Hyperledger Foundation Hyperledger Global Forum 2021, 14 Jun 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Covid Vaccine Beneficiary Identification using Verifiable Credentials - Punit Kumar & Hitarshi Buch

Description

Covid Vaccine Beneficiary Identification using Verifiable Credentials - Punit Kumar & Hitarshi Buch, Wipro Technologies

COVID vaccination drives are being carried out across the globe. It is imperative to identify and segregate persons with the highest risk of infection so that the vaccine can be administered to them first. Therefore it is important that the individual's identity is established and their vaccine eligibility is determined in a secure and trust worthy way.

Punit & Hitarshi will be showcasing a solution that leverages the power of DID (Decentralized Identity) and Verifiable credentials, which helps in determining the vaccine beneficiaries by ensuring that the individual has the required authorization. This solution is built using Hyperledger Indy and Aries and comprises of the identity holder (beneficiary), identity issuer (nation health agency) and identity verifier (vaccine providers).

To learn more about Hyperledger, the open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments. Which serves as a neutral home for various distributed ledger frameworks including Hyperledger Fabric, Sawtooth, Indy, as well as tools like Hyperledger Caliper and libraries like Hyperledger Ursa click here: https://www.hyperledger.org/

Session Details & Slides (if available)- https://sched.co/jgTf
Access All Sessions: https://events.linuxfoundation.org/hyperledger-global-forum/program/schedule/

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #HyperledgerGlobalForum2021 #Blockchain

A

So hi everyone- this is puneet kumar this side, uh uh I'm the consulting partner at web, pro being a part of the um and I've been keenly watching a space of decentralized identity, io the charter for reliance identity platform, which basically enables the implementation of verifiable potential and that that wipro is building as well. I also have today.

A

So, without wasting much time we can get on to the subject. Now, uh though, some of us might be aware of uh off of very fab decentralized identity in general introduction um power right, you know anything which basically helps qualify, a certain aspect of an individual. It can be a qualification, it can be an achievement, a certain quality or an aspect of his background or identity right.

A

Any identity equation the basically three types of factors. One is the issuer of the trust.

A

You might call it an issue, you might call it trust anchor, but basically it's an entity which is which is having some information on the on the individual and has the authority of certifying that particular aspect of of an individual's identity.

A

Now, in some cases it might be general attributes like citizenship, age and so on and so forth. Wherein typical issuers are government organizations uh in some cases it might if it is related to edu.

A

Skills uh would be, educational boards would be the issue. The second actor in this case is the identity subject or the holder, the entity whose identity is in question and the third. I third actor is a relying party.

A

He verifies. Those are interchangeable, uh but essentially, which is true.

A

Individuals, identity and before granting access to its uh services. What you see at the uh is chain is proposed to be used uh for estimating trust in the exchange.

B

Exchange between these actors now, what makes these predictions very verifiable is one who issued the potential.

A

The connection was issued, he was presenting it the fact that they've not really been tampered with, and the fact that they're still valid now why all of these become important is because, in some cases uh you know in.

A

uh Us getting an access.

A

The verification that happens is.

B

If it is a reasonable match between some.

A

A bit more critical, we know that certain authorized.

B

A

In the last few years, we see that using our social media logins, we have services of multiple third parties now in terms of being able to uh use a certain identity places that leaves us vulnerable, because all these organizations and facebooks of the world will have all the information on me and can do a complete profiling based on what services, when I am accessing, how I walk and I'm doing it and for what purpose I'm doing it so challenges.

A

B

Proposing here.

A

But what essentially blockchain thinks into the picture is that the verification is something that is established through blockchain, essentially, when the issuance is happening, some aspect of that issuance or proof of issuance, as you might want to call it something that is recorded on blockchain at and at the time of verification, without having the need to specifically exclusively reach out to the the network itself. uh Purchase of the information that you are.

A

Our authority is looking at now from the feature perspective, uh as as, as you would understand, some of it that that we get is unautomated, validation and verification. As I said, blockchain assigns certain aspects of the validation and verify uh whether it was issued by the person uh by the organization you're claiming, but whether or not it was this uh and the fact is still valid uh as well.

A

So those those are the aspects that you get so ownership of the credential per se is cryptographically established and, as is it basically gives the individual complete control of exciting off of one's identity, uh so so uh benefit standpoint. If you say one, this emulates the experience that we have in the physical world uh whenever we have to prove our identity, where we basically prove uh uh basically furnish a document that has been issued to us by by someone everybody's trusting for the identity.

