Identosphere 155: RIP Vittorio • Using VCs to manage SSN# • Polyglots != interop • SD-JWTs in ACA-Py
You weekly guide to the latest news, events and other info related to the development and implementation of decentralized identity using Verifiable Credentials and related standards.
Identosphere’s Weekly Highlights
We Gather, You Read!
Still aggregating industry info: No Marketing or Sponsorship! Support by PayPal, or Patreon!
Upcoming
[Washington DC] Privacy Enhancing Technologies + Learner Controlled Verifiable Credentials Forum DXtera Institute 10/10
[Online] Building a Next Generation DID and VC System with Hyperledger Indy/Aries 10/11
[Germany] Self Sovereign Identity at Eclipse: Why, What, and How? 10/17 Eclipse Con
[FIDO] Authenticate 2023 Conference 10/16-18
[Barcelona] THEworldsummits Digital Universities_Europe 10/24 [DC4EU]
DIF Hackathon Pre-Registration Now Open! 10/26 [$19,000 prize pool]
[London] Newspeak House & Identosphere Digital Identity Social with Kaliya Young 11/02 in the evening.
[Prague] IETF 118 11/04-10 - lots of identity standards activity happening in this venue now - Kaliya will be attending.
[EU] DIGITAL HORIZONS 360 Sponsorship Invitation. Hospitality Technology Innovation 02/20-21 Spain
IdentityWoman on the Rubric Podcast about IIW and more! 2023-09-26 IdentityWoman
At IIW #36 Doc, Phil and I recorded this episode for Joe Andrieu’s Rubric Podcast.
we had introducing listeners to the people and technologies behind Decentralized Identity, including DID Methods, which determine how DIDs are created, read, updated, and deactivated.
We'll miss you, Vittorio. Rest in peace, my dear friend.
The world has lost a brilliant soul and a truly great person today. 10/08 Justin Richer
@vibronet shall ever remain a singular and unique in all the world.
[Vittorio’s Final Podcast] OAuth 2.0 Step Up Authentication Challenge Protocol with Vittorio Bertocci 2023-10-09 ID at the Center [Tweet]
Jim and Jeff talk with Vittorio Bertocci, Principal Architect at Auth0, an Okta product unit, about the new OAuth 2.0 Step Up Authentication Challenge Protocol (RFC9470), his health, and the first things we will do with Apple Vision Pro.
Hiring
[Bengaluru] Identity and Authentication Engineer, Senior Staff Affinidi “design, development, testing, implementation, and integration of IAM products, systems, and protocols”
[Remote] Sr. Solutions Engineer Polygon Labs
Explainer
[wAudio] Empowering Data Ownership: Self-Sovereign Identity Is Your Freedom 2023-10-06 Empeiria, HackerNoon
[explainer] The Digital Identity Balancing Act: Privacy for Convenience 2023-10-02 “didX, did:you know?”
[Podcast] The Role of Verifiable Credentials in Digital Identity with Riley Hughes, Trinsic 2023-09-27 Ubisecure
What we realised was that people were not using verifiable credentials as a replacement for a physical document, generally. Instead, what they were using it for, is – in the same way that a FinTech developer might use an open banking API
All eyes on your avatar: Negotiating privacy in the metaverse to come 2023-10-06 Atelier
There are three types of solutions attempting to tackle this space: centralised private identity wallets, decentralised self-sovereign identity (SSI) projects, and a range of semi-decentralised government digital identity projects that apply some of the same principles as SSI.
Research
[ERC-1056] A Novel Approach to Build Privacy and Trust in Vehicle Sales Using DID
We propose implementing JSON Web Tokens (JWT) to store the user encoded information locally and a private interplanetary file system (IPFS) to maintain encrypted and encoded vehicle data information for improved privacy. Additionally, the ERC-721 standard is used to tokenize the vehicle to create the digital twin. Finally, we add the VC to the digital twin
Strategy
People. Process. Product.:Three lenses to improve your digital strategy 2023-10-02 We are Open
the 3Ps are a series of lenses we use with clients to ensure that we’re thinking through projects holistically. Below, we give an introduction on how to use it in practice.
