►
From YouTube: Creating Trust in Enterprise Blockchain Networks - Scott Seth Perry, Scott S. Perry CPA, PLLC
Description
Creating Trust in Enterprise Blockchain Networks - Scott Seth Perry, Scott S. Perry CPA, PLLC
While blockchain technology creates strong cryptographic controls securing the integrity of data, successful, cooperative blockchain networks must establish trust between a variety of independent entities to create overall trust.In this presentation, Scott Perry will discuss how trust is created in block chain systems and the varying layers (i.e. ledger, agent, credential exchange and governance) that add trust within interoperable parties and reliance to external blockchains within the web of trust.
As an active member of the Sovrin Goverance Working Group and author of the first robust trust assurance model for blockchains, he will discuss how all blockchains networks can add accountability within stakeholder roles to ensure that blockchains are trustworthy above the embedded cryptographic trust assertions.
The target of this presentation is leaders and participants in industry, jurisdictional and public utility blockchains who are seeking greater acceptance and assurance in the trustworthiness of their network.
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #HyperledgerGlobalForum2020 #Blockchain
A
Well,
thanks
everybody
for
coming
so
I
view
these
late
afternoon
sessions.
It's
the
people
that
come
here
really
want
to
be
here.
So
I
appreciate
that
you're
doing
that,
and
hopefully
it'll
be
an
entertaining
and
informative
40
minutes
or
so
so
my
name
is
Scott
Perry
I'm,
the
auditor
in
the
room
so
I
come.
A
You
know,
I
have
a
different
vantage
point
as
it
looks
at
you
know,
as
I
look
at
blockchain
networks,
I,
look
at
trust
as
a
key
aspect
of
what
blockchain
technology
brings
to
the
marketplace
in
the
internet,
and
so
you
know
I
look
at
things.
You
know
a
little
differently.
You
know
this
is
a
technology
oriented
conference,
but
it
seems
like
there's
a
lot
of
bantering
about
with
the
word
trust
and
we're
gonna
in
this
presentation,
we're
gonna
kind
of
get
into
the
details
of
kind
of
deconstruct.
What
Trust
really
is?
A
How
do
you
create
trust
in
Bakke
networks
or
the
internet
itself,
and
so
why
do
I
even
have
a
position
on
that?
Well,
just
to
introduce
myself
so
I,
you
know:
I'm,
a
courier
IT
auditor
I
was
around
I'm
based
in
Seattle.
I
was
around
when
the
internet
was
kind
of
forming
I
was
the
external
auditor
for
Microsoft
and
involved
in
e-commerce
security
standards,
the
creation
of
certification
authorities
and
and
now
I
audit
certification
authorities.
So
my
clients
are
those
that
are
trust
anchors
on
the
Internet.
A
In
fact,
they
issue
security
certificates
for
about
half
the
Internet
and
I'm
their
auditor,
so
I'm
the
closest
thing
to
a
kind
of
an
Internet
judge,
at
least
that's
what
I
tell
my
kids,
you
know,
so
they
think
better
about
what
I
do
you
know
so
I
am
looking.
You
know
continuously
about
unique
act,
aspects
of
cryptography
and
blockchain.
A
You
know
came
to
my
attention
five
years
ago
before
hyper
ledger
was
even
around
and
so
I
was
around.
You
know
with
the
formation
of
some
major
players
at
this
conference,
sovereign
and
Cu
ledger
and
advising
them
around
the
education
around.
What
does
it
mean
to
build
trust
and
so
we're
gonna
I'm
gonna,
give
you
some
insights
around
how
you?
Actually?
What
is
trust,
and
how
do
you
create
digital
trust
and
what
are
the
aspects
of
of
blockchain
that
adds
to
digital
trust?
Why
is
it
make
it?
A
You
know
unique
and
why,
if
you're,
building
applications
in
the
marketplace?
Where
would
you
target
from
a
trust
standpoint,
because
this
adds
a
certain
layer
that
didn't
exist
before
and
hopefully
will
have
you
know
enough
time
to
go
through
all
the
material
and
get
a
chance
for
any
questions?
Ask
the
audit
or
anything
you
know,
so
you
start
with
okay.
How
can
we
build
trust
without
even
knowing
what
Trust
is
and
if
you
look
kind
of
the
merriam-webster
dictionary
definition
of
it?
It's
all.