A

So, similarly, what the tuition basically does is emulates that experience that we have in the physical world in the digital world wherein, like we have physical credentials stored in our wallet.

A

uh What we what happens here is there are digital credentials, you that you are storing in your digital wallet, which is nothing but an application on your mobile phone. Some of you know a part of which we are going to see today.

A

Now why it is, as we all understand, there are certain challenges that exist in the identity, verification space in its current shape and form in the sense impersonation of fraud prevention, user privacy is a big concern as us give the example of google social media based logins.

A

We do know that it's it's a problem uh and making this whole thing. Paperless is again one of the things that we're achieving. uh What is it where all it can for for what purposes it can be used for cases where you need to authorize and authenticate certain individuals?

A

uh Look at ownership of certain documents, certain credentials in cases of certification as well, it can be applied. I talked about the uh the actors. The identity subject that you see in the middle here can be individuals can be organizations can be devices, individuals, typical cases of uh proving citizenship, employment, education, health coming to the ford.

A

Model for permits and licenses that the organizations get from the government authorities from devices standpoint, quality safety, maintenance, monitoring, health condition, all of those come into the picture as well and from in in terms of the use cases again, the spread is huge in the sense that you look at from from from. If you look at carbon uh government as uh as as as a vertical, you would uh think of use cases like asset registry permits, licenses grants granting of permits and licenses.

A

Things like those uh in the financial world, modeling kyc in the form of verifiable credential, is already being explored in certain certain parts of the world. From the health perspective, if you look at devices the identity for medical devices, looking at specific aspects like safety, certification, etcetera coming to the fore and from individual perspective, electronic health records uh practitioner credentials again is something that that we know uh even nhs was exploring uh uh some time back for doctor's credentials manufacturing again.

A

Worker certification, device certification are typical use cases that can be looked at so the spread of use cases is, is huge now I'll briefly quickly cover in terms of how this all works. uh I do understand that most of you would be aware of some of this, so uh but but very quickly. The the the entire process starts from the organization, which is a trusted organization, publicly known registers itself on the network that I am existing on this network with so and so identification and I would be issuing so-and-so credentials.

A

So that's the first step of the process now, once that organization is on board on the network as a user who's interacting with this organization. Think of this as a government organization, I establish a connection with the with the issuer and say that, yes, I need the credentials that you're showing this is the information that you have on me. So that's the second step that you see at the top, then the issuer basis. The information it already has issue offers a credential to the uh to the individual.

A

In this case the inde there's some back and forth. That is involved in in the sense that the individual can look at the information and if he feels that certain information is not up to date, there can be a transaction to update that information and then get a you know another issuance or it might be the case. If the information is accurate, then I can accept the credential and the issuance will happen. uh The issuance cycle is complete. So what you see on the left hand, side is the issue in cycle.

A

Now, when the issuance happens, there is certain update that goes on to blockchain, in the sense that this credential was issued uh to so and so uh to a person who's existing uh on the network by so and so details.

A

So what you see what's on the ledger is basically uh public did, which is a way to identify the organization who's issuing those credentials. The metadata of the credential that particular organization is issuing and there's a registry which basically asserts that the credential that was issued is still valid.

A

So once the issuance happens, the user is able to store those credentials in his wallet, and this is where the issuance cycle is complete.

A

Now, on the verification side, a third party or a verifier, which you see on the right hand, side creates a certain template that I'll I'll need a you know an entity to verify these certain details before I can grant uh him or her the access to my services so on on getting that verification, template and sharing it with the individual, the individual is able to select those credentials from his wallet and share it with the third party once the sharing happens.

A

That is where uh the proof that was stored on the network, uh for the issuance perspective is something that is verified and.

A

And and the verifier of the third party can take the proceedings from there now, one thing to note over here is that at no point the pii information or the crit, what you know, the user information is being stored on the ledger what's being stored on the ledger is just the fact that, yes, this this issuance is valid, is it is still valid. It was issued by so and so person, two and so and so person, uh but by so and so organization to so and so forth.

A

That's that's all that you get to uh to to store on the ledger, so so this is what is the concept and uh for for enabling this concept we built a solution which is based on uh one of the hyperledger variant, the blockchain platform that is underlying uh that the blockchain layer that you see is being enabled, or the did framework that I talked about- is being enabled through hyperledger, indie uh and and over on top of hyperledger.

A

Indeed, there's a framework that is being developed, uh which is uh which is to enable communication between these actors uh and also make the entire stack blockchain agnostic is hyperledger aries. So the solution that we have built uses both components from those both of those hyperledger frameworks now moving on to the application of the concept uh per se. So what you see over here is uh is uh is is how we utilize this concept to solve, or you know um for a potential solution to one of the burning questions which we had like.

