Phil Windley

MAY 27, 2021

509 ceritificates and SSI? I sometimes talk to people who ask "Why do we need SSI? 509 combines the functions of these two separate SSI standards. Rather SSI uses verifiable credentials to assert information about a decentralized identifier in a trustworthy way. SSI uses the right tools for each part of the process.

Banking 98

Banking Licensing Architecture Security 98

Phil Windley

MARCH 1, 2023

Riley Hughes and I recently had a conversation about the question "why doesn't SSI exist already?" There is also an emerging Self-Sovereign Identity (SSI) metasystem based on DIDs and verifiable credentials. The SSI Metasystem, on the other hand, meets all of Cameron’s Laws. Tags: identity ssi identity providers.

Social 53

Social Operating Systems Authentication Banking 53

Phil Windley

MAY 11, 2021

SSI For Healthcare: Lessons from the NHS Frontline. Serendipitously, Manny came across self-sovereign identity (SSI) at the same time and, as I said, spoke at the launch of Sovrin Foundation. Trust Frameworks and SSI: An Interview with CULedger on the Credit Union MyCUID Trust Framework.

Healthcare 80

Healthcare Programming Video Training 80

Phil Windley

APRIL 25, 2024

Tags: identity ssi decentralized+identifiers verifiable+credentials x.509 Attestor does know one of its credentials has been presented to Certiphi. If this information leakage bothers you, then any web-based DID method is potentially a problem.

Data 69

Data Authentication Applications Course 69

Phil Windley

MARCH 7, 2023

Tags: ldid podcast identity ssi If you'd like me to talk about the book on a podcast you or your company hosts, or even for a private employee event, I'm happy to. Just send me a note and we'll line it up.

CTO 52

CTO Authentication System Government 52

Phil Windley

OCTOBER 1, 2019

From time to time, I run across the idea that self-sovereign identity (SSI) systems like Sovrin are necessarily self-asserted. This is the myth: that SSI means that the person gets to say anything they want and the relying party just has to accept it. This is NOT what SSI means. Tags: sovrin identity autonomy.

Banking 75

Banking System Examples Security 75

Phil Windley

DECEMBER 15, 2021

And that work might have to be redone for each NFT used for SSI, depending on how Origin Trail is architected. Tags: identity metasystem nft security ssi fidelity verifiable+credentials. What are the privacy implications? How much PII is on the blockchain? Answering these questions would require significant work.

System 52

System Network Security 52

Phil Windley

NOVEMBER 9, 2020

Summary: An SSI wallet provides a place for people to stand in the digital realm. Last week, Doc Searls posted What SSI Needs where he recalls how the graphical web browser was the catalyst for making the web real. The SSI wallet Doc is discussing is the tool people use to operationalize their digital relationships.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

MAY 2, 2023

Tags: identity iiw ssi I heard from many others that they had a similar experience. IIW 37 will be held Oct 10-12, 2023 at the Computer History Museum. We'll have tickets available soon. I hope you'll be able to join us.

Internet 52

Internet Report Energy 52

Phil Windley

DECEMBER 2, 2020

This post gives and introduction to SSI and IoT. The follow-on post goes deeper into what a true Internet of Things founded on SSI can provide. But I left out things because I hadn't yet provided a foundational discussion of DIDComm-enabled digital relationships that's necessary to really understand how SSI can transform IoT.

Internet 87

Internet Security Examples Authentication 87

Phil Windley

OCTOBER 16, 2019

Summary: In this post, I look at the words we use to describe verifiable credential exchange with an eye to being more specific about the part different components of the SSI stack play in providing trustworthy data exchange. I wrote the following to use them in describing credential exchange in the SSI Stack. I like those.

Banking 56

Banking Government Examples System 56

Phil Windley

MAY 24, 2022

I'm a big proponent of self-sovereign identity (SSI) precisely because I believe that autonomy and agency are a vital part of building a new web that works for everyone. Tags: web3 freedom agency ssi. Philosophy discussions are the black hole of identity. Once you get in, you can't get out.

Internet 110

Internet Examples System Network 110

Phil Windley

DECEMBER 6, 2021

Tags: identity microsoft iiw metasystem ssi. The Gentle Lawgiver. Rest in Peace Kim Cameron. In Memory of Kim Cameron (official obituary). Photo Credit: Photos of Kim Cameron from Doc Searls (CC BY 2.0).

