Hyperledger Foundation Meetups, 25 Jun 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Hyperledger Aries E Caso De Uso Identidade Digital Autossoberana

Description

O Capítulo Hyperledger Brasil tem o prazer em te convidar para o nosso próximo meetup virtual, que será sobre Identidade Digital Autossoberana.

O conceito de Identidade Digital Autossoberana é um dos temas mais inovadores e disruptivos habilitados pelo uso de Blockchain, prometendo transformar drasticamente a forma com a qual nossos dados são acessados, processados e utilizados. Além disso, Identidade Autossoberana é apontada como tema chave para o mundo LGPD.

Neste encontro, contaremos com a participação de experts da comunidade Hyperledger para conhecermos mais os projetos disponíveis na comunidade e também como um caso de uso em produção do Governo da British Columbia.

https://www.meetup.com/Hyperledger-Sao-Paulo/events/271332575/

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #HyperledgerMeetups #Blockchain

A

A

Tag reform, 100g, father to the moon, preserve a cube, novum, a tradition also second encounter. They say: Thomas Amiata gu10 we go through obeys. There is a beautiful expression, H below middle C. So then we face the original witch herself. Is he staying?

A

Those four Vedas would specialize. He wish to me. My hell is a song. Joong was a stretch, Kawata groupie. She did she dodges out. So better. Now, don't ya the hitch cover separately, a bra TSgt, quite good yeah. It came quite good. The educator for the song keep asking me to geesh participate.

A

Primus colleague is never participants. Huge polish night sit on if you talk, okay, cheap og, coloca, so te pasa, the ku-ku-ku-ku.

A

Pooja as I SH beta now don't go. Mokuba sod, personified the project watchfully bizarre as never saw inst defeated former defensive and copied practice away. She saw Helen brown nanoseconds of capital Brazil s. Capital M prefer to put amici a bear too careful. The sound crew, Oprah sudah cope with that city's, affordable, SEO, Norwich stately episodes there you pulse moist and Marilla goujian his coat, my dear PhDs capitalist. If they were stretch, visualize have K cereal, which propitiation extra value package.

A

Eighty cities in over II Arisaka vacillation refugee trouble a kiss on a colleague, kill temple folk are blue multi species forever. Zero versus would come eyes, / funny Dodge, yes, estate, guru, puja travel document, isaku, cue, henna to this year the power Tata mother, taya, French led knows he ought to date. So Benedict offended my little pea I need an answer. Your question, a chief Oliver says a prophet there. It is a key, a similar Posada. My CPM will soon reveal to learn. Farsi.

A

Oh off. You dodged the capital for confidence upon my domain admin, page a7, processor, the nation Brazil. If he's able to kovitch price escalation here, wash our guru, puja Terriers get hit so much special interest group plus a toad in ag ag worse than will. Today they told it Rock'em Sock'em visa based upon Haley dodge. Yes, he could apologize to me a cage star, don't be fooled, ah my penny.

A

They see work, G, walk groupie, but a Inspira Belarus utter Morocco, hi pearl at your foundation, ha I shot pankova, Sissoko, much massage their core leaders, nearly suffrage bracket, each person approxima, you know thi what wiser a see each event. It is simple tablet, profits for so male Elysian Park in massage president compressive Sharpton at least dot hype alighted on org pill canal, no hockey, general community Brazil ha a vocal sample.

A

A key agua blue blue have at this year Calabasas a brave fish burner cell doot-doot-doot, rubella capital, Dhaka, so Joseph a Xiomara viewers in a position it face again Confederate leader order. If another Mario the leader, who was so to teach that superior above the saw regard, not a coochie would go pelagic, Fazil, Sharia, capable, ok,.

B

Bring out Paula.

B

Okay, so if Allah happy that means to blue group de trabajo committed. Oh you know me: a nasty Shira, rapid, Eva muri me Elijah.

B

No Teixeira told Edie Renison years is achieve a touchdown. The document asada hype eligibility part planning, opportunism, SEC groupie. Indeed they were sorry Gino Aikido capital. If, when tell essential possibility for a long time, he Benedict wada, / qo g for the group g Documenta cell is a Tomita gym in New Year's Bahia's, the judge says: oh I, PLN Jersey Asia from primigi. These samples, for example, Oh premier Documenta cell.

B

Yes, yes, su Chi Chi the not initiative on the Brazil, the KCC homage Nostra by Rita uno, star value, a Helmand chief assaulted, so the Documenta suing list cannot documentation, Kia Basra to the moon, Bradley Cooper, together, obviamente Shuster da Gama's, correct English, because he just turned off mass customization nice burger and he he myspace was the Brazilian Assessors in GT contained a key, a key stone that the lead to the English Noel, not to doubt that from a grantee partner, popular so eh, Deno, / Myon, my documentation, o sanam on achieve eternal, was a smooth.

B

My simply superb materi chip Leah, who knew each piece, was appointed time for vehicle technology Giacomo near the seizure consumed in the technologists alternative of a technology workgroup Brazil the table, a leader, Brazil team, upon adentro, tweak the hyper ledger apart knowledge consetta to disease information about vegetarianism, you primero a suit. All this trouble, a key for against kitchen grease or positive energy.

B

H para apoyar, since achievers yield Saturno as tercera lingua Osetra doozy that the own process projected saw premier fashion is a segunda nama, specimen of way in JAMA, NGO Mendoza Thomas in China, the Agora anima / DHT fatal trouble, beta Sergey seemed a distant okay. Co-Op are chillin on central repository, no get her be a specific command Bryant and as soon as I saw the document us sell. The hyper Larry O'brien luminous linguist, launched a washing machine, has a commanding okay subject up be about solitude, so they are no sub Brasilia.

