►
Description
Auditability, transparency, and security are essential values for a successful blockchain platform. Typically, the key considerations for enterprises when choosing a platform are the platform’s flexibility and scalability. While these factors are important, properly authenticating and validating the participating parties—whether they be part of the consensus protocol, maintaining a ledger, or just acting as a participant—is critical to the trustworthiness of any distributed ledger. In this presentation, Avesta Hojjati will review recent progress in authentication and validation for the permissioned and permissionless blockchain platforms from the perspective of a leading Certificate Authority. He will discuss the current challenges, use cases, and future work evolving around authenticating and validating entities on these platforms.
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
A
Good
morning,
everyone,
my
name-
is
the
best
Oh
Jerry
I'm,
the
head
of
R&D
at
DG
search
for
those
of
you
who
are
not
familiar
with
digi
cert.
Historically,
we
are
a
certificate
authority,
so
certificates
that
exist
on
every
single
phone
that
you
have
here
or
majority
of
the
SSL
handshakes
that
you
make
to
your
web
servers
and
the
browser's
is
actually
provided
by
digi
cert.
The
overview
have
to
talk
today
will
be
in
regards
to
the
thread
of
unauthorized
access.
A
We
will
give
you
some
background
of
what
that
unauthorized
access
means
the
thread
of
invalid
identity.
We
will
describe
label
of
quantum
supremacy
and
what
does
that
really
mean
for
blockchain?
Who
is
ready
for
this
threats
that
we
are
discussing?
What
is
the
digi
stairs
approach
and
industries
approaches?
Specifically,
as
I
mentioned,
we
are
cime
on
the
only
C
I
so
far
who
has
worked
on
blockchain.
We
describe
what
is
probably
key
infrastructure
and
what
we
are
doing
in
regards
to
high
policy
fabric
and
that
will
wrap
up
the
talk
today.
A
I
know
the
presentation
for
is
40
minutes
I,
try
to
wrap
it
up
a
little
faster
than
that.
So
if
there's
any
questions,
I'll
be
happy
to
discuss
those
before
we
get
into
blockchain,
let's
get
to
something
else
that
everybody
else
is
way
more
familiar
with,
and
we
always
hear
those
terminologies
and
that
is
IOT.
A
A
These
are
priorities
that
IOT
has,
and
what
I
would
really
like
for
us
to
think
about
is
what
will
be
the
priorities
for
an
individual
or
an
entity,
who's
going
to
deploy
blockchain,
but
then
what
would
the
security
cost?
Of
those
an
example
in
the
survey
again
that
we
ran
for
IOT,
eight
out
of
ten
business
is
reporting
that
security
as
their
top
concern
for
IOT.
A
But
how
often
have
we
heard
that
security
is
a
concern
for
blockchain
deployments,
right
you're,
saying
that
audit
ability,
transparency
and
visibility
within
D
data
that
you're
adding
is
quite
important,
but
where
security
actually
leads
down.
Going
back
to
the
example
of
Bitcoin,
it
was
a
permissionless
blockchain
and
we
saw
some
abuse
of
the
platform.
A
If
many
of
you
guys
remember,
Silk
Road
back
in
a
day
was
a
platform
that
allowed
people
to
actually
go
ahead
and
buy
drugs,
and
they
were
buying
drugs
online,
utilizing
a
mean
of
payment
that
was
able
to
actually
protect
their
privacy,
that
mean
of
payment
was
Bitcoin
and
nobody
cared
about
the
identity
that
it
was
actually
residing
behind
that
behind
that
purchase.
So
again,
just
preparing
the
mind
sets
here
of
what
do
you
think
in
regards
to
blockchain
and
how
they
are
connecting
that
somewhat
to
the
IOT.
A
In
addition
to
that,
the
percentage
of
companies
that
they're
experiencing
incidents
was
quite
high
about
69
percent
of
them
were
experiencing
data
breaches.
This
is
IOT
now
think
about
the
blockchain
that
evolves
around
data
data
is
everywhere.
So
what
happens?
If
you
don't
have
proper
security
when
it
comes
to
blockchain,
and
then
we
get
some
data
breaches.
Let's
say
you
do
have
a
permissionless
blockchain
platform
and
then
you're
connecting
it
to
the
permission
one
as
on
your
enterprise
and
for
some
odd
reason
you
have
not
done
your
permissions
properly.
A
Now
the
data
will
leak
to
the
permission
list
and
now
be
a
disaster.
So
I
would
like
to
ask
this
question.
