Praveensankar Manimaran

• Manimaran, Praveensankar; Garrett, Thiago; Jehl, Leander Nikolaus & Vitenberg, Roman (2025). Decentralization trends in identity management: From federated to Self-Sovereign Identity Management Systems. Computer Science Review. ISSN 1574-0137. 58. doi: 10.1016/j.cosrev.2025.100776. Full text in Research Archive Show summary

  Identity Management Systems (IMSs) are fundamental elements in a myriad of digital services across different industries. Traditionally, electronic IMSs have been centralized, similar to historical paper-based IMSs: there is a single authority responsible for issuing, storing, and sharing identity-related information on behalf of the identified subjects (people or devices). Over the last decade, we have been witnessing a decentralization trend in IMSs due to a number of reasons such as an attempt to bridge disconnected identity silos and the strive to involve the user in identity management to a larger degree. Federated and Self-Sovereign IMSs are the two most prominent approaches in the decentralization trend. Despite significant progress in this area, Federated and Self-Sovereign IMSs have not been studied from a conceptual point of view and the fundamental differences between different decentralization approaches have not been analyzed. It is important to understand the implications of different approaches when designing future IMSs that may affect millions of users daily. In this work, we conduct a conceptual study of these two IMS classes. First, we propose a generic model consisting of a set of functionalities and a set of operations and use it as a comparison framework. Using the generic model, we analyze three representatives from Federated and Self-Sovereign IMSs, namely, IOTA Identity, Hyperledger Indy, and eIDAS. Based on the analysis, we propose a new multi-dimensional taxonomy to capture the key differences between these systems. Furthermore, we discuss SSI principles and decentralization approaches followed in IMSs. Finally, we present research gaps in Self-Sovereign IMSs along with solution directions.

View all works in NVA

• Manimaran, Praveensankar (2026). Decentralized Identity Systems: Analysis and Privacy-Preserving Revocation Approaches. Universitetet i Oslo. Full text in Research Archive Show summary

  Over the last decade, we have been witnessing a decentralization trend in Identity Management Systems due to several reasons, such as an attempt to bridge disconnected identity silos and the strive to involve the user in identity management to a larger degree. Despite significant progress, there are still important open challenges in this area. First, the thesis presents a systematic analysis of IOTA Identity, Indy, and eIDAS, representative systems from Federated and Self-Sovereign Identity systems. In addition, this study proposes a novel taxonomy classifying key architectural and functional differences between these systems and a detailed analysis of the decentralization characteristics of these systems. Then, the thesis presents Prevoke and zkRevoke, novel protocols that address privacy issues in the revocation and verification of verifiable credentials, the key processes in Self-Sovereign Identity systems. Prevoke hides the revocation rate while preserving holder anonymity and maintaining unobservable verification. zkRevoke is a novel framework for time-limited continuous verification, enabling each holder to individually configure the verification period with verifiers. Moreover, these protocols are designed to be compatible with any systems that use verifiable credentials, not just Self-Sovereign Identity systems.

View all works in NVA