A model for digital identity in which individuals fully control their own identity data without depending on a central authority, often leveraging decentralised technologies.
Self-Sovereign Identity (SSI) is a model and movement in digital identity that places the individual at the centre of identity management. Under SSI principles, individuals create, own, and control their identity credentials without depending on any single centralised authority or intermediary. The core tenets of SSI include user control and consent, minimal disclosure, portability, and interoperability.
Technically, SSI ecosystems typically rely on Decentralized Identifiers (DIDs), Verifiable Credentials (VCs), and distributed ledger or peer-to-peer technologies to enable trust without centralised identity providers. The relationship between SSI and eIDAS 2.0 is complex and often debated.
On one hand, the EUDIW embodies several SSI principles: it gives holders control over their data, supports selective disclosure, and enables privacy-preserving interactions with relying parties. The wallet architecture follows the issuer-holder-verifier triangle that is central to SSI. On the other hand, the eIDAS 2.
0 framework is fundamentally anchored in government-issued identity (PID) and a regulated trust model (QTSPs, Trusted Lists, supervisory bodies), which departs from the fully decentralised, authority-independent vision of pure SSI. The ARF has also chosen specific credential formats (SD-JWT, mdoc) and protocols (OpenID4VC) over more SSI-native technologies (like DIDComm or W3C VC Data Model with JSON-LD). Some in the SSI community view eIDAS 2.
0 as a pragmatic implementation of SSI principles within a regulatory context, while others see it as a parallel but distinct approach. For organisations, understanding SSI provides valuable context for the design philosophy behind the EUDIW, even if the specific technology choices differ from a pure SSI stack.
Related Terms
Decentralized Identifier (DID)
A globally unique identifier that can be resolved to a DID document containing public keys and service endpoints, enabling verifiable, self-sovereign digital identity without a central registry.
Technical StandardsVerifiable Credential (VC)
A tamper-evident, cryptographically signed digital credential that can be verified without contacting the issuer, enabling decentralised trust in digital identity systems.
Technical StandardsEuropean Digital Identity Wallet (EUDIW)
A mobile application that every EU Member State must provide to citizens and residents, enabling them to store and present digital identity credentials and attestations across borders.
Digital IdentitySelective Disclosure
A privacy-enhancing capability that allows a credential holder to present only specific attributes from a credential rather than the entire dataset.
Digital Identity