►
From YouTube: Findy Agency — Highway to Verified Data Networks- Laura Vuorenoja & Harri Lainio, OP Financial Group
Description
Findy Agency — Highway to Verified Data Networks - Laura Vuorenoja & Harri Lainio, OP Financial Group
The Findy Agency team from OP Lab will present an overview of the Findy Agency Open Source project. The project provides a Hyperledger Aries compatible identity agency, a web wallet for individuals, and a low-code SSI service framework for organizations. The target is to ease the development of use cases utilizing identity wallets and verified data. The pragmatic solution architecture is different from other Aries DID agents by protocol symmetry, performance, and bindings to existing identity technologies like FIDO2. The team will overview the solution architecture, give background for the project design decisions, and showcase a demo.
Sessions Details & Slides (if available): https://sched.co/14H5g
Access All Sessions: https://events.linuxfoundation.org/hyperledger-global-forum/program/schedule/
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Discord: https://discord.gg/rVCn4j7UFd
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
License
Creative Commons Attribution license (reuse allowed)
A
A
A
A
We
come
from
a
Finnish,
Bank,
op,
Financial
Group,
it's
a
finland's
largest
bank
and
we
worked
there
in
the
Innovation
lab
it's
for
emerging
Technologies
and
some
research
as
well.
It
says
during
the
time
a
little
bit,
but
that
is
where
we
are
and
about
five.
Six
years
ago,
first
DLT
project
was
started
and
they
were
run
in
the
area.
A
The
pragmatic
means
that
we
try
to
find
an
erode
blockers
or
even
deal
killers.
That
would
prevent
us
to
go
to
the
production
as
a
bank,
so
certain
Security
is
to
a
sun
and
stuff
like
that.
Where
pretty
important
for
us
and
the
angle
we
took
about
the
actual
project,
I
also
what
differentiate
our
solution
from
the
most
of
the
other
SSI
agent,
what
it?
What
makes
it
different
and
there
is
a
very
long
history
behind
of
all
of
these
decisions.
A
We
have
tried
a
lot
different
approaches
during
the
three
and
a
half
years
and
we
have
used
areas
and
in
the
for
the
libraries
and
for
the
specifications,
I
could
say
even
that
more
of
the
specifications
and
the
truss
triangle
here
is
for
more
for
the
illustration
purpose
and
we
we
are
not
going
to
Define
these
methods
that
did
come
or
stuff
like
that.
In
this
presentation
we
take
the
mask
around
it,
but
about
our
solution.
A
A
A
little
bit
water,
as
I
said
we
have
a
multi-tart
agency
with
geometric
agent
model
and
also
we
did
learn.
But
we
did
very
many
pocs
and
use
cases
during
these
three
year
period,
but
we
started
to
learn
that
we
are
not
only
building
applications
or
even
Frameworks
or
libraries,
but
we
think
that
we
are
Building
Systems
system
software
and
if
you
are
doing
that,
you
still
need
lots
of
lots
of
tools
that
you
are
able
to
maintain
the
fast-based
development
Cycles.
A
A
A
Our
version
can
be
used
without
the
lecture.
It
means
that
we
did
learn
that
if
you
want
to
start
something
very
fast,
you
want
to
start
developer
development
very
fast
and
even
run
some
POC
or
some
pilot
which
still
doesn't
need
or
to
interoperable
the
capabilities.
You
could
do
it
with
even
the
database
or
something
like
that,
and
it's
actually
helped
us
a
lot.
So
you
are
capable
to
run
the
system
without
the
letter.
A
B
B
B
The
web
wallet
is
intended
for
the
individual
users,
who
can
then
receive
and
prove
credentials
with
the
web
wallet
application,
and
then
we
have
this
extensive
grpc
API,
like
Harry
described,
which
is
intended
for
any
applications
to
manage
and
handle
their
Cloud
agent.
That
is
that
is
hosted
by
our
agency
in
the
in
the
back
end,
and
in
addition
to
that,
we
have
the
CLI
tool,
which
is
also
a
handy
handy
tool
for
commanding
your
agent
to
do
to
do
things
that
you
wish.
