Towards an identity management solution on Arweave

TL;DR

This paper proposes a decentralized identity management system on Arweave that leverages permanent storage, SSI principles, privacy-preserving cryptography, and regulatory compliance to improve user control and data security.

Contribution

It introduces a novel identity management framework on Arweave utilizing DIDs, VCs, zero-knowledge proofs, and BBS(+) signatures for enhanced privacy and compliance.

Findings

Enables user-controlled digital identities with privacy features.

Supports GDPR compliance through privacy-preserving technologies.

Utilizes Arweave's permanent storage for reliable identity data management.

Abstract

Traditional identity management systems, often centralized, face challenges around privacy, data security, and user control, leaving users vulnerable to data breaches and misuse. This paper explores the potential of using the Arweave network to develop an identity management solution. By harnessing Arweave's permanent storage, our solution offers the users a Self-Sovereign Identity (SSI) framework, that uses Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) to allow individuals and other entities to create, own, and manage their digital identities. Further, the solution integrates privacy-preserving technologies, including zero-knowledge proofs and the BBS(+) signature scheme, enabling selective disclosure. This approach ultimately enhances user privacy and supports compliance with European Union legislation and regulatory standards like the General Data Protection Regulation (GDPR) by design.