DIF Monthly #29

Website | Mailing list | Meeting recordings

Table of contents

1. Foundation News; 2. Group Updates; 3. Member Updates; 4. Digital Identity Community; .5. Events; 6. Metrics; 7. Get involved! Join DIF

🚀 Foundation News

DIF's Community Manager, Limari Navarrete

• Joining the digital identity community can be overwhelming. DIF's Limari Navarrete has been documenting her personal journey.
• Check out her series on Medium here:
  • What is Decentralized Identity? Let’s Figure This Out
  • Why Decentralized Identity is Needed

DIF Monthly All-Hands

• DIF's monthly All-Hands call next takes place on Wednesday 9th November at 5pm CET | 8am PT - See DIF calendar
• This public call is open to anyone interested in getting an overview of all the work happening in and around DIF, as well as home to some lively discussions!
• All-hands also has a public Discord channel to keep track of the links and references shared on the call, and to provide a venue to continue the conversation - DIF All-hands Discord

DIF Feedback Call.

• These open calls are a space to gather feedback from the community and optimize our strategy.
• Held every Wednesday in two alternating timeslots, there's definitely one that fits your timezone! Check our DIF calendar here

DIF New Member Orientation Call

• These open calls are for anyone new to DIF.
• How to get started, overview of our work and groups, and how to get the most from your DIF membership.
• Held every Wednesday in two alternating timeslots Check our DIF calendar here

Newsletter RSS

• The DIF monthly newsletter has an RSS feed. Find it here - DIF Newsletter RSS

🛠️ Group Updates

☂️ InterOp WG (cross-community)

• Congratulations and welcome to Daniel Bluhm (Indicio) & Brent Shambaugh as the two new co-chairs of the Interop Group at DIF
• Now is a great time to get on-board to discuss interoperability goals and the road to adoption

💡 Identifiers & Discovery

Meeting - 27 September 2022

• US mobile driver's license call for comments: https://www.regulations.gov/commenton/DHS-2020-0028-0001
  • Discussion on RealID and ISO 18013-5: https://www.iso.org/standard/69084.html
  • Introduction to mDL technology
    • Hashes of each data element, bundle is signed
    • Age over X, selective disclosure is "clunky" but supported
    • No trust in user hardware, all calculation is done by issuer
  • Discussion on difference between ISO mDL and W3C VC standards
    • Competition or coexistence? Both have some support.
    • mDL written by issuers for issuers, more work needed on user and verifier perspectives.
    • mDL is not decentralized.
  • Digital wallets in Europe vs US
    • Who will issue the wallets? Centrally by the state, or free market with certification?
• Universal Resolver is better than ever! We have been making behind-the-scenes stability and capacity improvements. Read more about this interoperability tool on the DIF Blog here

💡 DID Authentication WG

• This ongoing collaborative work is co-hosted with DIF by the Open Identity Foundation (OIDF) as a work item of the OpenID Connect WG
• Latest
  • OpenID for Verifiable presentations
  • Self-Issued OpenID Provider v2 (latest update Sept 2022)

🛡️ Claims & Credentials

• Meeting 11 October 2022 - (1300 ET) Workitem Updates: Presentation Exchange (v2.0) + Credential Manifest (1pm ET Thu)
  • PE has a couple of last things
    • PR to formalise how to use the subject is issuer property (actively used)
    • optional property
  • CM
    • wallet rendering spec is not optional, as none of its uses were mandatory & its uses are non-normative
  • WR
    • RWOT had some tangential topics
• Workitem Status: Data Agreements
  • Met at Rebooting Web of Trust and was a rebooting topic, expanding the scope
  • will have an update in 2 days
• [Verifier Universal Interface (VUI)] - first meeting as ongoing work item coming soon!
  • Read about the VUI initiative on the DIF blog here
• Trust Establishment
  • examples will be contributed for credential use-cases
  • working on final PRs to get spec to V1
  • Daniel B & Sam C are talking to Darrel @TOIP : opportunity for convergence
  • DID-relative service discovery example PR is coming
• [JWT-VC Interoperability Profile](https://github.com/decentralized-identity/jwt-vc-presentation-profile/issues, https://identity.foundation/jwt-vc-presentation-profile/)
  • calls in the meeting for a sister profile in for issuance -> wallet, will address in the next meeting
• Schema Directory
  • will publish out an example to a DIF schema directory spec page this week.
• Dormant and/or "paused" work
  • (v1; meetings paused) WACI-DIDComm
  • (v1; meetings paused) VC-JWT & Friends
• TPAC W3C DIDWG+VCWG update from Brent
  • did working group met at TPAC, direction for the next charter, charter is moving forward. End of the month for feedback before going to advisory committee. Able to break ground on a number of large topics, progress in defining scope of each problem, still trying to find consensus on solutions, JSON vs JSON-LD, multiple issuers, multiple subjects etc
• Topic of Interest
  • https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/draft-documents/verfiable-credentials-holder-binding.md
  • https://github.com/w3c/vc-data-model/issues/929

