►
Description
Julie Esser, CULedger & Drummond Reed, Evernym
Consumers have become hypersensitive to the way their digital identities are used and what data is shared with even the most trusted sources – including their financial institution. Instead of waiting for a crisis, the distributed ledger is taking action to provide consumers with the most secure digital identity developed: self-sovereign identification (SSI).
SSI is a global digital identifier built on a distributed ledger platform that permits members to securely interact with their credit union. By giving individuals control over their personal identifiable information, SSI can create a truly secure and privacy-preserving flow of information.
During this session, learn from CULedger, about the benefits of SSI, the security measures it will provide to protect digital identities and how organizations should leverage the technology to gain their users’ trust.
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #HyperledgerGlobalForum2018 #Blockchain
A
B
At
Evernham,
my
title
is
chief
trust
officer
and
I'm,
one
of
the
trustees
of
the
sovereign
foundation.
A
number
of
you
probably
just
heard
the
talk
on
sovereign,
the
nathan,
georgia,
sovereign
sitio,
just
gave
we're
gonna
go
deeper
into
one
of
the
projects
based
on
sovereign,
which
is
C
ledger.
My
co
ID
all.
A
Right
so
we
have
three
parts
in
this
presentation
and
we're
gonna
get
into
that
kind
of
the.
Why
Drummond's
gonna
show
you
the
how
and
then
fingers
crossed
with
me
my
demo
or
a
little
bit
better
than
it
did
this
morning.
So
let's
just
jump
into
this
real,
quick
I
wonder:
will
you
start
for
those
of
you
in
the
room
that
might
not
be
familiar
with
what
credit
unions
are
credit
union
is
a
term.
A
That's
that's
very
common
in
the
US,
however,
credit
unions
are
all
over
the
world,
actually
they're
they're
called
financial
cooperatives
and
they're
owned
and
controlled
by
their
members.
So
once
you
become
a
member
of
a
credit
union
you're
in
for
life,
you
have
a
you
share,
a
common
bond,
meaning
that
there
is
some
type
of
association
that
you
have
with
that
particular
credit
union.
Most
credit
unions
are
based
on
our
occupational
based,
meaning
there's
a
civilian
between
a
an
employer
group
and
the
credit
union
itself.
A
That's
how
they
were
first
started,
but
there
are
other
types
as
well:
there's
Association.
So
if
you
belong
to
a
charity
or
contribute
to
a
charity
or
belong
to
a
church,
you
might
be
associated
with
a
credit
union
as
well
as
their
community
base
as
well.
So
if
you
live
work
or
worship
within
a
geographic
boundary
you're
eligible
for
membership,
they
share
a
non-for-profit
structure,
so
they're
nonprofit
financial
cooperatives,
meaning
that
you
as
members
of
the
organization
share
in
the
profits
as
well.
A
So
when
we
look
at
Cu
ledger
we're
looking
at
a
truly
a
global
type
of
organization,
we
want
to
be
able
to
leverage
the
entire
industry,
which
makes
up
of
over
eighty
nine
thousand
credit
unions
today
in
over
260
million
consumers
in
the
u.s..
We
make
up
probably
about
a
101
I,
think
it
is
million
consumers
in
the
US
so
about
half.
A
So
why
is
this
important?
It's
important,
because
there
is
a
very
strong
relationship
between
consumers
and
their
credit
unions
and
consumers
have
a
very
high
value
of
trust
in
their
relationship
with
their
credit
union,
and
then
that
also
call
it
coincides
with
the
satisfaction
levels
that
credit
unions
have
among
their
membership.
They're
very
high
touch,
they're
very
service
driven
Zoar,
it's
service
oriented
because
of
their
close
affiliation
and
association.
A
But
you
know
this
is
happening
all
the
time
we
hear
about
the
ones,
the
news
that
all
the
big
ones,
the
Marriott,
the
Starwood
one-
that
just
happened,
but
there
are
so
many
others
that
go
onto
the
radar
and
in
fact
that
there
were
you
know,
140
million
records
or
that
were
leaked
in
July
of
this
year
alone
is
just
mind-boggling
to
think
about.
But
then
that
also
coincides
with
these
other
factors
right,
so
we
have
annual
fraud
costs.
So
you
know
what
is
that?
What
is
how
much
is
this
fraud
costing
us?
A
Although
he's
hacking
attacks,
identity
theft,
it's
at
an
all-time
high,
I,
don't
think
that's
gonna
go
down
this
year.
Will
we
get
those
numbers?
But
when
you
have
these
issues
going
on,
then
it
just
penetrates
the
amount
of
cost
that
has
to
go
into
the
synth
estructure
credit
unions
as
a
whole,
as
you
saw
in
that
other
slide,
we
are
nine
percent
penetration
of
the
population,
so
we
are
a
very
small
part
of
the
financial
services
sector,
which
means
that
we
don't
have
a
lot
of
resources,
and
so
the
cost
of
being
compliant
is
huge.
A
It
means
it's
a
huge
issue
that
faces
credit
unions
all
the
time,
because
we
have
to
adhere
the
same
standards
as
a
mega
bank
in
the
US,
for
example.
So
who
is
you
ledger?
The
co
ledger
began
as
a
research
to
action
project
in
early
2016
and
really
spun
on
it
into
a
large
consortium.
All
over
the
world.
We
had
70
entities,
credit
unions
and
credit
and
service
organizations
that
contributed
$650,000
to
this
research
to
action,
effort
in
developing
a
working
proof
of
concept.
A
But
our
mission
is
to
deliver
the
world's
premier
platform
at
digital
exchange
for
the
cooperatives
and
I,
say
cooperatives,
because
we
have
a
global
initiative
in
the
three
areas
that
were
concentrated
on.
