Phil Windley

NOVEMBER 22, 2022

Summary: Verifiable credentials have a number of use cases in healthcare. My choice, as you might guess, would be a solution based on verifiable credentials— whether or not the healthcare system is centralized. Because the credentials issued to me, I can be a trustworthy conduit between the doctor and the lab.

Healthcare 66

Healthcare Insurance Authentication System 66

Phil Windley

DECEMBER 15, 2021

In particular, the metasystem guarantees the fidelity of the credential exchange. Credential fidelity comprises four important attributes. Credential exchange on the identity metasystem: Reveals the identifier of the issuer. Ensures the credential was issued to the party presenting it.

System 52

System Network Security 52

Phil Windley

MAY 27, 2021

509 certificates are more like verifiable credentials or DIDDocs. Rather SSI uses verifiable credentials to assert information about a decentralized identifier in a trustworthy way. For that, we use verifiable credentials. Alice proves her name and date of birth using a verifiable credential representing her driver's license.

Banking 98

Banking Licensing Architecture Security 98

Phil Windley

FEBRUARY 1, 2022

One of the controversial aspects of ID.me’s service is an identity proofing service that matches a selfie to the uploaded picture of a government credential. This is called 1:1 facial matching: one selfie, one credential picture. As I said last week, the right solution is to use verifiable credentials. I vote for that.

Course 98

Course System Report Guidelines 98

Phil Windley

NOVEMBER 9, 2021

One answer is to adopt the user experience people already understand from the physical world: connections and credentials. Information cards are digital analogs of the credentials we all carry around in the physical world. People understand credentials. Tags: identity ux wallets ssi. I think of it as digital embodiment.

Authentication 98

Authentication System Internet Video 98

Phil Windley

OCTOBER 1, 2019

Sovrin is an identity metsystem based on the exchange of verifiable credentials. The verifiable credential pattern is shown in the figure below. Verifiable Credential Exchange (click to enlarge). There are three parties: the credential issuer, the credential holder (identity owner), and the credential verifier.

Banking 75

Banking System Examples Security 75

Phil Windley

MARCH 25, 2020

Summary: Sovrin credentials can give assurances of safety during the present Covid-19 crisis and help jump start economies when it's over. Both of these are discussing credentials that can be used to know who is safe to have working. Such a registry would be used to ensure credential provenance.

Government 69

Government Healthcare System Meeting 69

Phil Windley

MAY 11, 2021

Summary: How does a functioning credential ecosystem get started? He’s also an innovator who quickly saw how verifiable credentials could be applied to health care. In this video, Manny discusses why he became interested in digital credentials. He realized a digital credential was a better answer.

Healthcare 80

Healthcare Programming Video Training 80

Phil Windley

JUNE 21, 2022

Summary: The non-transferability of verifiable credential is one of their super powers. Verifiable credentials are a better solution because their designed to not be transferable 1. Bolt issued a verifiable credential (VC) to Bob when he signed up. The Bolt app can ensure the provenance of the credential Bob presents.

Financial 59

Financial Windows Report 59

Phil Windley

MAY 2, 2023

The topics were diverse but I think it's fair to say that verifiable credentials were a hot topic. And while there were plenty of discussions about technical implementations, I think those were overshadowed by sessions discussing credential business models, use cases, and adoption. Tags: identity iiw ssi

Internet 52

Internet Report Energy 52

Phil Windley

MAY 6, 2019

I was excited to see seven different implementations of Indy Agents that were working together and combined to create several demonstrations of credential exchange. Once you do, you'll have a connection to and credential from Onfido. IDRamp showed a demonstration of their product that can add credentials to any system that speaks SAML.

Internet 76

Internet Licensing Policies Security 76

Phil Windley

OCTOBER 23, 2023

Verifiable credentials continue to be a hot topic, but authorization is coming on strong. Photo Credits: Doc Searls Tags: identity iiw We had 315 people from around the world who called 163 sessions. The energy was high and I enjoyed seeing so many people who are working on identity talking with each other and sharing their ideas.

