SIBERIA: A Self-Sovereign Identity and Multi-Factor Authentication Framework for Industrial Access
Source abstract
Abstract
The growing need for secure and privacy-preserving identity management in industrial environments has exposed the limitations of traditional, centralized authentication systems. In this context, SIBERIA was developed as a modular solution that empowers users to control their own digital identities, while ensuring robust protection of critical services. The system is designed in alignment with European standards and regulations, including EBSI, eIDAS 2.0, and the GDPR. SIBERIA integrates a Self-Sovereign Identity (SSI) framework with a decentralized blockchain-based infrastructure for the issuance and verification of Verifiable Credentials (VCs). It incorporates multi-factor authentication by combining a voice biometric module, enhanced with spoofing-aware techniques to detect synthetic or replayed audio, and a behavioral biometrics module that provides continuous authentication by monitoring user interaction patterns. The system enables secure and user-centric identity management in industrial contexts, ensuring high resistance to impersonation and credential theft while maintaining regulatory compliance. SIBERIA demonstrates that it is possible to achieve both strong security and user autonomy in digital identity systems by leveraging decentralized technologies and advanced biometric verification methods.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: User Authentication and Security Systems · Biometric Identification and Security · Digital Media Forensic Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Digital Security Department, Fundación Vicomtech, Basque Research and Technology Alliance (BRTA), Mikeletegi 57, 20009 Donostia-San Sebastian, Spain
Aragon Institute for Engineering Research, University of Zaragoza, Mariano Esquillor, 50018 Zaragoza, Spain
Funding
Vicomtech
References (78)
Show source-provided references
1. Preukschat, A., and Reed, D. (2021). Self-Sovereign Identity, Manning Publications.
2. Biometric authentication: A review
3. Wagner, K., Némethi, B., Renieris, E., Lang, P., Brunet, E., and Holst, E. (2018). Self-Sovereign Identity: A Position Paper on Blockchain Enabled Identity and the Road Ahead, Blockchain Bundesverband.
4. A survey on essential components of a self-sovereign identity10.1016/j.cosrev.2018.10.002 ↗
5. A survey of self-sovereign identity ecosystem10.1155/2021/8873429 ↗
6. Allende López, M. (2025, May 14). Self-Sovereign Identity: The Future of Identity: Self-Sovereignity, Digital Wallets, and Blockchain. Available online: https://publications.iadb.org/en/self-sovereign-identity-future-identity-self-sovereignity-digital-wallets-and-blockchain.
7. World Wide Web Consortium (W3C) (2025, May 14). Decentralized Identifiers (DIDs) v1.0. Available online: https://www.w3.org/TR/did-core/.
8. Michalopoulos, F., Misiakoulis, G., Vavilis, S., Niavis, H., and Loupos, K. (2024, January 25–27). A Verifiable Data Registry for Secure and Scalable Decentralised Identity Management in the IoT Context. Proceedings of the International Symposium on Distributed Computing and Artificial Intelligence, Salamanca, Spain.10.1007/978-3-031-76459-2_25 ↗
9. Sporny, M., Longley, D., Chadwick, D., Kellogg, G., and Herman, I. (2025, May 17). Verifiable Credentials Data Model 2.0. W3C Recommendation. Available online: https://www.w3.org/TR/vc-data-model-2.0/.
10. European Commission (2025, May 14). European Blockchain Services Infrastructure (EBSI). Available online: https://ec.europa.eu/digital-building-blocks/sites/display/EBSI.