First
is
the
area
of
digital
exchange
in
identity,
so
this
year
in
Mart,
are
in
February.
We
issued
my
CEO
ID.
A
That's
why
we're
here
to
showcase
this,
which
is
the
first
universal
self
sovereign,
digital
identity,
credential
and
then
the
second
component
of
our
digital
exchange
is
in
information,
so
the
ability
to
use
smart
contracts
in
a
lot
of
different
lending
aspects,
in
particular
loan
participation,
so
credit
unions
can
share
different
loans.
You
can
incorporate
smart
contracts
in
the
lending
process
in
the
onboarding
process,
as
well
in
terms
of
new
memberships.
So
there
are
a
lot
of
use
cases
there.
A
Let's,
then,
the
third
component
of
that
is
in
currency,
so
I
mentioned
that
we're
not
in
the
cryptocurrency
business.
However,
the
notion
of
digital
currency
is
also
an
interesting
one.
That's
gonna
happen
some
time
or
another,
and
we
want
to
make
sure
that
credit
unions
are
part
of
that
equation
as
well.
A
So
why
is
digital
identity
so
important?
It
really
is
the
foundational
aspect
of
everything
a
credit
union
does.
So
when
you
think
about
your
financial
relationship
anytime,
you
try
to
transact
there's
some
level
of
authentication
that
occurs.
So
every
interaction
starts
with
identifying
who
you
are,
whether
that
be
in
a
call
in
environment,
where
you're
calling
the
contact
center
you're
walking
into
a
branch
or
you're
logging
into
your
mobile
banking
or
your
internet
banking
applications.
A
We
did
some
research
early
on
and
it
showed
that
from
a
consumers
perspective.
Identity
management
is
a
real
pain
in
their
sides.
Right.
We
have
a
plethora
of
usernames
and
passwords
that
we
have
to
manage
every
day
and
if
you're,
like
me,
you
probably
saw
my
three
kids
that
never
liked
to
have
their
picture
taken.
They
expect
me
to
manage
their
identities
as
well,
and
so
that
multiplies
as
we
get
older
in
certain
years
of
our
life
and
probably
benefit
perspectives.
A
Many
of
the
consumers
that
we
survey
saw
my
CEO
ID
as
a
very
positive
aspect
that
it,
you
know,
has
a
promise
of
eliminating
the
usernames
and
passwords
they
currently
maintain.
It
could
offer
a
secure
form
of
identification,
but,
most
importantly,
what
consumers
told
us
is
that
if
credit
unions
issued
these
credentials,
they're
likely
to
switch
financial
institutions
and
for
us
that's
huge,
especially
when
you're
dealing
with
a
nine
percent
market
share.
So
with
that
I
will
turn
it
into
the
part
two
of
our
program.
A
B
Julie
has
painted
the
picture
of
the
business
need
in
the
market
that
the
credit
union
industry
and
Cu
ledger
has
identified
so
I'm
gonna
answer
the
question.
Well,
why
are
they
using
hyper
ledger
in
D
and
sovereign
again
that
you
just
heard
about
from
Nathan
George
the
CTO?
So,
first
of
all
just
to
make
it
clear
what
the
relationships
are
so
at
the
Linux
Foundation,
it
is
the
home
of
the
hyper
ledger
family
of
projects,
which
is
why
we're
all
here,
one
of
those
hyper
ledger
india's
your.
B
Where
is
the
project
on
digital
identity,
the
that
was
originally
contributed
to
hyper
ledger
from
the
sovereign
foundation
and,
as
you
just
heard,
from
Nathan
sovereign
foundation
is
a
global
nonprofit
foundation
has
one
and
only
one
purpose,
to
govern
global
nonprofit
public
utility
for
self
sovereign
identity.
That's
it's
only
purpose.
It's
similar
in
many
ways
to
what
the
domain
name
system
does
for
the
internet,
but
it's
cryptographic
self
sovereign
identity,
so
that
was
the
particular
blockchain
technology.
B
This,
u
ledger
said
that's
what
we
can
use
to
deliver
this
new,
this
new
digital
credential,
so
I'm
going
to
quickly
explain
I've
been
keeping
track
so
far.
Every
single
presentation
slot
here
today
is
included
a
talk
on
self
self
and
identity.
This
new
decentralized
I've
been
in
the
area.
Why
I'm
going
to
explain
it
with
three
that
quickly
explaining
the
three
models
of
digital
identity
we've
been
through
in
the
evolution
of
the
internet?
We
started
out
everyone's
familiar
with
this
model.
B
B
Hundreds
I've
heard
people
that
even
go
into
the
thousands
of
passwords
and
independent
sites
there
they're
part
of
now
just
to
accomplish
that
safely
on
the
internet
actually
involved
seven
years
worth
of
development
of
standards.
Those
are
not
the
most
widely
adopted,
TLS
SSL
and
TLS
the
most
widely
adapted
encryption
standards
in
the
world.
B
Just
so,
you
could
have
a
secure
connection
with
a
website
all
right,
but
all
the
pain
of
you
having
to
maintain
that
you
know
you
being
the
the
engine
of
driving
that
every
place
and
the
fact
that
you
don't
have
any
independent
digital
identity.
The
solution,
the
first-generation
solution
to
that
problem
was
to
put
a
service
provider
in
the
middle.
The
term
IDP
is
used
within
the
industry.
B
C
B
In
to
a
service
provider-
and
they
turn
around
and
log
you
in
or
share
some
attribute
data
with
the
website
or
application
you're
gonna
log
into
this
federated
model
has
been
successful
to
a
limited
standpoint.
All
of
you
that
work
for
major
corporations
are
using
some
form
of
Federation
within
your
corporation
to
provide,
say
the
single
sign-on
into
systems.
Okay,
it's
just
it's
only
practical.
