Hyperledger Foundation Hyperledger Global Forum 2021, 11 Jun 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Issuing Verifiable Credentials Signed by X.509 Certificates - Fernando Marino, CPQD

Description

Issuing Verifiable Credentials Signed by X.509 Certificates - Fernando Marino, CPQD

Self-Sovereign Identity applications have made significant advances leveraging blockchain technology and standards developed at Hyperledger. Nevertheless, the interoperability of those applications with legacy systems, and protocols in vogue still necessary towards deploying them in production. Come learn about the integration among DIDComm, Verifiable Credentials and CAdES signature using X.509 certificates are working right now in production to issue a digital prescription in Brazil.

Session Details & Slides (if available)- https://sched.co/j3fG
Access All Sessions: https://events.linuxfoundation.org/hyperledger-global-forum/program/schedule/

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #HyperledgerGlobalForum2021 #Blockchain

A

Hello, everybody. um First of all, thank you to join us in the hype, regular global forum and thank you for all, indeed, foreign tourist team, to listen and learning about how here in brazil, we are issuing virtual accreditations signed by x, 509 certificates.

A

My name is fernando marino. I'm blockchain tech lead at sepikuti.

A

If you have any questions to do in this presentation, please feel free to write in your platform that I will read and answer you well a little bit about me. I am brazilian I'm based in campinas a city of sao paulo state here in brazil, I'm a person for innovation, software development and blockchain expert.

A

I have worked with innovation for almost 10 years, including mobile, accessible applications, user experience and closed bay uh in early after 2016.

A

I got in touch with the meta technology, and since then I have made the development of several proof of concepts here in brazil and uh some entities as well how most of this development was related to supply, chain management, solutions and self-sovereign identity.

A

Furthermore, I have published papers and spoken several events in brazil and abroad. I have activity participation under hyperledger community hyperledger blazer shop. I am one of the high predators chapter member and one off high pressure meet up sao paulo coordinator.

A

I have a spock in events of a hybridizer like hong kong bootcamp in hyperledger, brazil bootscape well talking about a little bit more.

A

A

Signing documents to be issued in using the virtual credentials protocols, uh first of all, what it's meant why it matter why it's interesting to sign this verifiable credentials, use the x 509 certificates well, almost places like brazil and europe already have a digital identity based in the infrastructure of the certificates.

A

So by the first of the law, uh several proxies and document must be signed using these certificates, so the users have the guarantee of these documents and transactions have the security and the proposition of a real document in the real world.

A

Furthermore, we have to build transitions between the classics, systems of digital identity towards the self-sovereign identity. We have to create ways and proxies to allow people to use their uh identities and what they are currently working in the in the digital world to use that in the soft, solar and identity ecosystems.

A

This case was developed for a specific case here in brazil, where we were developing a solution for digital prescriptions uh here in brazil and at that time, digital prescriptions must be signed using certificates using digital certificates, because the brazilian law said the digital prescription had to be signed by the certificates of a doctor to be issued in the digital manner.

A

So this project that we developed here in brazil, using the high pressure areas called agent python and preparatory eg, was a project related to the to create an identity of the doctor and the identity of the patient and to connect them to the doctor.

A

The doctor here has the role of a nature and he is related to issue the credit to a prescription in format of a verifiable credential, but to the patient use this credential, for example, in a in one commerce of a pharmacy.

A

This credential must be signed for a digital certificate, uh digital certificate that have its roots of uh icpbr, the brazilian roots certificate for digital identity. Here, okay, so we developed a methodology to sign this credential, this referrable gradation, using an intermediate or agent, and just using the asian situation protocol to send and receives the documents that must be signed. Okay, now, let's explain a little bit more about this methodology in the process that the developer developed here.

A

First of all, uh this phone here represents the wallet of the doctor. The doctor sends the document to be signed to uh aries called this python issuer. Okay, that's the aries of the doctor just to uh inform you. uh This solution was based in is called as a clause-based solution, which means that the aries of the doctor is in the cloud okay, so the doctor, using its application, sends the document to be silent for its aries claudius python.

A

This series, the application for the series, doesn't have a web application to select a certificate and sign the document that will be issued as a credential, uh so to sign this credential. This areas have to send using the gdcom this document for another areas, an intermediate areas. These intermediary areas have the web application and the back-end application, which has the process to signs the document that will be issued. Okay, so the area causation to python after the issue sends the documents body to be signed using the basic message.

A

This message was uh will be received by the aries called the agent python of the intermediator. The intermediary, then, will trigger an event for its web hook, so we developed an app behave that is listening. The events of the air is called the agent python of the intermediator, the webhook intermediator.