11. Čučko, Š., Keršič, V., and Turkanović, M. (2023). Towards a Catalogue of Self-Sovereign Identity Design Patterns. Appl. Sci., 13.10.3390/app13095395 ↗
12. Blockchain-enabled decentralized identity management: The case of self-sovereign identity in public transportation10.1016/j.bcra.2021.100014 ↗
13. Fedrecheski, G., Rabaey, J.M., Costa, L.C., Ccori, P.C.C., Pereira, W.T., and Zuffo, M.K. (2020, January 3). Self-sovereign identity for IoT environments: A perspective. Proceedings of the 2020 Global Internet of Things Summit (GIoTS), Dublin, Ireland.10.1109/GIOTS49054.2020.9119664 ↗
14. Belchior, R., Putz, B., Pernul, G., Correia, M., Vasconcelos, A., and Guerreiro, S. (2020–1, January 29). SSIBAC: Self-sovereign identity based access control. Proceedings of the 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), Guangzhou, China.10.1109/TrustCom50675.2020.00264 ↗
15. Self-sovereign identity for healthcare using blockchain10.1016/j.matpr.2021.03.083 ↗
16. SelfKey Foundation (2025, July 15). SelfKey. Available online: https://selfkey.org/.
17. The inevitable rise of self-sovereign identity
18. (2025, July 15). lifeID. Available online: https://lifeid.io/.
19. (2025, July 14). Evernym. Available online: https://github.com/evernym.
20. Hyperledger Foundation (2025, July 16). Hyperledger Indy. Available online: https://www.hyperledger.org/projects/hyperledger-indy.
21. EverID Project (2025, July 14). EverID. Available online: https://app.everpay.io/.
22. ISA Global Cybersecurity Alliance (ISAGCA) (2025, July 21). ISA/IEC 62443 Series of Standards. Available online: https://isagca.org/isa-iec-62443-standards.
23. Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., Lightman, S., Hahn, A., Saravia, S., Sherule, A., and Thompson, M. (2022). Guide to Operational Technology (OT) Security, Special Publication NIST SP 800-82 Rev. 3.10.6028/NIST.SP.800-82r3.ipd ↗
24. Microsoft (2025, April 18). OT Cloud Enablement—Azure Active Directory Tenant. Available online: https://techcommunity.microsoft.com/blog/azurearchitectureblog/ot-cloud-enablement-%E2%80%93-azure-active-directory-tenant/3707898.
25. Goel, A., and Rahulamathavan, Y. (2024). A comparative survey of centralised and decentralised identity management systems: Analysing scalability, security, and feasibility. Future Internet, 17.10.3390/fi17010001 ↗
26. Hardt, D. (2025, May 11). The OAuth 2.0 Authorization Framework. RFC 6749. Available online: https://www.rfc-editor.org/info/rfc6749.
27. Sekar, R.R., Masna, A., Sharma, S., Abraham, A., and Pagilla, P.R. (2024, January 3–4). Decentralized identity and access management (IAM) using blockchain. Proceedings of the 2024 International Conference on Intelligent Systems for Cybersecurity (ISCS), Gurugram, India.10.1109/ISCS61804.2024.10581159 ↗
28. Use of blockchain technology to strengthen identity and access management (IAM)
29. Automatic speaker verification systems and spoof detection techniques: Review and analysis10.1007/s10772-021-09876-2 ↗
30. Speaker recognition based on deep learning: An overview10.1016/j.neunet.2021.03.004 ↗
31. Deep speaker embeddings for speaker verification: Review and experimental comparison10.1016/j.engappai.2023.107232 ↗
32. Snyder, D., Garcia-Romero, D., Sell, G., Povey, D., and Khudanpur, S. (2018, January 15–20). X-vectors: Robust dnn embeddings for speaker recognition. Proceedings of the 2018 IEEE international conference on acoustics, speech and signal processing (ICASSP), Calgary, AB, Canada.10.1109/ICASSP.2018.8461375 ↗
33. Desplanques, B., Thienpondt, J., and Demuynck, K. (2020). Ecapa-tdnn: Emphasized channel attention, propagation and aggregation in tdnn based speaker verification. arXiv.10.21437/Interspeech.2020-2650 ↗
34. Koluguri, N.R., Park, T., and Ginsburg, B. (2022, January 22–27). Titanet: Neural model for speaker representation with 1d depth-wise separable convolutions and global context. Proceedings of the ICASSP 2022–2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), Singapore.10.1109/ICASSP43922.2022.9746806 ↗
35. Kanagasundaram, A., Vogt, R., Dean, D., and Sridharan, S. (2012, January 25–28). PLDA based speaker recognition on short utterances. Proceedings of the Speaker and Language Recognition Workshop: Odyssey 2012, Singapore.