Contrary
to
what
you
might
think,
this
two
circles
are
not
the
same,
nor
they
are
the
equal
size.
How
many
of
you
think
that
the
red
one
is
the
bigger
one?
How
many
actually
think
that
the
blue
one
is
the
bigger
one,
fantastic,
so
I
just
like
to
everyone?
These
are
exactly
the
same
size.
What
I'm
trying
to
tell
you
is
in
regards
to
identity.
A
How
would
I
know
that
somebody
and
the
Internet
actually
does
not
provide
the
fake
identity?
How
would
I
know
that,
when
I
talk
to
my
grandma
in
Australia,
I
really
do
talk
to
my
grandma
in
Australia?
Indeed,
I
can
ask
her
some
questions.
Some
jokes
that
she
told
me
when
I
was
very
young
or
I
can
ask
her
about
some
events
that
she
has
taken
place.
But
again,
if
there's
somebody
who's
able
to
do
some
attacks,
such
as
man
in
the
middle
they're,
able
to
actually
go
ahead
and
learn
those
and
come
up
with
it.
A
So
identity
is
quite
important.
Interacting
with
valid
identity
is
an
important
matter,
but
what
is
very
important
when
it
comes
to
blockchain
is
preserving
those
identities.
If
I
put
my
identity
online,
is
it
any
way
for
me
to
actually
prove
Who
I
am
without
telling
more
information.
Some
of
you
might
be
familiar
with
the
technology.
This
is
possible
with
zero
knowledge,
proof
or
other
type
of
approaches
that
exist,
but
that
might
be
a
bit
too
complex
for
for
some
folks
to
to
push
out.
A
So
this
is
everybody's
problem,
but
only
few
solutions
are
available.
Validating
identities,
for
blog
for
permission,
blockchain
platforms
requires
a
rigorous
framework,
so
as
a
certificate
authority,
we
do
this
on
daily
basis.
Whenever
you
go
to
your
financial
institute,
you
connect
to
them
via
SSL
or
TLS,
for
the
modern
terminology
and
usually
connected
them
via
what
we
call
an
extended
validation.
This
basically
means
we
put
them
through
a
framework.
A
They
ask
them
that
they
prove
to
us
that
they're
really,
that
financial
Institute
they
have
been
established,
let's
say
in
Switzerland,
and
they
do
have
the
proper
means,
and
then
we
give
them
a
certificate
that
has
a
different
behavior.
That's
where
you
see
the
green
bar
on
top
of
your
browser
so
are
be
able
to
actually
do
the
same
thing
for
blockchain.
Well,
the
answer,
indeed
is
yes.
A
What
we
can
do
is
when
it
comes
to
the
permission
systems
you
are
able
to
validate
those
into,
despite
the
fact
that
this
is
an
enterprise
and
you're
going
to
trust
everyone,
but
you're
able
to
increase
that
trust
level
and
later
I
will
describe
how
we
have
done
that
in
regards
to
this.
So
knowing
who
the
person
is
interacting
with
that
individual
and
being
able
to
in
some
sense
preserving
their
privacy
is
quite
important.
The
third
problem
that
we
are
working
on
is
quantum
supremacy.
A
How
many
of
you
guys
have
heard
of
quantum
computers,
all
fantastic
in
Europe
everybody
knows
about
quantum
computers,
that's
great,
so
just
the
elevators
push
of
what
a
quantum
computer
is.
Quantum
computers
are
this
new
type
of
computers
that
are
able
to
solve
some
problems
in
polynomial
time
instead
of
exponential
time.
Example
of
that
is
breaking
an
RSA
algorithm
in
classical
computers.
A
If
you're
going
to
break
an
RSA
key
is
going
to
take
you
many
many
years,
but
in
quantum
computers
is
going
to
take
you
maybe
weeks,
example
is
a
breaking
400
bit
of
RSA
requires
only
1000
cubits,
and
that
will
take
you,
maybe
a
couple
of
seconds
to
break
it.
Now.
What's
the
problem
when
it
comes
to
blockchain,
majority
of
the
algorithms
that
we
are
pushing
to
blockchain
are
only
resistance
to
classical
computers.
A
So
if
you
have
a
quantum
computer-
and
you
have
deployed
this
massive
blockchain
platform-
there's
a
chance
that
you're
able
to
break
those
algorithms
once
this
quantum
computers
are
are
out
there.
So
we
need
to
think
about
that
problem
as
well:
identity,
validation
and
quantum
computers,
and
again
some
might
argue
that
quantum
computers
will
not
be
out
in
the
next
5
or
10
years,
and
that
is
totally
valid.