B

He a preemie reversal, Indonesia Tala entry, Malaya eejits et former Swiss kiotas linguist Camus, explain you know, for example, Tim behavior intra, though she was Jackie a little more strong, pokiedotie stuff as endo the tribology physics, a shadow group Aikido capitalist Asia kukri documented some globalization, terrorizing history, como se volvió material como. A volume at the upward is positive. The media pocket resultados edutainment inform us oyster diseases when she predicted mass collaboratory, spread prior to the seizure, traduzido seizure, heavies and se.

B

Acabo de Lucas was costly to us if he would myspace or severe adding good quality. Chemo vecinos capacity, I'll jump Leah equals he give us a contagion. Plead was as a document asada April agenda. Brazil, okay, I'd shut him prone to if h0 varun HT to depart through the toilet, block change at reduceed or GT massarakhsh concept, super intelligence, perky, no teeny dead, Dookie on blockchain data in portuguese photog or subtly. To do more heavy, though, like to commence a buscar polyatomic property of insanity, suspects, total costs, I refer, traduzido Institute blows.

B

All the plataform animal Portuguese UT trabajado na na Portugal, reduce considers, does concede. Chef is the platter formula team well on Balkan route to document. Yet reduce yields were to find a purse thuds Ando, Dakota's intelligence issue in coach. You may support Anja care L process mood, simply Cephas II document assault or Depa Giada amok now or oh, hey, comarca care submission.

B

When you were still goes merica towards them. Our mood shifts rubella. It was a teeny assess who I le for sex wasn't really cheap 30 USD improve when Utah Utah traveler on the document. Assault, ochio, witness mark squadron, operated us Jackie, you're taking blood human am I expected to see I thought so this it tastes acacia telling the key negative, inadequate assorted for matado Dunham I said to my ninja tester, who was Marcus I? Don't you were setting fuzzy thought so Martinez Marcus, Rosano, Moscow, State, humanity?

B

Who statement is a disease known for the ctmc fuzzy offensive primary? It was put simply a cappella sound tambien process, extremities anybody adding PI toward a total Jenny's hydrology GmbH does what the attack so to my past episodes I'll talk populist unprocessed mood. Significant fetus is a Kampala cell was in her party via keyboard. Is a broken AC blower could be separated to sell q4 Circulo co-op not resolved. It's over also bombs. A Key West's over is in vibration table so super tranquility for their don't chat. Alexander key, entertain, I thought so. Llamado super simplification.

B

Attaining my CAC forget, Bridget price vegetable is bring the porters proper own numero guru, puja peace was given Passat ESS of Documenta, so the cesium it is cooking. A falafel account revalue super ET research is a from group. 2 grand GG episode, 0 Vedas, ketogenesis material, Qantas, CEO ma tell me he go to travel and anneli. Suffice Tracy possible my own material. He kissed me. The tile references, cruzados Ephraim assigns a split cousin porky.

B

A squeezer contains a Moodle human technology and I would proud to pocket console those facilities are the appearance of a technology Austin Ted asado any I should outer speciality NASA technology. Fickleness contacts to its possessor, phallic Amiga, commenced rabbaniyoon to total material I bear to engage her, be they didn't process who cp-40 ELISA you to touch the Oprah Oprah collabora Contiki, Zafar supari. As the signature Chiriqui this, it was such a such a Tamiya part. Okay regard Oh, Europa Sequoia, a palaver to Finland.

C

We took the Guardian Apple, the so Bravo to copy a familiar kita, hello, Ron. First of all, I'd like to thank our speaker of this high-pressure sector Brazil meet Bob.

C

John and efficient, thank you guys and I also to extend this. Thank you to this thing. Well, if we stop just challenging and then stiffen, we will speak about her pleasure Eris project right.

C

Okay, well karate.

D

C

Great Thank You system, all.

E

C

You know you all believe that one of the most interesting and group dig that is being created with blockchain is the concept of substrate library item that you Brazil. So thank you again.

C

Now you switch to produce to make some announcements a brief announcement regarding erection or growth process, substrate density, that's where the situation right now, where does okay, just a sec bump? It's all I will say yes, Avenger convey Donna's idea, told that party father group g dish double central desired action on some screen which models unit our table so better learner, guru, Poornima switching protocol is concise.

C

That recap so a technological postdoc, without they perfectly pass, don't know how to check concept being over to group the hyper ledger: the capital, bouzouki Muslims mental action, suppose polka dots now I'd like to do to start or me package today. Thank you.

F

C

Your client down, okay,.

F

It's a real pleasure to be here in Brazil. It's super easy to get here by zoom.

F

So thank you very much. My name is John Jordan and I work for the province of British Columbia. So that's a the westernmost province in in Canada, and you know I work with Stephen who the two of us we've been at this for almost four years now, I'm kind of the early days of hyper ledger in be and to today so I think what we've agreed upon, but I don't know if Fernando. This is exactly what you had envisioned but I'm going to talk a bit about the the general problem we're trying to solve.

F

You know sort of, in particular from the government's perspective and how we think that can empower our citizens and our businesses and I'll do a little demo for like showing a sort of a use case than we're doing with the lawyers in BC and Law Society, and then Steven will talk more about the underlying technology.

F

Great I. Will you know, please feel free to ask questions and to tell me you know they slow down or or something like this. If you know, if I'm, not speaking clearly or too quickly or whatever to try and be, you know, respectful of the fact that you know English is my first language and probably your second or third or something so I. Think. Can you see my screen? I, don't see the you see like a British Columbia logo? Okay, great so I'll just go through a few slides.