36. Spoofing and countermeasures for speaker verification: A survey10.1016/j.specom.2014.10.005 ↗
37. Guo, H.H., Hu, Y., Liu, K., Shen, F.Y., Tang, X., Wu, Y.C., Xie, F.L., Xie, K., and Xu, K.T. (2024). Fireredtts: A foundation text-to-speech framework for industry-level generative speech applications. arXiv.
38. Sahidullah, M., Delgado, H., Todisco, M., Nautsch, A., Wang, X., Kinnunen, T., Evans, N., Yamagishi, J., and Lee, K.A. (2023). Introduction to voice presentation attack detection and recent advances. Handbook of Biometric Anti-Spoofing: Presentation Attack Detection and Vulnerability Assessment, Springer.10.1007/978-981-19-5288-3_13 ↗
39. Speech Arena (2025, May 03). Speech DeepFake Leaderboard. Available online: https://huggingface.co/spaces/Speech-Arena-2025/Speech-DF-Arena.
40. Jung, J.w., Tak, H., Shim, H.j., Heo, H.S., Lee, B.J., Chung, S.W., Yu, H.J., Evans, N., and Kinnunen, T. (2022). SASV 2022: The first spoofing-aware speaker verification challenge. arXiv.10.21437/Interspeech.2022-11270 ↗
41. Council, E. (2025, May 02). Directive 2016/680 of the European Parliament and of the Council on the Protection of Individuals with Regard to the Processing of Personal Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties, and on the Free Movement of Such Data, and Repealing Council Framework Decision 2008/977/JHA. Available online: https://eur-lex.europa.eu/eli/dir/2016/680/oj.
42. (2022). Information Security, Cybersecurity and Privacy Protection—Biometric Information Protection (Standard No. ISO/IEC 24745:2022). Available online: https://www.iso.org/standard/75302.html.
43. Nautsch, A., Isadskiy, S., Kolberg, J., Gomez-Barrero, M., and Busch, C. (2018). Homomorphic encryption for speaker recognition: Protection of biometric templates and vendor model parameters. arXiv.10.21437/Odyssey.2018-3 ↗
44. Botelho, C., Teixeira, F., Rolland, T., Abad, A., and Trancoso, I. (2020). Pathological speech detection using x-vector embeddings. arXiv.
45. Rahulamathavan, Y. (2022). Privacy-preserving similarity calculation of speaker features using fully homomorphic encryption. arXiv.
