| Title: | From model to mechanism : enforcing delegated authority in ssi with language-based security |
|---|
| Authors: | ID Turkanović, Muhamed (Author)
ID Keršič, Vid (Author)
ID Horvat, Alen (Author)
ID Beron, Dominik (Author)
ID Čučko, Špela (Author) |
|---|
| Files: |  mathematics-13-02971_(1).pdf (1,46 MB)
MD5: CF253F3AAFA7F71E3E8729C81568D08F
|
|---|
| Language: | English |
|---|
| Work type: | Article |
|---|
| Typology: | 1.01 - Original Scientific Article |
|---|
| Organization: | FERI - Faculty of Electrical Engineering and Computer Science
|
|---|
| Abstract: | Delegation of authority remains a critical yet insufficiently addressed capability in SelfSovereign Identity (SSI) systems. Building on an existing delegation model that introduced the concept of a Verifiable Mandate (VM) for expressing authority and access rights, this paper extends the approach with a rigorous formalization of delegation semantics, enabling unambiguous reasoning over roles, grants, and constraints. The formal model is aligned with standards from the World Wide Web Consortium (W3C), and its constructs are embedded into an extended credential schema that preserves compatibility with the Verifiable Credentials (VC) data model while introducing delegation-specific attributes. A generalized VM schema is defined, supporting both generic and business-specific instantiations, and ensuring structural and semantic interoperability. Policy compliance is operationalized through a policy-based enforcement architecture, where rules are authored in the Rego language and evaluated at runtime by the Open Policy Agent (OPA). The architecture incorporates trusted registries for schema and policy distribution, allowing verifiers to define and enforce context-specific delegation rules in a modular and interoperable manner. Validation through realistic scenarios, such as postal service and academic use cases, demonstrates how formal semantics, schema validation, and language-based policy enforcement can be combined to enable secure, verifiable, and context-aware delegation in SSI ecosystems. |
|---|
| Keywords: | self-sovereign identity, delegation, verifiable mandate, formalization, policy-based enforcement, verifiable credentials, blockchain, language-based security |
|---|
| Publication version: | Version of Record |
|---|
| Submitted for review: | 08.08.2025 |
|---|
| Article acceptance date: | 09.08.2025 |
|---|
| Publication date: | 14.09.2025 |
|---|
| Publisher: | MDPI |
|---|
| Year of publishing: | 2025 |
|---|
| Number of pages: | 33 str. |
|---|
| Numbering: | Vol. 13, iss. 18, [article no.] 2971 |
|---|
| PID: | 20.500.12556/DKUM-95629  |
|---|
| UDC: | 004.8 |
|---|
| ISSN on article: | 2227-7390 |
|---|
| COBISS.SI-ID: | 249372675 |
|---|
| DOI: | 10.3390/math13182971 |
|---|
| Copyright: | © 2025 by the authors
|
|---|
| Publication date in DKUM: | 02.10.2025 |
|---|
| Views: | 221 |
|---|
| Downloads: | 19 |
|---|
| Metadata: |    |
|---|
| Categories: | Misc.
|
|---|
|
:
|
Copy citation |
|---|
| | | | Average score: | (0 votes) |
|---|
| Your score: | Voting is allowed only for logged in users. |
|---|
| Share: |  |
|---|
Hover the mouse pointer over a document title to show the abstract or click
on the title to get all document metadata. |