A
A
So
when
it
comes
to
the
idea
of
blockchain,
there's
three
suggestions
that
we
have
as
a
security,
expert
validation
and
identity
protection,
Factory
kind
of
provided-
and
that
is
regardless
of
being
permissions,
permission
list
or
hybrid
model,
there's
a
value
of
interacting
with
valid
identities.
I
mentioned
Silk
Roads,
but
you
can
consider
that
your
being
companies
like
Walmart
and
you
have
number
of
suppliers
being
part
of
your
mission,
high
polish,
your
fabric,
and
you
still
want
to
know
that
who
that
farmer
is
who
has
provided
that
little
with
e.coli.
A
A
All
the
data-
and
that
comes
down
to
the
quantum
supremacy
portion
of
this
is
there
any
algorithm
that
we
are
able
to
use
to
actually
encrypt
the
data
and
put
them
on
the
fabric
or
other
permission
block
chains
and
protect
them
for
the
next
five,
ten
or
twenty
years.
So
what
we
have
done,
a
digi
cert.
We
have
created
an
enhanced
PCI
modular
for
permission,
frameworks
that
provide
you
with
a
scalability
reliability
as
well
as
accessibility.
Today
we
have
about
twenty
billion
different
IT
devices
that
are
utilizing
this
platform.
Therefore,
we
know
is
a
scalable.
A
That
being
said,
the
number
of
transactions
that
you're
going
to
have
on
a
hyper
ledger
fabric
per
se
or
any
other
permission
block
chains,
is
going
to
be
probably
10
or
20
more
times
more
than
the
IOT
devices,
because
this
transactions
are
happening
more
frequently
than
the
transactions
that
IT
devices
are
making.
So
this
is
what
you
have
on
a
high
polish
your
fabric
today,
if
you're
familiar
with
deployment
of
it,
this
is
a
modular
that
you
can
deal
with.
A
A
Functionality
number
one
is
validating
the
identity
of
every
individual
who's
going
to
interact
on
that
framework,
instead
of
being
an
organization
if
you're
mentioning
individuals,
if
you
have
an
employee
who
would
like
to
be
on
the
fabric
and
interact
with
it,
we
will
provide
a
remote
mean
of
actually
validating
their
identity
and
then
pushing
them
on
that
platform.
If
you
have
an
organization
who
would
like
to
go
through
organization
validation,
we
do
the
same
process
for
them.
A
The
second
portion
of
this
is
key
management,
that's
usually
as
being
kind
of
motion
as
I
granted
that
nobody
will
look
at
it,
but
give
you
an
example
in
the
IOT
scenario.
Is
that
good
amount
of
IT
devices
that
you're
seeing
right
now
are
sharing
private
keys?
And
that
is
a
problem,
because
if
one
of
those
IT
devices
gets
compromised,
that
means
the
entire
product
line
of
those
IC
devices
has
been
compromised.
A
So
what
you're
doing
here
is
we
are
managing
the
private
keys
on
hyper
ledger
and
we
are
doing
that
with
number
of
different
ways:
you're,
applying
techniques
such
as
multi-party
computation
to
be
able
to
actually
distribute
the
private
key
between
different
entities
who
are
existing
on
high-polish
your
fabric,
and
then,
if
you
don't
require
that
that
type
of
security,
we
can
apply
something
known
as
shrim
your
secret
chain.
So
you
will
just
share
that
private
key
and
we
don't
need
to
any
any
computation
on
it.
A
The
third
factor
of
this
is
the
distributed
certificates
with
a
high
throughput.
So
today
we
do
have
certificates
that
we
call
short-lived
certificates.
These
are
certificates
that
are
living
for
30
or
90
days.
But
what
would
it
happen
if
I
have
an
entity
that
is
going
to
only
interact
on
the
where's?
Your
fabric
for
a
matter
of
day,
do
I
need
to
waste
a
certificate
for
the
next
29
days?
That's
not
really
feasible.
A
So
what
you're
providing
here
is
a
certificate
that
is
a
timely
manner,
you're
able
to
issue
a
certificate
to
an
employee
or
to
an
organization
for
a
matter
of
days
or
hours
and
they're
able
to
interact
with
that
certificate
on
the
hydrology
fabric
for
that
that
period
and
then
finally,
we
provide
a
management
for
this
platform
that
includes
again
identity,
proper
algorithm
and
then
these
certificate
management,
so
that
comes
with,
are
what
we
call
search
central.