A

You know, six months back in terms of vaccination now, in india's case, the vaccination, as we all know, had to be phased out, uh wherein there were priority groups that were being created by the different state organizations and uh as per the guidelines issued by the government of india, it was decided that the first priority group is the healthcare workers. The second is the frontline workers, the uh the armed forces and the municipal corporation workers and and people of those profile.

A

The third category was people who are greater years of age, and the fourth category was people who less than 50 years of age, but with certain commodities.

A

Now so we thought something similar can be modeled using uh using the solution that we are proposing. So here, getting back to that equation are the triad of issuer verifier and the identity subject. In this case, the problem statement can be broken down into three aspects.

A

Is my citizenship or my age credential, which basically ascertains that how old I am. The second aspect is condition for which the issuers, the first the the age, credential or the citizen, a government body, uh can certify so they'll have to exist on the network as an issuer.

A

uh The second uh aspect is the the health condition for which a certain health, either the health ministry or the health care centers, and can basically vouch for that in terms of the commodities and the ailments ailments that a particular person is currently having, and the third aspect is the employment which division of which, which sector time I am working for in the sense of the government sector, all the health care sector and things like those.

A

So using these three sets of credentials with these three sets of issuers, we thought that, because these people would have the information, the information can be obtained or these people can act as an issuer and issue credentials to the identity subject using which the identity subject can basically ascertain his or her eligibility for covet vaccine.

A

The priority group for for at the backs on, on the other side, the vaccine administration side, because the verification will need to be done for these three uh uh is is um so so so they can basically.

A

Create a verification template saying that these are the information that I need and basis which I'll be asserting the eligibility. So that's that's the role that vaccine administration team would act as a verifier of the relying party in this case now.

A

What this essentially does is, rather than you know, go through that entire exercise, cumbersome exercise of collecting information at one place and and then kind of doing some analysis to figure out which priority group does a particular person, belongs to this exercise, one it will be decentralized and distributed, and you can can basically minimize the time for bringing this whole thing into the uh you know or expediting the whole.

A

uh The vaccination process itself, uh and also you know in in some way as I said, because it is decentralized, uh the information uh collection uh can be expedited uh and uh and and basically bring some efficiency into the process. So before moving, you know going further I'll, just quickly switch on to the demo aspect, so that you guys are able to understand it a bit better, just hold on I'll just stop, sharing the screen and share it.

A

B

B

A

Hopefully my screen is visible and you can get start so what you see on the screen is uh something you can think when I, when I'm trying to ascertain my vaccine eligibility, uh this is a web page wherein uh it is being told to me that this is the priority order and these are the credentials or the these. This is the information that is needed for you to uh ascertain uh which bride do. I belong to so moving forward as as as you've seen just.

A

So if you see, I can see that I need my citizenship information. I need the employment information and medical information, because you know one other place where this solution scores over others, and you know this has gained kind of a lot of momentum in the last one.

A

One and a half is because people, as we know that uh you know there were actions of in the government in the middle east which we're looking at uh paperless government issued credentials and, and things like those because you know the times we are in it becomes even more important to cope with paperless.

A

So, if you see in this page, I get to see that I need these three credentials so the issue and cycle uh there and you get to understand how the credential issuance is happening. So what you see here is when I go to get my employment today, I I need to connect with pfo, for because this was developed in india.

A

We talked about the fact that you know one of the organizations which can certify for my employment potentials, which is where this is a way where I connect with that organization. I enter my email.

A

A

I'll just move quickly so that yeah, so once I click on uh click on submit what will happen is I'll get an email with a qr code, which is basically nothing but a way for me to establish connection with uh the organization who's going to issue me, the credential. That was the first step I showed in the in the flow chart as well. So I click on this. I get a qr code now.

A

This is where you see on the right hand, side of the screen a is a mobile application, which is nothing but the mobile wallet. I talked about you scan this qr code using the application, uh the mobile application, the mobile wallet and establish a connection with uh the issuer organization.

A

In this case, the flow that we're talking about is uh is is is establishing a connection to get my employment credentials.

A

So now, when you see when I establish a connection, uh this is the dashboard on the issuer side, where you see that a certain representative from the issuer side will will get to see that the credential has been uh has been sorry. The the connection has been established uh with with a certain individual.

A

So now this is where you see the uh issuance flow. So what you see here is the process of offering a credential. While what you see on the screen is a manual thing that we're doing here, wherein the credentials are being uh that the details have been entered manually. However, if there is a certain database where this organization who's issuing the credential already has the information, what we've also done for some of the other use cases is stab. You know automate this part.

