This is a deck that for describing Self-Sovereign Identity. It was presented at InDITA. It covers Distributed Ledgers (Blockchains), Verifiable Claims, Decentralized Identifiers.

1. Understanding SSI
Kaliya Young
InDITA July 11, 2018

2. What is a Blockchain?

3. The first blockchain was

4. The first blockchain was
the Bitcoin blockchain

5. The first blockchain was
the Bitcoin blockchain
How does it work?

6. The first blockchain was
the Bitcoin blockchain
How does it work?
we will get to that

7. Why is it Interesting?

8. Why is it Interesting?
Solves the
Double Spend Problem

9. What is a BitCoin?

10. BitCoin
Number
What is a BitCoin?

11. BitCoin
Address 1
BitCoin
Number

12. BitCoin
Address 1
BitCoin
Number
WALLET for
BITCOIN ADDRESS
PRIVATE Key
of BitCoin Address 1

13. BitCoin
Address 1 SENDS
WALLET for
BITCOIN ADDRESS
PRIVATE Key
of BitCoin Address 1
BitCoin
Number

14. BitCoin
Address 1
BitCoin
NumberSENDS TO

15. BitCoin
Address 1
BitCoin
NumberSENDS
BitCoin
Address 2TO

16. BitCoin
Address 1
BitCoin
NumberSENDS
BitCoin
Address 2TO
THIS IS A TRANSACTION

18. BitCoin
Address 3 SENDS
WALLET for
BITCOIN ADDRESS
PRIVATE Key
of BitCoin Address 1
BitCoin
Number

19. BitCoin
Address 3
BitCoin
NumberSENDS

20. BitCoin
Address 3
BitCoin
NumberSENDS
BitCoin
Address 5TO

21. BitCoin
Address 3
BitCoin
NumberSENDS
BitCoin
Address 4TO
THIS IS A TRANSACTION

22. THIS IS A TRANSACTION

23. THIS IS A TRANSACTION

29. About Ten Minutes

30. ??????
<—— What is the HASH (Special Number)
of the Bundle of Transactions

31. <——- The Special is Found by a Miner Node
and they are rewarded with a
totally New Bitcoin Number

37. ??????

43. ??????

48. ??????

54. ???

58. ….

59. This LEDGER of Transactions

60. This LEDGER of Transactions
this is CHAIN of BLOCKS of Transaction

61. This LEDGER of Transactions
this is CHAIN of BLOCKS of Transaction
This is all maintained by a network of
commuters a, DISTRIBUTED LEDGER

63. This LEDGER of Transactions
One SHARED LEDGER of Transactions
this is CHAIN of BLOCKS of Transaction
This is all maintained by a network of
commuters a, DISTRIBUTED LEDGER

64. ….
WHAT IS SPECIAL ABOUT THIS?

65. It is Immutable

66. It is Immutable
You can’t erase
transactions.

67. Its Transparent

68. Its Transparent
Anyone can
see the transactions

69. Its “Trustless”

70. Its “Trustless”
The software of the network
runs it. NOT a central
institutional authority.

71. What really makes it work?

72. What really makes it work?
Protocol

80. RENT-A

81. RENT-A
MYURL.COM

82. RENT-A
MYURL.COM
#

83. Decentralized IDentifier - DID
did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
Method
Scheme
Method-Specific Identifier

84. Decentralized IDentifier - DID
did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
Method
Scheme
Method-Specific Identifier
Slide credit: Drummond Reed, Sovrin Foundation

85. did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
Slide credit: Drummond Reed, Sovrin Foundation

86. did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
Public
Key
cc2cd0ffde594d278c2d9b432f4748506a7f9f2
5141e485eb84bc188382019b6
Slide credit: Drummond Reed, Sovrin Foundation

87. did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
047d599d4521480d9e1919481b024f29d2693f2
72d19473dbef971d7d529f6e9
Private
Key
Public
Key
cc2cd0ffde594d278c2d9b432f4748506a7f9f2
5141e485eb84bc188382019b6
Slide credit: Drummond Reed, Sovrin Foundation

88. did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
047d599d4521480d9e1919481b024f29d2693f2
72d19473dbef971d7d529f6e9
Private
Key
Public
Key
cc2cd0ffde594d278c2d9b432f4748506a7f9f2
5141e485eb84bc188382019b6
Slide credit: Drummond Reed, Sovrin Foundation

89. { “Key”: “Value” }
DID
Decentralized
Identifier
DID Document
JSON-LD document
describing the
entity identified by
the DID
Slide credit: Drummond Reed, Sovrin Foundation

90. 1. DID (for self-description)
2. Set of public keys (for verification)
3. Set of auth protocols (for authentication)
4. Set of service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
!90
The standard elements of a DID doc
Slide credit: Drummond Reed, Sovrin Foundation