📻 DID Comm

• First Public Review Draft of ToIP Technology Architecture Specification announced at ToIP Summit 2022 Sept 14 in Dublin (part of Linux Foundation Open Source Summit)
• Ongoing work & discussions
  • WACI
  • MLS - Willem
  • Rich Chat
  • group management
    • Yasiru - DIDComm on ZMQ
      • email as transport
      • websockets
    • nfc (DSR) (not yet published)
    • What’s the plan for IETF? IETF Draft - DIDComm3
    • DIDComm v.Next wishlist

• DIDComm Open User Group: GitHub Link
  • Meets on Discord: Invite is here
  • Using UnSync format, described here to engage asynchronously in a set time period (typically 4-12 hours) at regular intervals to keep conversation & work moving.
  • Discussion of the group writing a DIDComm Guidebook - feedback and contributions welcome! Potentially covering:
    • What is DIDComm and why would I use it? (super high level)
    • Why developing a protocol on top of DIDComm is a great idea.
    • Protocol Design Basics
    • Protocol Design Best Practices

🌱 Wallet Security WG

• Meetings are now every two weeks, next meeting 4th Oct
• Update on hardware binding - AnonCred example with Lissi wallet ( potential to extend to W3C credential (JSON) )
• Open Wallet Foundation - Announced at Open Source Summit, Dublin: Linux Foundation Announces an Intent to Form the OpenWallet Foundation

📦 Secure Data Storage

• Discussion
  • User Controlled Authorization Network (UCAN) model and how it contrasts with decentralized approaches
  • Value of JWTs?
  • CACAOs (Containers for a chain-agnostic Object Capability (OCAP))

🌱 Applied Crypto WG

• Thursday 6 October 2022 - (3pm ET) Work Item status
• bbs signatures
• JSON Web Proof: activity is paused at DIF while we work within IETF on establishing a working group. The next step for that is an interim birds-of-feather meeting scheduled for Wednesday, October 12th.
• revocation_methods_for_verifiable_credentials
  • we now have a strawman of Andrew's method https://identity.foundation/revocation/non-revocation-token/
  • new meeting time 8am PST every Tuesday
  • would like to bolster more attendance, would another meeting time change help more people attend?
• Spartan ZKP signatures

✈️ Hospitality & Travel

• Continued discussion around creation of passenger/customer profile for holistic travel experiences - join the next call to discuss!
• added an SSI Activity Tracker section to the H&T SIG site. Two trackers listed, additions welcome!

🏦 Finance & Banking

• Meeting 38: Financial Privacy & The U.S. Constitution
  • Presentation from Nick Anthony. Nick is a policy analyst at the Cato Institute's Center for Monetary and Financial Alternatives. During this meeting, Nick will discuss some of the reasons that financial privacy is so lacking in the United States. Among these reasons, Nick will highlight the Bank Secrecy Act, third-party doctrine, and Right to Financial Privacy Act."
• Meeting 37 - Five Lessons Learned from 3 Years of 'Open Banking'
  • In meeting 37 we will host David O'Neill from APImetrics. APImetrics has been monitoring Open Banking APIs since the earliest days of UK Open Banking. Monitoring production endpoints and FAPI consent flows provides a lot of insights about how the Open Banking rollout has evolved. David will provide comprehensive insights into the state of the standard, its adoption, and performance. Topics touched on include:
    • UK Open Banking Adoption different from 'World'
    • Consequences of Non-Compliance
    • Banking data is "yours" in UK and Australia
    • "Synthetic Calls" - expand
    • Technology Debt (COBOL)
    • Sandbox Offer
  • Meeting 36 - Working Meeting "AML Survey"
• Meeting 35 - Decentralized Identifier and the State
• Meeting 34 - Public Voter Registries
• Meeting 33 - Beneficial Ownership
• Meeting 30 - Intro New Co-Chair: Lennart Lopin

🌏 APAC/ASEAN Open Call

• Our APAC/ASEAN Community Call is a collaborative initiative between DIF and the Trust over IP Foundation (ToIP).
• We invite you to attend the next meeting Thurs Oct. 27th at 9am CET / 3pm SGT for updates. See DIF Calendar here for meeting details
  • On the agenda: Takeaways from Identity Week Asia and ToIP Summit
  • Last meeting Sept 22nd: Presentation from Silence Laboratories on their work building a library stack to help enterprises adopt decentralized authentication, signature, and authorization.

