Qualified eID Derivation Into a Distributed Ledger Based IdM System

Abstract

Traditional identity management systems (IdMS) suffer from significant weaknesses, such as the reliance on a single central entity that provides the identity data or the users lack control over their identity data. The introduction of qualified self-sovereign identities (SSIs) for eGovernment systems can strengthen the privacy of citizens. Furthermore, it is possible to solve fundamental trust issues of traditional IdMS by utilizing distributed ledger technology (DLT) together with performing a consensus algorithm. The contribution of this paper is twofold. First, this paper proposes a solution for the derivation of qualified electronic identities (eIDs), issued by a traditional IdMS, into a distributed ledger (DL) based IdMS that enables SSIs. Second, we have implemented a proof-of-concept (PoC) realizing qualified eID derivation into an SSI system based on the DLT. This PoC was realized, among others, by introducing an agent that represents the interface between the traditional IdM and the SSI system as well as by extending the consensus algorithm. The proposed approach used for eID derivation ensures the maintenance of the trust as well as the quality of the identity data.