B
The
agency
is
multi-tenant,
so
it
can
host
several
different
agents
at
the
same
time
and
and
it's
quite
convenient
for
the
developer,
as
you
can
start
up
one
one
instance
of
agency
to
your
localhost
computer
and
host
their
all
of
the
different
parties
that
you
are
testing
with.
So
you
can,
you
can
have
your
issuer
there
and
your
verifier
there
and
your
your
individual
users.
So
it's
quite
convenient
and
as
mentioned,
we
don't
have
a
mobile
application,
even
though
you
could
easily
use
the
same
approach
that
we
are
using.
B
This
in
this
react
application
in
a
in
a
native
application
as
well.
So
so
it's
just
like
a
static
react
application
that
is
doing
requests
to
the
back
end
and
the
back
end
is
doing
all
the
hard
and
dirty
work
related
to
the
credential
stuff.
So
so
it's
just
a
basic
react
application
which
utilizes
the
browser
capabilities
for
this
authentication
that
you
you
will
going
to
see
soon.
B
Our
name
is
Finley
agency
and
that's
a
bit
misleading
because
we
have
in
Finland
we
have
this
finding
identity
Network,
which
is
a
national
identity,
Network
project.
We
are
not
directly
related
to
that
project
at
all.
We
are
a
separate
open
source
project
and
and-
and
you
can
take
our
software
and
run
it
with
any
in
The
Ledger-
it
doesn't
have
to
be
the
Finley
lecture.
So
so
that's
a
misconception
that
we
get
a
lot,
but
we
don't
have
the
strength
and
energy
to
change
all
of
these.
Those
30
repositories
names.
B
Okay,
but
the
demo
we
we
will
I
will
show
you
how
to
allocate
the
cloud
agent
for
the
individual
user
and
register
a
new
user
account.
How
we
can
then
log
in
with
that
user
and
then,
of
course,
the
other
side.
So
so
I
will
show
you
how
to
issue
and
verify
credentials
and
that
we
will
do
with
the
with
the
bash
script
that
will
utilize
this
CLI
tool
of
ours
and
and
actually
we
are
going
to
run
a
simple
chat
bot.
B
So
so
we
have
this
cool
feature
in
the
CLI
tool
that
you
can
just
write
a
bunch
of
yaml
definition
and
and
the
CLI
tool
will
start
up
the
chat
support
for
you,
which
can
then
utilize
credentials
in
in
its
dialog
flows.
So
so
we
will
see
an
example
of
that
yeah
and
the
story.
I'm
I'm,
sorry
to
disappoint
you
all,
but
we
are
going
to
meet
Alice
again
and
and
again
she's
getting
her
degree
from
favor
and
and
applying
her
job
at
Acme.
B
But
maybe
maybe
in
the
next
hyper
lecture
forum
global
forum.
We
we
will
have
new
new
stories,
then,
okay,
so
here
you
can
see.
My
iPhone
screen,
which
is
connected
to
the
to
the
computer
and-
and
the
first
thing
that
we
are
are
going
to
do-
is
register
a
new
new
account
for
Alice
to
allocate
her
a
new
Cloud
agent
and
I.
Have.
B
This
is
Safari
browser,
so
I
have
navigated
to
our
Cloud
installation
starting
page
and
there
I
can
choose
this
register
option
and
figure
out
a
unique
username
that
I
forgot
to
do
before.
But
let's
try
out
if
Alice
Dot,
hyper,
ledger
works
and
here
when
I
tap
the
register
button.
What
what
actually
happens
is
that
the
the
react
application
uses
this
web
out
and
API
in
the
browser
and
and
and
since
it's
its
request
to
our
authentication
server
and
does
this
video
to
Magic
and
actually
binds
our
device
authenticator?
B
B
And,
yes,
we
have
a
new
new
user
account
now.