🌍 Africa Open Call

• Join us on the next call November 3rd*
• ID4Africa announces new Livecast for 28th Sept

🦄 Member Updates

Avast

• Avast joins the Trust Over IP Foundation (ToIP), Decentralized Identity Foundation (DIF), the World Wide Web Consortium (W3C), and the FIDO Alliance, and confirms their commitment to community-driven open standards, working within these organizations to develop the foundations for decentralized digital trust infrastructure.

Microsoft

• Microsoft reaffirms their commitment to open-standards-based Decentralized Identity systems, and pushes their IAM platform, Entra Verified ID, to general release.

Affinidi

• How to have an enterprise Decentralized Identifier (DID) when an employee 👨‍💼👩‍💼 can act on behalf of this company 🏢 with flexible permissions layer in a decentralized or peer-to-peer way? Creating an Enterprise DID to Provide Power of Attorney for Employees

Nuggets

• Nuggets CEO, Alastair Johnson‘s latest Forbes article, discusses eIDAS 2.0 and how self-sovereign digital identity represents a massive step forward in privacy, security, and user control.

  • eIDAS 2.0 Turns to Self-Sovereign Identification to Bring Users Ownership and Control.🔐

• Indicio is happy to announce the public launch of their flagship product Proven™, a complete, verifiable credential solution that makes it easy for companies and organizations to implement and scale open source decentralized identity.

• Heather Dahl, CEO of Indicio, Named a Finalist in the Ecosystem Leadership Category of the Blockchain Leadership Awards

NeoKe

• NeoKe, a Digital Traveler ID wallet enabling secure data sharing in the travel sector, won Microsoft's Identity for All hackathon in July -Biometric Update

Finema

• Finema is to announce our partnership with ADVANCE.AI, a leading big data and AI company that helps enterprise clients solve any problems related to digital transformation, fraud prevention and process automation.

Dock

• Dock is excited to announce that users can now create and manage their Decentralized Identifiers (DIDs) from the Dock Wallet mobile app. With this release, the Dock Wallet gains a powerful new feature to enable users to better control and manage their Verifiable Credentials.
• Dock DIDs now support multiple Key Pairs. We're very happy to announce that Dock DIDs can now have multiple keys and that those keys can support 4 Verification Relationships: Authentication, Assertion, Key Agreement, and Capability Invocation.

NEST

• September 2022- NEST has launched The Other Fruit, an NFT marketplace to facilitate legal contractual exchange of assets and services. Its dynamic and editable legal contracts provide users with the ultimate protection in every peer-to-peer transaction.

🌎 Digital Identity Community

Linux Foundation

• Get up to speed on Self-Sovereign Identity with this brand new, entirely free course provided by the Linux Foundation: Getting Started with Self-Sovereign Identity (LFS178x)!
  • A 6-7 hour course which aims to prepare you to have informed business discussions around digital identity, and particularly self-sovereign identity, with a good understanding about how identity systems work and influence our lives. It will also enable you to identify innovative ideas and solutions for leveraging SSI, and better position you for further technical learning around digital identity.
• Open Source Summit Dublin - September 2022: Linux Foundation Announces an Intent to Form the OpenWallet Foundation
  • The mission of the OWF is to develop a secure, multi-purpose open source engine anyone can use to build interoperable wallets. The OWF aims to set best practices for digital wallet technology through collaboration on open source code for use as a starting point for anyone who strives to build interoperable, secure, and privacy-protecting wallets.
  • The OWF does not intend to publish a wallet itself, nor offer credentials or create any new standards. The community will focus on building an open source software engine that other organizations and companies can leverage to develop their own digital wallets.

Trust over IP

• The ToIP Concepts and Terminology WG is developing the second generation of a "terminology toolbox" that will give any community the ability to develop, publish, share, and link their own glossary. Please join them if you're interested in contributing to or using Terminology Toolbox 2.0.

• As announced at the ToIP Mini Summit in Dublin in September, the ToIP Governance Stack WG started up a Governance Architecture Task Force to begin developing templates, guidelines, and methodologies for various standard governance framework documents (e.g., risk assessments, business requirements, security/privacy requirements, etc.)

