Identosphere 188: Technical Standards Underpinning ARF • SSI and Account Abstraction • New Draft of American Privacy Rights Act
You weekly guide to the latest news events and other info surrounding development and implementation of decentralized identity and verifiable credentials. Thanks for your continued support.
Identosphere’s Weekly Highlights
We Gather, You Read!
We’re still aggregating industry info.
Thanks for supporting our efforts by PayPal \ Patreon
Coming Up
[Wayne Chang, SpruceID; Chris Eckl, Condatis, Sitekit; Eric Scouten, Adobe’s CAI, Dr. Carsten Stöcker, Spherity; Marie Wallace, Accenture] Panel: Decentralized Identity in Production 2024-06-07 Kuppinger Cole
[Amsterdam] Identity Week Europe 06/11-12 (Kaliya is attending)
[Switzerland] Digital Identity unConference Europe 06/18-20 *Sold Out!*
[Portugal] Open Identity Summit: Research, Experience and Innovation 06/20-21
[ARES Conference] International Workshop on Emerging Digital Identities Event 07/30-08/02
[California] DWebCamp 08/07-10
[South Africa] DID UnConf: Africa 09/25-27 REGISTRATION IS OPEN!!!
Technical Standards Underpinning ARF: Open Wallet Foundation
(please note - attendees must register for each session individually)
ARF Part 1: OpenID4VP 6/10 - which defines a protocol for requesting and presenting Digital Credentials
ARF Part 2: OpenID4VCI 6/12 - which defines an API for the issuance of Digital Credentials.
Hiring
Associate Mobile Engineer (Remote) - Indicio 2024-05-28 Frances Donegan-Ryan; indicio.tech
be responsible for writing code that will become a part of the products and solutions we deliver to customers.
Standards
[great talk] Using Standards: Some Assembly Required – Mike Jones: self-issued Mike Jones; self-issued.info
Standards contain choices about dimensions of screw threads, nut sizes, etc., enabling a marketplace of interoperable parts from multiple suppliers. Without these choices, every part would be custom-manufactured. The same is true of the identity and security standards we use to build the Identity Engine. However, the identity and security standards at our disposal differ wildly in the degree to which they do and don’t make choices.
Technology is not neutral – the worldviews behind digital identity standards What does a technical standard “feel” like? 2024-05-02 Fundingbox.com
One thing that bothers me is that in the current EU Digital Wallet’s Architecture Reference Framework (ARF) and the various large-scale pilot projects, the technologies that seem to be most popular are consistently the ones that are “simpler” but “feel” less decentralized, i.e. using the examples from this article, OID4VC (not DIDComm), SD-JWT VC (not W3C VCDM), and “cnf” claim (not DIDs).
PKI Is For Machines and Not Humans: Key Event Receipt Infrastructure (KERI) 2023-08-28 Prof Bill Buchanan Obe Frse; medium.com
I repeat PKI is a sticking plaster for the security of the Internet. We need to find better ways to break the centralised approach to trust and move towards giving citizens the right to manage their own identity. KERI is, at least, one step forward in our thinking. Go and read the white paper, and make up your own mind. Our digital world is not black-or-white … it has many shades.
Specification to unite decentralized identity schemes opens door to new applications 2024-05-30 Biometric Update
IDunion’s tech stack 1.0 allowed credentials and other messages to be exchanged, while OpenID’s protocols do not support messages. “You cannot transfer arbitrary data,” Philipp says. That feature is useful for a whole range of use cases, however.
Improved biometric security sought by new FIDO Alliance certification www.scmagazine.com
Open authentication standards industry group FIDO Alliance has moved to strengthen biometric security amid concerns regarding bias and security threats with its new Face Verification Certification program that uses at least 10,000 tests for biometric performance evaluations, reports SiliconAngle.
Government
[Bhutan] ToIP Lauds Bhutan’s Emerging Digital Identity Program findbiometrics.com
A new report on Bhutan’s National Digital Identity (NDI) system, developed in collaboration with the Trust over IP (ToIP) Foundation, offers an illuminating review of one of the world’s pioneering digital trust ecosystems.
Case Study Details Bhutan’s Pioneering Digital ID Effort 2024-05-28 mobileidworld
[USA] House subcommittee OKs new draft of privacy bill 2024-05-29 SCmagazine
House Subcommittee on Innovation, Data, and Commerce lawmakers have approved an overhauled draft of the American Privacy Rights Act, which would not only provide additional data collection, retention, and utilization restrictions for U.S. businesses but also impose updated reporting requirements, reports CyberScoop.
DC4EU Newsletter mailchi.mp
We will continue to refine and improve the deliverable that deals with the DC4EU ecosystem governance framework. The aim is to extend the scope to cover social security domain, and to take into account the ecosystem-related topics from the Education and Professional Qualifications Business Blueprint and Social Security Business Blueprint. Additional we consider it necessary to include the synergies with SDG/OOTS and updates to the EBSI governance-related topics.
Europe
[EU, Video] Procivis AG on LinkedIn: New: Procivis One Trial Environment www.linkedin.com
With Procivis One, you can utilize its different components to develop any use case and model your business processes according to the upcoming European eIDAS 2.0 and Swiss E-ID requirements.