It's
just
cost
savings
for
you
and
for
the
company
as
employees.
B
Now
that
took
three
generations
of
open
standards,
and
this
is
where
I
came
into
the
industry
actually
initially
working
around
Sam,
well,
three
generations
of
open
standards
just
to
try
and
figure
out
how
to
solve
that
problem.
Technologically,
the
problem
is,
it
hasn't
actually
been
very
successful.
By
sticking
a
service
provider
in
the
middle,
you
actually
create
in
many
cases
as
many
problems
as
you
solve.
Okay,
that
identity
is
not
portable.
It's
limited
to
what
is
available
from
that
one
service
provider,
and
there
is
no
identity
provider
that
services
the
whole
world.
B
You
just
can't
get
everyone
to
agree
on
it,
even
if
it's
Google
or
Facebook,
you
can't
use
Facebook
to
log
in
or
either
one
of
those
to
log
into
your
credit
union.
You're
a
bank,
for
example,
they're.
There,
security
isn't
high
enough,
so
that
takes
us
to
the
third
generation.
What
is
widely
been
called
self
sovereign
identity
or
SSI.
Now,
if
you
look
at
this
model,
we
go
back
to
just
two
parties,
but
notice
you're,
no
longer
a
dotted
circle.
B
You
are
first-class
citizen
or
entity
on
the
internet
and
you
don't
have
an
account
someplace
right.
If
I
turn
around
and
form
a
relationship
with
you
and
get
out
of
business
card,
I,
don't
say:
hey!
Thank
you
for
forming
the
count
with
me
right,
we're
forming
a
relationship
technically,
a
connection
all
right.
It's
a
mutual
collection
connection.
It
goes
in
both
directions
with
whatever
peer
and
that
other
peer
could
be.
A
person
could
be
an
organization
or
it
could
be
a
thing.
Self
serving
identity
is
not
just
for
people.
B
It's
for
organization,
things,
anything
that
needs
identity
on
the
Internet.
So
why
is
blockchain?
What
enables
this?
Why
is
this
a
secret
to
being
able
to
go
to
this?
It's
here's.
The
reason
what
makes
this
work
is
I
get
it
my
favorite
prop
now,
ladies
and
gentlemen,
decentralized
self,
sovereign
identity,
you
all
know
how
to
use
it
now.
The
one
thing
that
this
is
not
is
blockchain
enabled.
B
Okay,
if
I
give
you
a
credential
or
I,
walk
into
an
airport
and
give
one
of
these
credentials
to
a
TSA
representative,
they
verify
it,
but
they
don't
use
crypto
right.
They
actually
use
black
light
technology
on
that
US
driver's
license
there,
but
they
don't
use
crypto,
which
means
it's
actually
fairly
easy
to
spoof,
but
that's
how
it
works.
I
have
a
set
of
credentials
that
I
get
from
trusted
authorities
and
I
go
and
give
them
to
the
verifiers
that
used
to
accept
those
credentials.
I
control,
this
wallet,
I
control.
B
What
goes
in
it
verifiers
decide
what
they
accept
issuer's
decide
what
the
issue
there's
no
central
authority
in
the
world
for
it,
that
is
all
we're
doing,
is
taking
this
and
putting
it
on
this
okay.
Now,
in
order
to
do
that,
it
actually
takes
time
just
to
make
it
clear.
So
where
do
you
get
the
credentials
that
actually
make
this
work?
If
I
issue
my
own
credential,
it
might
be
fine
as
a
business
card.
It's
not
gonna.
Get
me
on
a
plane
at
an
airport.
B
I
need
to
get
a
credential
from
some
other
party,
just
like
I
got
this
driver's
license
or
my
passport,
so
I'm
gonna
get
it
from
some
peer
and
then
I'm
going
to
show
it
to
another
peer.
That's
basic
protocol
peer
to
peer
works
everywhere.
To
do
all
this,
we
actually
need
for
open
standards.
So
the
first
one
is:
how
do
we
actually
put
what
we
call
decentralized
identifiers
on
a
blockchain,
and
why
do
we
need
that?
B
What
makes
this
system
trusted
is
the
ability
for
the
verifier
when
I
show
up
Prudential
to
verify
the
signature
on
that
credential
from
the
issuer?
How
can
we
do
that
in
interoperable
way,
without
any
one
single
route
of
trust
that
we
all
have
to
go
to?
That's
where
this
piece
comes
in,
we
use
a
blockchain
and
we
don't
use
it
for
anything
fancier
than
decentralized
key
management.
B
A
di
D
is
simply
the
address
of
a
public
key
on
a
blockchain,
but
by
separating
the
address
from
the
key
pair,
the
public
key,
specifically,
you
can
rotate
keys.
You
can
recover
keys.
You
can
associate
hierarchical,
deterministic
keys,
all
with
an
identifier
that
doesn't
have
to
change
and
which
you
can
cryptographically
prove
control
of.
B
So
you
as
an
individual
or
an
organization
or
a
thing
can
have
a
persistent
lifetime
identity
with
the
associated
cryptographic
control
and
you
don't
have
to
rely
on
any
single
service
provider,
so
sovereign
as
a
network,
as
a
system
was
built
from
the
ground
up
to
say,
hey,
we
just
need
this
piece
and
that's
the
piece
that
is
at
hyper
ledger.
That's
the
ending
node
project.
All
of
this
appear
is
actually
takes
place
off,
ledger,
tirely,
off,
ledger
exchange.
B
This
is
called
the
Indy
agent
project
and
whereas
this
project
is
fairly
mature
and
I
mean
is
still
evolving,
but
most
of
the
development
energy
has
now
appear.
Okay.
Now
the
other
things
you
need
is
you
need
interoperable
open
standards
for
wallets.