A
It's
all
human
terms
of
aspects
of
how
I
trust,
usually
in
a
trust
situation.
You
know
when
you
don't
trust
someone,
but
you
don't
it's
it's
odorless
colorless!
You
can't
really,
you
know,
define
necessarily
what
Trust
is
philosophers
have
tried
to
do
it
since
Plato,
you
know,
but
as
a
professional
that
deals
with
kind
of
the
IT
environments,
you
need
to
have
some
mathematic
creation
to
it
and
it's
a
predicted
level
of
Sarabhai
that
predicted
level
of
confidence
and
that's
where
we
want
to
get
to
okay.
A
So
if
you
look
in
the
marketplace
of
what
you
know,
what
creates
trust?
Okay
and
basically,
this
is
more
of
a
humanities
slide
for
a
stem
audience,
but
you
need
to
have
these
components
in
order
to
build
trust.
Okay,
you
need
to
have
a
context.
I'm
not
going
to
you
know,
ask
you
to
you
know
to
change
my
tire
I.
A
Maybe
I'll
ask
you
to
change
my
tire,
but
I'm,
not
gonna,
give
you
the
keys
to
my
house
so
there's
a
context
of
when
I
will
allow
trust
and
you
have
to
have
that
context
associated
with
it.
There
needs
to
be
perception
of
risk
and
vulnerability,
and
there
needs
to
be
a
value
attached
to
creating
trust.
Okay,
there's
there's
a
cost
and
also
a
benefit
value
of
creating
trust,
and
in
order
to
create
trust,
we
need
to
have
an
established
reputation.
Okay.
A
I
issue
cpa
audit
reports
based
on
my
my
reputation
of
doing
this
in
the
marketplace
and
my
demonstrated
competence
in
the
field.
So
you
need
to
have
some
of
those
things.
You
need
to
say
what
you're
gonna
do
do
what
you
say
and
do
it
continuously
and
then
you
build
trust
attached
to
that.
Now
philosophers
talk
about.
There
needs
to
be
a
foundational
optimism
associated
with
trust,
and
I
think
we
all
want
that
for
the
internet
or
the
internet
2.0.
A
We
all
want
to
be
trustworthy,
but
right
now
the
internet
is
not
as
trustworthy
as
we'd
like
to
be
okay,
because
there
are
underlying
motivations
for
trust
and
and
and
distrust
now,
as
we
move
to
digital
trust.
One
of
the
key
things
that
I
wanted
you
to
take
away
from
this
presentation
is:
there's
a
human
component
in
digital
trust
and
that's
a
key.
That's
that's
one
of
the
biggest
frailties
around
digital
trust,
they're
built
by
humans,
we're
prone
to
failure
and
most
of
the
areas
where
identify
issues
associated
with
with
trustworthiness.
A
It's
all
you
know,
most
of
them
are
dealt
with
the
human
aspect
of
it.
Okay,
the
internet
or
you
know,
digital
networks
are
creation
of
society
and
it
matches
it.
We
didn't
replace
our
society
when
we
created
the
Internet
okay,
so
there's
aspects
even
in
systems
change
lifecycle
if
we
have
a
programmatically
component,
okay,
that
works
once
and
it's
gonna
work
tomorrow.
A
But
if
you
don't
have
a
good
change
management
methodology,
it's
going
to
break
down
and
who
creates
this
a
change
management
methodology,
it's
humans,
okay
and
so
systems
have
hardware
network
failures
and
also,
as
it
mirrors
society.
We're
gonna
deal
with
bad
actors
is
not
really
a
cybersecurity
lecture
around
all
the
bad
things
that
can
happen
in
networks,
but
you
know
that
they
exist
so
I
wanted
to
create,
at
least
from
a
discussion
standpoint.
These
are
foundational
principles.
Have
you
all
heard
of
sac,
twos
and
sap
reports?
A
It's
a
standard
that
my
profession
offers
around
for
third
parties
to
create
trust
in
the
marketplace,
and
the
AAA
CPA
is
created
trust
principles
in
different
categories.
Okay,
security
kind
of
the
protection
of
data
availability
is
systems
going
to
be
there
when
you
need
them.
Confidentiality
and
privacy.
I
do
have
the
contracts
with
your
customers
to
prevent.
You
know
to
protect
the
confidentiality
and
the
privacy
of
your
constituents.
