Identosphere 215: Importance of Early Engagement in Standards • Switzerland’s State E-ID • EUID Privacy Concerns • DIDComm DIF Interop-a-thon

Upcoming events, company news, organizational updates, developments in standards and specifications, and deep thoughts on everything related to decentralized identity and verifiable credentials

Identosphere’s Highlights

We Gather, You Read!

We’re still aggregating industry info.

Thanks for supporting our efforts by PayPal, or Patreon

Coming Up

• Join the DIDComm Interop-a-thon 12-12 DIF

• [Boston] Internet2 Technology Exchange 2024 12/9-13

• The 2024 Future of Government Awards, hosted by Public Digital, UNDP, and AWS Institute, are now open for nominations Centre for Digital Public Infrastructure (Nominations by 1/20)

• [Berlin] European Cloud and Identity Conference Call for Proposals Open to 01/31

• [Cape Town] DID:Unconf Africa 2/18-20 An IIW Inspired regional Event

• [Zurich] Digital Identity Unconference Europe - Ecosystems 3/4-5

DIF Newsletter #46 2024-12-04 Decentralized Identity Foundation

Working Group Updates:

• Identifiers and Discovery: bi-weekly meetings Wednesdays at 9am PT/ noon ET/ 6pm CET; Mondays at 11am PT/ 2pm ET/ 8pm CET

• Credential Schemas work item: bi-weekly at 10am PT / 1pm ET / 7pm CET Tuesdays

• DIF Crypto - BBS work item: weekly at 11am PT/2pm ET /8pm CET Mondays

• DIF/CCG Secure Data Storage WG - DWN Task Force: bi-weekly at 9am PT/12pm ET/6pm CET Wednesdays Open Groups at DIF:

• Meetings take place weekly on Thursdays, alternating between Noon EST / 18.00 CET and 9am EST / 15.00 CET

• The DIF APAC call takes place Monthly on the 4th Thursday of the month

• Meetings take place Monthly on the 3rd Wednesday at 1pm SAST

Standards

Notice of Vote for Proposed Implementer’s Draft of OpenID4VP Specification 2024-12-03 Mike Leszcz; OpenID Foundation

The official voting period will be between Tuesday, December 17, 2024 and Tuesday, December 24, 2024 (12:00pm PT)

The Importance of Early Engagement in Standards 2024-12-02 Heather Flanagan; Spherical Cow Consulting

NSA/CISA Report and US Participation in Standards Development

• Underscores importance of standards development

• Provides roadmap for bolstering U.S involvement

• Applicable to all organizations relying on the Internet for business

Using Entra External ID with an Auth0 OpenID Connect identity provider 2024-12-09 damienbod.com

Using OpenID Connect Identity Provider in Microsoft Entra External ID:

• Microsoft Entra External ID federates to Auth0 using OpenID Connect

• Client code: https://github.com/damienbod/EntraExternalIdCiam Links:

• Microsoft Entra External ID documentation: https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-custom-oidc-federation-customers

[linkedin] The result of all the discussions, writings, and proposals on how to bind an application protocol to the trust layer of OpenID Federation 2024-12-06 Vladimir Dzhuvinov

OpenID Federation Trust Layer Binding

• Simple table, result of months or years of discussions, writings, and proposals on how to bind an application protocol to OpenID Federation's trust layer

• Addresses diverse and sometimes opposing expectations of adopters https://connect2id.com/blog/how-to-link-an-app-protocol-to-an-openid-federation-trust-layer

[Interop] Indicio drives decentralized identity interoperability in the upcoming DIDComm DIF Interop-a-thon 2024-12-05 Helen Garneau; Indicio

• Providing robust mediator for DIDComm testing during Interop-a-thon

  • Critical role in enabling message routing between mobile devices and ensuring secure communication

  • Developers can access Indicio Mediator to test scenarios in a reliable environment

Organizations

The Velocity Network Trust Framework 2024-12-02 Velocity

Reinventing how career records are shared across the global market. Empowering individuals, businesses and educational institutions through transformational blockchain technology – public, open, trusted and self-sovereign. Turn career achievements into digital credentials. Verified, secured and truly global. Own them, use them to access better opportunities.

Government

Insights into the Development of Switzerland’s State E-ID 2024-12-03 www.didas.swiss

Watch: A Panel Discussion on the Development of Switzerland’s State E-ID On September 19, 2024, a fact-based discussion took place on the progress of Switzerland’s state electronic identity (E-ID). The network policy evening was organized by the digital society and highlighted the key challenges and opportunities of a project that is set to shape the country’s digital future.

[Travel][US] Google Wallet Now Supports Digital US Passports for Domestic Air Travel 2024-12-09 IDTechwire

• Supports Transportation Security Administration's (TSA) digital transformation roadmap

• Simplifies verification process at select TSA checkpoints using NFC technology and biometric data

[mDL] Shaping California’s mDL Program and the Future of Digital Identity 2024-12-05 Ajay Gupta, Trinsic

• The adoption and growth rates of California’s mDL program, including demographic insights and usage trends.