If
you
are
interested
I'll,
be
happy
to
talk
to
you
guys
about
this.
A
A
If
you
have
entick
8
to
an
identity
that
has
not
been
validated
you're,
just
providing
a
mean
of
encryption,
and
basically
you
can
think
about
this
as
providing
a
secure
line
for
form
Alvers
to
be
transmitted
still
they're
using
the
encryption,
but
now
you're,
interacting
with
a
malicious
actor
at
the
other
side.
So
probably
applying
these
techniques
will
require
area,
specific
expertise,
and
there
are
many
different
teams,
researchers
and
companies
that
are
working
on
this.
So
there's
an
industry
vision
when
it
comes
to
this,
and
that
is
one.
A
This
needs
to
be
fully
compatible
with
high
polish.
Your
fabric,
we
mentioned
other
one,
there's
sawtooth
and
I
Roja
and
there's
a
number
of
different
ones
that
we
are
working
on
with
but
fabric
is,
is
the
main
focus
that
we
have
seen.
This
will
be
developed
for
today
and
tomorrow.
I
can't
emphasize
of
how
much
work
has
gone
through
this
quantum
supremacy
and
quantum
algorithms
or
for
short,
we
call
them
PTC,
post
quantum
crypto
as
well
as
this
needs
to
be
a
personalized
solution
for
every
use
case.
A
One
size
fits
all,
definitely
does
not
apply
to
this
scenario.
You
need
to
have
the
proper
architecture
when
it
comes
to
different
sizes
of
deployments,
so
we
mentioned
that
at
the
beginning
of
the
talk
and
when
they
start
to
making
a
scene
that
92%
of
companies
were
saying
that
IT
is
important
for
them,
but
84%
of
those
companies
are
saying
that
they're
thinking
about
blockchain
the
problem
is
zero.
A
Person
of
those
companies
know
about
security
on
blockchain
nor
they're
interested
to
know
about
it,
because
they
believe
blockchain
bytes
nature
will
provide
security,
and
that
is
that
is
quite
sad.
The
use
cases
that
we
have
seen
right
now,
as
in
sexy
good
amount
of
companies,
are
looking
forward
to
actually
have
a
distributed
model
to
be
able
to
take
a
mean
of
payment
from
their
customers
across
the
United
States.
Wherever
you're
residing
the
data
generated
by
manufacturer
and
machinery
is
another
portion
of
this,
and
unfortunately
they
never
mentioned
validation.
A
A
So,
with
that
in
mind,
what
needs
to
be
carried
away
as
industry
leaders
need
to
dedicate
and
enhance
identity,
verification
and
application
when
it
comes
to
permission
or
hybrid
blockchain
platforms,
I'm,
putting
the
permissionless
kind
of
a
side,
because
permission
lists
by
itself
is
designed
for
people
to
actually
use
why's
it
without
getting
authenticated.
Bitcoin
was
the
greatest
example
of
this
everybody
liked
to
be
anonymous.
A
It
wasn't
any
need
for
a
centralized
place
and
the
promise
kind
of
was
that
you
don't
need
to
show
who
you
are
if
you
would
like
to
interact
and
for
some
that
worked
out,
but
in
the
case
of
Silk
Road.
Well,
that
was
a
disaster
in
United
States
they
were
able
to
track
or
FBI
was
able
to
track
the
transactions
that
they
were
taking
place
and
essentially
capture
Ross
was
the
the
owner
of
this
website.
A
So
with
that
in
mind,
if
there's
any
questions,
I'll
be
happy
to
answer
those
I
didn't
want
to
go
really
technical
of
what
we
are
doing.
I
just
wanted
to
mention
that
authentication
and
validation
are
extremely
important.
My
name
is
Vesta
I'll
be
available
for
a
next
two
days.
So,
if
you
have
any
questions,
I'll
be
happy
to
respond
to
this
Thanks.
A
A
My
answer
is
going
to
be
unfortunate,
so
I
spend
majority
of
my
time
in
academia,
so
I'm
finishing
my
PhD
at
the
University
of
Illinois
and
what
I
do
at
work
is
complete
different
than
what
I
do
in
academia
in
academia
actually
attack
devices
to
show
that
they're
vulnerable,
so
medical
devices,
good
example.
Off
of
that,
you
mentioned
the
user,
man
password
being
the
default,
and
that's
what
we
have
seen
on
medical
devices,
and
these
are
devices
that
are
plugged
into
humans.