Ethereum

• In step into a more sustainable future, Ethereum moves from Proof-of-Work to Proof-of-Stake.
• Check in with WIRED to find out what this means
• And read Ethereum Cofounder, Vitalik Buterin's words about where Ethereum goes next

US Government - European Union alignment

• U.S. President Joe Biden's Executive Order On Enhancing Safeguards For United States Signals Intelligence Activities - Oct. 7
• Read the EU's FAQ about this piece of legislation
• IAPP have a detailed analysis of this move and its implications here

EBSI

• September 2022 - Self-Sovereign technologies are a part of Europe’s Digital Transformation - European Blockchain Services Infrastructure (EBSI) supporting SSI through three key principles:
  1. Ecosystem growth
  2. Privacy by design
  3. Market-development & collaboration
• EBSI celebrates some of their success stories with Verifiable Credentials in education
• EBSI publishes and updates a list of their conformant digital wallets, including offerings from DIF members DanubeTech, ValidatedID & Gataca
• EBSI also have made a conformance testing framework publicly available

Government of British Columbia, Energy & Mines Digital Trust

The government of British Columbiainitiated the Energy & Mines Digital Trust (EMDT) project under the Ministry of Energy, Mines and Low Carbon Innovation (EMLI) to facilitate the transition to a resilient, clean economy. Read how they are using digital trust technology, in particular Verifiable Credentials, to improve sustainability reporting in the natural resource sector for organizations.

• Check out their video presentation on YouTube here!

Hyperledger Foundation

• Hyperledger Identity round-up: A cross section of production digital identity solutions built using Hyperledger technologies

Blockchain in Healthcare Today

• Blockchain in Healthcare Today (BHTY) CALL FOR MANUSCRIPTS to the world’s 1st peer reviewed open access journal that amplifies & disseminates distributed ledger technology research and innovations in the healthcare information systems, clinical computing, network technologies and biomedical sciences

Fashion crossover moment

• Could luxury fashion items soon have their own Verifiable Credentials? British leather goods specialist Mulberry has announced plans to equip its products with digital IDs, a tool that has also been adopted by Courrèges, to enable care, authentication, repair and resale of their pieces.

🎈 Events & Promotions

Internet Identity Workshop

• IIW35 - November 15 - 17, 2022 in-person at the Computer History Museum, Mountain View, California.
  • Click here to get a 20% DIF discount on your ticket!
• IIW34 April 2022 book of proceedings is online and publicly available here
• IIW36 and IIW37 dates have been announced: APRIL 18, 2023 – APRIL 20, 2023, OCTOBER 10, 2023 – OCTOBER 12, 2023, California

• European Commission: Towards a legislative framework enabling a digital euro for citizens and businesses

  • 7 November, 2022

• IAPP Data Protection Intensive: Deutschland 2022

  • 11-12 October | Munich, Germany
  • Two days of in-depth learning and networking for the DACH data protection community.

• I.D.E.A.S. 2022 by CoinDesk

  • October 18-19, 2022 New York
  • What crypto, blockchain, Web3 and digital assets technologies will attract the biggest investment allocations in the years ahead?

• IdentityNORTH Fall Symposium 2022

  • October 26, 2022 | Ottawa, Ontario
  • An exclusive view of the Future of Pan-Canadian Digital Governments.

• Authenticate 2022 - The FIDO conference

  • October 17-19, 2022 | Seattle, WA and Virtual
  • Authenticate events provide expert insights into the who, what, how and why of user authentication – with a focus on the FIDO standards-based approach

• Future Identity Festival

  • 14th & 15th November 2022 | London, UK

• IAPP Europe Data Protection Congress 2022 - BRUSSELS

  1. Training 14-15 November
  2. Workshops 15 November
  3. Conference 16-17 November
  • discussions on strategic developments in regional and international data privacy. Topics will include policy and governance, ePrivacy implementation, artificial intelligence, GDPR enforcement, mergers and acquisitions and privacy in technology

• Workday Rising Europe

  • 15–17 November 2022 | Stockholm, Sweden

• Open Source Summit Japan

  • 5-6 December, 2022 | Japan + Virtual
  • Call for papers! CFP Closes: Sunday, September 18 at 11:59pm PDT

• Open Source in Finance Forum - Linux Foundation

  • 8 December , 2022 | New York, USA*
  • Call for papers closes 12th September, 2022

• IAPP - International Association of Privacy Professionals

  • Open calls for proposals to speak at a number of IAPP's events

🔢 Metrics

Newsletter: 5,956 subscribers | 33% opening rate
Twitter: 6,201 followers | 8.1k impressions | 3.67k profile visits
Website: 24k unique visitors
Youtube: 2.2k impressions

In the last 30 days.

🆔 Join DIF!

If you would like to get involved with DIF's work, please join us and start contributing.

Can't get enough of DIF?
| follow us on Twitter and LinkedIn
| join us on GitHub
| subscribe on YouTube
| read our DIF blog
| read the archives

Got any feedback regarding the newsletter?
Please let us know - we are eager to improve