So
what
what
happens
next
is
that
I
will
copy
this
username
and
refresh
the
page
next
time
when
I
come
to
this
same
same
web
application,
I
just
type
in
the
username
and
tap
login
and
again
I'm
asked
that
do
I
want
to
sign
in
and
use
my
face,
ID
and
when
I
tap
continue
I'm
in
in
the
wallet
application.
B
We
have
no
new
connections
yet,
but
that's
the
next
step,
then
so,
let's
meet
Faber
Visual
Studio
code
here
open
and
there
I
I
have
written
this
kind
of
a
simple
yaml
definition
that
defines
that
what
kind
of
messages
I
want
to
send
to
the
other
end
when
I
receive
a
new
pairwise
connection
and
and
actually
this
this
spot
is
then
started
in
the
in
the
batch
script.
You
don't
probably
see
the
text
so
so
clearly,
but
it
doesn't
matter,
but
anyway,
this
bash
script
uses
this
CLI
tool
to
launch
this
bot.
B
B
B
And
instantly
when
we
get
a
new
connection,
it
opens
the
the
connection
view
here
in
the
in
the
in
the
web,
wallet
View
and
and
sends
a
bunch
of
messages
to
Alice.
So
so
so
this
is
the
doing
of
the
chatbot
that
we
are
running
here
in
our
Local
Host
computer.
It
sends
a
bunch
of
basic
messages
that
okay,
congratulations
on
your
graduation
and
so
forth,
and
then
it
sends
a
credential
offer.
B
And
here
when
we
tap
accept,
we
hopefully
receive
the
credential
in
our
wallet
and-
and
we
can
see
it
here-
I
I
apologize
that
the
layout
is
not
as
nice
at
the
buy
four
by
four
wallet.
But
but
we
are
back-end
coders.
So
so
that's
it!
Then,
when
we
have
the
decree
credential,
we
can
verify
it.
So,
let's
start
the
Acme,
but
and
actually
same
thing
happens
here.
B
So
so
we
just
at
the
new
connection
and
when
we
do
that
we
get
a
bunch
of
new
messages
and
instead
of
issuing
a
credential,
we
get
approved,
requests
and
and
sorry
about
that
yeah
layout,
missing
no
yeah.
So
so
the
Acme
is
asking
from
us.
The
decree
attribute
from
the
credential
and
actually
our
wallet
application
node
knows
that.
Okay,
this
proof
is
provable.
We
actually
do
have
a
credential
that
that
can
prove
this
fulfill.
B
This
proof
request
and
and
when
we
tap
accept
the
chatbot,
gets
the
gets
the
values
and
and
says
that
okay,
okay
proof
request
goes
through
and
and
we
have
a
valid
degree
from
fiber
college
and
and
we
are
on
board
at
Acme,
Bank
and
I
said
all
of
this
demo
stuff
can
be
found
in
the
in
our
one
of
our
repositories.
So
we
provide
you
the
links
later
on,
but
there
are
detailed
detailed
instructions
how
to
run
this
same
stuff
in
your
localhost.
A
Yep
all
right,
thank
you
for
Laura's
excellent
demo,
maybe
just
a
couple
of
things
before
I
go
to
these
architectural
entities
and
stuff
like
that,
for
example,
you
saw
the
web
wallet
there
during
our
history.
We
have
had
native
ads
agent,
but
we
have
drove
it
away.
So
it's
like
an
example
that
we
have
take
different
roads
during
our
our
study.
So
here
is
simplified
deployment,
diagram
and
a
little
bit
more
background.
A
All
the
listed
selected
Technologies,
which
are
in
the
right
side.
They
comes
from
our
pragmatic
approach
that
we
have
tried
to
build
the
simple
and
maintainable
and
also
performant
solution,
because
if
you
think
that
we
have
Bank
security
is
like
a
clear,
but
there
were
something
that
triggered
us
to
concentrate
these
things
during
during
our
research,
and
we
also
wanted
to
have
something
out
of
the
box,
and
the
fighter
was
one
of
those.
A
But
yeah
during
the
project
start
we
did
try
to
be
Orthodox
in
the
SSI
and
did
principles
had
we
had
those
those
all
18
types
and
stuff
like
that.
