Identosphere 198: States Need Stronger Identity • Govt. Investment in ID Delivers Growth • DID method standardization
newsletter.identosphere.net
Identosphere 198: States Need Stronger Identity • Govt. Investment in ID Delivers Growth • DID method standardization
Weekly edition of the latest Self Sovereign Identity related news, development, upcoming events, and thoughtful commentary from the blog-o-sphere. Thanks for your continued support.
Lots of businesses, such as plumbers and law enforcement, use MySudo to separate their professional from their personal communications: “The end-to-end encrypted functionality of MySudo is [particularly] useful for law enforcement,” Dr Ashley explained.
This is what gives airlines, airports, and border control the confidence to enable seamless check in, boarding, and border crossing: The data in the DTC has been authenticated and is now fully portable and instantly verifiable. And because of the way verifiable credentials use cryptography and digital signatures, this information has been digitally sealed in such a way that if someone tried to alter it, it would be easily spotted.
The first edition of this report and the third report in the Digital Identity Series, this report includes a review of current global adoption, market analysis including key drivers and barriers for adoption, technology analysis, important technology suppliers and services providers operating in this sector and forecasts for users, biometric sensors, transactions, and revenue within the six-year period 2024 to 2029.
The National Institute of Standards and Technology (NIST) recommends against using KBA because fraudsters have gotten too adept at answering KBA questions. [...] More than half of constituents surveyed said they are “somewhat concerned,” “fairly concerned” or “very concerned” about the potential for fraud resulting from online interactions with state government.
Attached is the introduction for a series of articles on how the business case and economic benefits of Digital ID systems can be considered, and we will look at how these benefits may be impacted (positively or negatively) by choices made in areas such as standards, technology, legislature and governance.
--> Certification requirements for the conformity of Digital Identity Wallets --> Standardized protocols and interfaces to ensure cross-border interoperability --> Core functionalities and integrity guidelines for seamless use across Member States --> Establishing a Trust Framework for secure identity management --> Provisions for PID and electronic attestation of attributes
Identity companies must understand and address these challenges to make their solutions compatible with the eIDAS 2.0 framework. This will allow them to enhance their offerings and support the creation of a unified digital market in the EU.
Teaming up with Digimarc we're providing distributed ledger technology (DLT) to help track and trace the recycling journey of plastics. The use case involves collecting and recycling farm plastic waste, converting it into bioplastics used in consumer products, like plastic bags. It implements DPPs for both intermediate and final products, ensuring B2B and B2C verification respectively, and uses the GS1 EPCIS 2.0 standard for recording events in the supply chain, with proofs stored on the IOTA ledger to support claims about product provenance.
The key requirement of Spain’s online age verification system is the privacy and untraceability of users’ activity, when presenting their age for verification online. This makes W3C Verifiable Credentials data model the perfect choice for such use-case. Their technical solution follows the OpenID For Verifiable Presentations (OpenID4VP) specification, ensuring secure and private verification of age credentials. Additionally, the framework includes trust management via whitelists, which ensures only trusted entities can issue or verify these credentials.
With the Microsoft Entra ID FIDO2 provisioning APIs organizations can build their own admin provisioning clients, or partner with one of the many leading credential management system (CMS) providers who have integrated our APIs in their offerings.
Microsoft Entra Internet Access – an identity-centric Secure Web Gateway (SWG) for SaaS apps and internet traffic that protects against malicious internet traffic, unsafe or non-compliant content, and other threats
“DNP was immediately impressed with Indicio Academy from the moment our in-house team was trained and certified. We used the Indicio Academy as an opportunity to let people know what they can do in this burgeoning technology field and formed an active partnership to offer the program with the goal of gaining business partners,” said Takahito Kanazawa, Managing Director, Head of Advanced Business Center, DNP.
Rotating signatures are compatible with ISO/IEC 18013-5 mDL, SD-JWT, and W3C Verifiable Credentials standards for digital credentials, and the FIPS 140-2/3
Numerous other use cases are built using W3C Verifiable Credentials, such as Microsoft’s Entra Verified ID product, C2PA for content authenticity (a specification supported by Adobe, OpenAI, and Google), and GS1’s digital supply chain integrity efforts. Further, the EU Digital Identity efforts include SD-JWTs .
Does this effort mean all DID methods have to be standardized in a certain organization like DIF or W3C? No – In fact our goal is open collaboration so that DID method creators / backers can standardize where they choose. The effort mentioned in the LOI is twofold: Initial working group to standardize a cross-section of a few widely-implemented DID methods. This will use the liaison structure referenced in the LOI to ensure open participation.
With the rechartering of the DID WG, the leaders of DID-related work streams believe that now is the right time to extend standardization to DID Methods, with an initial focus on methods that have proven useful to multiple implementers over the past several years. In that spirit, we are proposing that we start the standardization process for a few selected DID Methods, subsequently informing standardization and conformance criteria across categories of DID methods.
Decentralized Semantics: A semantic engine user perspective. This practice paper describes the release of the first version of the Semantic Engine leveraging OCA, an architecture to document schemas optimized for decentralized collaboration and reproducibility. OCA leverages new technologies on self-addressing identifiers and enables content-based authority vs. location-based authority.
The technical standards are decided on by the eIDAS expert tool group. This group consists of two representatives of every EU member state. They define the Architecture and Reference Framework (ARF). The four eIDAS Large Scale Pilots (LSPs), which started in May 2023, each have 50+ partners exploring different use cases. A lot of know-how has been built up already, but we also wait for the implementing acts to provide further information. The standards themselves are defined in recognised standardization bodies such as the European Telecommunication Standards Institute (ETSI).
The new and returning Directors bring fresh perspectives and experience-based commitment to DIACC’s mission. Their leadership will help the council ensure its initiatives align with and influence standards and practices that mitigate security and privacy risks. DIACC’s leadership works collaboratively to support a more inclusive, secure, and efficient global digital economy that benefits people and organizations of all sizes.
We’re thrilled to announce that Mike Masnick has joined Bluesky’s Board of Directors. He is the author of the Protocols, not Platforms paper that first inspired the Bluesky initiative, and he is the founder and editor of Techdirt, among other accomplishments.
Apple received $20 billion from Google in 2022 to be the default search engine (it shares 36% of ad revenue from Safari users with the company). That's a big number, but nothing compared to its $394bn in total revenue. But for Mozilla, the impact might be more profound: in 2021, these payments represented 83% of its revenue. What happens to it without this underwriting