A
Okay,
now
I
can
tell
you
in
all
the
work
that
I've
done,
the
let
the
last
one
processing
integrity
doesn't
get
touched
as
much
and
that's
where
blockchain
is
going
to
be
a
difference.
Maker,
okay,
so
when
I
wanted
to
put
together
a
slide
to
show
how
digital
trust
gets
created,
okay,
so
there
are
components
in
a
digit
digital
trust
model
we
have
on
the
top.
You
have
a
governance
authority
and
we're
starting
to
talk
about
it
here.
A
They
even
allowed
me
to
speak
at
this
conference,
because
governance
is
now
even
playing
a
role
in
that
okay,
but
governance
is
going
to
be
absolutely
critical
as
you
move
forward.
Okay,
we're
dealing
with
all
the
plumbing
and
we're
dealing
with
the
protocols
and
the
communication
venues,
but
at
the
end
of
the
day,
it's
going
to
be
the
governance.
Okay,
where's,
the
governance
you
got,
you
know:
MasterCard,
visas,
governance,
the
see,
a
browser
forum
that
controls
all
connections
around.
You
know
the
security
certificates
that
control
traffic
on
the
internet.
A
So
when
I
audit
certification
authorities,
that's
what
I
get
into
I
get
into
their
procedures
and
operations
make
sure
that
they
are
being
accountable
to
what
the
requirements
are
from
the
governance
authority.
Okay
and
the
governance
authority
is
set
aside,
trust
criteria.
They
said
we
want
you
to
act
this
way,
whether
it's
an
industry
or
a
technology
area.
They
create
trust
criteria
that
they
want
all
actors
within
a
network
to
follow
and
that's
not
going
to
be
any
different
in
a
blockchain
network.
A
Okay,
we're
going
to
talk
about
what
role
you
may
play
in
that
bachi
network
and
that
will
depend
and
I
will
drive
the
criteria
that
you're
dealing
with
now
an
auditor
could
take
place.
I
add
you
I
stake
my
reputation
in
my
process
into
adding
value,
because
if
you're
gonna
say
I
do
all
kinds
of
things,
I
don't
know.
If
I
could
trust
you,
but
if
Scot
says
you're,
okay
with
doing
it,
maybe
you'll
trust
it
a
little
bit
more.
A
You
know,
there's
always
a
challenge
around
that,
but
in
the
model
that
we
work
with
a
trusted
third
party
in
a
creditor
or
someone
that
does
software
testing
and
all
that
usually
adds
trust
into.
You
know
the
components
so
that
the
users
at
the
bottom
can
rely
upon
it
better.
Now,
if
there
are
bad
auditors
out
there,
I
can
tell
you,
and
so
there
is
Auditor
accreditation
bodies
that
make
sure
that
auditors
are
meeting
certain
standards.
A
So
that's
how
Trust
is
created
in
networks
that
that
involve
that
sometimes
the
auditors,
there
sometimes
not
okay,
so
for
this
presentation,
I
don't
have
to
go
over
to
the
detail,
but
I'm
gonna
be
giving
this
presentation
to
professionals
in
in
my
arena.
You
know
that
don't
understand
these
terms
about
blockchain
networks
and
I'll
be
educating
them
around
what
these
things
mean,
but
am
I
gonna
talk
about
it,
but
what
I'm
gonna
say
is
the
aspects
of
blockchain
networks.
The
key
trust
components
that
I
see
in
the
marketplace.
A
Add
these
things
and
they
relate
to
the
trust
principles
that
we
talked
about
right
here.
Okay,
directly,
immutability
non-repudiation
deal
with
processing
integrity.
If
something,
if,
if
I'm
an
item,
is
on
a
blockchain
and
it's
signed,
we
know
this
is
the
aspect
of
it.
We
know
at
least
the
result
has
some
add
as
some
aspect
of
of
truth
associated
with
it.
Okay
is
a
source
of
truth.
We
don't
know,
maybe
it
maybe
it
could
be
garbage
in
garbage
out,
but
at
least
when
it's
on
the
blockchain
we
have.
A
We
have
some
strength
and
confidence
that
there
is
processing
integrity.
Once
it's
sitting
in
there
and
that's
a
game
changer
for
certain
aspect,
certain
use
cases
so
zero
knowledge
proof
deals
exactly
with
the
privacy
aspect.
It's
like
a
you
know.
