The Journal of Information Systems (한국정보시스템학회지:정보시스템연구)

Korea Association of Information Systems (한국정보시스템학회)
권호 표지
DOI QR코드

DOI QR Code

Self-Sovereign Identity (SSI): Structured Literature Reviews with Socio-Technical Perspective

Self-Sovereign Identity (SSI: 자기주권신원) 연구 동향 분석: 사회경제, 법률, 기술적 고찰을 중심으로

  • 손영진 (이화여자대학교 경영학과) ;
  • 박민정 (이화여자대학교 경영학과) ;
  • 박정숙 (고려대학교 정보보호학과, 한국인터넷진흥원) ;
  • 황화정 (이화여자대학교 경영학과, LG CNS) ;
  • 채상미 (이화여자대학교 경영학과)
  • Received : 2021.08.26
  • Accepted : 2021.11.25
  • Published : 2021.12.31
Download PDF
⟨ Previous Next ⟩

Abstract

The concept of Self-Sovereign Identity (SSI) has emerged to overcome the limitations of traditional centralized personal identity management systems in our society. Therefore, in this study, 36 seminal researches out of 112 collected studies were investigated with a systematic literature review method to deliver a core common definition as well as the research trends on SSI in the socioeconomic, legal and technological fields. SSI studies in the legal field have mainly considered the conflicts with relevant laws such as General Data Protection Regulation (GDPR) and privacy protection laws. The study of SSI in the technology field have looked at the trends of the technical components to implement SSI and discussed the necessities of establishing standards to increase interoperability for SSI diffusion worldwide. This study ultimately derived the core definition of SSI from a various academic fields as "a trust-based personal identity management system that enables autonomous self-identification by a identity owner without a centralized system or 3rd party intervention". The results of this study contribute to the understanding of the essential SSI concept which were varied on different research fields and industries. The results also provide a foundation for discovering various SSI-based business models, applications as well as future research opportunities. Furthermore, this study suggested that SSI must be developed with interdisciplinary manner among the socioeconomic, legal, and technological fields to be practically applicable system to enable autonomous self-identification by a identity owner in our society.

Keywords

Acknowledgement

이 논문 또는 저서는 2019년 대한민국 교육부와 한국연구재단의 인문사회분야 중견연구자지원 사업의 지원을 받아 수행된 연구임(NRF-2019S1A5A2A01050610)