Microsoft 133

Microsoft Internet Authentication Architecture 133

Phil Windley

OCTOBER 4, 2021

Verifiable credential technology and SSI tick all the checkboxes for interoperable data exchange. Tags: ssi identity wallets covid. Beyond health pass applications, things like mobile drivers licenses need to be interoperable to be useful. Several production use cases exist that can inform new projects.

Travel 101

Travel Internet Apple Hotels 101

Phil Windley

JUNE 3, 2020

SSI doesn't have accounts, it has relationships and credentials. Tags: sovrin sovrin+use+cases. There are actually two different things here and it's useful to separate them. First, there's no such thing as a "Sovrin account". But your company will have accounts. Photo Credit: Under 25?

Licensing 97

Licensing Banking Enterprise Enterprise 97

Phil Windley

NOVEMBER 11, 2020

DID-based relationships are the foundation of self-sovereign identity (SSI). Most people familiar with SSI equate DIDComm with verifiable credential exchange, but it's much more than that. Tags: decentralized+identifiers didcomm protocol ssi identity credentials self-sovereign vrm me2b. technologies.

Internet 80

Internet Authentication Applications Security 80

Phil Windley

JANUARY 2, 2023

Tags: verifiable+credentials ssi identity web. Verifiable credentials could make the onboarding experience a breeze, get more customers in the door, and reduce the cost of customer support calls associated with it. Photo Credit: Abandoned Road from Tim Emerich ( CC0 ).

Authentication 52

Authentication Security Programming 52

Phil Windley

JUNE 14, 2021

I consider it one of the most important things to come out of the SSI movement. DIDs and DID-based Communication or DIDComm form the second layer of the SSI stack, providing a secure communications layer for the exchange of identity information via verifiable credentials. Tags: ssi identity didcomm ssiot.

Internet 69

Internet Authentication Network Security 69

Phil Windley

AUGUST 9, 2021

Tags: identity ssi privacy relationships. And the excuse that they surveil us to provide better service is just that—an excuse. The real reason they surveil us is because it's profitable. Photo Credit: Ghost Trees from David Lienhard (CC BY-SA 3.0).

System 120

System Programming Banking Financial 120

Phil Windley

FEBRUARY 14, 2024

Tags: identity ssi zero+trust zero+data authorization verifiable+credentials Here's the prompt: Produce a photo-realistic image of a convenience store clerk. She's behind the counter and there's a six pack of beer on the counter. Behind her, clearly visible, is a sign that says "We I.D.

Data 66

Data Examples Airlines Licensing 66

Phil Windley

JULY 5, 2021

Tags: identity ssi didcomm ssiot. Alternate architectures can give us all the benefits of connected devices without the specter of Big Tech intermediating every aspect of our lives. Photo Credit: modem and phone from Bryan Alexander (CC BY 2.0).

Architecture 98

Architecture Internet Programming Travel 98

Phil Windley

FEBRUARY 1, 2022

Tags: identity verifiable+credentials biometrics facial+scanning egovernment ssi. But we can keep the current, decentralized system of identification in the US and also prevent fraud with technology available today. I vote for that. Photo Credit: Face Detection from Sylenius (CC BY 2.0).

Course 98

Course System Report Guidelines 98

Phil Windley

FEBRUARY 7, 2022

Self-sovereign identity (SSI) and self-certifying protocols provide people with the tools they need to operationalize their self-sovereign authority and act as peers with others online. Tags: web3 ssi identity keri decentralized+identifiers. Photo Credit: Bison calf suckling from Frank Schulenburg (CC BY-SA 4.0).

Authentication 52

Authentication Examples Data System 52

Phil Windley

NOVEMBER 27, 2023

Tags: ssi identity verifiable+credentials ai Your digital identity is your anchor in the digital realm, asserting our ownership, preserving our uniqueness, and fostering trust in an increasingly automated world, helping you operationalize your digital relationships.

Authentication 40

Authentication Artificial Intelligence Healthcare Licensing 40

Phil Windley

MARCH 7, 2022

At a recent Utah SSI Meetup , Sam Smith discussed the tradeoff between privacy, authenticity and confidentiality. Tags: ssi identity privacy authenticity confidentiality. Summary: Authenticity and privacy are usually traded off against each other. The tradeoff is a tricky one that can lead to the over collection of data.

