Phil Windley

MAY 27, 2021

Rather SSI uses verifiable credentials to assert information about a decentralized identifier in a trustworthy way. 509 certificates and DIDDocs is that the primary purpose of the DIDDoc is to bind the public key in the DIDDoc to a decentralized identifier, or DID, whereas X.509 509 pki decentralized+identifiers.

Banking 98

Banking Licensing Architecture Security 98

Phil Windley

APRIL 4, 2024

I think digital wallets (a bad name for an important tool), autonomic (peer) identifiers with strong cryptography, and verifiable credentials are a huge step forward. That's why I insist on using the term self-sovereign rather than decentralized to describe these systems. Cogito Ergo Sum.

Banking 50

Banking System Authentication Tools 50

Phil Windley

OCTOBER 31, 2017

Summary: Sovrin capitalizes on decades of cryptographic research and the now widespread availability of decentralized ledger technology to rethink identity solutions so that we can have scalable, flexible, private interactions with consent despite the issues that distance introduces.

Internet 45

Internet Architecture System Data 45

Phil Windley

JUNE 14, 2021

Autonomic Identifiers. The foundation of the self-sovereign internet is built on autonomic identifiers. I'm going to speak about Peer DIDs here, but KERI and other systems provide autonomic identifiers that serve just as well. To do so, they use identifiers , convenient handles that name the thing being remembered.

Internet 69

Internet Authentication Network Security 69

Phil Windley

MARCH 25, 2020

And we have a system that identifies them, either a concert wristband or a card with their photograph and some kind of a stamp on it. And the decentralized nature of the Sovrin Network ensures that it can scale to any degree required. Tags: sovrin healthcare covid-19 credentials.

Government 69

Government Healthcare System Meeting 69

Phil Windley

JANUARY 16, 2018

Secondly, public blockchains can provide decentralized registration and discovery of the public keys needed to verify digital signatures. Tags: sovrin identity whitepaper verifiable+claims sovrin+token. There is still no way to use digital credentials to prove our online identity the same way we do in the offline world.

Internet 103

Internet Insurance Authentication Network 103

Phil Windley

AUGUST 25, 2022

In my experience with decentralized systems, discovery is one of the things that has to work well. The README on the specifications indicates that buyers (identified as BAPs) address a search to a Beckn gateway of their choice. Tags: ecommerce protocol ondc beckn vrm. Don't ask me why. I'm not sure I can explain it.

Network 52

Network Government Video System 52

Phil Windley

DECEMBER 2, 2020

While decentralized identifiers and verifiable credentials have much to offer the Internet of Things (IoT), the secure messaging subsystem promises an IoT that goes well beyond those initial scenarios. The paper is primarily focused on how decentralized identifiers and verifiable credentials can support IoT.

Internet 87

Internet Security Examples Authentication 87

Phil Windley

JANUARY 18, 2022

In The crypto-communists behind the Web3 revolution , Benjamin Pimentel argues that "The future of decentralized finance echoes a decidedly Marxist vision of the future." Markets are decentralized—specifically they are heterarchical rather than hierarchical. Networks are also decentralized.

Network 59

Network Internet System Government 59

Phil Windley

MARCH 1, 2023

But it fails in some key areas like not supporting directed (meaning not public ) identifiers. The arc of development for digital identity systems has been bending toward user-controlled, decentralized digital identity for decades. Tags: identity ssi In this evaluation, the SL metasystem comes out pretty good. Maybe a decade.

Social 53

Social Operating Systems Authentication Banking 53

Phil Windley

NOVEMBER 9, 2020

These relationships are enabled by autonomic identifiers in the form of peer DIDs (blue arrows). People using wallets don't see the DIDs (identifiers) but rather the connections they have to other people, organizations, and things. These relationships are based on autonomic identifiers in the form of peer DIDs.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

NOVEMBER 11, 2020

Wallets store DIDs, credentials, personally identifying information, cryptographic keys, and much more. Secure and private follow from the protocol's support for heterachical (peer-to-peer) connections and decentralized design along with its use of end-to-end encryption. The DIDComm Protocol is designed to be. Interoperable.

