Integration of Self-sovereign Identity in Centralized Identity Management: SSI-based Authentications, Attribute-based Authorization

The necessity to transition to decentralized identity management, where users have more control over their personal data, gave rise to the self-sovereign identity (SSI) concept. With SSI, people’s security and privacy are supported and enhanced, and challenges such as the single point of failure that centralized systems — also known as honeypots - are prone to, are reduced. This paper describes a method for integrating self-sovereign identity with centralized identity management systems through the use of verifiable credentials in collaborative environments. The idea is to improve the scalability and functionality of authentication while leaving authorization largely unchanged and giving users more control over their data. The proposed method is backed by the trustworthiness of the provided verifiable credentials and the security requirements of the system. The suggested approach provides a flexible identity and access management schema that can be adapted to diverse environments.