This
is
something
called
DKMS,
which
was
a
year-long
project
funded
by
the
US
Department
of
Homeland
Security
and
there's
a
whole
paper
on
it
and
the
hyper
ledger
India,
if
you,
if
you
just
google
hyper
ledger
in
DD,
kms
you'll
get
a
link
to
that
paper.
B
The
third
thing
is:
how
do
you
authenticate
between
these
two
parties?
That's
called
it
off.
It's
now
being
layered
over
those
other
protocols,
open
ID
connect,
a
web
off
and
Fido
they're.
All
saying
hey:
this
is,
we
can
add
the
support
for
this
and
finally,
of
course,
you
needed
for
the
verifiable
credentials
to
be
interoperable.
That
standard
has
been
a
working
group
at
the
w3c
almost
two
years
now,
and
it
should
complete
the
first
generation
within
the
next
six
months.
So
that's
why
this
is
not
possible
for
all
this
to
happen.
B
B
Every
one
of
those
keys
has
an
Associated
end
point
such
that
you
can
establish
that
channel
typically
in
the
cloud
and
then
the
cloud
talks
down
to
your
local
devices
in
order
to
do
it
safely,
I'm
going
to
cover
this
in
a
minute
there's
another
thing
in
there
called
a
link
secret
and,
lastly,
that's
where
the
credentials
go.
Just
like
they
go
in
this
wallet
as
they're
issued
to
me
over
the
connections
I
create
with
the
issuers,
they
go
in
the
wallet
and
then
I
create
connections
with
various
verifiers
one
of
the
keys
to
all.
B
B
So
this
piece
of
plastic
was
issued
by
the
state
of
Washington
I'm
a
u.s.
resident
and
that's
a
driver's
licenses
are
at
issue
the
state
level.
So
they
give
it
to
me.
I
put
in
my
wallet,
I,
go
to
the
airport
and
show
it
to
a
TSA
agent.
The
digital
equivalent
of
that
is
Washington.
State
DMV
would
register
a
D
ID
on
their
choice
of
any
network
that
support
of
them
VIPs
are
not
specific
to
sovereign.
B
It's
an
open
standard
that
has
already
got
to
support
Bitcoin,
aetherium,
I,
think
they're
about
it
doesn't
different
called
VIP
methods
that
have
been
created.
They
choose
the
the
D
ID
network
that
they
want
to
register
that
on
and
the
public
you,
the
D,
ID
and
public
here
up
here.
They
of
course
have
the
private
key.
I
then
show
up
and
I
prove
my
identity
of
them
exactly
the
way
I
would
to
get
this
piece
of
plastic
right
whatever
they
need
to
do.
That's
up
to
them.
When
they're
satisfied,
they
issue
me
the
credential.
B
It
goes
into
my
wallet
and
then
I
go
to
TSA
and
how
many
folks
came
to
this
conference
and
used
a
mobile
boarding
pass,
but
of
your
hands
right
now,
all
right,
almost
half
the
room.
Did
it
just
imagine
the
exact
same
QR
code
that
you
use
to
show
that
boarding
pass?
It's
not
your
driver's
license
or
any
other
credential
in
your
wallet
right
one
scan.
You
could
share
a
Prudential
one
scan
from
some
issuer
and
that's
how
you
get
a
credential.
We
don't
need
to
invent
new
UI
patents
for
this.
B
We
just
need
all
the
crypto
and
infrastructure
to
do
it
now
with
sovereign.
The
last
point
I'll
make
this
is
actually
sovereign
and
hyper
ledger
in
T
specific.
This
is
the
generic
model,
but
with
sovereign
we've
said
for
privacy
of
my
design,
we're
going
to
take
two
more
steps.
One
is,
as
you
form,
these
connections
up
here,
they're
done
with
pairwise
pseudonymous
D
IDs.
These
do
not
go
on
a
public
ledger.
B
If
I
was
to
exchange
business
cards
with
Julie
right
now,
my
wallet
would
generate
a
D
ID,
literally
from
the
key
pair
and
exchange
you
with
her.
She
would
exchange
the
same
thing
with
me
were
the
only
two
in
the
world
that
know
those
D,
IDs
and
I've
exchanged
those
keys.
We
now
have
a
persistent
private
connection
forever,
with
no
intermediate
service.
I
can
move
my
cloud
agent.
She
can
move
her
cloud
agents,
we
can
use
every
service,
we
want
for
the
rest
of
our
lives
and
we
will
still
have
that
connection.
B
Same
thing
is
true
between
me
and
any
company
or
me
and
any
device
that
I
connect
you.
This
is
part
of
the
power
of
D,
IDs
and
self
sovereign
identity.
It's
all
power,
because
we
have
this
shared
blockchains.
The
second
piece
and
the
one
you
probably
want
to
go
deepest
on
with
someone
like
Nathan,
is
the
exchange
protocol
that
we
use
for
these
credentials.
Uses
zero-knowledge,
cryptography
I.
Have
nowhere
near
enough
time
to
explain
why
we
made
that
decision
at
the
time
it
was
made
about
18
months
ago.
B
There
were
a
lot
of
folks
that
thought
we
were
nuts
right.
No
one
had
ever
used
zero
nagy
crypto
with
this
kind
of
scale
and
now
I'm
happy
to
tell
you
that
there
are
literally
hundreds
of
companies
and
governments
that
have
said
we
now
see.
It's
the
only
way
to
do
this
with
adequate
privacy.
This
by
zero-knowledge
encoding.
This
credential,
it
means
I,
can
prove
anything
on
this
driver's
license.
Just
what
a
verifier
needs
to
know-
I
go
to
a
bar
I
can
prove
just
I'm
over
the
drinking
age.
B
Right
I
go
to
even
the
TSA.
They
just
need
to
know
I'm
US,
citizen
of
the
state
with
valid
driver's
license.
