Phil Windley

NOVEMBER 22, 2022

Summary: Verifiable credentials have a number of use cases in healthcare. My choice, as you might guess, would be a solution based on verifiable credentials— whether or not the healthcare system is centralized. Because the credentials issued to me, I can be a trustworthy conduit between the doctor and the lab.

Healthcare 66

Healthcare Insurance Authentication System 66

Phil Windley

OCTOBER 11, 2021

How do they sit in the landscape with verifiable credentials and picos? Suppose I rewrote the quote from my post on Cryptokitties like this: [E]ach verifiable credential (VC) has some interesting properties: Each VC is distinguishable from all the rest and has a unique identity and existence. Listening to this Reality 2.0

Banking 83

Banking Data Open Source Exercises 83

Phil Windley

OCTOBER 1, 2019

Sovrin is an identity metsystem based on the exchange of verifiable credentials. The verifiable credential pattern is shown in the figure below. Verifiable Credential Exchange (click to enlarge). So, imagine that a company (issuer) has given Alice (holder) an employment credential. They might not.

Banking 75

Banking System Examples Security 75

Phil Windley

JUNE 21, 2022

Summary: The non-transferability of verifiable credential is one of their super powers. In Bolt drivers in Nigeria are illicitly selling their accounts, putting passengers at risk Rest of World reports on an investigation showing that Bolt drivers in Nigeria (and maybe other countries) routinely sell verified accounts to third parties.

Financial 59

Financial Windows Report 59

Phil Windley

JUNE 3, 2020

Kamea, a member of the Sovrin Telegram channel asked this question: I’m looking for our users to sign up with a Sovrin account, validate their identity, then use it to verify age and passport country on our network using a zk proof so we don’t have to handle any personal data. SSI doesn't have accounts, it has relationships and credentials.

Licensing 97

Licensing Banking Enterprise Enterprise 97

Phil Windley

MAY 11, 2021

Summary: How does a functioning credential ecosystem get started? He’s also an innovator who quickly saw how verifiable credentials could be applied to health care. In this video, Manny discusses why he became interested in digital credentials. He realized a digital credential was a better answer.

Healthcare 80

Healthcare Programming Video Training 80

Phil Windley

DECEMBER 15, 2021

In particular, the metasystem guarantees the fidelity of the credential exchange. Credential fidelity comprises four important attributes. Credential exchange on the identity metasystem: Reveals the identifier of the issuer. Ensures the credential was issued to the party presenting it.

System 52

System Network Security 52

Phil Windley

MARCH 25, 2020

Summary: Sovrin credentials can give assurances of safety during the present Covid-19 crisis and help jump start economies when it's over. Both of these are discussing credentials that can be used to know who is safe to have working. Such a registry would be used to ensure credential provenance.

Government 69

Government Healthcare System Meeting 69

Phil Windley

FEBRUARY 1, 2022

One of the controversial aspects of ID.me’s service is an identity proofing service that matches a selfie to the uploaded picture of a government credential. This is called 1:1 facial matching: one selfie, one credential picture. As I said last week, the right solution is to use verifiable credentials. I vote for that.

Course 98

Course System Report Guidelines 98

Phil Windley

OCTOBER 16, 2019

Summary: In this post, I look at the words we use to describe verifiable credential exchange with an eye to being more specific about the part different components of the SSI stack play in providing trustworthy data exchange. I wrote the following to use them in describing credential exchange in the SSI Stack.

Banking 56

Banking Government Examples System 56

Phil Windley

OCTOBER 23, 2023

Verifiable credentials continue to be a hot topic, but authorization is coming on strong. Photo Credits: Doc Searls Tags: identity iiw We had 315 people from around the world who called 163 sessions. The topics were diverse. IIW is where you will meet people help you solve problems and move your ideas forward. Please come!

Internet 73

Internet Report Authentication Energy 73

Phil Windley

MAY 2, 2023

The topics were diverse but I think it's fair to say that verifiable credentials were a hot topic. And while there were plenty of discussions about technical implementations, I think those were overshadowed by sessions discussing credential business models, use cases, and adoption. Tags: identity iiw ssi

Internet 52

Internet Report Energy 52

Phil Windley

JANUARY 25, 2022

This kind of face scanning to proof an identity document is just a way to bridge the gap between the online and offline world using old-school physical credentials. Verifiable credentials will significantly reduce the need for this in time. To see why, consider a state drivers license issued as a verifiable credential.