Internet 80

Internet Authentication Applications Security 80

Phil Windley

AUGUST 3, 2017

The genesis block on the Sovrin ledger holds public identifiers and keys for six Sovrin Trustees and ten Sovrin Stewards. The ceremony requires Trustees and Stewards who are part of the genesis block to verify their identifiers and keys and allows many parties to witness the incorporation of that information into the ledger.

Network 63

Network Exercises Government Video 63

Phil Windley

AUGUST 3, 2017

Summary: This post describes some changes we're making to the pico engine to better support a decentralized mesh for running picos. Picos are Internet-first actors that are well suited for use in building decentralized soutions on the Internet of Things. I wrote about that idea in some detail in Sovrin Use Cases: Portable Picos.

Engineering 40

Engineering Load Balancer Internet Programming 40

Phil Windley

JUNE 19, 2019

We believe that decentralized and portable digital identity is a prerequisite to financial inclusion and competition. I hope they're not thinking of tying Libra addresses to some correlatable identifier since that will be a privacy nightmare. Crypto is now mainstream. That's all it says, so it's hard to know what exactly it means.

Financial 87

Financial Government Course Network 87

Phil Windley

MARCH 26, 2018

In Decentralized Governance in Sovrin , I described how the Sovrin Network is governed. As I pointed out in Decentralized Governance in Sovrin , the framework governs the operation of the network and the code that it runs on. For example, suppose you wanted to start a decentralized version of AirBnB.

Banking 45

Banking Government Examples Groups 45

Phil Windley

FEBRUARY 25, 2019

Summary: Decentralized identifiers are one of the foundational ideas for supporting self-sovereign identity. This post describes how decentralized identifiers work. Decentralized identifiers are one of several foundational technologies for building a metasystem for self-sovereign identity. Everyone has one.

Authentication 102

Authentication Examples System Security 102

Phil Windley

DECEMBER 28, 2020

In DIDComm and the Self-Sovereign Internet , I make the case that the network of relationships created by the exchange of decentralized identifiers (layer 2 in Figure 1) forms a new, more secure layer on the internet. The public key is exclusively bound to the unique identifier. Figure 1: SSI Stack (click to enlarge).

Internet 135

Internet Network Architecture Security 135

Scott Lowe

NOVEMBER 30, 2016

Combined with powerful cloud-based servies and features, decentralized management, disparate management tools, and the need to integrate multiple products and sources of data, and cloud governance becomes very difficult, according to Kinsella. No tagging. Identify deliverables by stakeholder. Implement, rinse, and repeat.

Government 60

Government Cloud Agile Load Balancer 60

Phil Windley

FEBRUARY 6, 2024

The employer in this scenario wants more than an identifier for the issuer. In short, the employer wants to resolve the identifier to other information that tells them something about the university and the credential. The employer could make use of these by building its own database of university identifiers it trusts.

Network 89

Network Banking Financial Government 89

Phil Windley

APRIL 18, 2024

These are more than decentralized ; they are self-sovereign. Notes Peer decentralized identifiers (DIDs) are a great technology for creating bi-directional relationships. Tags: identity relationships

Authentication 73

Authentication System Examples Architecture 73

Phil Windley

SEPTEMBER 28, 2020

To do so, they use identifiers , convenient handles that name the thing being remembered. Identifiers are unique within some namespace. The namespace gives context to the identifiers since the same string of characters might be a phone number in one system and a product ID in another. click to enlarge).

Architecture 138

Architecture System Authentication Security 138

Phil Windley

JULY 26, 2021

Summary: Picos are a programming model for building decentralized applications that provide significant benefits in the form of abstractions that reduce programmer effort. Here are ten eleven reasons you should use picos for your next decentralized application. They are architected to be performant while decentralized.

Programming 59

Programming Engineering Applications Architecture 59

Phil Windley

NOVEMBER 1, 2021

How can we create a decentralized, general-purpose computing mesh? But the vision I've had since reading Rainbow's End is not just distributed, but decentralized, edge computing. IPFS does this for storage, decentralizing file storage by putting files in shared spaces at the edge. Decentralized Computing.

Engineering 52

Engineering Storage Licensing Cloud 52

Phil Windley

OCTOBER 25, 2021

While you, your friend, the host, and waitstaff recognized, remembered, and interacted with people, places, and things countless times during this scenario, at no time were you required to be identified as a particular person. Some, like the relationship with your friend and MasterCard, are long-lived and identified.