It's
a
newfound
entity
that
I
found
I
found
could
be
very,
very
valuable
in
the
marketplace:
okay,
because
privacy
concerns
exist
and
if
I
don't
have
to
give
away
all
the
information
needed
to
deal
with
the
transaction,
whereas
added
where
a
person
can
be
satisfied
by
knowing
that
I'm
old
enough,
but
not
necessarily
knowing
mine.
A
Knowing
my
age,
that's
that's
a
unique
aspect
that
can
be
used
in
lots
of
different
use
cases
now
the
redundancy
and
availability.
We
know
that
those
are
those
those
have
been
issues
with
with
networks
in
the
past,
but
just
the
aspect
of
the
fact
that
you
know
we
have
replicatable
aspects
of
a
blockchain
around
a
network
create
that
availability,
which
is
which
could
be
global
when
we
were
dealing
with.
You
know
sovereign
network
that
have
nodes
all
around
the
globe.
Okay
and
I
deal
with
the
internet.
A
You
know
aspects
where,
where
there's
repeaters
around
you
know,
OCSP,
which
is
letting
know
if
something
has
a
security
certificate
has
been
revoked
and
you
need
to
get
aspect
on
that.
Every
time
you
go
to
a
website,
you
need
to
be
checking
that,
and
so
the
availability
of
those
types
of
networks
are
needed
and
blockchain
can
needs.
You
know
we'll
have
that
if
it
is
dispersed
in
the
correct
way,
so
I
attended
this
conference
in
Basel
Switzerland
in
December
of
2018
and
the
keynote
speaker
was
Bruce
Schneier
and
he's
very
you
know,
noted
cyber
security.
A
He
had
a
blog.
Two
months
later,
and
he
kind
of
just
he
changed
it
and
I
like
what
it
says
here.
It
says,
shifts
some
of
the
trust,
so
there's
there's
cryptographic
elements
within
a
blockchain
network
that
are
absolutely
key,
but
the
issues
that
you're
going
to
be
dealing
with
as
you
deploy
blockchain
networks
are
going
to
be
more.
A
The
issues
will
be
more
on
the
people,
governance
and
institution
area.
So
I
have
to
go
over
this
too
much
because
you
were
hearing
stories
about
what
makes
you
know
what
use
cases
make
blockchain
more
novel.
Okay
and
part
of
it
is
source
of
truth.
Okay,
we
don't
have
sources
of
truth
per
se
on
the
internet
like
blockchain,
can
offer
so
disputed
claims
against
diamonds.
That
was
a
presentation
in
a
keynote
speech.
A
Last
last
conference
it
was
fascinating,
even
in
a
war-torn
country,
you
can
have
absolute
source
of
truth
of
where
the
Providence
of
diamonds
came.
You
know
so
there's
aspects
of
that
if
you're
looking
to
try
to
penetrate
a
novel
use
case
that
will
perpetuate
your
acceptance
of
your
blockchain
look
at
these
areas,
because
these
are
the
areas
that
are
taking
a
leadership.
A
Take
okay:
we
talked
about
supply
chain,
you
know,
but
all
of
this
stuff
as
I
look
at
it.
It's
not
guaranteed
garbage
in
garbage
out.
Okay
and
there's
potential
completeness
issues.
How
do
I
know
that
everything
you
know
all
this
supply
chain
is
gonna
be
put
in
so
this
by
itself
doesn't
work,
it
has
to
be
worked
and
it
has
to
meet
certain
standards
in
order
to
for
it
to
be
effective
and
trustworthy.
Now.
A
The
reason
why
I
got
involved
so
much
in
the
blockchain
area
is
the
last
two
areas:
the
self
sovereign
identity
and
the
verifiable
credentials.
We've
been
dealing
with
the
user
ID
password
issue
for
many
for
years
for
as
long
as
I,
you
know,
as
long
as
we
can
all
remember,
and
the
Federation
doesn't
work
so
I
deal
with
so
the
federal
government
and
and
commercial
entities
that
work
with
the
federal
government
standard
called
pivi.
They
issued
credentials.
Okay,
so
I
have
a
critic.
I
could
sign
anything,
really
sign
a
document.
A
It's
good
and
people
can
recognize
it,
but
I
can't
I
can't
perpetuate
it.
Can't
Feder
eight,
my
my
application
to
well.
It
has
to
be.