Authentication 59

Authentication Licensing Windows Company 59

Phil Windley

APRIL 4, 2024

I think digital wallets (a bad name for an important tool), autonomic (peer) identifiers with strong cryptography, and verifiable credentials are a huge step forward. And part of that is being forced to use their inconvenient and anemic messaging systems. What's the answer? People need tools.

Banking 50

Banking System Authentication Tools 50

Phil Windley

MARCH 7, 2023

In addition we discussed the tradespace among privacy, authenticity, and confidentiality and how verifiable credentials augment and improve attribute-based access control (ABAC). Tags: ldid podcast identity ssi Just send me a note and we'll line it up.

CTO 52

CTO Authentication System Government 52

Phil Windley

JANUARY 16, 2018

There is still no way to use digital credentials to prove our online identity the same way we do in the offline world. First, the World Wide Web Consortium is standardizing the format of digitally-signed credentials. Tags: sovrin identity whitepaper verifiable+claims sovrin+token. This is finally changing.

Internet 103

Internet Insurance Authentication Network 103

Phil Windley

AUGUST 9, 2021

That's the promise of verifiable credentials and self-sovereign identity. If my shipping information and credit card information are stored as verifiable credentials in a digital wallet I control, I can easily provide these to whatever web site I need to as needed. Tags: identity ssi privacy relationships.

System 120

System Programming Banking Financial 120

Phil Windley

JUNE 7, 2021

Summary: How does a functioning credential ecosystem get started? This post looks at MemberPass, the credit union credential ecosystem and explores the strategies credit unions are using to gain broader adoption. Members use the MemberPass wallet to connect to the credit union and hold the MemberPass credential. I was hooked.

Authentication 52

Authentication Financial Banking Industry 52

Phil Windley

NOVEMBER 27, 2023

On an earlier version of this post, Timo Hotti commented that the most important use of verifiable credentials might be to prove that you're human. Bank credentials could also be used to prove humanness because of know-your-customer (KYC) regulations. Tags: ssi identity verifiable+credentials ai

Authentication 40

Authentication Artificial Intelligence Healthcare Licensing 40

Phil Windley

NOVEMBER 11, 2020

DIDComm is more than just a way to exchange credentials, it's a protocol layer capable of supporting specialized application protocols for specific workflows. Most people familiar with SSI equate DIDComm with verifiable credential exchange, but it's much more than that. Requesting and issuing credentials. technologies.

Internet 80

Internet Authentication Applications Security 80

Phil Windley

DECEMBER 6, 2021

He wanted to talk about verifiable credential exchange over OpenID Connect SIOP. Tags: identity microsoft iiw metasystem ssi. Kim was one of those people who played such a big role in my life over so many years, that it's hard to imagine he's not there any more. I guess we'll never get that last talk. Remembering Kim Cameron.

Microsoft 133

Microsoft Internet Authentication Architecture 133

Phil Windley

APRIL 12, 2021

The sheer ease of presenting digital credentials removes some of the practicality barrier that paper IDs naturally have. They’re just folks who see the inevitability of a vaccination credential and are determined to at least see that it’s done right, in ways that respect individual choice and personal privacy as much as possible.

Travel 90

Travel Artificial Intelligence Social System 90

Phil Windley

NOVEMBER 9, 2020

Doc goes on to posit that the SSI equivalent of the web browser is what we have called a "wallet" since it holds, analogously to your physical wallet, credentials. One of them, Attester Org, has issued a verifiable credential to Alice. I created the following picture to help illustrate how the wallet fulfills that purpose.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

JUNE 14, 2021

DIDs and DID-based Communication or DIDComm form the second layer of the SSI stack, providing a secure communications layer for the exchange of identity information via verifiable credentials. The key event log is a chain of signed change records that can be cryptographically verified. Requesting and issuing credentials.

Internet 69

Internet Authentication Network Security 69

Phil Windley

JANUARY 20, 2023

I have a wallet full of credentials. I can still create a DID-based relationship, but the information needed from me beyond what I want to buy can all come from my credentials. Photo Credit: Creditor's Ledger, Holmes McDougall from Edinburgh City of Print ( CC BY 2.0 ) Tags: identity accounts ssi fido authentication

Authentication 52

Authentication Social Google Enterprise 52

Phil Windley

AUGUST 29, 2018

Creating an identity system that is flexible enough to support the various ad hoc scenarios that the world presents us with can only be done using a decentralized system like Sovrin that allows multiple credentials from various authorities to be shared in the ways the scenario demands. Credential Uses in a Car Accident (click to enlarge).