A

You forwards, the document for a microservices that we developed here called dsbx 509, which means digital signature based off 509 search files. So these then the web hook will send this message that must be signed for this micro services, and this micro services will storage this document, this body of this document that have to be signed. Okay, that is the schema that we adopted here in solution.

A

Okay, oh, that was the patient's motivation. Sorry, my bad! It was the first patient uh after that the doctor have to access the web application of the asian intermediator and authenticate itself to obtain the list of the documents that they have to be silent for him. So the doctor authenticated itself with this agent. The authentications occurs by a qr code that actually has a public invitation by the agent of the intermediator.

A

Okay. If the doctor is already connected with the agent of intermediator, it's interesting technical thing to talk here. We are not use the outcome, the outbound. We are not using the outbound connection between this among these agents, so we are controlling here. The doctor has uh the application of the doctor has a uh internal database, and it's no, if he's already, has a connection uh active connection with the public invitation by looking for the public gid of this invitation.

A

Okay, so the application of the doctor read this public invocation public invitation in qr code form, and if it's a, if it has a connection in an active connection, it will lose this connection to authenticate itself and and to revise indeed, and then identify the doctor. The idea of the doctor and then get the document for this doctor, not for another person, so when he is looking for the micro services, that is discouraging the documents that have to be signed.

A

Please give him back the documents of this doctor and that's because service will retrieve these documents of this specific doctors and we present is and and then we'll present it in form of a list.

A

Okay, okay, since the web application get back the list of digital documents to be signed, it will present these documents for the doctor and the doctor will select the document that he'd like to be signed, and then they will. We are using a plugin here from an organization from brazil. We are using a plugin to select the x 509 certificate and then sign the body of the document. This document is a json. This documents, the date, is the json of the content of uh preferable, credential, okay, so this document has a schema.

A

This schema is the schema that was defined in hyperledger engine to create this, this virtual credential. Okay, this document is silent using the 509 certificate and then the web application will post decide. This sign a document one one, one more time for the microservices and the microservices will then integrate itself with the iris, send a post for aries using again the basic message to give it back to the aries from the issuer.

A

There is from the issue we receive this uh science document and we'll send these events for the webinar. The right hook will here of the issuer was developed to listen in this event and then send an offer for the patient that was received.

A

This prescription was created far, so the wipey hook will send an offer for the holder, the patient, the aries from the patient will receive this credential this offer and will notify the holder using the push notification services.

A

It's interesting to see here that this poc that developed here is was entirely developed using just the aries foundation's python. Okay for intermediation issuance and the holder, we used one instance of for each agent here uh now we can use the functionality of the mutual tendency of aries, but when we developed the solution, it was not already. The version 0.6 of theirs was not ready. Yet now it is right.

A

Okay, so, since the patient received this notification, he can accept the issuance of discrimination, and then they, the the credential, will be issued, and this credential will uh do condition will have one attribute more one attribute related to the digital signature that was used for the vertical credentials.

A

Okay, uh how is the outcomes that we got from this plc? Well, first of all, uh we have on virtualbox credential that which that its content was signed by one certificate, that is in compliance of our regulation.

A

The another outcome that we have is a document that can be used and checked in only machine to machine approach instead of an silent pdf. That is usually needs a human verification.

A

That's interesting when we are talking about the traditional prescription, because in epidemic situation here in brazil, we have remote uh consults with doctors and patients, but the doctors still having to issue prescriptions in a paper or in on pdf. That's usually here is not used for integrated services and to allow that e-commerce is regarding pharmacists, can use image and check it in automatically when they are using this both technology.

A

The self-serving dates that I mean the verifiable credentials and the digital certificates we're allowing to the e-commerces of controlled drugs here in brazil, because when we're talking about some medicines controlled medicines, it's not easy to. You uh sell it in an online way, because you have a regulation that just allow you to use it to buy it.

A

For we developed a methodology that can be used to science, any kind of document not just a prescription, but you can sign a prosecution and other documents that must be signed at this time with the uh self, with the certificates by the force of the law. Because.

A

When the word is trying the self-serving concept, they will still they still using the another uh digitalization solutions.

A

So it's very important for us to create a self-serving identity solution to build these transitions solutions to to guarantee the users that they still using the solution that they have, but we are decentralizing the identity, the storage and managing the handling of the identity of people. Okay. So that was the case that I have to show you that this process as well. That was the process that we that you use it to create a versatile credential signed by digital certificates.

A

Here in brazil and I'm open for questions, I will stop to share my screen right now and see the questions and answers from you.