They
don't
need
to
know
any
of
that
rest
that
information.
So
this
is
the
first
step
in
reclaiming
our
privacy
on
the
Internet.
So
that's
the
end
of
that.
Of
course,
we
can
go
much
deeper
and
there
will
be
more
sessions
on
that,
but
that's
enough
of
the
how
and
Julia's
going
to
take
back
over
and
go
into
an
example
what
this
is
actually
going
to
look
like
yeah.
A
So
this
was
kind
of
what
it
ends
up
being
looking
like.
So
from
our
perspective,
we
want
my
co
ID
to
be
the
first
ke
way:
C
back
credential,
that's
issued
by
credit
unions
that
really
sets
the
gold
standard
for
internet
identity,
and
you
know
the
financial
crisis
that
occurred
in
2008
credit
unions
were
not
part
of
that.
In
fact,
we
were
really
held
to
a
standard,
a
you
know
it
like
it
or
not.
Our
conservative
nature
probably
helped
us
in
this.
A
A
Today,
I'm
gonna
try
and
pull
off
this
demo,
and
hopefully
it's
not
gonna
blast
your
ears,
but
before
we
do,
that,
I
should
mention
why
we
chose
this
demo
in,
but
this
proved
concept
in
the
first
place,
so
in
credit
unions
and
financial
services
in
a
hole
there
has
been
an
increase
of
fraud
that
exists
in
a
call
center
channel.
So
there
are
fraudsters
out
there
that
are
using
this
channel
to
social
engineer,
these
entry-level
positions
to
get
very
sensitive
information
on
individuals
to
do
really
bad
things.
A
B
D
See
ledger:
we
know
that
protecting
our
members
is
one
of
our
number
one
jobs
for
credit
unions.
It's
hard.
We
asked
them
a
lot
of
hard
questions,
especially
when
they
call
them
to
the
contact
center.
Some
of
these
questions
imagine
the
phone
rings
and
Mr
Bond
is
phoning
in.
We
got
to
verify.
This
is
who
they
say.
They
are
20
to
60
seconds
of
interrogation.
D
Doesn't
leave
our
members
feeling
exactly
happy
so
this
time
after
we've
done
that
the
MSR
invites
them
to
get
a
my
Cu
ID
they
can
use
later,
which
is
far
faster
and
far
more
secure.
The
member
installs,
the
application.
We
establish
a
cryptographically
protected
in
private
Channel,
it's
unique
for
the
credit
union
and
this
member
every
different
member
has
a
totally
different
connection.
We've
now
got
a
kicker
connection.
D
We're
gonna
offer
that
member
a
credential,
so
Mr
Bond
receives
a
credential
called
a
my
CEO
ID
and
goes
through
and
accepts
that
this
means
that
they
can
show
they
have
this
credential
that
is
controlled
on
their
device.
It's
biometrically
locked
into
the
hardware
of
their
device.
So
as
this
credential
is
offered
the
cryptographic,
magic,
I
guess
on
the
phone
as
well
as
on
the
server
side,
we've
now
got
a
connection.
D
The
is
now
going
to
test
this
exactly
like
they
would
test
it
or
use
it
when
the
member
phones
in
next
they
do
an
authentic
eight.
The
member
is
asked
to
show
and
share
that
proof.
If
it's
they're
not
on
the
phone
credit
union,
they
would
simply
reject
that.
They
send
that
proof
over
again.
More
cryptographic
happen
well,
crypto
stuff
happens
here.
We've
now
shared
that
credential
and
at
the
MSR,
and
it
shows
that
they're
authenticated.
D
A
B
A
key
point
to
make
about
that
experience
you
just
saw
there
are
banks
that
offer
various
forms:
banks,
credit
unions,
financial
institutions,
high
authentication
requirements
to
offer
multi-factor
authentication.
Today,
almost
all
of
you,
I,
probably
using
it
with
your
bank
or
financial
institution,
and
that's
the
only
place
you
can
use
it.
In
some
cases
you
can
use
with
a
handful
of
other
places
that
credential
you
just
saw
could
be
used
by
any
website
or
application
in
the
world
that
decides
to
accept
that
credential.
It's
all
open
standards
and
part
of
the
hyper
ledger.
B
Indie
project
it
will
continue
to
grow,
is
going
to
be
the
libraries
that
sites
and
apps
need
to
plug
in
to
start
to
accept
self
sovereign
identity.
Exactly
the
same
way,
they
could
go
to
Facebook
and
get
the
Facebook
connector
plug-in
or
LinkedIn
to
get
the
only
thin
connector
plug-in,
but
it
only
works
with
those
one
systems
with
self
sovereign
identity
powered
by
blockchain
and
hyper
ledger
India
at
the
Linux
Foundation
we're
going
to
break
out
of
those
silos
once
and
for
all,
and
the
credit
union
industry
is
leaving
our
way
into
that
Thanks.
A
Just
want
to
close
with
a
real
quick
statement,
so
when
you
go
back
to
your
respective
organizations
and
share
what
what
you've
seen
and
have
learned
about
over
the
last
couple
days
and
you're
more
interested
in
sharing
the
SIA
ledger
story
with
your
colleagues,
we
are
planning
a
livestream
event
on
January
18th,
we're
hoping
this
is
going
to
be
a
worldwide
event.
So
I
don't
have
a
date
posted
yet,
but
on
CEO
ledger,
Commons
our
website
and
they'll
have
more
information
there
or
anytime.
A
E
Name
is
Garrett
Edmond
with
IBM
research,
I'm
wondering
you
mentioned
both
anonymity
and
kyc
in
the
same
talk
which
makes
sense
because
they're
both
identity
related,
but
they
seem
to
be
the
opposite
ends
of
that.
Are
they
two
fundamentally
different
use
cases?
