The European Digital Identity Wallet (EUDIW) introduced under eIDAS 2.0 will offer individuals a user-centric method for managing and controlling their digital identities, mirroring the principles of the self-sovereign identity model. By giving users control over their data, the digital identity wallets reduce reliance on identity providers and address privacy concerns in federated identity management systems. However, the adoption of these wallets introduces new challenges. Since users self-sovereign control their data, they could also play an important role in security incident response processes. However, current identity wallets lack user-friendly mechanisms for reporting security incidents, and research approaches do not target this issue. Hence, in this paper, we propose a step-wise conceptual design for reporting security incidents within a wallet. We first explore possible security incident response processes before defining suitable categories based on six expert interviews. Related to these findings, we present mockups that include a gamification element that was tested in a small qualitative user study. By giving the user guidance in reporting incidents, they gain more control, and that may increase trust in the wallets.
«The European Digital Identity Wallet (EUDIW) introduced under eIDAS 2.0 will offer individuals a user-centric method for managing and controlling their digital identities, mirroring the principles of the self-sovereign identity model. By giving users control over their data, the digital identity wallets reduce reliance on identity providers and address privacy concerns in federated identity management systems. However, the adoption of these wallets introduces new challenges. Since users self-sov...
»