Internet 73

Internet Report Authentication Energy 73

Phil Windley

OCTOBER 11, 2021

How do they sit in the landscape with verifiable credentials and picos? Suppose I rewrote the quote from my post on Cryptokitties like this: [E]ach verifiable credential (VC) has some interesting properties: Each VC is distinguishable from all the rest and has a unique identity and existence. Listening to this Reality 2.0

Banking 83

Banking Data Open Source Exercises 83

Phil Windley

OCTOBER 16, 2019

Summary: In this post, I look at the words we use to describe verifiable credential exchange with an eye to being more specific about the part different components of the SSI stack play in providing trustworthy data exchange. I wrote the following to use them in describing credential exchange in the SSI Stack.

Banking 56

Banking Government Examples System 56

SecureWorld News

OCTOBER 30, 2023

This hoax involves what's called a captive portal, which is a web page that prompts users to enter personal information or login credentials, such as usernames and passwords. The catch was that the document contained a function to transform these gibberish-looking symbols into hexadecimal values that denoted specific JavaScript tags.

Google 95

Google Malware Security Internet 95

Phil Windley

SEPTEMBER 20, 2023

Finally, Harrison Tang spoke with me in the the W3C Credentials Community Group. Tags: identity podcast ldid ssi We had a fun discussion about the definition of identity, administrative and autonomic identity systems, and SSI wallets. I hope you enjoy these.

Groups 40

Groups Trends Media System 40

Scott Lowe

JANUARY 19, 2024

pertaining to administrative credentials. Matt Gowie of MasterPoint explains terraform-null-label and its use in providing more consistent naming and tagging of cloud resources. Tom Hummel finds himself veering back into a hardware-based home lab (instead of a cloud-based lab).

Open Source 101

Open Source Resources Hardware Network 101

Phil Windley

JANUARY 25, 2022

This kind of face scanning to proof an identity document is just a way to bridge the gap between the online and offline world using old-school physical credentials. Verifiable credentials will significantly reduce the need for this in time. To see why, consider a state drivers license issued as a verifiable credential.

Authentication 59

Authentication Licensing Windows Company 59

Phil Windley

MARCH 7, 2023

In addition we discussed the tradespace among privacy, authenticity, and confidentiality and how verifiable credentials augment and improve attribute-based access control (ABAC). Tags: ldid podcast identity ssi Just send me a note and we'll line it up.

CTO 52

CTO Authentication System Government 52

Phil Windley

JANUARY 16, 2018

There is still no way to use digital credentials to prove our online identity the same way we do in the offline world. First, the World Wide Web Consortium is standardizing the format of digitally-signed credentials. Tags: sovrin identity whitepaper verifiable+claims sovrin+token. This is finally changing.

Internet 103

Internet Insurance Authentication Network 103

Phil Windley

JUNE 7, 2021

Summary: How does a functioning credential ecosystem get started? This post looks at MemberPass, the credit union credential ecosystem and explores the strategies credit unions are using to gain broader adoption. Members use the MemberPass wallet to connect to the credit union and hold the MemberPass credential. I was hooked.

Authentication 52

Authentication Financial Banking Industry 52

Phil Windley

APRIL 4, 2024

I think digital wallets (a bad name for an important tool), autonomic (peer) identifiers with strong cryptography, and verifiable credentials are a huge step forward. And part of that is being forced to use their inconvenient and anemic messaging systems. What's the answer? People need tools.

Banking 50

Banking System Authentication Tools 50

Phil Windley

NOVEMBER 9, 2020

Doc goes on to posit that the SSI equivalent of the web browser is what we have called a "wallet" since it holds, analogously to your physical wallet, credentials. One of them, Attester Org, has issued a verifiable credential to Alice. I created the following picture to help illustrate how the wallet fulfills that purpose.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

NOVEMBER 27, 2023

On an earlier version of this post, Timo Hotti commented that the most important use of verifiable credentials might be to prove that you're human. Bank credentials could also be used to prove humanness because of know-your-customer (KYC) regulations. Tags: ssi identity verifiable+credentials ai

Authentication 40

Authentication Artificial Intelligence Healthcare Licensing 40

Phil Windley

NOVEMBER 11, 2020

DIDComm is more than just a way to exchange credentials, it's a protocol layer capable of supporting specialized application protocols for specific workflows. Most people familiar with SSI equate DIDComm with verifiable credential exchange, but it's much more than that. Requesting and issuing credentials. technologies.