But
then
we
started
to
ask
questions,
and
this
is
the
current
current
solution.
What
you
are
seeing
here
so
in
the
actual
deployment
diagram,
you
can
see
that
it's
a
microservice
based
with
more
concentrate
to
deployment
stuff
and
it
uses
like
internal
security
and
ecosystem
for
the
phyto,
Pest
authenticators
and
authorization
authorization.
It's
done
with
short
tokens.
A
All
these
serve
Services,
communicate
with
the
accept
the
web
wallet,
trpc
and
TLS
pipes,
ordinary
ordinary
stuff
about
the
web
wallet
and
graphql.
There
is
this
Vault
server
that
or
service,
and
it's
like
it's
doing
something
which
make
web
wallet
live,
Easier
that
it
doesn't
have
to
handle
all
the
verified
credential
in
same
level
that
you
should
have.
Otherwise
we
have
own
API
there.
A
A
A
We
took
something
from
the
areas
core
framework,
but
it
wasn't
so
easy
because
it's
framework,
it's
so
opinionated
and
we
are
also
very
opinionated.
We
have
our
own
way
to
handle
State
machines
and
many
many
other
stuff
in
the
transport
layers.
So
it
wasn't
happy
merits
at
all
about
the
rest
of
the
Technologies.
A
Laura
already
said
that
we
have
Docker
and
Docker
images,
they
are
in
public
registry,
they
are
available
for
every
everybody
and
you
can
measure
our
performance
not
very
formally,
but
if
you
code
the
aat
server
and
you
can
compare,
for
example,
what
our
agency
do
when
you
run
it
towards
itself
and
you
what's
other
figures,
what
other
agents
do
you
can
throw
your
own
conclusions?
What
happens
there
and.
A
A
This
actual
diagram,
it's
taken
from
or
stolen
from
RS
RFC,
I
think
that's
Crush
domain
communication
and
it's
there
quite
many
places,
but
we
think
that
it's
very
important
diagram,
because
we
also
think
that
identity
domain
model
or
either
determine
concept
is
something
that
you
should
understand
and
you
should
think
about,
and
this
diagram
explains
that
currently
areas
has
many
types
of
agents
and
they
have
many
types
of
roles
and
pop
and
Alice
has
almost
similar.
Setups
Bob
has
a
little
bit
more
Edge
agents
and
also
some
dedicated
Cloud
agents.
A
But
we
we
tried
this
as
well,
but
I'm
I'm,
going
to
the
point
where
I
say
that
why
we
didn't
take
this
approach,
if
you
see
what
happens
when
Alice
sent
the
message
back
to
Bob
and
Bob's
lead
document
in
this
pair
was
connection.
Had
this
kind
of
Road
Keys,
that's
the
way
how
it
goes
and
we
don't
think
at
least
it's
at
very
much
complexity
to
stuff
and.
A
A
A
So
we
took
this
approach
that
we
have
reversed,
called
it
Cloud
agent,
but
now
we
can
call
it
the
domain
agent
identity
domain
agent,
even
and
there's
a
couple
of
reasons
that
you
have
to
be
able
to
support
public
Deeds
invitation
if
they
are
long
lasting
ones,
and
then
you
have
to
also
maintain
those
paveways
connections
and
about
the
road
thinking.
I
has
I
have
been
figuring
this
out
quite
long.
A
That
I
really
don't
understand
why
they
took
the
static
routing
approach,
because
if
you
have
tens
of
thousands
or
millions
of
these
connections-
and
we
like
op,
have
other
organization
and
our
setup
is
changing-
we
need
other
mediators
or
stuff
like
that.
We
have
to
update
all
the
documents
yeah
but
yeah,
but
then
during
this
research
work
and
everything,
of
course.
Of
course
we
try
to
find
other
Technologies.
Then
we
did
find
502.
A
Only
that
difference
that
this
502
authenticators
they
are
passive
device.
So
they
don't
need
the
cloud
agents,
public
keys,
they
give
their
own
and
it's
proven
to
pretty
good
approach
and
it
doesn't
exclude
Native
clients
at
all.