Has
to
be
a
signed
and
developed
I've
been
working
with
commercial
defense
contractors
that
work
with
a
hundred
different
ad
projects
on
the
Department
of
Defense,
okay,
and
it
takes
forever
to
actually
get
these
things
deployed,
and
then
so
it
we
have
a.
We
have
a
duplication
problem,
I
mean
it
just
doesn't
work
and
it
can't
it
can't
scale,
and
so
this
is
an
avenue
where
it
could
scale.
Now.
A
The
challenge
is,
you
know,
for
self
sovereign
identity
and
verifiable
credentials.
You
know
we're
taking
digital
credentials
away
from
the
wallet
and
using
it.
It's
gonna
take
a
massive
effort,
the
same
kind
of
effort
that
it
took
for
the
internet
and
that's
another
takeaway
for
this.
So
from
a
verifiable
credential
standpoint,
this
is
very
similar
to
what
I
deal
with
okay.
So
we
have
issuers
and
I
audit
the
issuers,
the
issue,
your
credential,
based
on
certain
standards.
You
got
to
give
certain
level
of
criteria
your
your
passport
or
whatever.
A
A
Okay,
if
it's
your,
you
know,
if
it's,
if
it's
your
gym
membership
company-
and
you
know
it
wouldn't
be
of
value
for
you
know
transferring
money
in
a
bank,
so
you
have
to
look
at
the
context
of
issuers,
but
at
some
point
I
I
am
based
on
my
identity
is
dependent
on
on
credentials
that
have
been
issued
to
me
and
that
creates
that
that
identity,
that
I
can
then
present
to
verifiers
who
care
about.
So
if
I
want
to
go
past,
the
TSA
line,
they're
gonna,
look
for
certain
credentials.
A
I
have
on
my
digital
wallet,
okay,
and
they
don't
have
to
know
that
the
credential
that
was
issued
by
the
state
of
Washington.
You
know
they
don't
have
to
look
at
that.
They
just
have
to
know
that
it
has
been
created
and
it's
in
my
digital
wallet
and
they
can
be
able
to
prove
that
using
the
technology
that
is
being
built
today.
A
So
in
essence,
I
I,
with
the
technology
I'm
able
to
write
my
decentralized
ID.
The
issue
will
create
that
I
have
a
public
key
and
it's
available.
Okay,
it's
available
because
I
have
redundancy
of
the
network
and
I
can
you
know
so
in
I?
Don't
have
to
worry
if
I'm
going
to
the
TSA
is
the
network
going
to
be
available?
It
should
be
available
and
asked
to
be
it
if
it
if
it's
going
to
be
viable
for
these
activities.
So
the
issue
will
were
signed.
A
My
digital
credential
and
we
put
it
into
my
digital
wallet
and
then
I
can
offer
that
as
proof,
the
verifier
will
read
the
fact
that
that
public
key
is
mine
and
they'll
be
able
to
prove
and
verify.
I
am
at
least
I
that
that
the
credential
that
was
issued
is
actually
meeting
the
standard
that
they
require.
Okay,
they
require
a
certain
list
of
digital
credentials
and
you
have
to
follow
those
that
governance
framework
that
exists.
A
A
So,
if
you're
looking
now
we're
looking
at
the
communication
protocols
around
a
blockchain
network,
now,
if
you're
thinking
that
it's
only
these
lower
levels,
these
are
the
cryptographic
layers.
Okay,
this
is
where
you
know
at
the
lowest
level.
For
a
you
know,
a
network,
that's
dealing
with
self
sovereign
identity,
we're
dealing
with
data,
that's
sitting
on
public
Ledger's,
distributed
leavitt,
Ledger's,
and
also
the
communication
program
protocols
that
appear
on
wallets
and
and
smartphones.
Okay
and
a
lot
of
those
are
driven,
they're
still
needed
to
have
governance
frameworks,
driving
it
who's
allowed
to
be
a
steward.
A
Who
can
be
a
node?
You
know
there's
protocols
as
we're
working
with
the
sovereign
network.
You
know
they
want
to
qualify,
not
everybody
can
be
a
steward.
Okay,
you
need
to
have.
Certainly
you
know
your
organization,
you
know
haven't
been
sued
or
you
know
been
brought
to
trial
by
a
jury
by
a
jurisdiction.
It
has
to
be
a
going
concern
for
a
certain
time.
There
needs
to
be
confidence
that
you,
let
that's
a
whole
juror
into
the
bargain.