Insurance 50

Insurance Report System Examples 50

Phil Windley

DECEMBER 2, 2020

While decentralized identifiers and verifiable credentials have much to offer the Internet of Things (IoT), the secure messaging subsystem promises an IoT that goes well beyond those initial scenarios. She could also issue a credential to Baratza to allow them to service the grinder remotely, then revoke it when they're done.

Internet 87

Internet Security Examples Authentication 87

Phil Windley

OCTOBER 4, 2021

Fortunately, we have open-source technology, with multiple commercial providers , that can provide interoperable credentials. Verifiable credential technology and SSI tick all the checkboxes for interoperable data exchange. Tags: ssi identity wallets covid. Several production use cases exist that can inform new projects.

Travel 101

Travel Internet Apple Hotels 101

Phil Windley

FEBRUARY 6, 2024

Summary: We can't have broad adoption of verifiable credentials until we find a way to scale their presentation by providing tooling that credential verifiers can use to reduce their risk and gain confidence in the facts presented to them. Beyond that they must verify everything themselves. Sears trusted its card.

Network 89

Network Banking Financial Government 89

Phil Windley

OCTOBER 31, 2017

Verify is a univeral identity assurance system for UK citizens but has a limited data set. This is achieved through the careful combination of several important technologies: Decentralized Identifiers (DIDs) — DIDs are identifiers intended for self-sovereign, verifiable digital identities. For example, GOV.UK

Internet 45

Internet Architecture System Data 45

Phil Windley

MARCH 26, 2018

Let’s begin by reviewing Sovrin-based credentials and how they are used. Issuers issue and identity owners accept Sovrin credentials that are based on emerging Verifiable Claims standards. Identity owners store these credentials in their digital wallet. A credential consists of a set of claims.

Banking 45

Banking Government Examples Groups 45

Phil Windley

NOVEMBER 27, 2018

wallet for use with Sovrin and a commercial enterprise-grade verifiable credentialing system called Verity. The Government of British Columbia is building software to use Sovrin credentials for business licensing. Tags: sovrin identity evernym indy. For example, Evernym is building the Connect.me

Open Source 75

Open Source Network Government Software 75

Phil Windley

JULY 14, 2018

As I wrote in Multi-Source Identity: Your digital identity is made from credentials from multiple sources. They could provide a Sovrin credential stating you're a customer and maintain a certain balance. Similarly, you could have a relationship with your employer and an employer-issued credential stating you're an employee.

Banking 40

Banking Insurance Meeting System 40

Phil Windley

DECEMBER 5, 2019

Credential issuers and credential verifiers of all stripes, including banks, governments, educational institutions, etc, must be comfortable with using Sovrin for it to gain universal adoption as an identity metasystem. Tags: sovrin identity governance gdpr privacy i4a.

Government 52

Government Groups Internet System 52

Scott Lowe

JANUARY 22, 2024

I fairly certain this is only the docker CLI (much in the same way the Pulumi Kubernetes provider requires kubectl to be installed locally), but I haven’t verified this for certain yet. ID ()}, Tags : pulumi. You’ll need Docker installed locally. I tested this from a Linux system running Docker 24.0.7; PublicSubnetIds.

Resources 88

Resources Linux Programming Examples 88

Phil Windley

MARCH 1, 2023

There is also an emerging Self-Sovereign Identity (SSI) metasystem based on DIDs and verifiable credentials. Tags: identity ssi The SL metasystem is widely used and has provided significant value to the online world. I evaluate each in terms of Kim Cameron’s Laws of Identity. I believe this accounts for much of its success.

Social 53

Social Operating Systems Authentication Banking 53

Phil Windley

DECEMBER 16, 2022

A digital identity wallet is a secure, encrypted database that collects and holds keys, identifiers, and verifiable credentials (VCs). Performing cryptographic functions like signing and verifying signatures. Identity-related activities like authentication and credential exchange are built on top of these basic functions.

Operating Systems 95

Operating Systems Authentication Security Storage 95