A

This is the identifier, because we use the email over here, and the identifier can be anything so so some some representative from the organization side is is, is basically filling in these those details and issuing the credential to the individual.

A

Now, once he clicks and submit what you see on the right hand, side, the user or the individual in this case- has received the credential and pieces his. uh You know the accuracy of the information that is captured here. He can decide either to accept or uh decline it so for for practicality purposes, we're just saying that he clicks on accept and the credential is then residing on his mobile wallet.

A

So once he clicks on accept the credential is added to his mobile wallet and- uh and he is he's getting to, he gets to see the credential uh in the credentials tab in the mobile wallet. What you see on the screen right now so citizenship credential, has already been issued to him.

A

Now I demonstrated the flow for citizenship credential. Similarly, you will have the flow for both the both and the employment and the health credentials as well. So once I have all the three credentials, so what you see here is again the employment credentials being uh being issued so I'll skip this part quickly and just show the verification flow to you. So we're back to the verification page now and when, when I click on click, check, covered eligibility, there's again a qr code that appears which basically encapsulates the information that is required on the verification side.

A

uh And if you, if you get to see this some of the attributes bottom of the qr code in terms of what is the name and things like those so as an individual. What I need to do is I need to scan this qr code and what is as soon as I scan the qr code. The the information is required, as per the credential is directly obtained from my mobile wallet, because that's the application.

A

So uh so you see here the first name last name, and there are other information that are also needed here. So once I scan this from my mobile phone or the wallet uh app in my mobile phone, what it will do, it will basically select those credentials automatically and attributes automatically.

A

Now the power in the sense of citizen control that I talked about or the individual's control over on identity. I have the ability to what modify uh deselect a few, not modify, because that cannot happen because that will fall under tampering. But if I don't want to share certain aspect uh in the sense that for my employment credential uh for for vaccination, they don't need to know my employee code. So I can just deselect that information all they need to know whether which sector I am so.

A

I can deselect some of the information and I have the control over how much I want to share. What will happen is as soon as I scanned that I clicked on accept made the changes. If I wanted to deselect some information and what you'll see here is I'll get to see that okay, this is showed the entire flow, the issuance and the verification together.

A

Sometimes uh you know that that creates some sort of a confusion, but think of it, like you know, if you already knew that in an ideal world, you had these credentials like you have certain physical credentials in your wallet. uh But the thing is that in physical you need to go to a person. He'll do the verification, and all of that need to be done.

A

But if you had digital credentials pertaining to those exact uh that exact information that that is there in the physical physical credential documents that you have, this thing could have been achieved in in much lesser time is, is what the message is now the qr code would be easy something so if, if, unfortunately, due to lack of time, I'd not be able to show, but anybody who has all these three credentials would be able to scan and the moment he clicks on it present specific to the person who's presenting his credential.

A

The information will appear over here, so this is what we had modeled using hyperledger, aries and indie uh on on on our platform, and I think we are just in time two minutes to take any questions. If there are.

B

A

Okay, I'll just.

A

A

Yeah, so uh I see a question by david: verify does not appear to conform to gdpr by requesting more attributes, yes, you're right in in some cases, we do understand that that is something that need to be moderated uh by by certain organizations that we might want to call trust anchors in terms of how do we limit as an organization? What information you are you, your ex your uh you're asking for in your verification, template whether or not that is valid or you're authorized to get that information?

A

So, as you said in certain context like if you look at gdpr, that aspect will need to be looked at from the governance of the network per se that whosoever the issuers tomorrow. Some other some random organization cannot join the network and say I'll issue a driving license to citizens of india or u.s. No, so some bit of governance is something which would be required at that level. Is where these aspects of geography, specific rules and regulations, we need to look at uh okay.

A

Can you elaborate more on step, two, okay, okay, how to ensure that the connection is made with the correct person?

A

There is look at this in in some cases, depending on the criticality of the of of the issuance that you're doing.

A

In some cases it can be tied with with the in-person verification that can be just first time where you know that, like it happens in the issuance of uh in the issuance of a physical credential that first time I might need to go and register some attributes. And I and I and I get a digital credential like I get a physical credential, the only difference is the digital credential. I can use at um number of places cases where the physical issuance of a certain credentials happen beforehand.

A

There will need to be a mechanism, as I said, either based on otp or some information that they'll already have.

A

We can issue measures and some of the other methods as well, where in the issuance of the digital credential, there might be an extra step or two just to ensure that that it is being issued to the right person.

