JSON-LD VC with BBS, OID4VCI, OID4VP, and Pseudonymous DID Key

Presented at IIW 39 (https://internetidentityworkshop.com/) on October 30, 2024

Transcript

1. JSON-LD VC with BBS, OID4VCI, OID4VP, and Pseudonymous DID key Dan Yamamoto (Internet Initiative Japan Inc.) 2024-10-30 / IIW 39
2. Overview 1 Holder / Wallet Verifier Issuer OID4VCI OID4VP W3C VC W3C VP W3C Data Integrity W3C Data Integrity Blind BBS BBS ZKP Pseudonymous did:key Pseudonymous did:key Yet to be Standardized Wallet-initiated presentation
3. Pseudonymous DID key 2 Holder / Wallet Verifiers Issuers secret key did:key for I1 did:key for I2 did:key for I3 did:key for V1 did:key for V2 did:key for V3 ◼ A single secret key can generate multiple public keys (did:key) for different domains ◼ Multiple public keys cannot be shown within a single domain (inner-domain linkability) ◼ It is not possible to correlate public keys across different domains (inter-domain unlinkability) pubkey for dom := Hash(dom)^secret
4. Pseudonymous DID key 3 Holder / Wallet Verifiers Issuers secret key did:key for I1 did:key for V1 appeared in Key Proof for OID4VCI appeared in VP for OID4VP
5. Demo 4 1. Obtain a certificate of residence from the local government 2. Present the certificate at a skills testing center for identity verification 3. Receive a skill credential from the testing center after the assessment 4. Attach the credential to your Nostr account and share it with your friends VC VC VP VP Issuer Verifier Issuer Verifier
6. TODOs 5 ◼ Catch up the latest features e.g. Browser API, DCQL, transaction_data, ... ◼ More sophisticated user experiences ◼ Revocation ◼ Hardware security module ◼ Documentation and Standardization