",
    "public-sector",
    "verifiable-credentials",
    "eidas",
    "design-science-research",
    "blockchain"
  ]
}

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

Summary

Citations

[1] Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach. Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes. Electronic Markets 33:3 (2023). https://doi.org/10.1007/s12525-023-00620-z [2] Source document: Designing a cross‑organizational identity management system.pdf

{ "type": "paper", "title": "Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes", "description": "Following DSR, the authors design, implement and evaluate an SSI-based identity management system for certifying retailer tax attributes and derive four nascent design principles for SSI applications concerning role multiplicity, credential reuse, holder-as-controller, and public DIDs for issuers only.", "resource": "https://doi.org/10.1007/s12525-023-00620-z", "authors": "Tobias Guggenberger, Daniela Kuehne, Vincent Schlatt, Nils Urbach", "year": 2023, "venue": "Electronic Markets 33:3 (2023)", "methodology": "Design science research; workshops; prototype implemented by an IT service provider; eight expert interviews.", "dsr_grid": true, "dsr_solution_space": "Instantiation (prototype) plus four nascent design principles.", "tags": [ "cross-org-identity-ssi", "identity-ssi", "public-sector", "verifiable-credentials", "eidas", "design-science-research", "blockchain" ] }