F

You know to to situate the problem and talk about this new pattern. You know you call it self sovereign identity, we're starting to call it even more generally trust over IP and then Steven will go into the details. So first I'm going to talk a bit about you know the way things are without computers.

F

It's simpler, but you know we like computers, so we're gonna add them into the story later. But you know we know what an in-person credential is something that we're holding in our wallet that we have in our filing folder. We were given things from government from banks from our local membership club. Maybe the Brazilian Jujitsu Club I, don't know, and we know how to use those I mean and people know what they mean and they understand that those pieces of those credentials.

F

Those pieces of evidence have been given to us by an authority of some kind that they are going to decide to trust and we call that governance. So these are the rules by which we receive our driver's license: our citizenship card, our bank card, our membership card or Law Society in a lawyer, library card and they're presented to us technology, you know like a like in nowadays a high-security printed thing, but maybe hundreds of years ago, printing was enough because being able to print was a very expensive thing. I was easy.

F

It wasn't easy to forge, and we know that this is a very common pattern that we see all the time, although we might not think of it. This way, all the time we have a rule called issuer issuers are the authorities that give us something that we can use and hold and have to present to other places when we need to prove something about ourselves. So I receive a piece of plastic and I. Don't have it on me, but I have my driver's license.

F

We call it a services card in BC and the reason I have that is because I went to the government. I presented, evidence of Who I am, and they took my picture. They did a bunch of facial recognition and stuff to make sure they're sure that I'm the right person to give me this high security card and then I used that to gain access to services, renting cars and so forth, and so on. The reason that trust occurs is because that issuance occurs under the law.

F

We just call that governance and we have a whole bunch of ways that we use to increase the insurance assurance of these trusted interactions. You know back in the day was wax seals and then it became signatures and then we can fax them and we have witnessing ceremonies and a variety of ceremonies that we do in our day to day lives to indicate that a particular interaction is, is trustworthy and and asserted and of course, I mentioned the role of government.

F

You know we have foundational roles like birth certificates, death certificates, driver's licenses and all kinds of other types of registrations: legal entity registrations, a business can't say that it exists and enter into contracts without being registered with you know the government and you know, financial services model. This is just an example of a financial transaction payment network where there's a governance models. Mastercard is, in this case the governor's body they have issuers banks issue credit cards to citizen to to customers their card holders.

F

Those both have agreements and then the card holders use that card to make payments or to make purchases, and the merchant verifies that card and that's also happening under governance, and you know so. This is something that we understand.

F

Then we introduced computers and we introduced some new things into our sort of day to day life. Well, first, you know there's some value to these computers. It turns out, although they can be quite frustrating they, maybe they automate a bunch of processes and so forth. But when we looked at the very big picture, we look at the Internet, it's not a very safe place. We don't have ways of doing things that are trusted like we can do in our day-to-day lives. There's this big trust gap.

F

You can do some things on the internet that seem trustworthy like we can buy stuff or there's this Ellen White advertising, but really those are two kinds of models like the buying things.

F

Well, if you're part of the credit-card trust framework, you know then you're in if you're not a, if you're not able to have a credit card you're not in, and that isn't very great from a government point of view like we want to include all of our citizens and services, and we have this other model for making money, which is basically the surveillance economy, and so that also comes along with a whole bunch of other risks and unfortunate side effects of this technology, which is you know there are the many passwords we have the risks to our personal information being stolen and our identity being taken from us and used by others and so forth.

F

There's some problems with the way we try and have done things with government. You know it's difficult to orchestrate a set of services for a citizen and so forth, and the big challenge I think that we've stumbled over and now I think we can point to very clearly is that the client-server model of the web and a sort of enterprise computing. It doesn't work for trust and the reason it doesn't work for trust is because the account service is owned by somebody outside of our influence and control.

F

The account service exists because in the beginning, computers required you to access them to share their expensive resource and that access was in a controlled physical facility, often a government or a university or a corporation, and that controlled physical access relied on in-person credentials to be able to know who that person was and that they were authorized to be in the room where they could. Then do this new login thing, and when we were able to have many more computers and we were able to do that remotely.

F

We never figured out how to replace that trust model where we relied on in-person credentials and connect it to a login. And then we have all those other problems with logins, so this is like the root cause and then you know I, don't know if it'll make sense, but instead of the technology model here is client-server, which means that the server sends information bits to the client on my computer, but from a governance perspective me as the client.

F

That's like what I'm trying to do I'm trying to engage in a trusted interaction I can't do that with anything anyone or any other service that isn't connected to the account service that I'm using right now, and so it's more like I'm in service of the server I call it the client servitude model, it's not peer-to-peer. It's somebody else is managing my relationships and that's fundamentally broken. How can we fix that? Well, we have this new model where we think we can establish peer-to-peer digital trust.

F

So we can have peer-to-peer connections back again to having a direct relationship with the issuer, but instead of a plastic secure item, I get a cryptographically secure thing. We call a verifiable credential.

F

Steven will talk about that and I'm going to get that credential through a new protocol, a new channel called a did, comm Channel and a new connection, and then I'm gonna be able to hold and keep these things myself and I'm gonna be able to present them to third parties when they need to know something about me and from an issuer that they trust under the governance models that we already have and I'm going to be able to gain access to that service and I'm gonna.

F

Do that in a way that it allows me to make those decisions myself decide to share the things they're being requested and do that privately peer-to-peer. There's no intermediary here, so I'll give an example and then I'll do a quick demo of that and then we'll hand it off to Stephen. For the you know, gory details of how this works using hyper ledger technology that we've been contributing to. So this is the question of a Maya lawyer, so we often need to prove something about ourselves that has to do with an accreditation.