Authentication 59

Authentication Banking Examples System 59

Phil Windley

NOVEMBER 22, 2022

Tags: identity agents ssi autonomic+identity. But they are stuck in a paper world because many of the solutions that have been proposed for solving it, lead to central systems that require near-universal buy-in to work. Protocol-based solutions are the antedote to that and, fortunately, they're available now.

Healthcare 66

Healthcare Insurance Authentication System 66

Phil Windley

JULY 14, 2018

In other words, if we can't make SSI work, then blockchain in general is in trouble because the hacks will keep happening. Along with some site seeing, I also had a great SSI dinner that Joel John and Nitin Sharma organized. I think there's plenty of opportunity for Aadhaar and SSI to co-exist.

Banking 40

Banking Insurance Meeting System 40

Phil Windley

MAY 6, 2019

There were several dozen sessions on SSI. Tags: iiw sovrin indy hyperledger picos self-sovereign. I'll post a link to the Book of Proceedings when it's available so you can read about them yourself. One thing that stood out to me is the impact self-sovereign identity is having. Evernym and Onfido did a demonstration of the Connect.me

Internet 76

Internet Licensing Policies Security 76

Phil Windley

JUNE 7, 2021

Early on, a few intrepid people in the credit union industry recognized that self-sovereign identity (SSI) offered a way out of this mess. Bonifii offers an SSI-based solution for credit unions called MemberPass. Tags: identity ssi use+cases verifiable+credentials finance.

Authentication 52

Authentication Financial Banking Industry 52

Phil Windley

JANUARY 25, 2022

Tags: identity biometrics authentication irs egovernment verifiable+credentials ssi. Photo Credit: A Face in the Crowd publicity photo (Patricia Neal & Andy Griffith) from Warner Brothers Pictures Distributing Corp (public domain).

Authentication 59

Authentication Licensing Windows Company 59

Phil Windley

JUNE 21, 2022

Tags: identity ssi verifiable+credentials reputation. Recently Vatalik el. proposed what they call a soul-bound token as a non-transferable credential type for Web3. I'm putting together my thoughts on that for a future post. Photo Credit: A Buenos Aires taxi ride from Phillip Capper ( CC BY 2.0 ).

Financial 59

Financial Windows Report 59

Phil Windley

OCTOBER 11, 2021

Tags: verifiable+credentials non+fungible+token ssi identity picos. These are not capabilities that picos presently have, but they do support DIDComm messaging. Want to help add these to picos? Contact me. Photo Credit: Colorful Shipping Containers from frank mckenna (CC0).

Banking 83

Banking Data Open Source Exercises 83

Phil Windley

JULY 16, 2020

SSI provides improved support for creating, managing, and using digital relationships. The most problematic word in the term Self-Sovereign Identity (SSI) isn't "sovereign" but "identity" because whenever you start discussing identity, the conversation is rife with unspoken assumptions. P1 and P2 are not peers in the federated model.

Authentication 95

Authentication System Data Architecture 95

Phil Windley

JULY 1, 2019

Summary: Identity professionals continue to have questions about self-sovereign identy (SSI). In this post, I answer a few questions that Susan Morrow raised about the commercial viability, security, privacy, and desired user experience of SSI. Because SSI solves real problem that credit unions and other businesses have.

Banking 92

Banking Government System Internet 92

Phil Windley

JANUARY 18, 2022

Tags: web3 the+stack ssi bitcoin sovereign. To explore this more, see this John Robb commentary on David Ronfeldt's Rand Corporation paper "Tribes, Institutions, Markets, Networks" (PDF). Photo Credit: Lenin from Arkady Rylov via Wikimedia Commons (CC0).

Network 59

Network Internet System Government 59

Phil Windley

JUNE 24, 2020

Summary: If your identity system doesn't use DIDs and verifiable credentials in a way that gives participants autonomy and freedom from intervening administrative authorities, then it's not SSI. I think we've arrived at a place where it's possible to put some stakes in the ground about what SSI is and get broad consensus about it.

System 52

System Tools Software Software 52

Phil Windley

SEPTEMBER 28, 2020

I argued that the architecture of SSI, its structure, made those relationships more authentic. In this post, I intend to explore the details of that architecture so we can better understand the legitimacy of SSI as an identity system for online interaction. Both algorithmic and self-certifying are SSI systems. Terminology.

Architecture 138

Architecture System Authentication Security 138