A
You
know
within
the
aspect
of
just
being
a
steward
okay,
because
because
you,
you
know,
as
a
steward
you're
holding
up
the
reputation
of
the
entire
network,
so
there
are
protocols
associated
at
the
lowest
level
and
then
here
we're
dealing
with
transactions
on
a
public
network.
Who's
gonna
do
it.
You
know
who's
gonna
have
the
rights
to
do
that.
How
is
it
gonna
be
done?
Okay,
all
of
those
things
need
to
be
identified
within
the
framework.
That's
driving
a
blockchain
network
at
the
lowest
layer.
Now
I
had
a
smartphone
layer.
A
It's
gonna
be
dealing
with
more
of
the
typical
things
that
you
see
in
software
developers.
Okay,
do
you
have
a
good
protocol
in
order
to
build
that?
Do
you
have
this
change
management
methodology
that
works
to
allow
for
trustworthy
operations
at
this
little
at
this
layer,
and
are
you
a
bonafide
agent
of
the
governance
authority
to
take
these
these
transactions
and
actions?
Okay
and
this
layer
we're
dealing
more
with
human
trust?
Okay.
A
So
if
you
want
to
be
an
issue
or
verifier
within
with
within
this
network,
you're
gonna
have
to
follow
through
on
protocols,
trust
criteria
that
you
will
potentially
be
accountable.
At
least
you'll
assert
to
the
marketplace
that
you
are
that
you
are
doing
what
you
are
being
asked
to
do
and
they
could
bring
in
a
third
party
to
attest
to
that
and
I'm.
That's
the
role
that
I
play
I
had
tests
based
on
evidence
that
I
see
from
from
institutions
that
provide
me
with
their
evidence
to
support
their
assertion
that
they're
meeting
trust
criteria.
A
Okay
and
at
the
top
layer,
someone's
gonna,
have
to
decide
the
rules
of
the
road.
So
in
governance
frameworks
there
are
there
industry
government
frameworks,
you
know
such
as
the
you
know:
payment
industry,
there's
industry
focuses
like
the
credit
union
industry
settings
standards
of
you
know
when
we
issue
a
credential.
What
are
we
gonna?
Do
we
gonna
meet
kyc
requirements
and
how
are
we
going
to
be
accountable
around
that
and
the
key
thing
is
if
I
issue
a
credential
to
you
as
a
participant?
A
What
purpose?
What
is
the?
What
can
you
do
with
that?
What
evidence
do
I
provide
you
to
get
that
credential?
Okay,
that
would
allow
you
to
do
a
certain
transaction
okay,
so
they
need
to
be
matched
up.
I
don't
want
to
you
know:
I,
don't
want
to
issue.
You
want
to
have
a
governance
authority
issuing
credentials
from
a
non
reputable
issuer
that
doesn't
look
at
any
credit,
any
any
evidence,
they'll
just
throw
your
credentials
without
looking
at.
A
So,
as
you
add
blockchain,
you
can
add
the
blockchain
credential
registry
to
this
trust
framework,
so
I
as
an
auditor
I
can
I
can
put
credentials
on
the
blockchain
saying
that,
yes,
it
was
me
Scott
Barry,
actually
issued.
You
know
a
report
to
it
to
an
entity
and
and
there's
evidence
associated
with
it
and
there's
a
trust
anchor
that
can
issue
credentials
and
it
could
be
backed
up
on
the
on
the
credential
registry
and
we're
seeing
a
lot
of
that
with
great
work.
A
So
as
I
look
in
and
from
my
vantage
point,
looking
at
kind
of
the
trust
model
within
blockchain
I
look
at
it
and
kind
of
four
layers.
You
know
you
got
to
have
a
chart.
You
know
yeah,
you
gotta
have
a
triangle
in
any
presentation.
You
know
that,
and
so
too
I
look
at.
It
is
from
a
system
centric
and
a
human
centric.
Okay.
A
So
there's
there's
aspects
within
the
ledger
and
then
you
got
to
talk
about
data
user
and
then
the
governance
miles
so
I'm
gonna
go
quickly
through
and
then
we'll
have
a
chance
for
any
questions
that
you
guys
have
so
at
the
ledger
layer.
These
are
the
issues
actually
in
the
you
know,
as
I
was
working
with
the
sovereign
foundation.
These
are
the
issues
that
they've
been
dealing
with,
and
these
have
actually
been
architected
in
the
sovereign
governance
model
and
I
encourage
all
of
you
to
go
check
that
out,
because
I
think
this
is.