References

  1. 고영미, "탈중앙화 자기주권신원인증 (DID) 에 대한 법적 고찰.", 법학논총, 제45권, 1호, 2021, pp. 421-447. https://doi.org/10.17252/DLR.2021.45.1.013
  2. 권헌영, "데이터 주권 시대의 블록체인 기술 활용 가능성과 개발 현황.", 주간기술동향, 2020.07.22., pp. 17-27.
  3. 김종기, 김지윤, "모바일 기기 사용자는 왜 정보보호에 위험한 행동을 하는가?: 위험행동 결정요인 모델을 중심으로.", 정보시스템연구, 제28권, 제2호 2019, pp. 129-152.
  4. 박민정, 유지은, 채상미, "Isms-P 와 Gdpr 의 개인정보보호 부문 연계 분석.", 한국IT서비스학회지, 제18권, 제2호, 2019, pp. 55-73. https://doi.org/10.9716/KITS.2019.18.2.055
  5. 박민정, 채상미, 이명준, "개인정보보호법제 관점에서 본 블록체인의 법적 쟁점: GDPR 및 국내 개인정보보호법을 바탕으로.", Journal of Information Technology Applications & Management 제25권, 제2호, 2018, pp. 133-146.
  6. 박진아, "데이터의 보호 및 유통 법제 정립 방안.", 서강법률논총, 제9권, 제2호, 2020, pp. 3-41.
  7. 성욱제, "국내 미디어 다양성 연구에 대한 메타분석: 미디어 다양성에 대한 개념 및 접근방식을 중심으로.", 방송통신연구, 2012, pp. 101-139.
  8. 송영현, "블록체인 기술의 사회에서의 보편적 활용을 위한 규범성 고찰.", IT 와 법 연구, 제22권, 2021, pp. 341-70.
  9. 신태범, 권상희, "국내 온라인저널리즘 연구에 대한 메타분석: 분석 대상과 주제, 이론 및 방법론적 특성을 중심으로.", 커뮤니케이션 이론, 제9권, 제2호, 2013, pp. 200-249.
  10. 여기호, 박근덕, 염흥열, "분산 Id 보관 및 연계서비스 모델 제안.", 정보보호학회논문지, 제 30권, 제3호, 2020, pp. 513-25. https://doi.org/10.13089/JKIISC.2020.30.3.513
  11. 오현택, 양진홍, "마이데이터 환경에서 개인의 전자 건강/의료 데이터 활용을 위한 데이터 거래모델.", 한국정보전자통신기술학회 논문지, 제13권, 제3호, 2020, pp. 250-261.
  12. 이정현, 김지원, 김철수, 양진홍. "자기주권신원 기술의 국내 서비스 사례 및 연구 과제분석을 통한 개인정보 주권 강화 방안 연구." 한국정보전자통신기술학회 논문지, 제13권, 제6호, 2020, pp. 575-589.
  13. 이중정, 안재영, 김행미, 김우석, "Ict 기반 공유 경제 발전을 위한 학문적 노력에 대한 고찰: 국내외 Mis와 유관 분야의 학술연구를 대상으로 메타분석.", 지식경영연구, 제21권, 제4호, 2020, pp. 129-56.
  14. 전양, 박민정, 채상미, "중.노년층의 온라인 개인정보보호 행동에 영향을 미치는 요인에 관한 연구; 한국과 중국 인터넷 사용자를 중심으로.", 정보시스템연구, 제29권, 제1호, 2020, pp. 51-74.
  15. 한국인터넷진흥원. 미국 개인정보보호 법 행정체계 현황 및 주요 위반사례('21.1월 기준). 한국인터넷진흥원 개인정보보호위원회 and 개인정보보호국제협력센터, 2021.02.25.
  16. GDPR대응지원센터. 2020 EU 일반개인정보보호법(GDPR) 가이드북. 한국인터넷진흥원 (2020).
  17. "개인정보 침해 신고.상담 건수.", e-나라지표, Updated 2021.07.16.
  18. "데이터 3법.", 정책위키, 대한민국 정책 브리핑, Updated 2021.07.20.
  19. Ahmed, Khaled A. M., Sabry F. Saraya, John F. Wanis, Amr M. T. Ali-Eldin, "A Self-Sovereign Identity Architecture Based on Blockchain and the Utilization of Customer's Banking Cards : The Case of Bank Scam Calls Prevention.", 2020 15th International Conference on Computer Engineering and Systems (ICCES), 2020.
  20. Baars, DS, "Towards Self-Sovereign Identity Using Blockchain Technology.", Master's thesis, University of Twente, 2016.
  21. Beldad, Ardion D, Sabrina M Hegner, "Expanding the Technology Acceptance Model with the Inclusion of Trust, Social Influence, and Health Valuation to Determine the Predictors of German Users' Willingness to Continue Using a Fitness App: A Structural Equation Modeling Approach.", International Journal of Human-Computer Interaction, Vol. 34, No. 9, 2018, pp. 882-93. https://doi.org/10.1080/10447318.2017.1403220
  22. Benoit, D. F., Lessmann, S., Verbeke, W. "On realising the utopian potential of big data analytics for maximising return on marketing investments." Journal of Marketing Management, Vol. 36, No.3-4, 2020, pp. 233-247. https://doi.org/10.1080/0267257X.2020.1739446
  23. Bostrom, Robert P, J Stephen Heinen, "Mis Problems and Failures: A Socio-Technical Perspective. Part I: The Causes.", MIS quarterly, 1977, pp. 17-32.
  24. Cameron, Kim, "The Laws of Identity.", Microsoft Corp, 12, 2005, pp. 8-11.
  25. Chai, Sangmi, Minkyun Kim, "A Socio-Technical Approach to Knowledge Contribution Behavior: An Empirical Investigation of Social Networking Sites Users.", International Journal of Information Management, Vol. 32, No. 2, 2012, pp. 118-26. https://doi.org/10.1016/j.ijinfomgt.2011.07.004
  26. Der, Uwe, Stefan Jahnichen, Jan Surmeli, "Self-Sovereign Identity - Opportunities and Challenges for the Digital Revolution.", arXiv preprint arXiv: 1712.01767, 2017.
  27. Dunphy, Paul, Fabien AP Petitcolas, "A First Look at Identity Management Schemes on the Blockchain.", IEEE security & privacy, Vol. 16, No. 4, 2018, pp. 20-29. https://doi.org/10.1109/MSP.2018.3111247