F

We hold I'm an employee I'm, a lawyer I'm, a doctor I'm, a teacher I'm, a parent, something like this, so I'm a lawyer and in BC we have a organization called the Law Society of British Columbia. It is created by an act of Parliament and their responsibility is to decide who are lawyers and they have a criteria for that law, degrees, exams, membership fees and so forth, and they maintain the membership lifts list and they give to lawyers a practicing certificate.

F

So a physical object that says they're a lawyer and good standing for this period of time and lawyers can use that to present to services to prove they're a lawyer and in this case we're gonna, look at a BC court service that wants to provide record, digitally recorded audio sessions of court proceedings, so their clients. You know they need this: to do, research for their clients, for bail, review hearings and other kinds of sessions.

F

The BC government would like to give those recordings only to lawyers, and so they need to know who of that lawyer that they are a lawyer. We have some options. We could do this in person, we know how to do this. They have a practicing certificate, they have government-issued ID, they can prove who they are they're a lawyer. They can get the recording say on a CD or a USB stick or something okay, but PC is a very big province. Just like Brazil is a very big country.

F

We don't want everybody to have to come to one place or a small number of places, and you know we can see all the reasons. This is not ideal to current computing technology. We have a login of some kind. Now the problem is BC. Court Services has a challenge. They don't know which login service they could use. The BC Law Society has a login for their membership portal. The BC government has a general user account service called BCE ID, no assurance there. We don't know who they are.

F

It doesn't know who they're a lawyer, it's just the login and we also have something in BC called the BC service card, which is a login service that is able to access your government-issued identity attributes. So we've registered all our residents. We know who they are. We have their pictures. We can give them a login service on their phone. That's high assurance. The problem is BC. Court Service doesn't care that who you are really they care that you're, a lawyer and the law and the law society.

F

Well, in theory, you could integrate with that login account, but when that lawyer needs to go and prove they're, a lawyer to the Land Registry or to the business registry or to a bank is every service in the world that needs to know who a BC lawyer is going to integrate with the BC Law Society. Through some point-to-point, open, ID connect interactions, that's gonna be really ugly, so option 3.

F

What if we give the lawyer just like in real world, give them a practicing certificate but give them a cryptographic version of it, verifiable credential and what, if they could present, that proof of holding that credential to the BC court service and the BC court service could ask for that without having to integrate with the Law Society.

F

We can take a look at that. So I'm gonna show you on my phone here.

F

That understand these Stephens gonna talk about your air, raise agents I'm it. Let me use one so I can see here that I'm being offered a credential, not very creatively named I'll talk about that to our friend, Amelia, no and I can accept that digital practicing certificate and tuck that into my wallet.

F

So now I can look in my wallet and I can see. I have a card, oops I can see. I have a card here called a to ATO IP, but really what it should say is digital practising certificate and I can look into it and I can see what attributes are there, and this is a cryptographically signed chunk of data stored in my secure wallet and I can now you know, walk around with that. It's right here now, I can go over to the BC Court service.

F

Who knows that these credentials are out there and being held by lawyers? They know that the Law Society is diligently managing their membership list, and then you know how to ask a lawyer to prove that they're proof that they're a lawyer- and they do this by saying- present your verifiable credential.

F

Now this particular implementation is actually integrated with an enterprise identity, access management platform called key cloak, and so what we've done is we for the pattern where you need to ask your customer who they are and what it is they are holding to get in, say their account number or something that's kind of like a login.

F

It's an authentication, so they're gonna have entik 8 with there verifiable credential, but your web app may just want to understand open ID Connect, which is a great pattern for you know getting people into the game and not having to build more into these web apps. Then then, you need, if you just need to know. They're a lawyer, I can say I'm gonna prove how awesome I'm going to prove Who I am.

F

There we go so this is a challenge that says prove to me: you're, a lawyer I scan that with my phone on my phone and has looked up into my wallet to see. If there you have a verifiable credential that matches the criteria specified in this QR code and I do so I'm being asked to prove my lawyer number, my name and my membership status. I present that and I am now sent a today into the BC court. Transcript service and I can see my name here and so forth.

F

So it's that simple for a lawyer to pick up their credential and to use it to gain access to a system. This system did not require any kind of integration.

F

The law I mean the the BC Court service didn't have to integrate with the Law Society. They didn't even have to talk to the Law Society. They simply.

F

I'll show you a sort of high-level diagram, so the Law Society added, what's called Ares cloud agent Python into their configuration they're actually using 1990s technology called ColdFusion to run their membership portal. So you can work with old technology. You can work with new technology as long as this interface can you know your back-end can send data into a a areas agent, which seamen will talk about you're in the game, and then that knows how to issue the wallet and then the verifier service.

F

While they spoke open, ID connect, the wallet was able to present the credential to the open, ID connected entertainer and they were able to gain access to the service. So I think this might be a good point to hand off to Stephen I hope, I left even of time.

E

Hey John: do you want to open it for any questions.

F

Sir, it's okay. If we have time I have to answer some questions and I will stop sharing.

E

F

Fernando can translate if you will.

C

No just do it can still talking. Thank you John. This was awesome. Laughter I have some considerations to talk with you. Thank you. John.

D

C

Eternity someday alright.

E

So I'm going to share my screen as well. Let me know what you can see that.

F

It's good okay,.

