Most of the existing identity management is the centralized architecture that has to validate, certify, and manage identity in a centralized approach by trusted authorities. Decentralized identity is causing widespread public concern because it enables to give back control of identity to clients, and the client then has the ability to control when, where, and with whom they share their credentials. A decentralized solution atop on blockchain will bypass the centralized architecture and address the single point of the failure problem. To our knowledge, blockchain is an inherited pseudonym but it cannot achieve anonymity and auditability directly. In this paper, we approach the problem of decentralized identity management starting from the designated-verifier anonymous credential (DVAC in short). DVAC would assist to build a new practical decentralized identity management with anonymity and auditability. Apart from the advantages of the conventional anonymous credential, the main advantage of the proposed DVAC atop blockchain is that the issued cryptographic token will be divided into shares at the issue phase and will be combined at the showing credential phase. Further, the smooth projective hash function ( in short) is regarded as a designated-verifier zero-knowledge proof system. Thus, we introduce the to achieve the designated verifiability without compromising the privacy of clients. Finally, the security of the proposed DVAC is proved along with theoretical and experimental evaluations.

中文翻译：

---

去中心化系统中身份管理的指定验证者匿名凭证

大多数现有的身份管理是集中式架构，必须由受信任的机构以集中方式验证、认证和管理身份。去中心化身份正在引起广泛的公众关注，因为它能够将身份控制权交还给客户，然后客户就可以控制何时、何地以及与谁共享其凭据。区块链上的去中心化解决方案将绕过中心化架构并解决单点故障问题。据我们所知，区块链是一个继承的假名，但它不能直接实现匿名和可审计。在本文中，我们从指定验证者匿名凭证（简称 DVAC）。DVAC 将有助于构建具有匿名性和可审计性的新的实用去中心化身份管理。除了传统匿名凭证的优点外，提议的区块链上 DVAC 的主要优点是，发行的加密代币将在发行阶段分为股份，并在显示凭证阶段合并。此外，平滑投影哈希函数（简称）被视为指定验证者零知识证明系统。因此，我们引入在不损害客户隐私的情况下实现指定的可验证性。最后，通过理论和实验评估证明了所提出的 DVAC 的安全性。