Fine-Grained Personal Data Usage Control using Blockchain, Verifiable Credentials, and IRM Technologies

This article extends our previous publication, which focused on the user experience of our solution for injecting identity-wallet attributes into dynamic digital documents. Based on the feedback collected, we now shift the emphasis toward the challenges of access control and usage management associated with this personal data. To address the identified limitations, our architecture has been redesigned around a decentralized model, leveraging blockchain technology to strengthen transparency, traceability, and trust between parties. This evolution builds on our initial approach and makes the enforcement of user-defined permissions consistent and verifiable across wallets. The framework shows that fine-grained and interoperable access control on identity-enriched documents is feasible.