E

Good alright, this is a presentation. We've done a couple of times. We did this at the hypervisor global forum and in Phoenix the last day before the world shutdown, and we did this as well at us at UBC. I've got the slide here. I was going to share the the deck with anyone who's interested the slide.

E

Url is up here, so you can jump to it. A couple of one other thing to mention: there's a couple of Linux Foundation EDX courses that I'm the co-author of and there's links down here in case you're interested learning, a lot more about the ideas and the technology behind this.

E

Ok. So let's talk about hypervisor era, T's and how this relates to what John talked about. I'm gonna talk I'm only going to go so I I didn't create a special presentation for this I've included a lot of this the whole back, because there's demos and presentations that can go through this is basically a 1/2 to 3/4 day presentation, so I'm just going from the start of it. So I'm going to go as far as talking about agents and let and Ledger's, and what goes on a ledger.

E

What goes on the blockchain we're talking about, so that's what I'm going to go through the projects themselves, um focus on areas, agents and what they allow you to do and then talk about as far as what goes on the ledger and then lots more information in the slide deck if you're interested to follow on more. So this is the hyper ledger. Greenhouse folks have seen this before. So the projects that are related to what John talked about are these ones so started with hyper ledger and be back in the beginning.

E

I'm hyper editor Andy is the blockchain element of this and there is a blockchain element. Obviously it's why it's part of hyper measure, it's very different from fabric and basically the other blockchains within the hyper ledger community, in that it is focused entirely on identity. It does not is not a general purpose. It's actually built on a general purpose blockchain, but is it exposed as a very limited purpose.

D

E

It has, for instance, no smart contracts, it doesn't exchange value, it's really a way to distribute tea when you get really down to it. It's a way to distribute public keys and associate those public keys with an incident and a way to find out who controls those public keys.

E

India in the beginning had all of the pieces to it. The blockchain, the crypto, the client code, and it was all in one project over time. They realized hey this. The crypto involved in this is pretty open. So let's enable ursa and let's put the crypto into that and take it out of Indy and then other projects within hypervisor started to use it, and then the second was Ares, which is verifiable. Credentials are going to be a global massive thing. Indy will not be the only implementation of a ledger to host the keys.

E

The the data necessary.

E

There won't be the only verifiable credential format, so we enabled so we split out the project into Ares the client end of at the agent piece of it, and so those components came out of Indy or they're in the process of coming out of Indy and going into Aries, and then Aries contains a whole lot more, which is a bunch of protocols for how you how you exchange credentials, amongst other things, John, you didn't, show the trust over IP stack, which leaves me that at a disadvantage, because I assume John would have talked about this.

E

But this is John- is the executive director of the new Linux Foundation Trust over IP project, so we say a sibling project, parallel project to hyper ledger, and it's about trust over IP. So what we're talking about here? This is the trust over IP stack, which is two parts. Technical and governance. John talked a lot about governance and technical at the lowest layer layer. One you've got give you till ities. This is the ledger part of it later two is agents that communicate to allow you to. You know the example.

E

There were two agents and what John presented there was the mobile agent that he held in his hand, and then there was the server side of it in this case, the law society that issued the credential and the Ministry of Justice that verified the credential. So those are all instances of agents, they are layer, two and then the leather. The next layer up is layer, three, which is the same picture. That's this verified the issuer, the holder and the verifier.

E

So the same three transact saying participants that John talked about throughout his presentation and then on top of that, finally, is the applications themselves. You have this ability to exchange credentials, but the Law Society wants to issue them and the Department of Justice, the Ministry of Justice, wants to consume them. That's a digital trust ecosystem, as John mentioned, governance is on all levels of those parts, so, from a project perspective, bring this back to hyper ledger layer.

E

One live utility that is indy and as well in the also provides implementation of verifiable credentials, disability to exchange, to sign credentials, to issue them and then to be able to verify them. Cryptographically, so that's the indi layer, the aries layer is sort of two and three two is the actual connectivity. The communication between agents.

E

How john was able to have a QR code come up on the screen as the mobile phone scan that and be able to see it and then, under let's beam, if you recall, I had in d as being a single type of did, utility on the lower level. Aries also encompasses being able to talk to multiple div utilities. So, while aries does not have the did, utility aries is not the ledger itself.

E

Aries uses interactions with the ledger to be able to ground the trust in the cryptography to execute the cryptography, and then the last part of Aries is aries. Is a bunch of protocols to issue a credential? That's a protocol to verify, to request a proof and to receive that proof and verify it. That's a protocol that gets executed between agents. Those are just a couple: there's actually a about I, don't know about twenty or twenty five protocols that are in common use in airing so and and that can be arbitrarily expanded.

E

So protocols are what agents execute once you have a communication path? You have protocols that allow them to accomplish a shared business goal, so that's aries and then Ursa throughout all of these layers. There's cryptography involved and so Ursa is that piece of it. So that's the two ways of looking at what the projects are involved. I know from the beginning that in the documentation section that I saw earlier while I couldn't understand a whole lot of what was being said, I did notice.

E

It really focused on fabric, so really would be excited if you'd focus some more on aries and indy and do some of the internationalization on on the documentation within that. So there's my pitch to move over to where you know the action is really happening. This is kind of how it lays out. It's pretty typical of what you would see in a blockchain solution. You've got the validator pool is the ledger itself.

E

Indy is a public permissions network. That means public, meaning anyone can read from the from the from the ledger. They can submit requests to read data from it, but only permission set are allowed to write to it as well, rather than having miners like Bitcoin or etherion does to write the transactions, the it's a permission, ability to actually create blocks on the ledger so to create the transactions on. The ledger is also a constrained limited to a very small number.