46. Baig, A.F., and Eskeland, S. (2021). Security, Privacy, and Usability in Continuous Authentication: A Survey. Sensors, 21.10.3390/s21175967 ↗
47. Verma, A., Moghaddam, V., and Anwar, A. (2022). Data-Driven Behavioural Biometrics for Continuous and Adaptive User Verification Using Smartphone and Smartwatch. Sustainability, 14.10.3390/su14127362 ↗
48. A Supervised ML Biometric Continuous Authentication System for Industry 4.010.1109/TII.2022.3171321 ↗
49. Madavarapu, J.B., Mittal, M., Salagrama, S., Adnan, M.M., Rana, A., and Yadav, K. (2024, January 9–11). Behavioral Biometrics Authentication Systems: Leveraging Machine Learning for Enhanced Cybersecurity. Proceedings of the 2024 International Conference on Communication, Computer Sciences and Engineering (IC3SE), Gautam Buddha Nagar, India.10.1109/IC3SE62002.2024.10593247 ↗
50. HMOG: New Behavioral Biometric Features for Continuous Authentication of Smartphone Users10.1109/TIFS.2015.2506542 ↗
51. Evaluation of Deep Learning Models for Continuous Authentication Using Behavioral Biometrics10.1016/j.procs.2023.10.115 ↗
52. Continuous Mobile User Authentication Using a Hybrid CNN-Bi-LSTM Approach
53. ACBM: Attention-based CNN and Bi-LSTM model for continuous identity authentication10.1088/1742-6596/2352/1/012005 ↗
54. Mekruksavanich, S., and Jitpattanakul, A. (2021). Deep Learning Approaches for Continuous Authentication Based on Activity Patterns Using Mobile Sensing. Sensors, 21.10.3390/s21227519 ↗
55. Cheon, J.H., Costache, A., Moreno, R.C., Dai, W., Gama, N., Georgieva, M., Halevi, S., Kim, M., Kim, S., and Laine, K. (2021). Introduction to homomorphic encryption and schemes. Protecting Privacy through Homomorphic Encryption, Springer.10.1007/978-3-030-77287-1_1 ↗
56. (2025, April 06). Microsoft SEAL (Release 4.1). Microsoft Research: Redmond, WA, USA. Available online: https://github.com/Microsoft/SEAL.
57. (2025, April 16). Vault. Hashicorp. Available online: https://developer.hashicorp.com/vault.
58. Martín-Doñas, J.M., Rosello, E., Gomez, A.M., Álvarez, A., López-Espejo, I., and Peinado, A.M. (2024, January 31). ASASVIcomtech: The Vicomtech-UGR speech deepfake detection and SASV systems for the ASVspoof5 Challenge. Proceedings of the ASVspoof, Kos, Greece.10.21437/ASVspoof.2024-21 ↗
59. Bayesian hmm clustering of x-vector sequences (vbx) in speaker diarization: Theory, implementation and analysis on standard tasks10.1016/j.csl.2021.101254 ↗
60. Nagrani, A., Chung, J.S., and Zisserman, A. (2017, January 20–24). VoxCeleb: A Large-Scale Speaker Identification Dataset. Proceedings of the INTERSPEECH, Stockholm, Sweden.10.21437/Interspeech.2017-950 ↗
61. Chung, J., Nagrani, A., and Zisserman, A. (2018, January 2–6). VoxCeleb2: Deep speaker recognition. Proceedings of the INTERSPEECH, Hyderabad, India.10.21437/Interspeech.2018-1929 ↗
62. Fan, Y., Kang, J., Li, L., Li, K., Chen, H., Cheng, S., Zhang, P., Zhou, Z., Cai, Y., and Wang, D. (2020, January 4–8). Cn-celeb: A challenging chinese speaker recognition dataset. Proceedings of the ICASSP, Virtual.10.1109/ICASSP40776.2020.9054017 ↗
63. (2025, May 04). VBHMM: X-Vectors Diarization. Available online: https://github.com/BUTSpeechFIT/VBx/tree/master/VBx/models/ResNet101_16kHz.
