Self-Sovereign Identity (SSI) provides individuals with the ability to control how their data are managed. In this model, individuals are identified by Decentralized Identifiers (DIDs) that are derived from a secret information. Consequently, compromising this secret allows an attacker to impersonate the victim. In this paper, we propose a novel strategy for generating DIDs leveraging hand vein patterns as the source of identity. We focus on using thermal imaging for contactless, hygienic, and liveness-guaranteed acquisition of hand and vein patterns. To ensure the generation of a stable DID despite minor, unavoidable variations in biometric acquisition, we incorporate fuzzy extractors. This mechanism guarantees that feature variations below a specified threshold result in the same consistent cryptographic key from which the DID is derived. Furthermore, our proposal supports the SSI Pseudonymity Principle by allowing individuals to generate multiple distinct DIDs to counter tracking across different contexts.
Generating SSI Decentralized Identifiers Through Hand Vein Patterns / Lax, G., Morello, R.. - In: WSEAS TRANSACTIONS ON SIGNAL PROCESSING. - ISSN 1790-5052. - 22:(2026), pp. 152-159. [10.37394/232014.2026.22.13]
Generating SSI Decentralized Identifiers Through Hand Vein Patterns
Lax G.;Morello R.
2026-01-01
Abstract
Self-Sovereign Identity (SSI) provides individuals with the ability to control how their data are managed. In this model, individuals are identified by Decentralized Identifiers (DIDs) that are derived from a secret information. Consequently, compromising this secret allows an attacker to impersonate the victim. In this paper, we propose a novel strategy for generating DIDs leveraging hand vein patterns as the source of identity. We focus on using thermal imaging for contactless, hygienic, and liveness-guaranteed acquisition of hand and vein patterns. To ensure the generation of a stable DID despite minor, unavoidable variations in biometric acquisition, we incorporate fuzzy extractors. This mechanism guarantees that feature variations below a specified threshold result in the same consistent cryptographic key from which the DID is derived. Furthermore, our proposal supports the SSI Pseudonymity Principle by allowing individuals to generate multiple distinct DIDs to counter tracking across different contexts.I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.


