Drummond Reed, Chief Trust Officer at Evernym and Sovrin Foundation Trustee, features in our first Webinar "The Story of SSI Open Standards" by giving us the background on the foundation of Self Sovereign Identity. Drummond explains the technical and development aspects of DIDs, DKMS, DID Auth and Verifiable Credentials that will make Self Sovereign Identity possible.

1. Webinar: The Story of SSI Open Standards
Background on the Foundation of Self Sovereign Identity:
DIDs, DKMS, DID Auth and Verifiable Credentials
SSIMeetup.org26 April 2018
Drummond Reed
Chief Trust Officer Evernym and Sovrin Foundation Trustee
@drummondreed
https://creativecommons.org/licenses/by-sa/4.0/

2. 1. Empower global SSI communities
2. Open to everyone interested in SSI
3. All content is shared with CC BY SA
SSIMeetup.org26 April 2018
Alex Preukschat @SSIMeetup @AlexPreukschat
Coordinating Node SSIMeetup.org
https://creativecommons.org/licenses/by-sa/4.0/
SSIMeetup objectives

3. Who Am I?
3
• 20 years in Internet Identity
• 13 years (all 26 instances) of
Internet Identity Workshop
• 15 years in Internet Identity
standards
– W3C
– OASIS
– IETF
– OpenID Foundation
Years

4. Who Am I?
4
Chief Trust Officer, Evernym
Trustee, Sovrin Foundation
Chair, Sovrin Trust Framework
Co-Chair, Decentralized
Identity Foundation ID WG
Co-Chair, OASIS XDI TC
Principle Investigator, U.S
Dept. of Homeland Security
DID and DKMS Projects
Hats

5. Self-sovereign digital identity
5
Lifetime portable identity for any
person, organization, or thing
that does not depend on any
centralized authority and
can never be taken away
SSIMeetup.org

6. SSI 101: The Three
Models of Digital
Identity

7. #1: Siloed (Centralized) Identity
Standards:
SSIMeetup.org

8. #2: Third-Party IDP (Federated) Identity
Standards:
SSIMeetup.org

9. #3: Self-Sovereign Identity (SSI)
SSIMeetup.org

10. #3: Self-Sovereign Identity (SSI)
SSIMeetup.org

11. #3: Self-Sovereign Identity (SSI)
SSIMeetup.org

12. #3: Self-Sovereign Identity (SSI)
Digital
wallet
SSIMeetup.org

13. Emerging Open Standards for SSI
SSIMeetup.org

14. Decentralized
Identifiers (DIDs)

15. 078-05-1120
SSIMeetup.org

16. did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
SSIMeetup.org

17. 17
SSIMeetup.org

18. 18
You will not have just one DID.
You will have thousands.
SSIMeetup.org

19. 19
Each one will give you a
lifetime encrypted private channel
with another person, organization,
or thing
SSIMeetup.org

20. 20
You will use it not just to prove
your identity, but to exchange
verifiable digital credentials
SSIMeetup.org

21. 21
Best of all: there is
no central registration authority—
every DID is registered directly on
a blockchain or distributed network
SSIMeetup.org

22. URN Syntax (RFC 8141)
22
urn:uuid:ae84-d5c2-9fb785ea-72cd34
Namespace
Scheme
Namespace-Specific Identifier
SSIMeetup.org

23. 23
did:sov:3k9dg356wdcj5gf2k9bw8kfg7a
Method
Scheme
Method-Specific Identifier
DID Syntax (W3C)
SSIMeetup.org

24. 24
Initial DID Method Specs
SSIMeetup.org

25. 25
{ “Key”: “Value” }
SSIMeetup.org

26. DID (for self-description)
Set of public keys (for verification)
Set of auth protocols (for authentication)
Set of service endpoints (for interaction)
Timestamp (for audit history)
Signature (for integrity)
26
The standard elements of a DID doc
SSIMeetup.org

27. How did DIDs happen?
Conceived in 2015 by W3C Verifiable Claims
Task Force
Evernym applied to U.S. Dept of Homeland
Security S&T to fund DID standard
Over 2016 Evernym worked with SSI
community to develop DID V1.0
June 2017 DID spec contributed to W3C
Credentials Community Group
27 SSIMeetup.org

28. DKMS
(Decentralized Key
Management System)

29. 29
A proposed open standard for
managing the private keys you
need for DIDs—including robust,
highly usable key recovery
DKMS is…
SSIMeetup.org

30. DID Layer
The decentralized identity “stack”
Identity Owners
Cloud Layer
Edge Layer
SSIMeetup.org

31. 31
DKMS key recovery supports both
offline recovery (“paper wallet”)
and social recovery (“trustee”)
methods
SSIMeetup.org

32. How did DKMS happen?
Nov 2015: concept of decentralized PKI
(DPKI) started at Rebooting Web of Trust
Jan 2017: Evernym proposed Phase 2 DID
research project to U.S. DHS S&T
June 2017: Evernym completed analysis of
NIST 800-130 standard for key mgmt
April 2018: Evernym showed first DKMS
design, architecture, and prototype at IIW
32
SSIMeetup.org

33. DID Auth

34. 34
A simple standard way for a
DID owner to authenticate by
proving control of a
private key
DID Auth is…
SSIMeetup.org

35. DID Layer
The decentralized identity “stack”
Identity Owners
Cloud Layer
Edge Layer
SSIMeetup.org

36. How did DID Auth happen?
Apr 2017: Rebooting Web of Trust #4 in
Paris, DID authors converge on DID auth
Nov 2017: Decentralized Identity
Foundation forms DID Auth WG
Feb 2018: BC Gov offers bounty for DID
Auth preliminary spec and implementation
April 2018: Markus Sabadello and team
demo DID Auth prototype at IIW
36
SSIMeetup.org

37. Verifiable Credentials

38. 38
The format for interoperable,
cryptographically-verifiable
digital credentials being defined
by the W3C Verifiable Claims
Working Group
Verifiable credentials are…
SSIMeetup.org

39. DID Layer
The decentralized identity “stack”
Identity Owners
Cloud Layer
Edge Layer
SSIMeetup.org

40. W3C Verifiable Credentials Ecosystem
SSIMeetup.org

41. Sovrin Verifiable Credentials Ecosystem
SSIMeetup.org

42. Sovrin Verifiable Credentials Ecosystem
SSIMeetup.org

43. How did Verifiable Credentials happen?
Nov 2015: Verifiable Claims Task Force
created at W3C by Manu Sporny & David
Longley (Digital Bazaar) + supporters
Late 2016: VCTF proposes Verifiable
Claims Working Group to W3C
Epic battle ensues
May 2017: W3C finally approves new WG
43
SSIMeetup.org

44. Webinar: The Story of SSI Open Standards
Background on the Foundation of Self Sovereign Identity:
DIDs, DKMS, DID Auth and Verifiable Credentials
SSIMeetup.org26 April 2018
Drummond Reed
Chief Trust Officer Evernym and Sovrin Foundation Trustee
@drummondreed
https://creativecommons.org/licenses/by-sa/4.0/
Thank you for loving SSI!