• Where mDLs are being used today and the balance between Android and iOS wallet downloads.

• Key lessons for other states, DMVs, and government agencies on engaging stakeholders and demonstrating ROI for mDL programs.

[EU] The EU Digital Identity Wallet lands in Italy despite privacy concerns 2024-12-06 techradar.com

The launch follows the pilot that started at the end of October and involved 50,000 citizens. Other European countries are currently testing their own iterations of the EU digital wallet at the time of writing, including France, Germany, and Luxembourg.

[…]

I’m extremely worried about the direction of the #eIDAS trilogue negotiations. We see a massive attack on core privacy principles in the text proposed by the @EU_Commission and @eu2023es Presidency. The EU ID Wallet risks becoming a privacy nightmare that is not safe to use!!! [Thomas Lohninger]

[EU][linkedin] How should businesses and governments prepare for EU Digital Identity? 2024-12-10 Antti Kettunen

EU Digital Identity (EUDI) Wallets to be live by end of 2026 Key Stakeholders:

1. CxO's & Boards: strategic advisory on eIDAS impact and implementation

2. Business Lines: understanding business implications

3. Product Owners: learning new opportunities for disruption

4. Compliance Managers: ensuring adherence to requirements

This Month in Digital Identity — December Edition 2024-12-02 Wint Hmone Thant; Finema

GAO Warns of Civil Rights Concerns Amid Federal Data Use

• Rising adoption of AI and facial recognition technology by federal agencies

• GAO report reveals gaps in protecting against biases, inequities, and potential data misuse

• Recommends Congress establish robust civil rights guidelines tailored to emerging technologies

Company Stories

Product

💊 Ready for the U.S. DSCSA regulation? More on how Spherity supports compliance and innovation. 🚀 Spherity

CARO is our credentialing service solution that streamlines the process of verifying DSCSA Authorized Trading Partners (ATP), checking license status and more to ensure that your supply chain activities meet your regulatory and business requirements.

iProov Integrates Biometric Authentication with Microsoft Entra ID 2024-12-09 idtechwire.com

• Automates employee onboarding processes and blocks impostors

• Enhances multi-factor authentication by combining iProov’s liveness-assured biometric technology with Entra ID's conditional access policies

• Implements liveness detection to prevent authentication attempts using deepfakes, photos, or masks

Use Cases

Financial Transactions indicio.tech

Retailers and financial institutions have cryptographic assurance that the credit card holder is the owner of a credit card and bank account from a real credit card issuer or bank

The Role of Reusable Identity in Age Assurance Solutions 2024-12-06 liminal.co

Public-Private Partnerships (PPPs)

• Unite regulatory oversight and technical innovation

• Break down barriers to interoperability and trust.

Decentralized Identity in Education 2024-11-29 Julieta Cura; Extrimian

Impact on Educational Data Management:

• Self-Sovereign Identity (SSI) systems: Allow institutions to issue, manage, and verify credentials seamlessly and securely

• Streamline administrative operations and minimize data mismanagement risks

New Social

A Quick Snapshot of the Microblogging Landscape 2024-11-29 Tim Chambers

So given the post-election swell of BlueSky and Threads…and a far more modest but existent swell of new users to the Fediverse, it feels like the battle to be a non-X/Twitter microblogging solution is coming into view. Threads and BlueSky, each seeing a recent momentum of over 1 milliion users per day are the clear top two.

Firehose - Bluesky docs.bsky.app

• Core primitive of AT Protocol under Bluesky

• Authenticated stream of events for syncing user updates

• Used by feed generators, labelers, bots, search engines etc.

• Multiple firehose providers: PDS and relays (e.g., bsky.network)

Beyond SSI

Three New Specs Enhancing OpenID Federation and New Contributors 2024-11-30 Mike Jones

• OpenID Federation Extended Subordinate Listing: Extension to OpenID Federation 1.0 for large number of registered Entities and multiple entity statements retrieval in one request.

• OpenID Federation Wallet Architectures: Enhances security and interoperability of wallet ecosystems using OpenID Federation 1.0, enabling trust establishment and metadata exchange across deployments.

• OpenID Connect Relying Party Metadata Choices: Extends OpenID Connect Dynamic Client Registration 1.0 to enable RPs to express supported values for certain metadata parameters instead of single values.

Beyond ID

Peritext: A CRDT for Rich-Text Collaboration 2021-11-23 inkandswitch.com

Collaboration on rich text is hard to model with plain-text approaches. We review the challenges and how to construct a CRDT for rich text.

[GitHub] dgc-cgn/sigbot: Let's Sign and Verify Tim Bouma

PDF digital signatures made easy.

• Frustration with easily signing PDF documents without commercial software

• Reliance on applications with 'trusted certificates' but no understanding of what they entail

• Build own prototype for signing and verifying app using website domain as verifier

Thanks for Reading

• Pledge above or support by Patreon / Paypal

• Contact \ Submission: newsletter [at] identosphere [dot] net