A
A
I
said
my
answer
is
going
to
be
unfortunate,
because
the
only
way
that
you
are
able
to
promote
that
there
is
bad
security
is
to
actually
show
them
that
the
vulnerability
exists
and,
in
the
past,
the
way
that
I've
seen
that
is
to
attack
them
tell
them
that
there's
a
vulnerability.
If
they
don't
respond,
you
get
FCC
FDA.
All
those
federal
regulators
involved,
the
problem
is,
there
is
no
proper
regulation
when
it
comes
to
blockchain,
there's
no
FDA,
there's
no
FCC
and
maybe
that's
the
proper
way
to
do
it.
A
On
the
other
hand,
it's
improper,
because
your
power
kind
of
decreases,
the
company
could
come
up
with
their
blockchain
platform
and
deploy
it
and
they
could
be
vulnerable.
Let's
say
Marriott
in
US,
but
who's
actually
going
to
look
at
their
permission,
set
up
who's,
going
to
look
at
their
environment
and
development.
So
I
think
it
takes
a
couple
of
headlines
in
newspaper
that
this
person
has
used
blockchain
and
they
have
been
attacked,
and
this
has
been
the
result
and
that
could
probably
cause
them
to
actually
move
towards.
A
A
better
model
are
using
a
standard,
and
another
portion
of
this
is
proper
standards
for
blockchain,
hopefully
in
the
next
two
days.
We
will
hear
something
about
that,
but
there
are
no
standards.
Who's
actually
pushing
for
the
right
algorithm
to
be
used
was
actually
pushing
for
a
proper
implementation
of
byzantium.
Fault,
tolerant
because
everybody
can
look
at
the
algorithm,
but
not
everybody
is
able
to
develop
and
push
to
push
the
consensus
property.
A
We
have
tested
this
in
the
labs
that
we
have
so
number
of
6
nodes
is
the
largest
one
that
you're
able
to
have
and
I
mentioned
notes,
because
the
number
of
users
that
you
are
able
to
have
is
even
less
than
that,
if
you're
going
to
do
the
proper
validation
and
issuing
proper
pkc
eleven
certificates.
So
what
we
have
done
is
we
have
grabbed
that
modular.
As
you
know,
piper
was
your
fabric
is
plug
and
play.
We
took
that
out
and
we
push
out
to
the
esqueleto
modular
that
we
have.
A
We
have
done
this
for
the
past
20
years.
We
know
it
works
for
a
very
high
volume,
but
what
is
important
here
is
the
management
part
of
that
it's
very
hard
to
manage.
The
ca
that
gets
shipped
out
with
hyper
laser
today,
for
us
is
just
the
UI
you
don't
need
to
have
expertise
is
just
issuing
certificates
to
entities.
A
100%,
that's
exactly
the
scenario,
so
two
things
happens
when
it
comes
to
x509.
We
can
give
you
a
regular
x.509
using
any
type
of
certain
algorithm
that
you
have
or
say
your
ECC,
but
what
we
were
pushing
out
for
next
year
and
I'm,
not
in
sales
I'm
just
in
R&D,
so
sales
will
do
a
different
job
when
it
comes
to
selling
this.
A
But
we
will
push
out
pqc
algorithm,
so
you
could
have
a
hybrid
certificate
which
will
be
an
RSA
and,
let's
say
different
type
of
algorithm
like
picnic
or
there's
a
big
list
stuff
of
that.
So
this
certificate
that
you
push
out
could
reside
for
the
next
20
years
and
it
still
uses
the
same
technology
today
and
the
one
that
will
be
available
tomorrow
and
key
management
office
is
part
of
that.
Yes,.
A
Absolutely
so
the
goal
has
been
to
keep
the
requirements
exactly
the
same
again.
We
have
tested
it
for
us.
It
was
a
couple
of
scenarios.
One
is
performance
needs
to
be
very
high,
but
primarily
what
they
have
looked
into
is
how
easy
it
is
to
actually
replace
this
thing
and
his
plug-and-play
you
take
it
out.
You
put
the
new
one
in,
as
you
would.
A
Yeah,
so
we
are
working
at
three
different
algorithms
right
now.
We
have
not
submitted
any
algorithm
to
nest.
It
was
about
72
submissions.
As
of
this
morning,
they're
only
62
left
we
have
worked
with
Microsoft
Research
picnic
is
the
one
that
we
have
worked
with.
That's
based
on
super
singular
mathematics.
We
have
worked
with
two
other
algorithms,
dilithium
and
catalyst.