  28. Ferdous, Md Sadek, Farida Chowdhury, Madini O. Alassafi, "In Search of SelfSovereign Identity Leveraging Blockchain Technology.", IEEE Access, Vol. 7, 2019, pp. 103059-79. https://doi.org/10.1109/access.2019.2931173
  29. Freytsis, Maria, Iain Barclay, Swapna Krishnakumar Radha, Adam Czajka, Geoffery H. Siwo, Ian Taylor, Sherri Bucher, "Development of a Mobile, Self-Sovereign Identity Approach for Facility Birth Registration in Kenya.", Frontiers in Blockchain, Vol. 4, 2021.
  30. Gans, Rachel Benchaya, Jolien Ubacht, Marijn Janssen, "Self-Sovereign Identities for Fighting the Impact of Covid-19 Pandemic.", Digital Government: Research and Practice, Vol. 2, No. 2, 2021, pp. 1-4.
  31. Grech, Alex, Ira Sood, Lluis Arino, "Blockchain, Self-Sovereign Identity and Digital Credentials: Promise Versus Praxis in Education.", Frontiers in Blockchain, Vol. 4, 202.
  32. Gstrein, Oskar J., Dimitry Kochenov, "Digital Identity and Distributed Ledger Technology: Paving the Way to a Neo-Feudal Brave New World?", Frontiers in Blockchain, Vol. 3, 2020.
  33. Hardjono, Thomas, "Federated Authorization over Access to Personal Data for Decentralized Identity Management.", IEEE Communications Standards Magazine, Vol. 3, No. 4, 2019, pp. 32-38. https://doi.org/10.1109/mcomstd.001.1900019
  34. Houtan, Bahar, Abdelhakim Senhaji Hafid, Dimitrios Makrakis, "A Survey on Blockchain-Based Self-Sovereign Patient Identity in Healthcare.", IEEE Access,, Vol. 8, 2020, pp. 90478-94. https://doi.org/10.1109/access.2020.2994090
  35. Kim, Bong Gon, Young-Seob Cho, Seok-Hyun Kim, Hyoungshick Kim, Simon S. Woo, "A Security Analysis of Blockchain-Based Did Services.", IEEE Access, Vol. 9, 2021, pp. 22894-913. https://doi.org/10.1109/ACCESS.2021.3054887
  36. Kim, Geun-Hyung, "A Design of Self-Sovereign Data Distribution Platform for a Reliable Data Economy.", Journal of Digital Contents Society, Vol. 22, No. 3, 2021, pp. 483-90. https://doi.org/10.9728/dcs.2021.22.3.483
  37. Kondova, Galia, Jorn Erbguth, "Self-Sovereign Identity on Public Blockchains and the GDPR.", Proceedings of the 35th Annual ACM Symposium on Applied Computing, 2020.
  38. Kubach, Michael, Christian H Schunck, Rachelle Sellung, Heiko Rossnagel, "Self-Sovereign and Decentralized Identity as the Future of Identity Management?", Open Identity Summit 2020, 2020.
  39. Kuperberg, Michael, "Blockchain-Based Identity Management: A Survey from the Enterprise and Ecosystem Perspective.", IEEE Transactions on Engineering Management, Vol. 67, No. 4, 2020, pp. 1008-27. https://doi.org/10.1109/tem.2019.2926471
  40. Lim, Jonathan, "Self-Sovereign Identity: The Harmonising of Digital Identity Solutions through Distributed Ledger Technology.", ANU Journal of Law and Technology, Vol. 1, No. 2, 2020, pp. 98-120.
  41. Lockwood, Mick, "Exploring Value Propositions to Drive Self-Sovereign Identity Adoption.", Frontiers in Blockchain, Vol. 4, 2021.
  42. Muhle, Alexander, Andreas Gruner, Tatiana Gayvoronskaya, Christoph Meinel, "A Survey on Essential Components of a Self-Sovereign Identity.", Computer Science Review, Vol. 30, 2018, pp. 80-86. https://doi.org/10.1016/j.cosrev.2018.10.002
  43. Naik, Nitin, Paul Jenkins, "Governing Principles of Self-Sovereign Identity Applied to Blockchain Enabled Privacy Preserving Identity Management Systems.", 2020 IEEE International Symposium on Systems Engineering (ISSE), 2020a, pp. 1-6.
  44. Naik, Nitin, Paul Jenkins. "Your Identity Is Yours: Take Back Control of Your Identity Using Gdpr Compatible Self-Sovereign Identity.", 2020 7th International Conference on Behavioural and Social Computing (BESC), 2020b.
  45. Penedo, Andres Chomczyk. "Self-Sovereign Identity Systems and European Data Protection Regulations: An Analysis of Roles and Responsibilities.", Gi-Edition., 2021.
