Hyperledger Foundation Hyperledger Global Forum 2022, 6 Oct 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Last Mile Problem in Self-Sovereign Identity - Biometric Authentificat... Non Kawana & Ken Naganuma

Description

Last Mile Problem in Self-Sovereign Identity - Biometric Authentification and Device Independent Wallet for Hyperledger Indy - Non Kawana & Ken Naganuma, Hitachi,Ltd.

Self-sovereign identity, in which identity is managed by the individual, is spreading. In this scheme, personal smartphones are often used to store and manage wallet information such as VC and secret keys for digital signature. However, this is not a true self-sovereign identity. For example, the problem exists that when a smartphone is lost, the individual's identity can no longer be proven. We think that identity is an object that should be tied to a person, not a smartphone. Therefore, we have developed an architecture to handle SSI without using a smartphone or other personal device, and implemented it in Hyperledger Indy. Specifically, by generating the secret key for Hyperledger Indy’s wallet from the individual's biometric information and encrypting and storing the wallet in the cloud storage. In this way, the wallet can be used by the user from various terminals on the network. In this presentation, we will present our architecture of our device-independent SSI and a demonstration of biometric authentication technology implemented on Hyperledger Indy.

Sessions Details & Slides (if available): https://sched.co/14H4u
Access All Sessions: https://events.linuxfoundation.org/hyperledger-global-forum/program/schedule/
----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Discord: https://discord.gg/rVCn4j7UFd
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #Blockchain
License
Creative Commons Attribution license (reuse allowed)

A

Hi, hello, everyone uh can you hear me: okay, hello, everybody, uh I'm, Ken, naganma from touch America in US and.

B

I'm known Kawana from Limited.

A

uh Today, uh I'll talk about the new identity architecture for blockchain and the web history system and that's based on Biometrics Authentication. The title is the last mile problem in self-solving identity and the subtitle is a Biometrics authentication and the device in them in the pendant wallet.

A

Okay, uh let's start with the time of self-stopping identity and the designers identity. The top of the this picture showed uh traditional Central identity. You know in central identity such as the big Bender gapa, create and make and control you that all identities, um the capacity, decentralized and self-sabi identity.

A

User, bring back to the solubility of identity from gaffa and see, create and control our identity and the important point of my talk ship group have identity. She used her smartphone using her secret key, and this secret use the pki based Authentication.

A

Okay, let's define the last Last Mile programming, decentralized identity.

A

um You know um in this conventional decentralized identity, uh user use smartphone to prove herself and using her secretary within a smartphone.

A

Well, so we think this is not a pure decentralized identity, because um if she lose her smartphone, then she cannot access her secret key, so she cannot prove herself. So this is the first disadvantage and uh so secret key is bind her smartphone. Then she cannot use another device as authentication device because another device how circuit key is not installed.

A

So this is the disadvantage. For example, she go to shopping and use her device to authenticate, but through the device doesn't have her secret key, so she cannot believe herself. This is uh we think this is big problem, so.

A

We'd like to consider what is identity and what should identity be?

A

um We think this is very important question for identity. So, of course, this is not technical question. This is just my philosophy: what is identity and what should identity be? um This conventional decentralized identity is not ideal. I think you can prove yourself without any device.

A

Okay, let's go to our solution. uh We'd like to solve this problem. um What company he touched make generating user's secret key from biometric state. This is our technology and the our application. You input your finger being data, then this application, outputs, your specific secret key under you- can use this secret key as blockchain secret, key or other PK Authentication.

A

An important point is our application entirely execute this uh about sustorial area. So, for example, start the device installs the same application, and if you do not have your smartphone, but you display your finger, then you can generate the same secret, key using storage device, so debate our system is device independent.

A

You do not need your smartphone or need is your finger, and this picture shows our core technology and our key generation application, and you input your Biometrics data today we use a finger main data and the output secret key, and this is a you- can use this secret key as a blockchain secret key and achieve this function.

A

There are three difficulties first difficult is biometric information cannot be reconstructed from public data. You know, Biometrics information is very sensitive data, so if you it leak them a big problem and the second um Biometrics data from sensor always have a small fluctuation.