A
Sure
we
are
doing
dynamic
analysis
and
the
smart
contracts,
so
the
idea
is,
we
are
receiving
the
small
contract
that
you're
putting
could
be
on
fabric
could
be
on
ethereum
specific.
We
are
working
on
a
theory
I'm
at
this
point
and
what
you're
doing
is
doing
dynamic
and
low-level
machine
analysis
LLVM
under
smart
contract,
to
identify
that
first
of
all,
does
it
follow
the
proper
in
structures?
A
A
Right
now
is
only
worth:
April
is
your
fabric.
There
are
other
ones
that
we
are
working
on.
Definitely
nd
will
be
something
that
we
are
interested
to
work
on
the
end.
This
scenario
is
a
little
bit
more
different,
because
the
idea
will
be
that
validating
a
specific
users.
You
can
imagine
that
a
company
comes
in
and
they
say
they
have
a
platform
based
on
nd
and
you
would
like
to
be
part
of
it.
But
how
would
I
make
sure
that
you
are
who
you
are
on
nd?
So
what
we
provide
here
is
a
remote
onboarding.
A
You
can
consider
that
taking
an
image
of
your
ID,
taking
an
image
of
yourself,
we
will
make
sure
with
the
local
entities
that
this
ID
is
the
proper
one,
and
then
we
will
say
that
this
is
a
valid
identity.
There's
two
ways
after
that
one
is
using
your
real
name.
Other
one
is
use
an
identifier
that
again
is
a
privacy,
preserving
model
that
you
cannot.
A
B
A
Definitely
so
identity
by
itself
is
this
quite
massive,
and
one
example
that
I
can
give
you,
as
that
academic
has
has
done
on
datasets
and
not
on.
Identity
is
utilization
of
fully
homomorphic
encryption
or
homeworking
corruptions,
and
the
idea
is
doing
computation
of
encrypted
data
without
decrypting
them.
So
we
have
taken
the
same
idea
and
we're
trying
to
apply
that
on
the
fabric,
you're
part
of
an
enterprise
who's
part
of
the
fabric,
you're
willing
to
work
with
the
fabric,
but
you're
not
willing
to
show
your
identity
to
the
fabric.
A
How
are
we
able
to
do
that
in
the
next
following
weeks?
We'll
have
some
publications
in
regards
to
what
we
have
done.
There's
some
IP
in
place
for
that.
Unfortunately,
I
can't
discuss
it
before
the
IP
comes
out,
but
again
what
you're
doing
is
preserving
identities
but
preserving
valid
identities,
and
that
needs
to
be
seamless
on
the
fabric
and
that's
what
we
have
been
working
on.
B
A
A
Sure
so
one
problem
there
is
think
about
Amazon,
as
you
mentioned
majority
of
the
time
when
I
buy
a
product
off
of
Amazon
I
go
and
look
at
the
reviews,
and
sometimes
reviews
are
fake,
like
opentable
back
in
the
u.s.,
they
have
fake
reviews,
but
sometimes
they're
saying
this
is
a
verified
user.
Well,
the
verified
user
is
fine,
but
is
there
any
way
for
me
to
actually
find
out
who
that
verified
user
is
indeed
I
can
do
NLP
national
language
processing
pick
the
same
review.
A
Google
is
my
best
friend
in
this
scenario:
go
look
for
the
same
language
and
identify
that
if
this
is
the
same
user
now
so
now,
I
have
gained
something
and,
at
the
same
time,
I
have
invaded
somebody
else's
privacy.
So
technology
such
as
secure
multi-party
computation
and
something
could
totally
be
utilizing.
This
scenario,
which
is
I,
can
trust
an
entity
based
on
the
voting
of
other
entities
that
they
have
said
this
person
is
trusted,
and
again
this
is
consensus.
Protocol
in
some
sense
and
I
can
still
preserve
that
privacy.
A
The
problem
with
this
is
internet
is
so
distributed
that
we
are
not
able
to
use
this,
and
our
problem
with
this
is
problem
such
as
Sybil
attack,
I,
could
have
multiple
identities
and
then
I
can
go
ahead
and
say:
I'm,
verified
and
the
other
fake
identity
is
verified
and
then
exponential.
You
start
adding
this
up.
This
again
comes
down
to
how
to
validate
the
proper
identity.
The
problem
that
has
not
been
solved
yet
is
identity,
validation,
adding
it
to
multi-party
mutation
and
then
disturb'd
around
the
internet
and
and
there's
a
pretty
big
work
in
academia.