Is
there
a
continuum?
How
do
you
combine
the
two
in
a
single
system.
B
A
B
Short
answer
is,
it
is
a
continuum.
I
actually
have
a
separate
slide
at
most
of
a
talk
that
I
do
about
that
continuum
from
what
we
call
very
heavily
legally
verifiable
identity,
all
the
way
to
a
perfect
anonym,
that
is
an
entire
spectrum,
sovereign
infrastructure
and
hyper
ledger.
India
is
designed
to
support
every
point
in
that
spectrum,
so
it
really
comes
down
to
the
context
of
any
particular
relationship,
obviously
dealing
with
the
financial
service
provider,
their
legal
regulations
or
require
kyc
not
just
legally
verifiable
identity,
but
to
a
certain
standard.
That's
acceptable
in
that
jurisdiction.
B
However,
that's
not
and
should
not
be
the
requirement
for
all
your
interactions
on
the
internet
so
part
of
the
whole
idea
of
what
Phil
Windley
the
sovereign
foundation
chairman
who,
by
the
way,
has
a
great
blog
with
with
about
two
dozen
different
articles
about
different
aspects
of
both
sovereign
and
self
sovereign
identity.
Hydrilla
ledger
indie:
it
talks
about
as
multi-source
identity,
meaning
every
one
of
the
credentials
I
have
in
this
wall.
It
came
from
a
different
source.
They
all
have
different
contexts,
different
abilities
to
in
in
most
cases.
These
are
all
clearly
find
me
there.
B
They
will
be
what
we
call
very
anonymous
credentials,
they're
associated
with
my
legal
identity,
but
with
digital
credentials.
We
can
now
go
over
and
cover
more
of
the
spectrum.
For
instance,
I
can
use
this
driver's
license,
but
only
prove
I'm
over
a
certain
age.
So
I
don't
have
to
give
up
my
identity
to
the
you
know
the
bouncer
or
whoever's
there,
so
it
I
want
to
give
a
huge
shout
out
here
from
IBM
as
young
camenisch
and
his
team
memoryless.
B
A
So
where
we
are,
we
are,
are
initiating
our
alpha
pilots.
So
we've
done
some
production
work
on
a
very
small
scale,
so
we
just
launched
our
alpha
pilots
to
a
group
of
six
credit
unions
and
another
credit
union
service
organization
to
help
us
gain
scale
we'll
be
running
those
through
the
first
part
of
2019,
we'll
be
expanding.
C
B
I'm
gonna
give
you
a
couple
points
here
to
make
sure
it's
clear.
This
is
very,
very
commonly
misunderstood.
So
it's
a
really
a
great
question.
So,
first
of
all
for
every
relationship
you
have
again
in
sovereign.
It's
not
necessarily
this
case
with
other
blockchain
identity
projects,
but
with
hyper
ledger
in
decode
base
and
what's
sovereign,
the
default
is
what
we
call
pairwise
synonymous
identifiers
and
relationships
and
keys.
That
means
every
time
you
form
a
new
relationship.
You
generate
a
unique
D
ID
and
you
share
the
public
key
with
that
other
party.
B
Who
gave
a
talk
earlier
today
showing
workday
issuing
an
employee
credential
that
you
could
then
take
the
ATB
to
enroll
for
a
bank
account
workday,
ATB
and
IBM
would
all
need
public,
D
IDs,
because
their
signatures
on
those
credentials
need
to
be
widely
verified.
But
when
you
and
I
share
a
business
card,
it's
just
between
us,
you
know
it's
me,
I
know
it's
you.
We
can
keep
that
channel
forever,
but
that
doesn't
need
to
be
out
of
public
watch-chain.
B
So
the
keys,
all
those
keys
for
an
individual
will
end
up
on
their
devices
and
then
encrypted
back
up
in
the
cloud.
I
someone's
gonna
ask
the
question:
what
do
you
do
when
you
lose
your
phone?
How
do
you
recover
those
keys
that
I'm,
gonna,
I'm
gonna
just
simply
say?
If
you
really
want
the
answer,
that
question
go:
Google,
hi,
pearl
it
in
didi
KMS
and
read
the
sixty
five
page
paper
that
includes
20
flow
diagrams
on
how
key
recovery
works.
C
B
G
B
Okay,
another
great
question:
first,
let
me
explain
a
current
digital
identity
systems.
What
we've
had
up
until
this
point?
You
do
exactly
what
you
say.
You
onboard
a
customer
into
a
system.
Okay,
with
some
sort
of
an
identity.
There
is
no
onboarding
a
customer
in
your
system.
There
is
only
giving
them
a
credential
I've,
a
wallet
full
of
credentials
from
all
the
the
issuers
of
credentials
that
I
need.
B
So,
if
you're
an
issue
of
a
credential
like
a
credit
union,
is
going
to
be
issuing
my
co
ID,
then
you
will
issue
that
credential
according
to
your
requirements,
for
what
a
customer
needs
to
do
to
earn
that,
by
the
way,
that's
going
to
be
a
very
standardized
process.
It's
it's.
The
best
practice
sovereign
foundation
is
created
is
called
a
governance
framework.
B
We
developed
one
for
the
whole,
the
sovereign
network,
but
is
designed
for
other
what
we
call
domain-specific
governance
frameworks
like
the
one
being
developed
by
the
credit
unions
and
that's
the
set
of
rules,
the
policies
and
procedures
against
which
they
will
issue
a
my
CI
d--
credential,
and
they
will
revoke
it.
We
haven't
said
much
about
revocation,
but
the
other
problem
the
public
blockchain
can
solve.
Is
you
can
make
credentials
revocable
it's
another
feat
of
zero
knowledge
cryptography.
It's
also
explained
in
that
DKMS
paper,
but
that
way
the
issuer
simply
according
to
its
governance
framework.
