Digital credentials represent a cornerstone of digital identity on the Internet. To achieve privacy, certain functionalities in credentials should be implemented. One is selective disclosure, which allows users to disclose only the claims or attributes they want. This paper presents a novel approach to selective disclosure that combines Merkle hash trees and Boneh-Lynn-Shacham (BLS) signatures. Combining these approaches, we achieve selective disclosure of claims in a single credential and creation of a verifiable presentation containing selectively disclosed claims from multiple credentials signed by different parties. Besides selective disclosure, we enable issuing credentials signed by multiple issuers using this approach.
翻译:数字凭证是互联网数字身份的基石。为实现隐私保护,凭证需具备特定功能,其中选择性披露允许用户仅公开其希望展示的声明或属性。本文提出一种结合默克尔哈希树与Boneh-Lynn-Shacham(BLS)签名的新型选择性披露方案。通过融合这两种技术,我们实现了单凭证内声明的选择性披露,并能构建包含来自不同签发方多份凭证中经选择性披露声明的可验证呈现。除选择性披露功能外,本方案还支持多方签发者联合签署数字凭证。