E

This observer pool on the outside that's a scaling feature, that's actually not yet implemented, but the idea there would be reads overcome rights, there's way more read on their rights. Therefore, you want to have a way to scale that outside are the agents that we talked about. These are edge agents these with the agents that are owned by entities. So obviously these are. These ones are owned by individuals that have wallets that exchange credentials, for example, and then this would be an enterprise. The example in the corner would be an enterprise one.

E

Now it looks like this is saying that it there's a cloud connection in between these agents. Talking to the ledger and not target ledger, that's not quite the way it works. So, in fact, all agents talk directly to the the the the note of the ledger so when they need to write data to it or need to read data from the ledger, they would contact the ledger directly.

E

Where these come in is to enable a connection between two, so this enterprise is, a server, might have a cloud agent that it uses messages flow. Although the message is logically going directly from the server to the mobile phone on there are, there could be multiple hops in between that. So this is not working like an HTTP connection, where there's a request response between these two, but rather a peer-to-peer method where data flows between them via asynchronous messages. So that's how that works.

E

um Often, there's no need for this cloudy agent, these mediators on the enterprise side. So, in fact, the way it would work was this. This mediator is a persistent endpoint for mobile agent, and a Enterprise agent would talk directly.

E

This is the persistent endpoint of the mobile agent and there's a bunch of reasons why you have this these paths through the network, these multiple hops most of it, is to do with privacy and the ability to do not not enable correlation between between the interactions that you're doing- and we can talk a bit more about that as we go John mentioned this before did comm protocol. That's what is used we haven't even mentioned. The word did yet but decentralized identifiers. These are the mechanisms that allow this distribution of keys.

E

So the did comp protocol is used to establish and communicate across it and then running on top of the vidcom protocol is the various protocol. The Airy's protocols that allow you to accomplish some business goal, exchange of credential issue or credential request of proof and receive one.

E

An Aaron's agent has a specific architecture, basically got two parts, the framework which is something that generally, is somebody else's problem. Somebody like us, we built we build a framework, one called ares cloud agent Python, so we've got a Python framework and then a controller. This is the thing. That's your problem. If you're, if you're, building an agent, this is the controller, has the business logic, so the framework sort of handles all the the standard actions of sending messages and things like that.

E

The controller says: oh I, want you to send a message now and I wanted to have this content, so the controller is the business and the framework is: is the worker doing the doing the business? On behalf of doing the actions on behalf of the controller, so look something like this: the framework talks to the distributed ledger when necessary. The framework talks to other agents.

E

It's using did comm protocols to do this. It's using it happens to use for many networks, 0 mq, to talk to the ledger. No note that, though this distributed ledger could be other than indeed there's frameworks that talk, for instance, to fabric as a the ledger.

E

Vidcon protocols are used so once an event comes in a message comes in from another agent: that's going to be a did, comm protocol and what that will do is it will fire an event to the controller to say: hey I just got this message from this agent. What do you want me to do about it until that's the handoff from the framework that does the mechanical work of exchanging messages and constructing messages and sending them from the business logic which the controller is the thing that you as an agent writer might create.

E

So the framework sends events to the controller, the controller figures out what to do and then uses a REST API to say, hey framework, go send this message to the agent in response to the previous one we got so it's that that's the basic architecture of how an agent works and so generally, how people developers get involved in this. Is they pick a framework they want to use and I'll show on the screen.

E

A couple in a later slide a couple of examples of the frameworks, and then they write the business logic to do what they needed to do.

E

So business logic on this side could be, as I said, the controller might be a user interface on a web phone and the rest of the controller is me using my phone to do things. So that's what John was demonstrating as well. It could be a back-end system. It could be like an education system where or the BC law society system, where it has already an application that tracks who the members are, and it's using that to figure out how to how to how to how to receive events and how to respond to them.

E

So the business logic can be tied to anything one of our goals, one of John's goals. When we started doing this was we did not want to have to change every system in the government to be able to use this. We wanted to make the transition to this as easy as possible. So that's. The idea here is that you have a relatively lightweight controller and it integrates with whatever back-end system already exists, and it continues to operate as it as it needs to.

E

This is the list of the available frameworks in D based Ares Cloud Engine Python is the one we've as the VC does have created, and now we're getting lots of contributions from basically around the world, so it is primarily used occupied because it's Python cannot really be used as a mobile agent. So it's only used generally as Enterprise agents.

E

It's designed as a standalone component, usually running in docker as a docker container. So the controller just talks to an HTTP interface, so the controller can be in any language. You want it's not constrained to Python and we've got people who are doing lots of node and and using other all sorts of other tools for for building the controller part of it.

E

Ares framework dotnet is the second one that that's pretty popular. That was one that trinsic, which john demonstrated they used to be called street cred. They created the area framework dotnet the nice part about it is it can be used in an enterprise context, but it also through the use of stavarin, can be embedded in mobile, and so it's made the most inroads into agents a mobile agent. It's not the ideal environment for doing mobile technology, but it gives you all of the ares components you need to be able to build a wallet unlike occupy.

E

It is a library that gets embedded into whatever your controller is so you still have a controller in the framework it's just, rather than there and being two separate components. The framework is embedded in the.

E

E

Football, um these are the indie based ones. So, as we met as I mentioned earlier, Ares sort of spun out of Indy, and although it wasn't it is intended to talk to other Ledger's and other frameworks. Many of the first implementations have all been based on Indy, and all of this work here is based on Indy, the area's framework goatee for the different approach.