91. 1. DID (for self-description)
2. Set of public keys (for verification)
3. Set of auth protocols (for authentication)
4. Set of service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
!91
The standard elements of a DID doc
Slide credit: Drummond Reed, Sovrin Foundation

92. 1. DID (for self-description)
2. Set of public keys (for verification)
3. Set of auth protocols (for authentication)
4. Set of service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
!92
The standard elements of a DID doc
Slide credit: Drummond Reed, Sovrin Foundation

93. 1. DID (for self-description)
2. Set of public keys (for verification)
3. Set of auth protocols (for authentication)
4. Set of service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
!93
The standard elements of a DID doc
Slide credit: Drummond Reed, Sovrin Foundation

94. 1. DID (for self-description)
2. Set of public keys (for verification)
3. Set of auth protocols (for authentication)
4. Set of service endpoints (for interaction)
5. Timestamp (for audit history)
6. Signature (for integrity)
!94
The standard elements of a DID doc
Slide credit: Drummond Reed, Sovrin Foundation

95. Institutions can Issue
Verified (Digital) Credentials
to Organizations

96. Verifiable Organizations Network
British Columbia Government
is building it,
and its all up on GitHub

97. Verifiable Organizations Network

98. Verifiable Organizations Network

99. Verifiable Organizations Network
OrgBookProfile
a Business
Public Business Permits

100. Verifiable Organizations Network
OrgBookProfile
a Business
Business Owner
Can Claim These
Public Business Permits

101. Verifiable Organizations Network
OrgBookProfile
a Business
Business Owner
Can Claim These
In the Verifiable
Credentials Format
Public Business Permits

102. Verifiable Organizations Network
OrgBookProfile
a Business
Business Owner
Can Claim These
In the Verifiable
Credentials Format
In a Digital Wallet
Public Business Permits

103. Verifiable Organizations Network
HolderIssuer Verifier
Issues
Claim
Decentralized Identifiers (DIDs)
Public Blockchain or other Decentralized Network
Signs
Claim
Countersigns
Claim
Wallet
Slide credit: Drummond Reed, Sovrin Foundation
BC GOVERNMENT BC BUSINESS

104. Verifiable Organizations Network
HolderIssuer Verifier
Issues
Claim
Decentralized Identifiers (DIDs)
Public Blockchain or other Decentralized Network
Signs
Claim
Countersigns
Claim
Verifies
Signatures
Wallet
Slide credit: Drummond Reed, Sovrin Foundation
BC GOVERNMENT BC BUSINESS CANADIAN GOVERNMENT

105. Verifiable Organizations Network
HolderIssuer Verifier
Issues
Claim
Presents
Claim
Decentralized Identifiers (DIDs)
Public Blockchain or other Decentralized Network
Signs
Claim
Countersigns
Claim
Verifies
Signatures
Wallet
Slide credit: Drummond Reed, Sovrin Foundation
BC GOVERNMENT BC BUSINESS CANADIAN GOVERNMENT

106. HOW DO YOU KNOW ITS TRUE?
Without…

107. HOW DO YOU KNOW ITS TRUE?
Without…

108. HOW DO YOU KNOW ITS TRUE?
Without…

109. !109

110. Create Addressable Identifiers
Created and Owned by People

111. Self Sovereign Identity
no facebook
no phone number
no email provider

112. NO PERSONALLY IDENTIFIABLE
INFORMATION
ENDS UP ON THE BLOCK CHAIN

113. Shared Ledgers

114. Different Blockchain Flavors
Bitcoin,
Ethereum, IOTA,
Veres One
Permissionless Permissioned
Public
Private
Validation
Access
Hyperledger Sawtooth*
Sovrin,
IPDB
Hyperledger (Fabric,
Sawtooth, Iroha),
R3 Corda,
CU Ledger* in permissionless mode
Slide credit: Drummond Reed, Sovrin Foundation

115. DID Layer
The decentralized identity “stack”
Cloud Layer
Cloud Wallet Cloud Wallet
Cloud Agent Cloud Agent
Identity Owners
Edge Layer
Edge Wallet Edge Wallet
Edge Agent Edge Agent
Slide credit: Drummond Reed, Sovrin Foundation
Identity Owners

120. HOW DO YOU KNOW ITS TRUE?
Without…

121. HOW DO YOU KNOW ITS TRUE?
Without…

122. HOW DO YOU KNOW ITS TRUE?
Without…

124. It is essential that we change the culture around
how technology is built now:
• to put humanness first,
• to center communities that have been
marginalized in its creation to date
• to design with awareness of threat models
that have often been ignored until it’s too late.

125. Kaliya Young
kaliya@IdentityWoman.net
Get the Self-Sovereign Identity Scoop
SSIScoop.com
HumanFirst.Tech