A
This
is
state-of-the-art.
Work
I
mean
there
wasn't
any
precedents
for
all
this
and
we
moved
forward
and
we
looked
at
well.
What
are
the
requirements
at
at
a
blockchain
ledger
layer
that
needs
to
be
what
policies,
procedures
and
requirements
need
to
be
built
in
so
whoever
is
gonna
participate?
You
gotta
have
some
criteria
around
it,
because
most
of
these
will
be
permissioned,
not
permissionless.
You
have
to
be
part
of
a
network
and
you
have
to
you
know
you
have
to
bring
certain
things
to
the
table.
You
know
credence
and
ongoing.
A
A
Don't
think
that
that
the
sovereign
network
is
going
to
allow
my
friend,
Fred
Fourier
in
Tanzania
Africa
to
be
a
core
steward
to
you
know
to
anchor
the
validation,
you
know
to
be
a
validator
node,
maybe
it'll
just
be
an
observer
node
based
on
the
aspects
of
what
he
can
bring
to
the
table,
the
accountability
that
he
can
actually
afford
to
bring,
and
so
these
are
the
aspects
you
know
these
rules
of
the
roads
need
to
be
identified.
When
do
we
actually
establish
that
we
need
to
have
a
fork?
A
Okay,
they
better
be
thought
of
prior
to
an
event
happening
and
I
deal
with
with
that
in
the
networks
that
I
currently
work
with.
So
my
data
management
layer.
These
are
some
of
the
issues
that
we're
dealing
with
as
well.
Who
gets
to
read
who
gets
to
write?
Is
there
anybody?
You
know
who
doesn't
know
what
a
tombstone
I
didn't
know
what
a
tombstone
was.
Then
a
tombstone,
so
you
think
that
everything
is
immutable
on
the
on
the
blockchain.
A
Well,
it
is
you
can't
touch
a
tombstone,
but
maybe
you
can
a
tombstone
would
be
kind
of
like
a
an
a
piece
of
data
that
kind
of
gets
away
from
the
active
access.
Your
tombstone,
something
it's
it's
on
there,
but
it's
kind
of
it's
identified
for
for
non
anon
of
a
labelled
attea
set
a
fair
statement
to
those
that
know
better
okay,
good,
and
so
we
need
to
define
smart
contracts.
You
know
how
we're
going
to
deal
with
all
that
and
sovereign
is
just
put
out
a
new
token.
The
rules
of
the
road.
A
How
we're
going
to
you
know
how
we're
going
to
issue
tokens,
how
we're
going
to
monitor
monetize
transactions.
All
of
these
things
need
to
be
identified
in
a
layer
of
governance
policies,
procedures
and
such
the
other
thing
is
user
manager,
who's
gonna
touch
the
who's,
gonna
touch
the
blockchain
who's
gonna,
administer
it
who's.
Gonna
allow
for
that,
okay
and
provisioning.
How
are
we
gonna
bring
in
new
entities
new
nodes
into
the
network?
You
need
to
have
rules
of
the
roads
of
how
that's
going
to
happen,
and
it's
absolutely
key.
A
A
Okay,
and
so
what
level
of
strength
and
an
accountability
do
you
need
that
would
match
the
use
case
that
you're
trying
to
deliver,
and
so
that's
a
risk
assessment
and
a
risk
management,
it's
absolutely
key
to
to
require
in
any
governance
structure
of
a
blockchain,
and
so
we
talked
you
know
before
we
ate.
We
talked
about
the
trust
criteria.
What
are
you
gonna
hold
all
of
your
participants
accountable?
What
policies
procedures,
what
control
principles
do
they
need?
And
okay,
if
we're
gonna,
introduce
new
policies
and
procedures?
How
are
we
going
to
do
that?
A
You
know
how
are
we
going
to
allow
change
to
the
network?
We
need
to
have
some
kind
of
voting
protocol
to
allow
for
those
things
to
happen
and
are
we
going
to
add
trusted
third
parties
into
the
accountability
of
the
network,
and
you
know
obviously
there's
there's
you
get
the
lead.
You
know
there
was
a
conversation
about
bringing
all
the
lawyers
in
they're
the
first
ones
that
come
in
okay.
They
want
to
make
sure
that
all
of
their
aspects
are
being
represented,
so
so
that
usually
is
part
of
your
governance
layer.
