## 1 Introduction
In the realm of digital identity, the INCOGNITO project endeavors to establish identity verification through privacy-preserving credentials, enabling anonymous access to online services [18]. Additionally, another report introduces a comprehensive architectural framework for a privacy-preserving biometrically secured electronic document system. This system could substantially enhance privacy protection by incorporating an additional layer of authentication based on an individual's distinctive physical characteristics [19]. Decentralized identity (DID) [20; 21; 22; 23] is prevalently employed in privacy-preservation schemes owing to its confinement of autonomous data governance upon individuals. CanDID [24] represents the introduction of an identity system dedicated to the issuance and management of credentials, complemented by a key recovery mechanism. [PERSON] et al. proposed a system [25] that integrated decentralized identity (DID) identifiers, DID communication, and verifiable credentials (VCS) for comprehensive identity management. Furthermore, the system incorporated the Cheon-Kim-Kim-Song (CKKS) fully homomorphic encryption (FHE) scheme for control calculations. With NYM credentials [26], anonymous authentication credentials are implemented, establishing an identity system that prioritizes user privacy. [PERSON] et al. [27] presented a distributed ledger technology-based framework for IoT device identity and trust, incorporating a Web of Trust (WOT) scheme to facilitate automatic trust ratings for diverse identities. [PERSON] et al. [28] proposed a decentralized personal data management system, guaranteeing that users retain control over their private data. [PERSON] et al. proposed a protocol [29] that encrypts communication between parties, aiming to mitigate transactional privacy breaches on public blockchain networks. Zether [30] employed encrypted smart contracts to safeguard public privacy files using public and private key mechanisms. BE-RAN [31] offered user-centric identity management for user equipment (UE) and RAN units, ensuring mutual authentication across all entities. However, it can be concluded from the above analysis that there are two problems with the extant schemes: the first pertains to users' proclivity for executing recurrent transactions through a single account and the second involves an absence of stringent control over user data access. As a result, the extant schemes are ineffective in countering the dilemma of internal privacy breaches. Internal privacy issues mainly consist of insider maleficence, which refers to the threat posed by individuals within an organization who misuse their authorized access to the company's systems or information for malicious purposes. This threat involves logistics staff, such as warehouse employees or administrators, misusing their access to sensitive customer data or shipment details. Employees with varying levels of privilege, including IT administrators or network operators, might abuse their access rights to gain unauthorized entry into critical systems, compromising the confidentiality and integrity of sensitive logistics data. This paper proposes a novel privacy-preserving scheme designed to obviate internal logistics data breaches through the utilization of one-time-use accounts and attribute-based encryption. Expanding upon the foundation of decentralized identity, this scheme particularly redresses the quandary of privacy breaches engendered by single accounts and access control deficiencies. In the inception phase of the scheme, the identity provider engenders stochastic, transient, one-time-use accounts that serve as proxies for the user's actual address. A one-time-use account constitutes a provisional virtual identifier that lapses into obsolescence post single utilization, thereby safeguarding against the prolonged storage or manipulation of logistical information. The scheme incorporates CP-ABE to safeguard account information by typifying access permissions predicated on specific attribute conditions.