Zero Data 2023-10-05 Phil Windley
Like Zero Trust, Zero Data represents a paradigm that organizations can embrace to enhance their overall security posture. But the benefits go far beyond better security.
Impact Area – IDLab 2.0 develops talent and capacity in digital identity and credentials 2023-10-05 IDLab
What is capacity building for digital identity and credentials?
Developing talent and capacity across the public, private and non-profit sectors to foster trust is about providing these organizations with the knowledge and tools to properly approach, understand, and integrate digital identity and credentials into their operations.
Organization
Steering Committee Election Results 2023-10-02 DIF
Yodahe Zemichael, Executive Director at National ID Ethiopia, Ankur Banerjee, Chief Technology Officer at cheqd and Steve McCown, Chief Architect at Anonyome Labs have been elected as DIF's new Steering Committee members. We're also delighted to announce that Catherine Nabbala, Global Business Coordinator at Finema and Brent Zundel, Principal Cryptography Engineer at Gen have been re-elected to the Steering Committee.
[Podcast] Trust Spanning Protocol: Seven Key Pillars (with Drummond Reed) 2023-10-06 Northern Block
In this episode, Drummond Reed, Director, Trust Services at Gen Digital, gives a great overview of the Trust Spanning Protocol (TSP), through its 7 Key Pillars.
For listeners of the SSI Orbit Podcast, you may recall Drummond talking about the TSP on some previous episode (#41 & #45). These initial episodes still remain great primers on the topic. But since those last episodes, lots of work has been done
Government
Comparative Analysis of Technical and Legal Frameworks of Various National Digital Identity Solutions 2023-10-02 Montassar Naghmouchi, Maryline Laurent, Claire Levallois-Barth, Nesrine Kaaniche
Good Paper! Recomended Read
Through a comparative analysis of the technological and legal dimensions of a few selected national digital identity solutions currently being used in different countries, we highlight the diversity of technologies and architectures and the key role of the legal framework of a given digital identity solution. This position paper aims to help policy makers, software developers and concerned users understand the challenges of designing, implementing and using a national digital identity management system and establishing a legal framework for digital identity management, including personal data protection measures.
[WhitePaper] Digital Identity and the Public Sector: Using Verifiable Credentials to Manage Social Security 2023-10-03 Indicio
by requiring the SSN# to be presented in a verifiable credential, simply knowing a valid number will no longer be sufficient to compromise security.
[DPKI] The Homeland Security MDAV Project 2022-04-21 Lockstep
a practical demonstration of modern decentralised PKI built from standard X.509 standards and managed CA services. The private root PKI is hierarchical in that all certificates and issuing CAs chain together to a root CA (a hardware root of trust) but not dictatorial: every issuer within the MDAV family is autonomous over its own issuance policy (refer to the template master MDAV Certificate Policy). Firefighting bodies issue MDAV certificates to firefighters; paramedic bodies issue MDAV certificates to paramedics.
Policy
New York regulators falling short with Identity Proofing and Authentication 2023-10-03 Kantara Initiative
NIST’s Digital Guidelines are respected and referenced throughout the world so why does New York leave open the potential for ambiguous technology implementations which could be based on standards which are not parallel with efforts to support RON [Remote Online Notarization]?”
Smart Policy for Blockchain and Distributed Ledger Technology 2023-10-03 Hedera
Ultimately, good regulation of the crypto industry can support sustainable economic growth and financial inclusion around the world. Policy makers have the opportunity to shape the crypto industry so that it enables a better future for us all.
Web3
[Tweet Thread] A forever attestation, onchain via @eas_eth 2023-10-05 Balázs Némethi
"I, Brian Armstrong, have the most beautiful black hair, and here is my proof: bit.ly/my_black_hair”
Real World Assets (RWA) Identity
Fractional Ownership, RWA DAOs, and the Holy Grail 2023-09-26 Humanizing the Singularity, Mattereum
while we’ve made crucial partnerships with companies like NeoSwap and Crypto Real Estate this year, connecting to Swarm is the link that can really make things happen and act as a force multiplier for all these other partnerships, and for others we’ll make in the future.
