Digital credentials represent a cornerstone of digital identity on the Internet. To achieve privacy, certain functionalities in credentials should be implemented. One is selective disclosure, which allows users to disclose only the claims or attributes they want. This paper presents a novel approach to selective disclosure that combines Merkle hash trees and Boneh-Lynn-Shacham (BLS) signatures. Combining these approaches, we achieve selective disclosure of claims in a single credential and creation of a verifiable presentation containing selectively disclosed claims from multiple credentials signed by different parties. Besides selective disclosure, we enable issuing credentials signed by multiple issuers using this approach.
翻译:数字凭证是互联网数字身份的基石。为实现隐私保护,凭证需要具备特定功能,其中之一是选择性披露——允许用户仅披露其希望公开的声明或属性。本文提出一种结合Merkle哈希树与Boneh-Lynn-Shacham(BLS)签名的选择性披露新方法。通过整合这两种技术,我们实现了单一凭证内声明的选择性披露,并能够创建包含来自不同签发方签署的多种凭证中经选择性披露声明的可验证表述。除选择性披露外,该方法还支持由多个签发方联合签署的凭证签发。