E

They wanted, all the richness and goodness that Aries have and and to make use of the same protocol and be able to work with these agents, but they wanted to make it a native go and not tied to Indy. So they've built a non in diversion. It talks to framework to fabric as a ledger, amongst other things, entirely native golang, so it does not have Ursa in it does not have any Indy components in it and it compiles to Aslan, runs in a browser and has all sorts of interesting.

E

You know json-ld based credentials rather than Indy credentials and so on.

E

If you're interested in air in Indy, one of the things we frequently hear is people get interested in Indy and it is in a relief State. Aries is not in a production state or a 1.0 state, but in the Aries in beds Indy, if you're using any of these frameworks. So if you're interested in India at all, you really want to start with Aries and start with a framework that embeds Indy to enable interoperability across the ecosystem.

E

So that's some advice there um house time I could go on for I've got another section that I wouldn't mind doing fernando. Am I okay with time.

C

Well, it's okay! You can too, with your presentation. Think: okay,.

E

I'll take a little bit longer and go into a couple more things. The paper credential models john touched on this been used for literally thousands of years, started to get into question in 1970, because people could print their own paper and suddenly the technology for printing suddenly became possible and made.

E

This John talked about this issue or older credential model to be very explicit about what the cryptography does, and it's the same thing that the paper credential model does when you, when, when Mary here presents the credential it proves who issued the credential because they look at the permit and they see what name is printed on it or whatever. There's some way to prove who issued it.

E

Who holds the credential that there's somehow a binding between the credential and Mary? To show that it's her credential that it was issued to her could be a picture on it could be.

E

Her address could be just typed in her name, depending on the trust in the piece of paper and then finally, there's some way- and this is probably the trickiest of all- which is the verifier- can look at it and know that it's a valid document and that the claims are unchanged in it nobody's messed with any other typing or changed anything in it when, when I, you know when a Border Patrol agent is looking at your documentation, if you get on a flight, those are the things they're looking at who issued it. Does the picture?

E

Look like you and therefore they know it's yours, and does it look like it's been tampered with or it's even entirely fake passport? Those are the things they're trying to prove we're doing that exactly the same thing, except with photography here and one of the things we don't and and and so we're proving the same thing we can do one more real-time check, which is, we can add that the claims have not been revoked. So, unlike a piece of paper, you can check in real time whether it's been revoked.

E

One of the key things here is that, when we're doing this verification and including this real-time chat with this online digital, the verifiers are not going back to the issuer in real time. They're, not saying hey, I got this credential. Can you confirm with me it's right there they're using cryptography to do- and this is where the ledger comes- in the the keys and other pieces of data, they need to prove the credentials. Come from the ledger. The credential comes from Mary. The credential does not go on the ledger.

E

It comes from Mary, but the keys necessary to prove the credential to verify it. It's these these four things who largely come from the ledger.

E

This then leads you to the same issue: whether you're a person looking at a paper document or you're, looking at a verifiable credential at digital. Do you trust the issuer? Mary got this issue document from somebody it? Maybe it's her transcripts and university. She got it from a university. Do you trust that? That's a real University, that's a governance question, and that comes back to what John talked about with the entire governance.

E

Side of the trust over IP staff, Indy has one other cool thing that I'm going to talk about. This is where I'll probably ended is zero knowledge groups. So zero knowledge proof czar super interesting, because this really cuts down and correlation. It does a couple of things, so what Indy can do is, rather than in order to prove combined the credential. To you.

E

Often what's done is a an identifier, that's associated with you is embedded in the credential and so that when so that you can prove at the same time that the credential was issued to you. What Indy does is it's able to prove that without exposing that identifier? That uniquely identifies you, so that's pretty powerful. That means that if I present this to Facebook and then I present it to Google, they can't go behind my back and compare them and connect my data together. So this surveillance approach is limited.

E

That's one value of zero knowledge groups in the most basic there's two other things: there is selective disclosure when I have a credential and I present it as a piece of paper. The verifier can see everything on that. Credential, when I go to a bar and I prove my age, they can tell that I have brown eyes. They don't really need to know that they can tell what my address is.

E

They don't really need to know that selective disclosure allows you to prove the four things you need, but not true, but not present, all of the data. So you you constrained how much data you're sharing about yourself with the verifier, so selective disclosure number one tied to indeed zero knowledge groups capability.

E

You still are proving all of the other things that it's bound to you, that it was issued by the province that or issued by the issuer that not nothing's been tampered with, but you're, not proving all of the other pieces of data that are on the credential, then.

E

The second thing are what I call predicate proofs- and this is an even more interesting one- so I can prove that I'm old enough to drink at a bar, but I don't have and I can do that based on the date of birth, that's in a credential, but I don't have to give that date of birth. All I.

D

E

Bold enough and that's, and so that's another capability of indeed zero knowledge proof capability. There's a link here at the bottom. I did a meet-up awhile ago they talked about the high school edition math to do with zero knowledge fruits and how they actually work. It's actually quite similar for those who are familiar with 50 helman and things like that. It's kind of cool and kind of fun. This is I present this at the high school level.

E

So as long as you have high school math, you could probably deal with it with that the last one I was going to mention which goes on the. What goes on the ledger and I want to highlight one last thing here so on the ledger.

E

It's kind of interesting, because the only and issuer needs to have anything on the ledger which is kind of interesting, so they need to have or things the fourth being part of revocation effect supported the basically that tell us some things, but with these there are, you can issue with just three transactions on to the ledger. Three big elements on the ledger: you can issue millions of credentials. That is all you need on the ledger. You don't have to have anything else which brings us to the key.

