Attendees:
@Aashish Shreshta
@Jasleen Malvai
@Bill Gleim
@Mike McCoy
@Ted Achtem
@Stephane Mouy
@ Nidhi Jain
Main Event:
Deepak Maram presents CanDID: a platform for practical, user-friendly realization of decentralized identity, the idea of empowering end users with management of their own credentials. While decentralized identity promises to give users greater control over their private data, it burdens users with management of private keys, creating a significant risk of key loss. Existing and proposed approaches also presume the spontaneous availability of a credential-issuance ecosystem, creating a bootstrapping problem. They also omit essential functionality, like resistance to Sybil attacks and the ability to detect misbehaving or sanctioned users while preserving user privacy.
CanDID addresses these challenges by issuing credentials in a user-friendly way that draws securely and privately on data from existing, unmodified web service providers. Such legacy compatibility similarly enables CanDID users to leverage their existing online accounts for recovery of lost keys. Using a decentralized committee of nodes, CanDID provides strong confidentiality for user's keys, real-world identities, and data, yet prevents users from spawning multiple identities and allows identification (and blacklisting) of sanctioned users. We present the CanDID architecture and its technical innovations and report on experiments demonstrating its practical performance.
Deepak is a PhD student at Cornell University and he is the principal author of this paper: https://eprint.iacr.org/2020/934 which describes CanDID in detail.
To paraphrase Daniel Hardman "CanDID has a solution for the bootstrapping problem of Decentralized Identity" .
- Ideas for Future talks (please add suggestions with contact)
- GADI = Global Architecture of Decentralized ID
- EBSI and eIDAS, and integration into the open platform. More on this topic.
Discussions on Identity as seen by the state vs across regions and internationally and how that helps stitch together the blockchain infrastructures, in terms of trust, KYC etc.. Refer to FATF.
- Further on TOIP
- NIST 800-63: https://pages.nist.gov/800-63-3/sp800-63-3.html Call For Comment https://csrc.nist.gov/publications/detail/sp/800-63/4/draft
- ID2020: Why is it important? Financial and societal inclusion through Digital Identity and SDGs.
Recordings
Minutes
Deepak presented CanDID.