64. Babu, A., Wang, C., Tjandra, A., Lakhotia, K., Xu, Q., Goyal, N., Singh, K., Von Platen, P., Saraf, Y., and Pino, J. (2021). XLS-R: Self-supervised cross-lingual speech representation learning at scale. arXiv.10.21437/Interspeech.2022-143 ↗
65. Martín-Doñas, J.M., Álvarez, A., Rosello, E., Gómez, Á.M., and Peinado, A.M. (2024, January 1–5). Exploring Self-supervised Embeddings and Synthetic Data Augmentation for Robust Audio Deepfake Detection. Proceedings of the INTERSPEECH, Kos, Greece.10.21437/Interspeech.2024-942 ↗
66. ASVspoof 2019: Spoofing countermeasures for the detection of synthesized, converted and replayed speech10.1109/TBIOM.2021.3059479 ↗
67. Asvspoof 2021: Towards spoofed and deepfake speech detection in the wild10.1109/TASLP.2023.3285283 ↗
68. Müller, N.M., Kawa, P., Choong, W.H., Casanova, E., Gölge, E., Müller, T., Syga, P., Sperl, P., and Böttinger, K. (July, January 30). Mlaad: The multi-language audio anti-spoofing dataset. Proceedings of the 2024 International Joint Conference on Neural Networks (IJCNN), Yokohama, Japan.10.1109/IJCNN60899.2024.10650962 ↗
69. Casanova, E., Weber, J., Shulby, C.D., Junior, A.C., Gölge, E., and Ponti, M.A. (2022, January 17–23). Yourtts: Towards zero-shot multi-speaker tts and zero-shot voice conversion for everyone. Proceedings of the International Conference on Machine Learning, Baltimore, ML, USA.
70. One-class learning towards synthetic voice spoofing detection10.1109/LSP.2021.3076358 ↗
71. Wang, X., Delgado, H., Tak, H., Jung, J.w., Shim, H.j., Todisco, M., Kukanov, I., Liu, X., Sahidullah, M., and Kinnunen, T.H. (2024, January 31). ASVspoof 5: Crowdsourced speech data, deepfakes, and adversarial attacks at scale. Proceedings of the ASVspoof, Kos, Greece.10.21437/ASVspoof.2024-1 ↗
72. Shim, H.J., Jung, J.W., Kinnunen, T., Evans, N., Bonastre, J.F., and Lapidot, I. (2024, January 18–21). a-DCF: An architecture agnostic metric with application to spoofing-robust speaker verification. Proceedings of the ODYSSEY 2024, the Speaker and Language Recognition Workshop, Quebec City, QC, Canada.10.21437/odyssey.2024-23 ↗
73. Villalba, J.A., Feng, T., Thebaud, T., Lee, J., Narayanan, S., and Dehak, N. (2024, January 31). The SHADOW team submission to the ASVSpoof 2024 Challenge. Proceedings of the Automatic Speaker Verification Spoofing Countermeasures Workshop (ASVspoof 2024), Kos, Greece.10.21437/ASVspoof.2024-6 ↗
74. Kurnaz, O., Demirtaş, S.C., Büker, A., Mishra, J., and Hanilçi, C. (2024). Spoofing-Robust Speaker Verification Using Parallel Embedding Fusion: BTU Speech Group’s Approach for ASVspoof5 Challenge. arXiv.10.21437/ASVspoof.2024-20 ↗
75. Rohdin, J., Zhang, L., Oldřich, P., Staněk, V., Mihola, D., Peng, J., Stafylakis, T., Beveraki, D., Silnova, A., and Brukner, J. (2024, January 31). BUT systems and analyses for the ASVspoof 5 Challenge. Proceedings of the ASVspoof 2024, Kos, Greece.10.21437/ASVspoof.2024-4 ↗
76. Aliyev, A., and Kondratev, A. (2024, January 31). Intema system description for the ASVspoof5 Challenge: Power weighted score fusion. Proceedings of the ASVspoof 2024, Kos, Greece.10.21437/ASVspoof.2024-22 ↗
77. Duroselle, R., Boeffard, O., Courtois, A., Nourtel, H., Champion, P., Agnoli, H., and Bonastre, J.F. (2024, January 31). Data augmentations for audio deepfake detection for the ASVspoof5 closed condition. Proceedings of the ASVspoof Workshop 2024, Kos, Greece.10.21437/ASVspoof.2024-3 ↗
78. Falez, P., and Marteau, T. (2024, January 31). Whispeak speech deepfake detection systems for the ASVspoof5 Challenge. Proceedings of the ASVspoof 2024, Kos, Greece.10.21437/ASVspoof.2024-5 ↗