E

No credentials go on the ledger, so no private data on the ledger, nothing that you would not want others to be able to see goes on the ledger. If you are an issuer, you are putting basically your P's and how to get access to those keys and some metadata about the credential that you issue and that's it. Nothing else very crucial that you understand that we think it's a really really bad idea to have any data about a private data about a person on a public ledger, and so none of that goes on the ledger.

E

A lot of people think that when a credentials issued it's not issued to the person it's issued to the ledger. It is not issued to the ledger it's issued to a person and with that I'll wrap up and leave it I probably got to be fired, so hope. That's! Okay!

E

Back to you, Fernanda.

C

Thank you and playing John John I think it was an awesome presentation for you guys the first presentations of John's order. I think it was very cheesy to see how it's important to talk about governance of ecosystems.

C

You know bring the chest to make the equation. Be I mean if you create these traditional, a desert, civilizations, who don't think very important thing about the governance and how you can make all the points we trust in the condition as in vision it does not. It doesn't work to prevail using the case great demo, taking stiffen to show us more about the concepts and the frameworks that is developed at this time of night bladder and can I also like to invite everyone here developers. You know the software addicted to journal the happening.

C

Splash developer, these amazing products, you know to create the reading. Thank you guys again. What I saw you I do the filtering effects, but for those acceptable ago he was put them is next time. Chorus also be a died. Response and brands are becoming guru from Technical Working.

C

Girl abu sarap, raqi, Thunda, movie, physician or group decide facade a total points on septic Edyta main and you know, Solomon was basically French. Relief. I described is bad, but some of the day's routine smile a statistically to born accusative of a political tool to pay homage to me very much I.

D

C

D

C

What is your story? Painful time, your game Jesus further? What the more punishing mother would be mu cos. L must boost about Chicago branch at.

B

D

Almost constellar, so he split the importance that I need Nadia, October and now mrs. frameworks. This awesome equality, pide pide system, people that I work with.

C

All keep our team focused even today enjoy the superb water, Oh, Tiffin and John. We have some considerations here. What's the use of this technology regarding to the or the GDP are building a law here is called as a necessity. L GP v, so you have some cleavage consideration about the use of substrate density with the you know, this kind of privacy and data loss like SPR.

E

I'm having trouble hearing you you're cutting out for me I'm, not sure so. I missed I missed a question. Oh sorry,.

C

Can you hear me now yeah? Yes, we.

E

Had retraction.

C

Okay, thank you. I had a question about the use of self serenity and we still practicing and data loss like GDP, our loss Lord, you know how we can use it against us every day, see how it is is regarding the wall. Yeah.

E

So the cool thing about this is that the data that is provided goes to the subject of the data, so there's no GDP our contacts for that, so the company that is issuing a credential is operating as it always did.

E

However, instead of giving data about a subject directly to some other party they're, giving it to the person themselves and that person can then share them as they wish so from a GDP our perspective, it's it's way better, because you're you're handing the data to the person that that is the subject of the data. So that's part. One part two is there's some question as to whether the identifiers for what I call the dead of the issuer.

E

So that goes on the ledger and there was there's some question as to whether that data that identifies if a holder, the person who receives the data also has to have a date on the ledger. There's some question as to what the GPR ramifications of that is, however, within the the holder of the data, does not have to have anything on the ledger. It's only the issuer that has so again.

E

No GDP are issues there, so generally in gdpr is handled in a much better way as a result of that now, one last thing: when you provide data in the form of approved to some other party, it's exactly the same as if you typed it in on the screen, and they received it once you do that they have the data what they do with it is up to them as to how they behave, how they share it and to follow the GDP. Our rules. Does that answer the question.

C

Really the way in sir Thank You Steven, okay come into detention for panic. He conceived by the tribunal consistent, follow in potentially in het revised. Nobody about the solid Rupa sibel did you come as novices additional a difficulty energy with image to Prezi Bob. He saw that special oscillator dimensions food, because the missile is your basic ability. You know why she can't acknowledge another Evangeline come to vegetative encounter the day apart moment, calico locos, who are who control the it is dodge, yield, ECG, comb even think of a castle.

C

Does so it's a people essentially on her for Sarah educated in aggregate coalition. Today, lace, commercial and just a.

C

Massive war so monster: oh.

C

Okay, thickest even think John, it's all guys taken now. I have.

D

C

Follow it like it reasons.

C

Policy from Gavino.

A

Hola hola dahveed, oh my god,.

C

Some of the other featured a lego.

A

He's for shopping good job! Thank you. So much piss, all my face: Madhavi loser, Cara I'm, gonna, DC police, a monavie nostra buy milk group, I'm gonna, disable automatic allocation stain was a groupie document, a song. He hit a rocky. No esta muy visit you with the kampachi. Likewise, email to Chrissy, comunidade I showed up. We are kickin. The morocco hyper ledger from the issue was similar. If I tell me tap it down, Jesus on the Capitol computer, poles apart, Safari hyd forgot repairs to be talkative.

A

A to do comes fossil meet up in my race, a my homie awesome. Ned Jochen is a sound toad stone confidence, a pacifier, European I, a Miller I for some trouble. Male approach, heat Erica. She stuck it in my size with special interest group prayer, misguided induces in a year the kms Tammy muscle water group, Ypres folk, are doing sexy far inspire our as Modell's apart, sparing my star. No political film achieve a peerless each Paris.

A

Oh yes, HKH Pyrrha, a toad, no todos noise of a similar regatta, todos, spective, estado, Bernardo, Madera canal, his go to and are to take a say. Tamina year, doubtful I.

D

D

An image college- oh.

A

My top assault kitty, who has a cell? It's a murder, attempt response, a more assertive kisser, evanka tool.