Decentralized Identity for a Decentralized World. Alex Simons Partner Director Program Management, Identity Division Microsoft

Transcription

1 Decentralized Identity for a Decentralized World Alex Simons Partner Director Program Management, Identity Division Microsoft

2 Today Your Identity == App(username, password)

3 However u s e r n a m e Your Identity > App(username, password)

4 Identity is everything you do achievements purchases education u s e r n a m e play interests work citizenship Your Identity > App(username, password)

5 But our identities are strewn across apps and services achievements purchases u s e r n a m e education play interests work citizenship Your Identity > App(username, password)

6 As a result, our identities are at risk! Unauthorized use or personal data Endless breaches of personal data Billions spent on audits Your Identity App(username, password)

7 Customer needs and asks Individuals Privacy and control of my identity and data Protection from hacks Protection from breaches Organizations Trust, but Verify Collaborate with everyone Reduce risk for GDPR, KYC/AML Governments ID for cross border & agency Digital ID for refugees Social and financial inclusion for everyone

8 User in control achievements purchases u s e r n a m e education play interests work citizenship

9 User in control u s e r n a m e

10 Incubation Hypothesis for Decentralized ID Each of us needs a digital identity we own, one which securely and privately stores all elements of our digital identity. This self-owned identity must seamlessly integrate into our lives and give us complete control over how our identity data is accessed and used.

11 Proof of Concept Own and control your Identity

12 The User Agent generates keys Identity Hub Universal Resolver User User Agent Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

13 Alice creates a Digital ID on the blockchain Identity Hub Universal Resolver User User Agent Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

14 The Blockchain returns Alice s Decentralized ID (DID) identifier Identity Hub Universal Resolver User User Agent DID://<string> Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

15 Alice signs in using her student credentials Identity Hub User Agent Universal Resolver User University Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

16 and requests a digital diploma Identity Hub Please send a Digital Diploma User Agent Universal Resolver User University Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

17 The University requests Alice s Digital ID Identity Hub Please send your Digital ID User Agent Universal Resolver User University Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

18 The User Agent discloses the Digital ID to the University Identity Hub User Agent Universal Resolver User DID://<string> University Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

19 The University sends a digital diploma signed with it s digital ID Identity Hub User Agent Universal Resolver User Accept or discard attestation 1 item has been received Signed Diploma from University. Accept attestation? University Allow Deny Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

20 The User Agent signs and stores it in Alice s identity hub Identity Hub User Agent Universal Resolver User University Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

21 Now Alice can present her digital diploma to potential employers and other organizations Identity Hub Present signed diploma Potential Employers & Professional network User Agent Users Universal Resolver Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon

22 In Summary

23 In Summary People, Apps, and Devices Identity Hub Stage: Designs in progress DID Authentication Stage: Designs & Prototypes Users User Agent Stage: Working Implementations Universal Resolver Stage: Alpha Implementation W3C Decentralized Identifiers Stage: Working Implementations Bitcoin via Blockstack Sovrin via Sovrin ledger Ethereum via uport coming soon Distributed Systems Blockchains and Ledgers Join, Collaborate, Contribute CCG

24 Design Principles Users can have one, or more, DIDs based on open standards. DIDs can be resolved across chains: public, private, etc. DID permissions are managed using keys that are accessible only to the user. Identity attributes (or claims) are stored in an off-chain, standards-based Identity Hub. Users can have one, or more, Identity Hubs, stored locally on devices or in the Clouds. User consent is required to access Identity claims supports granular access controls. Claims are compatible with existing standards (Oauth2.0/OIDC).

25 Thank you. Copyright Microsoft Corporation. All rights reserved.

26 The next 3 steps to making the ecosystem real 1. Ease of use Registration Key management Zero-knowledge-proof Compatibility Recovery and revocation

27 The next 3 steps to making the ecosystem real 1. Ease of use 2. Performance & Scale Consistent experience that scales globally from 10s to 100s of thousands per second.

28 The next 3 steps to making the ecosystem real 1. Ease of use 2. Performance & Scale 3. Join, collaborate, and contribute

29 The next 3 steps to making the ecosystem real 1. Ease of use 2. Performance & Scale 3. Join, collaborate, and contribute Thank you. OwnYourIdentity@microsoft.com Copyright Microsoft Corporation. All rights reserved.

30 In Summary People, Apps, and Devices Identity Hub Data off-chain Instances across devices & clouds Schema-based Universal Resolver For a variety of chains Registration Resolution Users User Agent Id + service end-point on-chain Keys generated & stored locally Data encrypted at edge DID Authentication W3C Decentralized Identifiers Bitcoin via Blockstack Ethereum via uport Sovrin via Sovrin ledger coming soon Distributed Systems Blockchains and Ledgers