Paper 2022/1708

Expert Mental Models of SSI Systems and Implications for End-User Understanding

Alexandra Mai, TU Wien, SBA Research
Abstract

Self-sovereign identity (SSI) systems have gained increasing attention over the last five years. In a variety of fields (e.g., education, IT security, law, government), developers and researchers are attempting to give end-users back their right to and control of their data. Although prototypes and theoretical concepts for SSI applications exist, the majority of them are still in their infancy. Due to missing definitions and standards, there is currently a lack of common understanding of SSI system within the (IT) community. To investigate current commonalities and differences in SSI understanding, I contribute the first qualitative user study (N=13) on expert mental models of SSI and its associated threat landscape. The study results highlight the need for a general definition of SSI and further standards for such systems, as experts' perceptions of SSI requirements vary widely. Based on the expert interviews, I constructed a minimal knowledge map for (potential) SSI end-users and formulated design guidelines for SSI to facilitate broad adoption in the wild and improve privacy-preserving usage.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint.
Keywords
usable security Self-sovereign identity mental models
Contact author(s)
alexandra mai 92 @ gmail com
History
2022-12-10: approved
2022-12-09: received
See all versions
Short URL
https://ia.cr/2022/1708
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2022/1708,
      author = {Alexandra Mai},
      title = {Expert Mental Models of SSI Systems and Implications for End-User Understanding},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1708},
      year = {2022},
      note = {\url{https://eprint.iacr.org/2022/1708}},
      url = {https://eprint.iacr.org/2022/1708}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.