Work

A Survey on Credential Revocation and DID Deactivation in Self-Sovereign Identity Systems

Year: 2025

Type: article

Abstract: Self-Sovereign Identity (SSI) enables user-controlled identity management based on Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs). However, ensuring reliable and privacy-preserving revocation remains one of the most critical and challenging aspects of credential lifecycle governance. This survey provides a narrative reviewof revocation mechanisms in SSI systems, spanning status-list approaches, cryptographic accumulators, positive-confirmation models such as short-lived credentials, and DID deactivation and governance-aware methods. Each category is analyzed across security, privacy, performance, scalability, and operational integration criteria, revealing their practical trade-offs. Based on an extensive analysis of academic sources, standards, and real deployments, the survey develops a unified taxonomy of SSI revocation and identifies persistent challenges: particularly privacy–accountability balancing, offline verification, key compromise handling, post-quantum readiness, and regulatory compliance. The findings offer guidance for system architects, implementers, and policymakers seeking trustworthy and interoperable revocation solutions in decentralized identity ecosystems.

Source: IEEE Access

DOI: 10.1109/access.2025.3649792

Authors: Younho Lee, Hojune Shin, Daeseon Choi

Institutions: Seoul National University of Science and Technology, Soongsil University

Language: English

Topic: Blockchain Technology Applications and Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: gold

Estimated APC paid: $2,075

Funders: Korea Institute for Advancement of Technology, Institute for Information and Communications Technology Promotion