The Road to RWA 2023-09-19 Humanizing the Singularity, Mattereum
If one person wanted to send a message to another, you did a key exchange, you encrypted the email, often at a command line on a Unix box, and then you would send an email. That seems like prehistory, but that’s really only 25 years ago, and from that we’ve basically gone through probably three or four major stages of building out the crypto ecosystem that we have today.
Standards Development
[tweet] Data on the Web 2023-09 Pierre-Antoine Champin, W3C TPAC
explained that several W3C groups are actively working on data-related Web standards: #RDFStar, #VerifiableCredentials, Dataset Exchange, #JSONLD, #WoT [video\slides\transcript]
Polyglots don’t lead to interoperability 2023-09 Theresa O’Conner
It’s common these days to specify data interchange formats as polyglots of JSON and JSON-LD. This specific kind of polyglot has particular costs that must be borne by users, authors, and implementors. [w3ctag/design-principles#239]
Open Source
Foundational Support for Selective Disclosure JWTs is now in Aries Cloud Agent Python 2023-10-05 Indicio
Selective Disclosure JSON Web Tokens (SD-JWTs) provide a key mechanism for selectively disclosing individual elements of a JSON object. Thanks to recent work by Indicio, this credential format has been added to Aries Cloud Agent Python (ACA-Py). Here’s what it means for you
Product
[tweet] integrate an ID wallet in your existing app with Dock’s powerful mobile SDK 2023-10-04 docknetwork
so that end-customers can securely store their #VerifiableCredentials
IDC Agent Community Edition has landed 2023-09-21 ID Crypt Global
we have now made available a Community Edition of our IDC Agent, available for download within the Microsoft Azure Marketplace now. IDC Agent – Microsoft Azure Marketplace
The Community Edition is a cloud-based ACA-Py compatible agent that deploys within your Microsoft Azure tenant.
IDENTITY ˈ/sɛlf ˈsɑv(ə)rɪn aɪˈdɛntɪti/ (SSI) Network State Protocol (NSP) Foundation
Interesting new Web3-ish site
Through United Networks SSID, individuals are able to verify their own identity elements,
and third parties can validate those elements with the SSI holder's permission
Using Open Recognition to Map Real-World Skills and Attributes 2023-10 Doug Belshaw, We are Open CoOp
This article expands on our recent posts about endorsement, offering a method for aligning Open Recognition with skills taxonomies. For example, “good listener” is reframed as “active listening”.
Needs SSI
It’s Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy Mozilla
Here’s state-wise list of fake universities 2023-10-03 The Indian Express h/t dhiwaynetworks
UGC identifies 'fake' institutions; with the advent of digital registries like those Dhiway could establish, verifiable credentials can enhance trust and modernize validation. [tweet]
[Optus Breach] The Best Way To Protect Personal Data? Not To Collect It 2022-11-28 David Birch, Forbes
Privacy
New Privacy Badger Prevents Google From Mangling More of Your Links and Invading Your Privacy 2023-09 Electronic Frontier Foundation
Who owns a facial match? 2023-10-06 Steve Wilson Lockstep
Kashmir Hill’s forceful new book “Your face belongs to us” sets out the challenges posed by facial recognition technology for privacy, personal safety, law and order, even national security. She expertly stakes out the territory, for which there is no clear way to best respond.
Fediverse
WordPress blogs can now be followed in the fediverse, including Mastodon 2023-09-14 Tech Crunch
WordPress’s support for ActivityPub follows a number of moves by other publishers to embrace the fediverse. Earlier this year, Medium announced it would launch its own Mastodon server and integrate with ActivityPub. Magazine app Flipboard also announced it was launching its own instance on flipboard.social and integrated with Mastodon so its users could follow Mastodon updates in the Flipboard app.
Teens Love LinkedIn To some high-schoolers burned out on FOMO and thirst traps, the networking platform is “the way social media should be.” 2023-10-06 TheCut
Other news from the land of networkdome…an eyebrow raiser.
Thanks for Reading
Read more \ Subscribe: newsletter.identosphere.net
Contact \ Submission: newsletter [at] identosphere [dot] net