A

So we have to absorb the fluctuation of the same pattern and I'll put the same secret key.

A

um This is our technology and the southern difficulty, um of course, generally different security from other person.

A

So please note that the proportion two and three the thread of that between Trader, so um to achieve this uh three proportion very different, so we achieve it so Hitachi and our company uh long time have developed this technology and we already get many international patents. This is patent number, so this is our company's original technology.

A

Okay, uh let's State that's my problem again.

A

uh In these interests identity we bring back the identity cerventy from gaffa, but the conventional decentralized identity. Your identities bind to visit your smartphone, but using our technology you can bring back your identity of identity from your smartphone to your body. uh We call it.

A

This is the last mile Last Mile means between your smartphone and your body. You can prove without any device.

A

So you can prove yourself in time anywhere on any devices using geofing yourself.

A

And today we'd like to demonstration, we apply our technology to hypoallergic Indie and we Implement a uh Biometrics technology in the wallet and user encrypt wallet key and using uh at first, you user generates a specific secret key using our application and using encrypt word key of Indie and the store it to cloud. Storage and C, go to a shop or other place so see a download encrypted word key and decrypt it using this application again and they use it. So this is a today's demonstration and the CV shot.

B

Okay, okay, sorry I explained now the current specification over in.

B

Of indie English in this wallet key is created at the same time created in the wallet. So we install the credential open the wallet or open the wallet in the wallet using the wallet key and store it when export word, data using word key or export key and encrypt work, data and export that encaps it towards data, contains paper, credential and secret data, and so on when import World data using word key and Export key decrypt for data and input.

B

B

In this time we implement it. This way we use the biometric key to encrypt the bullet key so encrypted word key and Export forward data.

B

All of this store the crowd, so we can use the code for data and the word key using biometric key.

B

So input or data with word key using the parametric key to decrypt. The word key- and this word key- use a encrypted work data and input. So we can use the correct data using the biometric key.

B

This is a demonstration scenario: people we make in the wallet and register by matric key step, two go to the public safety commission and issue a PC over driver's license. These drivers license. Bc has contains name and address, and date of birth step, 3 go to the hospital, and if you are busy of approximation certificate, it contains navotases and date of dust and manufacturer.

B

Finally go hands-free to the hotel and green we're going to the wallet and submit PC this PC and packaging from certificate. Pc, okay, I'll show you a demo. Sorry.

B

Please wait a minute foreign.

B

So, yes, sorry, I get prepared any.

A

B

A

B

A

Is World Center yeah, usually in the uh you're installing this client in your smartphone and then smartphone has a secret key. So you cannot use other device, but our system software generator, has significance. You can use many devices.

B

Thank you so much here is.

B

Welcome to variety Center and create a new wallet and then create new wallet. My name Hitachi and register.

B

Key enrollment succeeded and for it created.

A

About to generate her security and other key and public Keys registered.

B

Yes and they could go to the public safety commission log into the wallet named Hitachi Andrew Green here the parameter key.

B

B

Now I request for insurance, VC for driver's license, name address and date of birth.

A

And actually created to verify a bit footage.

B

Now my driver's license PC has been issued to my wallet.

B

Next: go to the hospital and the green and issue PC.

B

I request: Insurance of the sea, this content, age, manufacturer and number of tests. Yes,.

B

Certificate has been issued to my wallet.

B

Finally, go to the hotel.

B

A

um A little bit dark here, so sometimes it doesn't work.

B

Now my information is required for a chicken, so according to submit, is to a personalization certificate and they submit this name and address data practitioner and number classes so agree. Submit my approximation certificate and driver's license.

B

Now my document has been verified successfully and submitted.

B

And height, thank you.

A

A

Thank you, Governor um very good demonstration.

A

Okay and uh I'd like to introduce another age of our Biometrics based world and uh what it can our application generator has secret key on social media, so our system, and so after using secret key, then delete from secretary from memory.

A

So our system doesn't require a secret key management device, for example a smartphone or some Key Management cyber like Exchange.

