Rometsch, LeandroLeandroRometschLehwalder Philipp-FlorensHoang, Anh-TuAnh-TuHoangSchallmoser, DominikDominikSchallmoserSchulte, StefanStefanSchulte2025-12-192025-12-192025-10IEEE International Conference on Blockchain, Blockchain 2025https://hdl.handle.net/11420/60395Self-Sovereign Identity (SSI) frameworks enable individuals to receive and present digital credentials in a user-controlled way. Revocation mechanisms ensure that invalid or withdrawn credentials cannot be misused. These revocation mechanisms must be scalable (e.g., at national scale) and preserve core SSI principles such as privacy, user control, and interoperability. Achieving both is hard, and finding a suitable trade-off remains a key challenge in SSI research.This paper introduces UPPR, a revocation mechanism for One-Show Verifiable Credentials (oVCs) and unlinkable Anonymous Credentials (ACs). Revocations are managed using percredential Verifiable Random Function (VRF) tokens, which are published in a Bloom filter cascade on a blockchain. Holders prove non-revocation via a VRF proof for oVCs or a single Zero-Knowledge Proof for ACs. The construction prevents revocation status tracking, allows holders to stay offline, and hides issuer revocation behavior. We analyze the privacy properties of UPPR and provide a prototype implementation on Ethereum. Our implementation enables off-chain verification at no cost. On-chain checks cost 0.56–0.84 USD, while issuers pay only 0.00002–0.00005 USD per credential to refresh the revocation state.enSelf-Sovereign IdentityVerifiable CredentialAnonymous CredentialRevocationPrivacyComputer Science, Information and General Works::005: Computer Programming, Programs, Data and Security::005.7: DataConference Paper10.1109/blockchain67634.2025.00030Conference Paper