Insurance 137

Insurance System Authentication Banking 137

Phil Windley

APRIL 25, 2018

Summary: Building decentralized system requires more than defining a few specifications and hoping for the best. In order to thrive, decentralized systems need coherence, the social organization necessary to get otherwise independent actors to cooperate. Networks are also decentralized. There's something more to it.

System 72

System Internet Network Social 72

Phil Windley

SEPTEMBER 21, 2017

Summary: To determine whether Sovrin is decentralized, we have to ask questions about the purpose of decentralization and how Sovrin supports those purposes. People sometimes ask "Is Sovrin decentralized?" But whether or not a specific system is decentralized is just shorthand for the real questions. There's one ledger.

Architecture 70

Architecture System Network Open Source 70

Phil Windley

MAY 25, 2021

Online interactions will only be able to mirror life-like anonymity when we can use decentralized identity systems that don't force all interactions to be under the purview of centralized, administrative identity systems. A correlation identifier is a unique string that can be used to link requests. That poison was the cookie.

System 76

System Authentication Internet Government 76

Phil Windley

JUNE 4, 2019

If you're not familiar with DIDs, take a minute to go read my article on Decentralized Identifiers from earlier this year. I'll summarize the relevant parts here: DIDs are a new type of cryptographic identitfier that are resolvable, non-reassignable, and decentralized (not under the control of a single authority).

Authentication 88

Authentication Open Source Network Software 88

Phil Windley

SEPTEMBER 7, 2021

I put that in quotes because I hate when we use the word "identity" in that way—as if everyone has just one and once we link every body (literally) to some government issued identifier and a small number of attributes all our problems will disappear. Tags: identity relationships ssi pseudonymity.

Network 107

Network Government Authentication Examples 107

Phil Windley

JUNE 21, 2021

The whole point of decentralized communication systems is to avoid the kind of centralized, single-point-of-failure that backdoors imply. Daniel's idea is to combine two capabilities to create a decentralized system for enabling accountability. Tags: identity ssi didcomm privacy cryptography.

3D 52

3D Internet Data System 52

Phil Windley

OCTOBER 11, 2022

In my discussions of verifiable credentials, I assume DIDs are the underlying identifier. All the use cases we’ve identified for verifiable credentials are available in OpenID4VC as well. A SIOP might use DIDs, KERI, or something else for identifiers. Tags: identity ssi openid verifiable+credentials.

Authentication 52

Authentication Transportation Licensing Data 52

Phil Windley

JUNE 24, 2020

SSI has the following properties: SSI systems use decentralized identifiers (DIDs) to identifier people, organizations, and things. Decentralized identifiers provide a cryptograhic basis for the system and can be employed so that they don't require a central administrative system to manage and control the identifiers.

System 52

System Tools Software Software 52

Phil Windley

JULY 28, 2017

In the section on device identity, the paper says: To support strong security, the device identifier must be immutable, attestable, and unique. Today, IoT devices typically do not use identifiers that are both unique and immutable and the device identifiers are almost never attestable. Consider this an open invitation.

Internet 45

Internet Security Industry Authentication 45

Phil Windley

JANUARY 7, 2019

The Internet was created without any way to identify the people who used it. The Internet was a network of machines and all the identity in Internet protocols is designed to identify machines and services. This can be seen in the format of email addresses that identifies recipient and sender as someone@someplace.

Banking 88

Banking Internet System Software 88

Phil Windley

MARCH 13, 2020

The metasystem can be used to build identity systems for any context and provides people with autonomy and freedom to make choices about how information that identifies them is shared and used. This decentralized ledger is specifically designed to support identity transactions and has several important properties.

Government 59

Government Network Open Source Policies 59

Phil Windley

MAY 24, 2023

She compares traditional approaches to identity and newer, decentralized approaches to the move from music CDs to streaming. The analog to streaming is decentralized or self-sovereign identity (SSI). The analogy also identifies the primary driver of adoption: demand. I'm old enough to remember the hubbub around file sharing.

Banking 52

Banking Apple Licensing Data 52