Perancangan Protokol Self-Sovereign Identity untuk Autentikasi Sistem Layanan Kampus pada STT Terpadu Nurul Fikri

Yudha Rizky Alvingky Alvingky; Yaasir Aidil Fitrah; Salman El Farisi

doi:10.30998/jrami.v7i04.1945

Authors

Yudha Rizky Alvingky Alvingky Sekolah Tinggi Teknologi Terpadu Nurul Fikri Author
Yaasir Aidil Fitrah Sekolah Tinggi Teknologi Terpadu Nurul Fikri Author
Salman El Farisi Sekolah Tinggi Teknologi Terpadu Nurul Fikri Author

DOI:

https://doi.org/10.30998/jrami.v7i04.1945

Keywords:

decentralized identifier, self-sovereign identity, SIOPv2, verifiable credential, autentikasi tanpa kata sandi

Abstract

Campus service authentication systems in most universities still rely on passwords that are vulnerable to data breaches and cyber attacks. Self-Sovereign Identity (SSI) emerges as a digital identity paradigm that gives users full control, yet its implementation generally depends on complex blockchain infrastructure. This study aims to design a blockchain-free SSI-based authentication protocol for campus service systems at STT Terpadu Nurul Fikri. The research employs an engineering approach with stages including literature study, architecture design, prototype development, and evaluation through functional testing, performance testing, and User Acceptance Testing (UAT). The designed architecture uses the did:web method for campus digital identity, did:key for user identity, and SIOPv2 and OID4VP protocols for authentication. Functional testing results show all scenarios passed. Performance testing shows average VC creation time of 384 ms, did.json resolution of 404 ms, and SIOPv2 login of 112 ms, which is faster than blockchain-based approaches. UAT results through demonstration to partners indicate the system is considered easy to use and feasible to implement.

Downloads

Download data is not yet available.

References

De Prisco, R., Shevchenko, S., & Faruolo, P. (2024). Enhancing OpenID Connect for Verifiable Credentials with DIDComm. Proceedings of the 21st International Conference on Security and Cryptography - SECRYPT, 844–849. https://doi.org/10.5220/0012850800003767

Goel, A., & Rahulamathavan, Y. (2024). A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility. Future Internet, 17(1), 1. https://doi.org/10.3390/fi17010001

Gribneau, C., Prorock, M., Steele, O., Xu, M., & Zagidulin, D. (2026). did:web Method Specification. https://w3c-ccg.github.io/did-method-web/

IBM Security. (2021, Juni 15). IBM Survey: Pandemic-Induced Digital Reliance Creates Lingering Security Side Effects. IBM Newsroom. https://uk.newsroom.ibm.com/2021-06-15-IBM-Survey-Pandemic-Induced-Digital-Reliance-Creates-Lingering-Security-Side-Effects

Jones, M., Prorock, M., & Cohen, G. (2025). Securing Verifiable Credentials using JOSE and COSE (W3C Recommendation). https://www.w3.org/TR/vc-jose-cose/

Kemendikdasmen. (2024, Maret 26). Kemendikbudristek Bersiap Menjadi Bagian Infrastruktur Informasi Vital (IIV) Sektor Bidang Pendidikan. EduCSIRT. https://educsirt.kemendikdasmen.go.id/portal/berita/196

Longley, D., Zagidulin, D., & Sporny, M. (2025). The did:key Method v0.9 (W3C Community Group). https://w3c-ccg.github.io/did-key-spec/

Mansoori, S. Al, & Maheshwari, P. (2022). HEI-BCT: A Framework to Implement Blockchain-Based Self-Sovereign Identity Solution in Higher Education Institutions. 2022 8th International Conference on Information Technology Trends (ITT), 6–10. https://doi.org/10.1109/ITT56123.2022.9863933

Maram, D., Malvai, H., Zhang, F., Jean-Louis, N., Frolov, A., Kell, T., Lobban, T., Moy, C., Juels, A., & Miller, A. (2021). CanDID: Can-Do Decentralized Identity with Legacy Compatibility, Sybil-Resistance, and Accountability. 2021 IEEE Symposium on Security and Privacy (SP), 2021-May, 1348–1366. https://doi.org/10.1109/SP40001.2021.00038

Paredes-García, D., Fernández-Carrasco, J. Á., López, J. A. M., Vasquez-Correa, J. C., Yoldi, I. J., Moreno-Acevedo, S. A., González-Docasal, A., Irazusta, H. A., Muniain, A. Á., & Loinaz, Y. de D. (2025). SIBERIA: A Self-Sovereign Identity and Multi-Factor Authentication Framework for Industrial Access. Applied Sciences, 15(15), 8589. https://doi.org/10.3390/app15158589

Schardong, F., & Custódio, R. (2022). Self-Sovereign Identity: A Systematic Review, Mapping and Taxonomy. Sensors, 22(15), 5641. https://doi.org/10.3390/s22155641

Sporny, M., Longley, D., Chadwick, D., & Herman, I. (2025). Verifiable Credentials Data Model v2.0. Dalam World Wide Web Consortium Recommendation. https://www.w3.org/TR/vc-data-model-2.0/

Sporny, M., Longley, D., Sabadello, M., Reed, D., Steele, O., & Allen, C. (2022). Decentralized Identifiers (DIDs) v1.0 (W3C Recommendation). https://www.w3.org/TR/did-1.0/

Stefan-Robert, C., & Butincu, C. N. (2024). Decentralized Blockchain-based Platform for Managing and Issuing Academic Certificates. 2024 28th International Conference on System Theory, Control and Computing (ICSTCC), 570–575. https://doi.org/10.1109/ICSTCC62912.2024.10744729

Tan, E., Lerouge, E., Du Caju, J., & Du Seuil, D. (2023). Verification of Education Credentials on European Blockchain Services Infrastructure (EBSI): Action Research in a Cross-Border Use Case between Belgium and Italy. Big Data and Cognitive Computing, 7(2), 79. https://doi.org/10.3390/bdcc7020079

Tempo.co. (2024, Juli 1). 6 Dampak Serangan Ransomware ke Server PDNS. https://www.tempo.co/digital/6-dampak-serangan-ransomware-ke-server-pdns-44346

Tran, T.-D., Bao, H. P. G., Cam, N. T., & Pham, V.-H. (2025). DAVE-CC: A decentralized, access-controlled, verifiable ecosystem for cross-chain academic credential management. Journal of Information Security and Applications, 94, 104238. https://doi.org/10.1016/j.jisa.2025.104238

Windley, P. J. (2021). Sovrin: An Identity Metasystem for Self-Sovereign Identity. Frontiers in Blockchain, 4. https://doi.org/10.3389/fbloc.2021.626726

Yasuda, K., Jones, M. B., & Lodderstedt, T. (2023). Self-Issued OpenID Provider v2 - draft 13. Dalam openid.net. https://openid.net/specs/openid-connect-self-issued-v2-1_0.html

Yasuda, K., Lodderstedt, T., Chadwick, D., Nakamura, K., & Vercammen, J. (2022). OpenID for Verifiable Credentials. https://openid.net/wordpress-content/uploads/2022/05/OIDF-Whitepaper_OpenID-for-Verifiable-Credentials_FINAL_2022-05-12.pdf

Yousra, B., Yassine, S., Yassine, M., Said, S., Lo’ai, T., & Salah, K. (2023). A Novel Secure and Privacy-Preserving Model for OpenID Connect Based on Blockchain. IEEE Access, 11, 67660–67678. https://doi.org/10.1109/ACCESS.2023.3292143