A

Am I correct in assuming that every issue in the blockchain is automatically trusted and every user right? So, as I said, uh there could be some there need to be some for establishing or ensuring that the governance is is being handled on how open or closed the network is. The governance protocol will need to be established now in this particular context.

A

uh There need to be some guidelines that yes, employment organizations. uh You know I am.

A

I must I'm accepting employment credentials from so-and-so organization for that matter, even the health information, I'm only accepting it through uh government authorized health care centers so either through the way of regulation, or you know some some governance mechanism in terms of who the issuers and verifiers and what they get access to and what uh what they can issue is something that will need to be established between the network, like it happens in any blockchain network where, uh through a set of protocols, you and you need to find a way where and the governance that there's a robust governance mechanism to handle cases like these.

A

I think I have already overshot the time by two minutes. So I'm not sure if I can take more questions.

A

Right, I think we'll have to.

B

Conclude yeah offline.

A

Yeah one small question which I see again is are issues operators of indie nodes, yes, and no uh in all that is needed for you to be an issuer on the network. Is you need basically a div a way for you to identify yourself on the network? Now.

A

The tid to node mapping can be one is to one or in some cases, if you don't want to host node, there can be mechanism where the multiple dids are routed through one single node. However, there again use some mechanism to ensure that the did remains with the organization uh who's, basically, uh who that the id but basically represents so both ways are possible.

A

The id is through unknown. However, as we know the ideal scenario or the two, you know true sense of private privacy, preserving scenario would be one one is to one mapping between the idea and the nodes, but that will will come at a cost as well.

B

I think we can answer a few more su.

A

Says that we can few minutes? Okay, are you monetizing the application? What is the approach you plan in that? Okay, so, in terms of monetizing again, there are multiple ways in which we are looking at this uh in in typical cases, uh the organization is acting as an issuer needs to be incentivized in a way uh for how often that that verification is being done like if you and then again that that might or might not depend on the use case.

A

If you look at the kyc uh typical kyc use case here, uh we we know in in india typical kyc if a bank has to do good costs, uh six to eight dollars uh per person, so so, if, if, uh if as an issuer, if as a bank, I am accepting the credentials which has been issued by another bank bases, the accuracy of the information that I get from a certain bank uh that can be devised to compensate the issuer, how often those credentials are being used?

A

uh They'll the of course the issuer will not get to know who's who's verifying, but the number of times a certain issued credential has been used. The issuer can be compensated uh basis with the accuracy of the information as well. So every time I get to use some information and I do a verification of my own as well.

A

uh I can uh you know we are also looking at at a feedback mechanism where in the verifier, if, if he can certify, okay, the the information that I got from so and so it seems to be more accurate. So that way is the issuer status or the issuer scores goes high and he can charge a premium to the information that he is providing. So that is one model that that that we are looking at as well.

A

So, as you said for the issuer, the the motivation or the incentive should be that he should be able to monetize uh for the information uh that it is providing right for the verifier. uh The incentive is that he gets lower cost than he otherwise would have so so somewhere midway the whole. uh The uh the whole instant, the monetizing bit needs to happen.

A

uh Okay, I think our issue was up. I think I pretty much answered most of the questions.

A

My other question, that is there is that if the demo application uh had been real application somewhere, so, as I said, we built the platform, multiple use cases can be modeled on the platform.

A

As talking one of the leading banks uh based out of amy uh to to look at uh you know because banks, naturally that's there's- been a identity providers and that that topic has been dealt uh on uh different different independent and has kind of come or has manifested in certain initiatives as well. But uh so so, as I said, uh banks based on ophemia is looking at uh setting up setting up a network where it can act as an identity provider.

A

So we are in talks with this platform that we built uh here at quickpro uh for for basically helping them achieve the vision, and there are a couple of other conversations we are having.

A

It is uh this particular demo. What you see is is was built just you know, from the perspective to show agility that, yes, if we had uh you know, if we have certain organizations uh who already have that information, uh the whole process did uh you know quite significantly, and and that's what that was the intent of us building this uh almost in like two weeks three weeks time.

A

This is the platform that we built, and then there are a couple of other use cases also built using the the platform that that we have here in the pro.

A

I think I did cover most of the questions. Unless there are any more and uh any which ways if there are any further questions, feel free to write to us as well. uh I will provide a version of this deck that we presented with our uh with our contact details, feel free to reach out to either hitachi and we'll be happy to take any further questions.

A

We can wrap up yeah. You can do that. Thank you all for attending. Thank you. All cheers have a good day and stay safe.