B
If
you
they
will
issue
you,
the
credential,
and
if,
for
some
reason
you
you
know
you,
you
break
the
rules
or
you
no
longer.
So
you
let
you
remember
whatever.
Then
they
can
revoke
that
credential,
but
that's
all
up
to
you
as
an
issuer
and
every
issuer
can
have
their
own
rules
and
every
verifier
out
there
can
decide
what
issuers
they
trust.
You.
B
A
good
way
to
put
it
yes,
you
can
think
of
it.
What
that
blocking,
what
the
public
blockchain
space,
soles
with
hyper
ledger
Indy
and
the
agent
agent
protocol
is
a
universal
bridge.
Google
would
like
to
be
that
bridge.
Facebook
would
like
to
be
that
bridge,
but
that's
the
situation
we're
in
right
now.
You
have
to
pick
a
particular
bridge
and
there
is
no
bridge
to
everywhere.
What
we're
building
here
is
something
that
is
internet
wide.
Okay,.
E
Thanks
second
question
and
there's
often
a
power
imbalance
between
the
person,
who's
asking
to
see
credentials
and
the
person
who
has
to
provide
it.
We
know
that
from
mobile
phone
apps,
where
often
the
app
providers,
the
app
vendors
require
a
lot
of
permissions
that
we
would
rather
not
give
them
any
thoughts
on
that
I
mean
it's
not
really
a
technology
question,
but
I
guess
more.
A
social
hacking
question.
B
I'm
happy
to
the
question
comes
up
a
lot
and
it's
actually
one
of
the
reasons
I'm
here
I've
been
working,
the
internet
identity
for
20
years
and
I.
First
of
all,
I
don't
think
self.
Sovereign
identity
has
a
panacea
to
that,
but
it
is
a
great
leveler
for
the
playing
field.
Okay,
that
once
again
would
be
keeping
count.
How
many
times
I
pulled
out
my
wallet
there's,
certainly
a
power
imbalance
in
the
issuer's
of
these
credentials,
but
no
one
I,
don't
see
any
of
us
going
around
complaining
about
that
right.
B
That
power
balance
exists
much
in
a
much
greater
form
on
the
internet
because
of
the
computing
power
and
information
aggregation
power.
Certain
folks
have
out
there
versus
me
as
an
individual
have
almost
not
that
we
I
think
are
going
a
long
ways
towards
saying
look:
I
can
now
go
get
a
credential
from
any
issuer
right
and
I
can
share
it
with
any
verifier.
That's
a
much
more
level
playing
field
than
what
we
have
today.
So
I,
don't
think
it's
a
panacea,
but
we
I
will
tell
you.
B
There
are
already
folks
coming
to
the
sovereign
foundation
and
the
vendors
like
Evernham,
saying,
hey.
We've
got
an
innovative
new
idea
for
how
to
provide
you
know
credentials
to
largely
to
individuals
in
some
cases,
by
business
credentials.
If
you
haven't
seen
the
BC
government's
and
the
Ontario
government
presentation
on
hyper
linearity
catalyst
and
the
orc
book
service,
businesses
are
also
going
to
have
credentials
and
that's
gonna
help
level
the
playing
field
for
them
too.
So
I
think
it
will
make
a
difference.
We'll
have
to
see
how
much.
G
I
think
this
is
a
question
for
Julie.
It's
kind
of
about
the
economic
model.
So
let's
say
I'm
a
mobile
phone
service
provider
and
I
want
to
use
the
Cu
credential.
Is
that
something
I
would
have
to
pay
to
the
credit
union
or
some
group?
Would
there
be
a
fee
for
me
to
use
that,
in
my
non
credit
union
application,
the.
A
Way,
we're
structuring
it
we're
actually
kind
of
fine-tuning
that
right
now
now
that
we
have
our
Credit
Union
investor
pool
we're
bringing
them
in
on
more
of
a
committee
structure
to
give
us
input
on
pricing.
Our
goal
is
to
make
the
enrollment
process
to
be
a
cost
or
no
cost
type
of
model.
There
might
be
a
transaction
fee,
but
really
the
the
the
revenue
model
will
be
on
the
verifier.
A
So
if
it's
another
entity,
let's
say
another
bank
or
a
credit
union
or
a
merchant
that
wants
access
to
so
them
that
credential,
the
verifier
are
the
ones
that
are
gonna
be
actually
paying
for.
But
you
know
you
kind
of
think
about
some
of
the
conversation
that
were
happen
happening
earlier
about
loyalty
and
the
ability
for
someone
to
monetize
some
parts
of
their
information.
That's
an
interesting
concept.
We
haven't
gone
down
that
road,
but
you
know
we're
exploring
all
of
those
type
of
things
so.
A
I
mean
in
the
forms
of
you
know,
if
you
know
it's
a
kind
of
a
vicious
circle,
if
specifically
about
the
my
CID
credential
revenue,
I,
don't
have
any
answer
for
you
yet,
but
on
the
backside
of
it,
you
know
when
you
think
about
how
long
processes
take
you
know.
So
the
savings
of
cost
savings
that
would
exist
from
using
those
type
of
credentials
from
an
Operations
standpoint
could
likely
go
into
back
to
dividends
back
to
the
members
or
back
into
other
new
programs.
A
F
I
Thanks,
it's
really
interesting
stuff,
I'm
axel
simon
and
with
red
hat,
though
my
question
doesn't
have
much
to
do
with
my
employer.
Okay,
let's
take
a
real
context,
so
someone's
at
the
door,
the
club
they
want
to
get
in
and
just
ask
them
also
beyond
their
age
for
their
name,
their
gender
and
their
address.
F
The
person
is
likely
just
going
to
scan
and
say
well,
okay,
whatever
I
just
want
to
get
in.
