Beyond Holder Binding
A Proposition Hierarchy for Presenter Binding in Digital Credentials
DOI:
https://doi.org/10.51094/jxiv.6627キーワード:
Verifiable Credentials、 Presenter Binding、 Holder Binding、 digital identity wallet、 wallet attestation、 OID4VCI、 OID4VP、 HAIP抄録
Verifiers of digital credentials must decide whether the person presenting a credential can be treated as the individual whose identity was confirmed at issuance, yet mechanisms such as Holder Binding and wallet attestation each cover only a fragment of this decision. We define this decision target as Presenter Binding and model it as a hierarchy of propositions: a top-level proposition — the current presenter can be treated as identical to that applicant — decomposed into issuance-time and presentation-time branches yielding twelve leaf propositions. Mapping OID4VCI, OID4VP, HAIP, the EUDI Wallet ARF, and the W3C Confidence Methods draft onto the hierarchy shows that the three protocols explicitly address seven of the twelve leaf propositions, while the remaining five —
applicant identification, correctness of the subject and identity claims, and the legitimacy of the wallet controller at issuance and presentation — depend on issuer operations, wallet certification, and
scheme policy. The model gives verifiers, issuers, and scheme operators a common language for stating which linkages a use case requires and what must be implemented to establish them.
利益相反に関する開示
The authors have no conflicts of interest to disclose.ダウンロード *前日までの集計結果を表示します
引用文献
W3C. Verifiable Credentials Data Model v2.0. 2025. https://www.w3.org/TR/vc-data-model-2.0/
OpenID Foundation. OpenID for Verifiable Credential Issuance 1.0. 2025. https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
OpenID Foundation. OpenID for Verifiable Presentations 1.0. 2025. https://openid.net/specs/openid-4-verifiable-presentations-1_0.html
OpenID Foundation. OpenID4VC High Assurance Interoperability Profile 1.0. Final Specification, 24 December 2025. https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0.html
IETF. SD-JWT-based Verifiable Credentials (SD-JWT VC). Internet-Draft. https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/
ISO/IEC 18013-5:2021. Personal identification — Part 5: Mobile driving licence (mDL) application. ISO, 2021.
NIST. Digital Identity Guidelines. SP 800-63 (63A: Identity Proofing, 63B: Authentication). https://pages.nist.gov/800-63-4/
OpenID Foundation. OpenID Connect for Identity Assurance 1.0. 2024. https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html
W3C. Web Authentication Level 2. 2021. https://www.w3.org/TR/webauthn-2/
European Commission, European Digital Identity Wallet. Architecture and Reference Framework, Version 3.0.0. 2026. https://eudi.dev/3.0.0/
W3C. Verifiable Credential Confidence Methods v1.0. W3C Working Draft, 10 September 2026. https://www.w3.org/TR/vc-confidence-method/
T. P. Kelly. Arguing Safety — A Systematic Approach to Managing Safety Cases. PhD thesis, Department of Computer Science, University of York, 1998.
A. van Lamsweerde. Goal-Oriented Requirements Engineering: A Guided Tour. In Proceedings of the Fifth IEEE International Symposium on Requirements Engineering, pp. 249–262, 2001. DOI: 10.1109/ISRE.2001.948567.
A. Nanda, S. W. A. Shah, J. J. Jeong, R. Doss, and J. Webb. Toward Higher Levels of Assurance in Remote Identity Proofing. IEEE Consumer Electronics Magazine 13(1): 62–71, 2024. DOI: 10.1109/MCE.2023.3256640.
J. Li and G. A. Wang. A framework of identity resolution: evaluating identity attributes and matching algorithms. Security Informatics 4, Article 6, 2015. DOI: 10.1186/s13388-015-0021-0.
A. Kumar. Security Analysis of Web-based Identity Federation. Workshop on Web 2.0 Security and Privacy (W2SP), 2013.
A. Flamini, G. Sciarretta, M. Scuro, A. Sharif, A. Tomasi, and S. Ranise. On cryptographic mechanisms for the selective disclosure of verifiable credentials. Journal of Information Security and Applications 83: 103789, 2024. DOI: 10.1016/j.jisa.2024.103789.
M. Kunz, A. Puchta, S. Groll, L. Fuchs, and G. Pernul. Attribute quality management for dynamic identity and access management. Journal of Information Security and Applications 44: 64–79, 2019. DOI: 10.1016/j.jisa.2018.11.004.
J. Camenisch and A. Lysyanskaya. An Efficient System for Non-transferable Anonymous Credentials with Optional Anonymity Revocation. Advances in Cryptology — EUROCRYPT 2001, LNCS 2045, pp. 93–118, 2001. DOI: 10.1007/3-540-44987-6_7.
Q. Zhang, J. Qiao, and Q. Meng. Build a trusted storage system on a mobile phone. IET Information Security 13(2): 157–166, 2019. DOI: 10.1049/iet-ifs.2018.5031.
C. Wang, Y. Wang, Y. Chen, H. Liu, and J. Liu. User authentication on mobile devices: Approaches, threats and trends. Computer Networks 170: 107118, 2020. DOI: 10.1016/j.comnet.2020.107118.
S. Lim, M.-H. Rhie, D. Hwang, and K.-H. Kim. A Subject-Centric Credential Management Method based on the Verifiable Credentials. 2021 International Conference on Information Networking (ICOIN), pp. 508–510, 2021. DOI: 10.1109/ICOIN50884.2021.9333857.
S. Drimer and S. J. Murdoch. Keep Your Enemies Close: Distance Bounding Against Smartcard Relay Attacks. 16th USENIX Security Symposium, pp. 87–102, 2007.
C. Wu and Q. Zeng. Do You See How I Pose? Using Poses as an Implicit Authentication Factor for QR Code Payment. 33rd USENIX Security Symposium, pp. 4571–4588, 2024.
ダウンロード
公開済
投稿日時: 2026-09-30 08:21:08 UTC
公開日時: 2026-10-27 04:21:07 UTC
ライセンス
Copyright(c)2026
SADAHIRO, Takayuki
Suzuki, Shigeya
Abe, Ryosuke
Fujie, Naohiro
この作品は、Creative Commons Attribution 4.0 International Licenseの下でライセンスされています。