Internet 80

Internet Authentication Applications Security 80

Phil Windley

APRIL 12, 2021

The sheer ease of presenting digital credentials removes some of the practicality barrier that paper IDs naturally have. They’re just folks who see the inevitability of a vaccination credential and are determined to at least see that it’s done right, in ways that respect individual choice and personal privacy as much as possible.

Travel 90

Travel Artificial Intelligence Social System 90

Phil Windley

AUGUST 9, 2021

That's the promise of verifiable credentials and self-sovereign identity. If my shipping information and credit card information are stored as verifiable credentials in a digital wallet I control, I can easily provide these to whatever web site I need to as needed. Tags: identity ssi privacy relationships.

System 120

System Programming Banking Financial 120

SecureWorld News

OCTOBER 19, 2021

One notorious hacking group from Iran uses particularly dirty schemes to fleece users, according to Google's Threat Analysis Group (TAG). According to Google’s TAG blog, APT35 have been active since at least 2017, including attacks on the 2020 U.S. Read Google's official TAG blog to learn more about the technical details.

Google 70

Google Conference Authentication Groups 70

Phil Windley

DECEMBER 6, 2021

He wanted to talk about verifiable credential exchange over OpenID Connect SIOP. Tags: identity microsoft iiw metasystem ssi. Kim was one of those people who played such a big role in my life over so many years, that it's hard to imagine he's not there any more. I guess we'll never get that last talk. Remembering Kim Cameron.

Microsoft 133

Microsoft Internet Authentication Architecture 133

Phil Windley

JANUARY 20, 2023

I have a wallet full of credentials. I can still create a DID-based relationship, but the information needed from me beyond what I want to buy can all come from my credentials. Photo Credit: Creditor's Ledger, Holmes McDougall from Edinburgh City of Print ( CC BY 2.0 ) Tags: identity accounts ssi fido authentication

Authentication 52

Authentication Social Google Enterprise 52

SecureWorld News

NOVEMBER 29, 2021

The report was published by Google's Cybersecurity Action Team and is based on observations from its Threat Analysis Group (TAG) and other internal teams. Leaked credentials, e.g., keys published in GitHub projects; 4%. Which is something Google is hoping to help make easier with its new Threat Horizons report. Other issues; 12%.

Cloud 78

Cloud Google Authentication Resources 78

Phil Windley

DECEMBER 2, 2020

While decentralized identifiers and verifiable credentials have much to offer the Internet of Things (IoT), the secure messaging subsystem promises an IoT that goes well beyond those initial scenarios. She could also issue a credential to Baratza to allow them to service the grinder remotely, then revoke it when they're done.

Internet 87

Internet Security Examples Authentication 87

Phil Windley

OCTOBER 4, 2021

Fortunately, we have open-source technology, with multiple commercial providers , that can provide interoperable credentials. Verifiable credential technology and SSI tick all the checkboxes for interoperable data exchange. Tags: ssi identity wallets covid. Several production use cases exist that can inform new projects.

Travel 101

Travel Internet Apple Hotels 101

Phil Windley

JUNE 14, 2021

DIDs and DID-based Communication or DIDComm form the second layer of the SSI stack, providing a secure communications layer for the exchange of identity information via verifiable credentials. Requesting and issuing credentials. Proving things using credentials. Tags: ssi identity didcomm ssiot. Autonomic Identifiers.

Internet 69

Internet Authentication Network Security 69

Phil Windley

AUGUST 29, 2018

Creating an identity system that is flexible enough to support the various ad hoc scenarios that the world presents us with can only be done using a decentralized system like Sovrin that allows multiple credentials from various authorities to be shared in the ways the scenario demands. Credential Uses in a Car Accident (click to enlarge).

Insurance 50

Insurance Report System Examples 50

Phil Windley

NOVEMBER 27, 2018

wallet for use with Sovrin and a commercial enterprise-grade verifiable credentialing system called Verity. The Government of British Columbia is building software to use Sovrin credentials for business licensing. Tags: sovrin identity evernym indy. For example, Evernym is building the Connect.me

Open Source 75

Open Source Network Government Software 75

Phil Windley

MARCH 26, 2018

Let’s begin by reviewing Sovrin-based credentials and how they are used. Issuers issue and identity owners accept Sovrin credentials that are based on emerging Verifiable Claims standards. Identity owners store these credentials in their digital wallet. A credential consists of a set of claims. What Sovrin Promises.

Banking 45

Banking Government Examples Groups 45