A
So
it's
so
25
years
ago
I
gave
a
presentation
to
200
cybersecurity
professionals
and
at
the
time
I
was
you
know,
leading
the
effort
for
Deloitte
and
Touche
in
e-commerce
security.
It
was
brand-new
that
we
just
created.
It
was
an
offering
we
created
and
they
gave
a
presentation
and
at
the
time
you
only
had
FTD
flowers.
That
was
the
first
isse.
You
know,
yep,
you
know
ecommerce
application
that
was
out
in
the
marketplace.
A
There
was
another
one
that
went
to
I
was
at
a
conference
and
they
were
just
starting
in
their
in
in
their
offering,
and
that
was
Amazon.
They
were
just
selling
books
and
I
made
in
the
presentation.
I
said
we're:
gonna
have
multi
billion
dollars
in
e-commerce,
e-commerce
transactions,
okay
and
you're.
Looking
at
me
is
this:
oh
yeah
yeah.
We
do
that,
but
then
that
was
that
was
a
joke.
People
couldn't
even
understand
that
could
realize
that
and
I
see
that
wrister
E
is
repeating
itself
on
a
number
of
different
fronts.
A
If
you
look
at
you're
old
enough,
like
I
am
I'm
older
than
dirt
here,
so
you
know,
there's
there
is
parallels
between
what's
happened
25
years
ago
to
what
I
think
is
happening
now,
I
see
it
okay
and
the
parallels
around
you
see
some
of
them
emerging
players
to
remember
the
you
know:
America
Online
and
CompuServe
Earthling
and
prodigy
how
to
look
that
up.
Remember,
prodigy
and
so
you're,
seeing
some
of
the
major
players
they're
taking
up
there
they're
taking
a
foot
hole
to
get.
A
You
know
to
move
forward
on
standard
sovereign
chord,
a
Bitcoin
etherium,
all
the
ones
that
you
see
the
names.
Are
they
going
to
survive?
I,
don't
know
you
know
they
could
it
could
be
to
myspace,
so
they
could
be
the
Facebook.
You
know
you,
you
know
in
the
networks
where
you're
gonna
have
have
a
leader,
someone's
gonna
have
to
take
a
lead,
and
these
organizations
are
doing
that.
But
one
thing
that
was
key
in
the
internet
that
propelled
the
internet
to
move
forward
was
the
communication
innovator.
A
When
you
put
communication
to
the
Internet
in
every
home
that
changed,
that
was
a
game
changer.
Okay,
that
allowed
you
know
you
almost
ubiquitous.
Everyone
had
to
get
a
great
demand
on
that.
It
wasn't
just
the
the
institutions,
it
was
people,
you
know,
and
they
all
had
individual
needs
and
there
was
profit
margins
for
people
that
could
capitalize
on
that.
A
In
this
case
you
know:
I
live
in
Seattle
and
I'm
dealing
with
people
from
t-mobile,
that's
saying,
maybe
5g
is
not
going
to
be
as
exciting,
but
I'll
tell
you
that's
where
the
activity
is
going
to
be
on
the
smart
phone.
The
smart
phone
is
going
to
be
the
browser
in
the
blockchain
in
the
future.
Everyone's
working
on
my
I
mean
I.
You
know
what
millennial
doesn't
sit
all
their
time
and
use
that
as
your
primary
device.
A
That
is
the
primary
device
to
drive
activity
and
that's
going
to
be
the
eyes
into
the
bot
chain,
networks.
Okay,
and
so,
as
you
look
at
the
communication
protocol,
we
haven't
changed
the
communication
protocol
of
TC
tcp/ip
in
25
years
and
there's
no
security
payload
on
that.
Okay
and
that's
a
problem,
so
we
can
get
messages.
We
can
it's
easy
to
get
messages
all
around
it
works
beautifully,
but
it's
not
trusted.
A
It's
not
trusted
in
blockchain
with
verifiable
credentials
and
self
sovereign
identity
can
create
a
trusted
payload
within
the
stack,
and
that
could
make
a
difference
because
there
are
an
innovative
applications
that
are
ready
to
be
built
on
the
internet.
If
identity
could
be
trusted
and
that's
the
key
factor
so
I've
been
waiting
for
that,
it's
building
itself,
it's
moving
in
a
proper
direction,
but
that
could
be
the
game
changer
moving
forward
to
the
future.