Are
we
going
to
think
of
any
mechanisms
that
make
it
possible
for
them
to
say
no?
No,
no
I
will
I
will
just
actually
only
allow
this
thing,
because
if
we
don't
make
it
very
practical
for
people
to
say
no,
what
I
think
is
likely
to
happen
is
just
on
the
gent
like
on
the
web.
You
must
give
us
all
this
information
to
access
our
services.
People
just
go
well,
okay.
F
What
can
I
do
yeah
and
I
think
that's?
Otherwise.
We
reach
the
dangers
of
basically
to
privacy
tax.
The
club
can
say.
If
you
give
us
more
information,
we
will
give
you
a
free
drink.
We
will
give
you
you
know
a
little
discount
and
rich
people
will
say:
I
don't
care,
but
poor
people
will
say
yes,
I
need.
I
will
do
that
because
it
is
in
my
interest.
So
I
think
that's
a
fine
line
that
we
should
consider
I.
B
Strongly
agree
with
you,
and
there
are
conversations
going
on
around
credentials
and
the
fact
that
you
will
have
a
digital
wallet
paired
with
an
agent
that
can
instantly
transfer,
not
just
one
credential
but
part
of
one
of
the
great
benefits
of
using
zero
knowledge.
Proof
cryptography
is
the
verifier
can
give
you
what
they
call
it.
A
proof
request
that
you
can
answer
with
any
combination
of
claims
attributes
from
any
set
of
those
credentials,
so
your
ability
to
share
that
information
has
just
gone
way
up
here
now.
B
What
I
think
is
our
moral
responsibility,
and
I
know
it
is
a
sovereign
foundation.
The
governance
framework
we
developed
there
is
to
say-
and
we're
also
going
to
empower
you
as
an
individual
to
control
the
extent.
So
you
there's
no
such
thing
as
any
automatic
exchange
right.
You
always
are
in
control
of
that.
What
I
think
we're
going
to
see
and
what
we
need
it
goes
to.
One
of
the
earlier
questions
is
social
pressure
on
the
verifiers
to
do
proof,
requests
that
are
appropriate
with
their
needs.
B
Okay,
now
in
the
EU
happens
to
be
this
law,
which
some
of
us
in
the
US
are
actually
rather
fond
of
right
Californians,
particularly
and
it's
gonna
really
mandate
many
cases
yeah.
Yet
the
thing
about
that
proof
request
is
I
can
prove
that
the
verifier
gave
me
that
proof
request
if
they've
asked
for
more.
What's
what's
that's
why
we
call
it
an
agent
what's
paired
with
that
wallet
that
agent
can
do
some
pretty
smart
things
as
in
go.
B
You
know
what
big
red
flag
they're
asking
for
things
you
shouldn't
ask
for
that
category,
business
or
the
location
you're
in
or
whatever
right
or
nine
out
of
ten
people
did
not
respond
to
that
right
week.
We
can
start
to
aggregate
the
power
of
those
agents,
so
now
it
could
go
the
other
way
too
right.
I.
A
H
B
Well,
first
of
all,
just
make
it
clear
as
much
as
Julie
and
and
the
co
ledger
would
love
for
everyone
just
use
my
UID,
their
their
one
issuer
right.
So
every
organization
that
wants
to
empower
you
with
a
digital
credential
is
now
you
know
we're
going
to
open
the
floodgates.
They
believe
that
I,
you
know,
I've
actually
I
haven't
been
a
credit
union.
Member
Paul
have
been
wanting
to
now
I'm
convinced
to
do
it,
but
what
credit
unions
have?
Is
this
unique
trust
relationship
with
their
members,
such
that
they're?
B
A
really
good
starting
point
and
I
I
personally
think
it's
gonna
give
them
a
leg
up
on
on
competing
with
the
banks
and
others,
but
there
are
already
other
NGO
organizations
that
I
mean
the
whole
area.
The
1.1
billion
people
in
the
world
have
no
identity
that
they
can
legally
use,
or
you
know
for
financial
empowerment,
so
that's
an
entire
segment
of
the
industry
and
there's
a
special
counsel.
At
this
time,
foundation
called
the
identity
for
all
which
she's
focused
just
on
helping
solve
that
problem,
so
I
hope
that
it
turns
into
a
giant
competition.
B
A
Just
to
add
to
that
German,
you
know
the
whole
nature
of
self
sovereign
identity
is
one
that
you
can
use
anywhere
you
own
it
as
a
consumer.
You
control
it.
It
can
never
be
taken
away.
You
can
use
it.
However,
you
want
to
so,
even
though
that
you're
being
issued
of
my
CID
credential
from
your
credit
union,
you
should
be
able
to
use
that
anywhere.
You
want
to
with
another
banking
relationship.
A
Another
credit
union
relationship,
another
merchant
relationship,
whatever
you
know,
so
that
is
the
intent
of
that
there'll-
be
a
lot
of
interoperability
that
I
envision
happening
between
the
model
networks
but
yeah
in
order
for
it
to
be
truly
so
sovereign,
it
has
to
operate
that
way.
You
know
what
the
other
thing
I'd
add
on
to.
That
is
a
question
I
get
commonly
is
why
are
credit
unions
so
far
ahead
of
this
and
the
banks-
and
you
know
I,
guess
the
the
answer
to
that.
A
It's
pretty
clear
in
my
mind,
I
mean
I've
spent
30
years
in
this
industry,
so
I'm
a
little
biased,
but
you
know
it's
a
collaborative
cooperative
nature
of
these
entities
that
make
this
happen.
You
know
we
are
truly
a
collaborative
industry,
we
don't
have
hidden
agendas,
we
don't
have
shareholders
to
answer
to
that
have
invested
dollars
into
these
entities.
This
is
all
about
us.