Europe creates Europeum, an EDIC to move the EBSI network 2024-05-30 Catalina Elidafamo; observatorioblockchain.com
The European Blockchain Services Infrastructure (EBSI) will move to a European Digital Infrastructure Consortium (EDIC), called Europeum, which will allow the EBSI network to go into full production. This is what EBSI has communicated in its X profile . An EDIC is a legal framework that helps member states establish and execute projects. The organization indicates that its vibrant “EBSI Early Adopter” ecosystem is ready to go into production.
EU battery passport: Navigating interoperability and data security 2024-05-28 SLRConsulting
A battery system is not only designed to create a battery passport but is also needed to track and manage the lifecycle of batteries. Its success depends on the interoperability and seamless interaction between platforms, protocols, and data formats, representing the ability of different systems, devices, or applications to communicate and exchange data effectively.
[with Video] Exploring Challenges and Insights in Digital Identity Adoption and Interoperability: Lessons from EU and Canada 2024-05-03 3cl.org
EBSI-CAN highlights the complex terrain of digital identity adoption and interoperability. By harnessing collective technical expertise and fostering cross-border collaboration, we may be able to edge closer towards a future where digital identities seamlessly transcend borders, unlocking new frontiers of innovation and opportunity.
Organization
The Business Case for Working Openly and Transparently 2024-05-28 Doug Belshaw; blog.weareopen.coop
The evidence is clear: open working leads to greater agility, faster innovation, and increased engagement. Members of your organisation are more capable of working toward goals in unison and with shared vision. Ideas from both inside and outside the organisation receive more equitable consideration. Members clearly see connections between their particular activities and an organisation’s overarching values, mission, and spirit.
Creative Rights Initiative wacom
The purpose of the CRI is to give artists around the world permanent, incorruptible proof of authorship. This is achieved by providing each artwork with a unique digital ID that does not require verification by a third-party to prove its authenticity.
Explainer
[explainer - Vlog] Balancing Human Privacy, Security, and Convenience in Digital Identity Systems 2024-05-29 blog.holochain.org
Learn with Mary Camacho and Kim Hamilton Duffy about how decentralized solutions offer a promising alternative.
Research
Unveiling the Power of Self-Sovereign Identity and Account Abstraction for Privacy-Preserving User Operations 2024-05-20 ethresear.ch
This research explores the innovative integration of Self-Sovereign Identity (SSI) systems with Account Abstraction (AA) to enhance privacy, compliance, and user experience on the Ethereum blockchain. By leveraging verifiable credentials (VCs) and Ethereum attestations (EAs), the proposed framework empowers bundlers to pre-validate transactions, reducing on-chain reverts and penalties. The implementation of Merkle proofs and Zero-Knowledge Proofs (ZKPs) ensures efficient data processing and minimal disclosure, addressing both scalability and security concerns.
Selective disclosure in digital credentials: A review 2024-05-29 Šeila Bećirović Ramić, Ehlimana Cogo, Irfan Prazina, Emir Cogo, Muhamed Turkanović b, Razija Turčinhodžić Mulahasanović, Saša Mrdović
This paper gives an overview of the most influential articles for selective disclosure, a chronology of the evolution of the methods, and a list of strategies and approaches to the problem. We identify the categories of approaches and their advantages and disadvantages. In addition, we recognize research gaps and open challenges and provide potential future directions.
Company Stories
Meet the SpruceID Team: Arjen van Veen 2024-05-29 blog.spruceid.com
I’m a software engineer at SpruceID, working, among others, on open standards implementations such as the OpenID family and the ISO 18013-x specifications. I’m excited that some of our Rust libraries are already open-source and open for anyone to use, even if you still need to be somewhat of an expert to get started.
Inside Bluesky’s Engineering Culture Gergely Orosz; newsletter.pragmaticengineer.com
Bluesky is a promising decentralized Twitter-alternative. Founded two years ago, the company received $13M in funding from Twitter in 2021. Today, it employs 12 software engineers, with more than 5 million users a year on from its invite-only beta launch.
Not SSI
[AI] The People’s AI 2024-05-28 Doc Searls
People need their own AIs. Personally and collectively. We won’t get them from Anthropic, Apple, Google, OpenAI, Meta, or Microsoft. Not even from Apple. All those companies will want to prov…
[ID] Human joinhuman.com
Your face and key grant access to your ID and data, and your ID can be verified without sharing anything about you.
[Tech Books] Rest of World’s 2024 reading guide 2024-05-28 Ravi Hiranand, Claudia Urquieta, Daniela Dib, Russell Brandom; restofworld.org
Global tech leaders share 12 books to add to your must-read pile.
[Survey Results] Remote ID Verification: Bringing Confidence to Biometric Systems - Consumer Insights 2024 2024-05-29 fidoalliance.org
This eBook reveals the trends discovered by an independent study of 2,000 respondents across the U.S. and the U.K. to understand consumer perception towards remote identity verification, online security, and biometrics.
Thanks for Reading
Read more \ Subscribe: newsletter.identosphere.net
Contact \ Submission: newsletter [at] identosphere [dot] net