A

So uh when she'd like to use a her secret key again then see input biometric data again and after using that and delete from the memory. So our system there is no C, very secure architecture.

A

uh You may think what is the difference from traditional biometers authentication like touch ID or face ID or iPhone and or the conventional biometers authentication user input, for example, fingerprint and the third fingerprint there's stuff in fingerprint and calculate the correlation value and the correlation bar is higher than some threshold. Then uh start the secret Keys activated. This is a ordinary Biometrics Authentication, so in that system requires a key management device. So this is attack point.

A

uh We think this architecture is not secure, so our Biometrics by word is very secure because there's no attack point okay.

A

I conclude my presentation: my main claim is the last mile program in SSI um user, bring back to the solubility of identity from gaffa, but the audience system. Your identities bind with your smartphone, but using our technology you can bring back the solventy from smartphone, so we call it the last Knight problem.

A

And our solution, uh um our solution- generator your secret key on software layout, so um you can use many device as authentication device, and this is the age of our solution and the next solution is, after using your secret key all the same thing.

A

They read from your secret key from the memory, then there's no key management device, so this is very secure. So this is the second edge of a technology.

A

Okay, thank you for your attention.

B

C

Is it my phone yeah? Thank you for the presentation.

C

um I have a question if I understood correctly you're generating the the uh their cryptographic keeper at the beginning and the registration with a with some biometric data uh in the past I'll be shown that uh there there was, for example, an incident where, during the chaos Computer Club in Germany by using high resolution Photography, they replicated with silicon the Fingerprints of the Minister of Defense of Germany, so they falsified the the fingerprint uh in what you are suggesting here.

C

I'm I'm wondering what is stopping, for example, during the uh verification, so you put your hand against the device. What happens if it is malicious overtakes, your your biometric data and then replicates your key. Then you have the problem that if this happens you can it can lead to a series of uh how to say it on on false identity claims, because I can get access to your to the key of your Cloud wallet and consequently, since it's biometric, it's very hard to revoke.

C

Would you would you comment.

A

A

Someone stole my finger print, the fingerprint data from some pictures.

A

Yeah, this is a disadvantage of all Biometrics authentication. You know so um today and a system use uh not fingerprint fingerprint so um a little bit difficult to merge it slimming it so, but you know at the um you should check your hotel device or restaurants device and apply ordinary malware content measure. This is a you know. This is a um or this this one advantage of biometric Authentication.

A

A

Glance you want.

A

In the UK you have a.

A

Advice and they will close these front furniture.

A

And thank you for your help and yeah, and actually uh uh products have some libraries test yeah. So um not so um sorry um uh take picture only pictures uh difficult to march to spoof.

D

Is it honor, oh yeah? Where does the decryption of the wallet uh happen? Because if that happens like at every place you go to, they technically have a device which are key on it right. So wouldn't it be insecure because then you would leave your key at all places you go to, or does that happen in your Cloud that you decrypt the wallet.

A

A

So we have to remove from them, and so this is.

D

But couldn't the malicious like actor like the hotels, malicious? Couldn't they just modify the software to not delete the key and just take it? And then my identity is stolen because they have the secret key and with the secret tree they can decrypt the wallet.

A

We have to use the counter media for my my way or other Marvel protection recommend.

D

Okay, so you need like special Hardware or okay.

A

B

We directed users.

A

um So yeah. Thank you for commenting. This is a next challenge.

A

E

They are what you are using to verify or even capture the fingerprint. Is it proprietary or Open, Source, One, yeah, I, think yeah, so original softice it uh so is it proprietary one or Open Source One, not open source? Okay? Okay, so you are just integrating the software with the high pleasure in the um yeah: okay, okay, okay, okay, thank you.

A

F

uh So I'm from the fight, Alliance um I have a question regarding uh final um multi-credentials and apple Pass Key. How would you say that your solution, different from the apple paski and the Fido multi-credential.

A

um Yeah is your fight, is.

A

Like that bottom, so originified a.

A

Date: three for secret key: we think our technology can provide systems so because um file system you require a storage device for using key. So using our technology, you can remove key device from file systems, so I think um our technology suitable for file system.

A

Okay, everything clear.

A