Actually,
they
suited
that
for
well
and
of
course,
this
year
some
good
news
came
around
that.
A
A
Maybe
I've
wrapped
us
my
bars.
We
have
open
sourced
all
the
software,
it
wasn't
a
little
job
in
the
bank,
it
it
actually
was
enormous
job,
but
all
the
ripples
are
public
and
you
can,
for
example,
cherry
pick
whatever
you
want
from
there,
because
we
use
the
multiropra
model
with
which
isn't
very
actually
good
for
the
goal
at
the
moment,
golang,
which
has
changed
it
a
lot
in
last
year,
three
three
years,
we
might
do
something
different,
but
our
solution
is
well
documented.
A
B
We
have
started
working
already
towards
the
the
other
other
Technologies
and
and
doing
the
resolving
things
that
were
totally
missing
from
the
first
version.
So
these
are
the
the
AIP
2.0
w3c
credentials
and
PBS,
plus
signatures
and
and
and
the
web
method
is
probably
something
that
we
will
concentrate
in
the
near
future.
B
Of
course,
we
will
also
do
some
research
in
in
other
areas
that
may
or
may
not
real
result
in
into
the
code
additions
to
the
finding
agency.
So
we
are,
we
know
that
there
are
happening
a
lot
or
in
those
dark
sectors
that
do
not
believe
in
ditcom,
as
we
do
so
so
Forex,
for
instance,
in
Finland.
We
have
this
digital
agency
doing
this
wallet
project
that
is
based
on
this
siop
extension
for
oidc.
So
that
is
something
that
we
are.
B
B
We
are
still
waiting
from
the
business
for
them,
and
but
we
of
course
realized
that
when,
when
we
get
our
hands
dirty
with
the
actual
use
cases,
there
will
be
needs
that
we
we
need
to
like
Implement,
more
features
and
so
forth
to
defend
the
agency
and-
and
that
also
goes
hand
in
hand
with
the
performance
and
scalability
needs.
So
so
that
is
something
that
we
want
to
investigate
more.
Actually,
we
know
that
the
with
akaba
there
is
this
load
generator
tool.
B
So
that
was
our
presentation.
I
hope
that
you
know
now
know
a
little
bit
more
about
find
the
agency.
What
it
is,
I
recommend
you
to
find
out
more
so
join
the
fun
go
to
our
website,
read
the
documentation,
blog
posts,
videos
and,
and
most
importantly,
try
it
out,
install
it
to
your
localhost
and
give
us
feedback.
What
is
good,
what
is
bad
and,
and
you
can
email
us-
you
can
find
us
in
Twitter
and
in
LinkedIn
thanks
do
we.
C
A
Unfortunately,
we
don't
have
a
slow
romance
and
direct.
We
are
the
research
department
and
actually
last
year,
the
other
guys
they
really
tried
to
find
something.
They
are
maybe
a
couple
of
cases
there's
this.
What
is
the
document
of
attorney
the
you
give
the
crides
to
do
some?
Someone
else
can
do
yeah,
actually
exactly
that
yeah.
That
is
something
that
is
true
in
table
to
table,
and
then
there
is
also
interesting
thing.
That's
that
you
could
renew
your
all.
The
banks
has
those
old
they.
A
B
Yeah
we
have
been
doing
some
some
like
playing
around
with
ideas
with
the
exactly
like
this
chatbot
thing
that
that
we
showed
that
it
would
be
a
good
thing
to
use
like
when
negotiating
alone
or
or
like
in
the
insurance
cases,
when
you
need
to
like
send
documents
to
several
parties
and
so
forth.
But
quite
honestly,
it
we
have
been
struggling
to
to
explain
this
technology
to
the
business.
B
Yeah
yeah
I
actually
like
tried
out
yesterday
when
you
announced
it
that
and
when
I
connect
connected
the
it
with
the
wallet
application.
So
so
there
was
something
that
the
Busy
wallet
I
I,
think
that
it's
waiting
for
trust
being
or
something
like
that
that
it
didn't
get
the
connection,
but
in
on
our
end
it
worked
so
I
need
to
dig
into
that
work.
