Nakula, Dwiyasa (2026) Implementasi Arsitektur Self-Sovereign Identity (SSI) Berbasis Blockchain dalam Ekosistem Identitas Digital Nasional untuk Pencegahan Kecurangan pada e-Government dan Smart City. Other thesis, Institut Teknologi Sepuluh Nopember.
![[thumbnail of 5027221001-Undergraduate_Thesis.pdf]](http://repository.its.ac.id/style/images/fileicons/text.png) |
Text
5027221001-Undergraduate_Thesis.pdf - Accepted Version Restricted to Repository staff only Download (4MB) | Request a copy |
Abstract
Perkembangan layanan digital pada sektor e-government dan smart city meningkatkan kebutuhan terhadap sistem identitas digital yang aman, privat, efisien, dan tidak bergantung pada satu otoritas tunggal. Model identitas tersentralisasi memiliki risiko kebocoran data, penyalahgunaan akses, serta lemahnya kontrol pengguna terhadap data pribadi. Self-Sovereign Identity (SSI) menjadi pendekatan alternatif melalui penggunaan Decentralized Identifier (DID) dan Verifiable Credential (VC), tetapi implementasi SSI masih menghadapi tantangan pseudo-desentralisasi, manipulasi revocation, dan perlindungan privasi dalam proses verifikasi. Penelitian ini merancang dan mengimplementasikan arsitektur SSI berbasis blockchain dengan mekanisme tamper-prevention melalui integrasi Verifiable Data Registry berbasis Hyperledger Indy, identity agent berbasis ACA-Py, Accumulator Service berbasis RSA accumulator, Zero-Knowledge Proof module, Governance Service dengan threshold approval, Verification Gateway, serta Transparency Log. Evaluasi dilakukan melalui pengujian keamanan, privasi, kinerja, desentralisasi dan model kepercayaan, serta kepatuhan terhadap standar W3C, eIDAS 2.0/EUDI ARF, dan Pan-Canadian Trust Framework. Hasil pengujian menunjukkan bahwa seluruh 10 skenario serangan berhasil dimitigasi dan 8 properti privasi dinyatakan lolos dengan level kuat. Evaluasi kinerja menunjukkan bahwa full round-trip verification menghasilkan rata-rata 586,88 ms pada laptop, 684,11 ms pada PC, dan 741,44 ms pada lingkungan k3s melalui Tailscale. Evaluasi desentralisasi menunjukkan bahwa mekanisme threshold governance 3-of-5 dapat mencegah kontrol tunggal, menjaga monotonicity epoch, dan mempertahankan audit log yang bersifat append-only. Evaluasi kepatuhan standar memperoleh skor efektif 78%. Berdasarkan hasil tersebut, arsitektur yang diusulkan terbukti mampu meningkatkan keamanan, privasi, dan ketahanan terhadap manipulasi pada tingkat proof-of-concept, meskipun optimasi performa dan pengujian skala produksi masih diperlukan.
=======================================================================================================================================
The rapid growth of digital services in e-government and smart city ecosystems has increased the need for digital identity systems that are secure, privacy-preserving, efficient, and not dependent on a single authority. Centralized identity models are vulnerable to data breaches, unauthorized access, and limited user control over personal data. Self-Sovereign Identity (SSI) offers an alternative approach through Decentralized Identifiers (DID) and Verifiable Credentials (VC), however, existing SSI implementations still face challenges related to pseudo-decentralization, revocation manipulation, and privacy protection during verification. This research designs and implements a blockchain-based SSI architecture with tamper-prevention mechanisms by integrating a Hyperledger Indy-based Verifiable Data Registry, ACA-Py-based identity agents, an RSA accumulator-based Accumulator Service, a Zero-Knowledge Proof module, a Governance Service with threshold approval, a Verification Gateway, and a Transparency Log. The system is evaluated through security, privacy, performance, decentralization and trust model assessments, as well as compliance evaluation against W3C, eIDAS 2.0/EUDI ARF, and the Pan-Canadian Trust Framework. The results show that all 10 attack scenarios were successfully mitigated and all 8 privacy properties passed with a strong privacy level. The performance evaluation shows that full round-trip verification achieved an average latency of 586.88 ms on a laptop, 684.11 ms on a PC, and 741.44 ms in a k3s environment over Tailscale. The decentralization evaluation shows that the 3-of-5 threshold governance mechanism can prevent single-party control, maintain epoch monotonicity, and preserve an appendonly audit log. The standards compliance evaluation achieved an effective score of 78%. These results indicate that the proposed architecture can improve security, privacy, and resistance to manipulation at the proof-of-concept level, although further performance optimization and production-scale testing are still required.
| Item Type: | Thesis (Other) |
|---|---|
| Uncontrolled Keywords: | Self-Sovereign Identity, Decentralized Identifier, Verifiable Credential, Tamper-Prevention, Desentralisasi, vention, Decentelization. |
| Subjects: | Q Science > QA Mathematics > QA76.9.A25 Computer security. Digital forensic. Data encryption (Computer science) |
| Divisions: | Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Information Technology > 59201-(S1) Undergraduate Thesis |
| Depositing User: | Dwiyasa Nakula |
| Date Deposited: | 20 Jul 2026 02:13 |
| Last Modified: | 20 Jul 2026 02:13 |
| URI: | http://repository.its.ac.id/id/eprint/135340 |
Actions (login required)
 |
View Item |