  46. Porter, Constance Elise, Naveen Donthu, "Using the Technology Acceptance Model to Explain How Attitudes Determine Internet Usage: The Role of Perceived Access Barriers and Demographics.", Journal of business research, Vol. 59, No. 9 , 2006, pp. 999-1007. https://doi.org/10.1016/j.jbusres.2006.06.003
  47. Schaffner, Martin, "Analysis and Evaluation of Blockchain-Based Self-Sovereign Identity Systems.", Master's thesis, 2019.
  48. Shuaib, M., S. Alam, M. Shahnawaz Nasir, M. Shabbir Alam, "Immunity Credentials Using Self-Sovereign Identity for Combating Covid-19 Pandemic.", Materials Today: Proceedings, 2021.
  49. Shuaib, Mohammed, Shadab Alam, Mohammad Shabbir Alam, Mohammad Shahnawaz Nasir, "Self-Sovereign Identity for Healthcare Using Blockchain.", Materials Today: Proceedings, 2021.
  50. Siqueira, Alexandre, Arlindo Flavio Da Conceicao, Vladimir Rocha, "Blockchains and Self-Sovereign Identities Applied to Healthcare Solutions: A Systematic Review.", arXiv preprint arXiv:2104.12298, 2021.
  51. Soltani, Reza, Uyen Trang Nguyen, Aijun An, "A Survey of Self-Sovereign Identity Ecosystem.", Security and Communication Networks 2021, 2021.
  52. Srite, Mark, Elena Karahanna, "The Role of Espoused National Cultural Values in Technology Acceptance.", MIS quarterly, 2006, pp. 679-704.
  53. Stockburger, Lukas, et al. "Blockchain-Enabled Decentralized Identify Management: The Case of Self-Sovereign Identity in Public Transportation.", Blockchain: Research and Applications, 2021, 100014.
  54. Toth, Kalman C., Alan Anderson-Priddy, "Self-Sovereign Digital Identity: A Paradigm Shift for Identity.", IEEE Security & Privacy, Vol. 17, No. 3, 2019, pp. 17-27.
  55. Wang, Fennie, Primavera De Filippi, "Self-Sovereign Identity in a Globalized World: Credentials-Based Identity Systems as a Driver for Economic Inclusion.", Frontiers in Blockchain, Vol. 2, 2020.
  56. Wittek, Kevin Lazzati Laura Bothe David Sinnaeve Ann-Julie Pohlmann Norbert, "An Ssi Based System for Incentivized and Selfdetermined Customer-toBusiness Data Sharing in a Local Economy Context.", 2020 IEEE European Technology and Engineering Management Summit (E-TEMS), 2020, pp. 1-5.
  57. Zwitter, Andrej J., Oskar J. Gstrein, Evan Yap, "Digital Identity and the Blockchain: Universal Identity Management and the Concept of the "Self-Sovereign" Individual.", Frontiers in Blockchain, Vol. 3, 2020.
  58. Tobin, Andrew, Drummond Reed, "The Inevitable Rise of Self-Sovereign Identity.", The Sovrin Foundation 29, 2016.
  59. World Bank Group, Id4d Annual Report. 2018.
  60. Allen, Christopher, "The Path to Self-Sovereign Identity,", Life With Alacrity, 2016.04. 25., 2016. http://www.lifewithalacrity.com/2016/04/the-path-to-self-soverereign-identity.html.
  61. Martin, Aaron, Linnet Taylor, "Biometric Ultimata - What the Yemen Conflict Can Tell Us About the Politics of Digital Id Systems.", 2019.06.21. Accessed 2021.08.18. https://globaldatajustice.org/2019-06-21-biometrics-WFP/.
  62. 문가용. "개인정보 유출 숨긴 우버에 1억 4천 8백만 달러 벌금", 보안뉴스, 2018.09.27. https://m.boannews.com/html/detail.html?idx=73267
  63. 문진욱, "미국, 잇따른 개인정보 유출사건으로 보안결제 관심 급증.", 2014. https://news.kotra.or.kr/user/globalAllBbs/kotranews/list/2/globalBbsDataAllView.do?dataIdx=136362&column=&search=&searchAreaCd=&searchNationCd=&searchTradeCd=&searchStartDate=&searchEndDate=&searchCategoryIdxs=&searchIndustryCateIdx=&page=107&row=100
  64. Republic of Estonia E-residency, Accessed 2021.08.18. https://e-resident.gov.ee/become-an-e-resident/.
  65. 우고운, "페이스북 5조9000억원 벌금 낸다...전체 매출의 9%" 조선일보, 2019.07.25. https://www.chosun.com/site/data/html_dir/2019/07/25/2019072500828.html
  66. 원병철, "지금까지 약 3,628억 벌금 부과한 EU GDPR... 우리나라 기업은 어땠나" 보안뉴스, 2021.04.25. https://www.boannews.com/media/view.asp?idx=96852&kind=
  67. 천민아, "보이스피싱, 요즘 누가 속냐고?...서울만 매일 6억원 피해.", 뉴시스, 2021. 03.21. https://newsis.com/view/?id=NISX20210319_0001377085&cID=10201&pID=10200.