Yeah,
yeah,
but
but
basically
yeah.
C
A
B
A
It's
true
about
half
a
year,
because
we
were
building
everything
before
the
areas
for
existing
and
then
the
summer
we
found
out
those
specs
and
we
started
to
follow
them.
But
yeah.
That's
true
that
very
lately
we
started
to
take
part
from
the
areas
go
framework,
but
actually
before
that,
I
I
have
read
the
code.
All
the
time
I
have
tried
to
keep
myself
like
in
the
name
that
what
is
going
on
and
but
what
could
might
be
good
example.
A
We
have,
of
course,
State
machines
for
the
protocol
protocols
you
have
had
to
have
those
and
they
got.
Those
guys
has
has
have
made
their
version
and
there's
also
transport
layers,
and
they
are
totally
different
and
I.
Don't
think
that
this
public
knowledge
but
Frameworks
are
usually
opinated.
It's
like
that.
We
give
the
way
how
we
call
you
back,
but
the
libraries
are
like
that.
You
can
call
us
and
we
do
the
thing
and
our
approach
is
this
Library
approach,
and
it
was
very
difficult
to
use
the
code
framework
that
that
is
true.
B
A
A
My
main
concern
is
actually
a
lecture
in
the
lecture.
There
is
something
we
have
found
during
the
tests
and
maybe
there
has
been
all
the
time,
some
performance
issues,
and
if
we
go
that
road
I,
don't
like
this
I
think
that
there
is
flaws
in
it
and
they
try
to
fix
something
in
version
two,
but
like
attack
man
in
the
middle
attack.
A
A
A
A
Yeah,
that's
true,
but
it
was
implemented
at
least,
and
we
tried
it
and
it
was
like
this
has
been
so
long
road
that,
because
we
weren't
sure
that
we
will
throw
its
agents
away.
This
was
that
point.
We
thought
that
we
have
to
have
that
feature
that
you
could.
How
I
explained
this
shortly.
We
run
actually
HH
and
then
Cloud
AIDS
and
in
Cloud
together,
and
the
reason
was
that
you
could
took
the
h8
and
swallow
it
out
of
the
cloud
and
give
it
some
order
on
a
setup
so,
and
we
tried
that.
A
Yeah
that
everything
you
see
here
see
here,
it's
like
done
in
our
API
and
our
someone
wants
to
call
it
proprietor.
They
can,
but
then,
when
you
start
to
communicate
outside,
we
are
not
support
like
that.
You,
you
would
use
us
as
Cloud
agent
and
you
would
have
other
it's
AIDS
and
if
you're
asking
that,
we
are
like
supporting
that
case,
that
this
is
your
domain
agent
and
you
are
con,
contacting
and
making
those
teeth.
Compares
is
some
other
entities
and
they
can
have
roads.
A
Whatever
data
storage
can
be
there
and
there's
there's
one
one
hack
only
that
in
the
lip
in
the
estate
it
accepts
that
the
bullet
handle
can
be
minus
one,
and
then
it
doesn't
deal
with
it
because
you
know
the
API
is
isn't
perfect
in
the
indie.
So
so
that
allows
us
that
that
the
second
level
code
can
can
still
think
that
it
talks
to
the
in
the
sdka,
but
their
data
storage
can
be
whatever.
So
what
we're
trying
to
do
is
extract,
you
know
and
essentially
make
it
stand
alone.
Yeah
and
part
of
that
is.
C
B
B
A
A
B
You
have
to
start
somewhere
and
and
like
I,
think
that
for
this
instance,
that
we
have
brought
this
interoper
operability
tests
and
so
forth,
like
in
the
picture,
it
has
helped
us
a
lot
like
doing
the
testing
out
the
protocols
and
so
forth.
So
you,
you
have
to
have
something
and
and
I
think
that
none
of
us
will
know
no
now,
which
will
be
the
winning
horse
in
the
credential
race.
But
you
have
to
have
something
to
build
like
on
top
of
so.