►
From YouTube: Hyperledger Seattle Meetup - November 6, 2018
Description
Video from the November 6 Hyperledger Seattle Meetup hoster by Drummond Reed, Chief Trust Officer of Evernym, Inc., "Governance Frameworks: Business, Legal, and Technical Policies for Blockchains" This presentation is about the Sovrin Governance Framework V2, the governance framework for the Sovrin blockchain as a global public utility for self-sovereign identity, as an example of how governance frameworks are a powerful new tool for adapting blockchains to real world business, legal, and technical requirements.
You can join the group here: https://www.meetup.com/Hyperledger-Seattle-Chapter/
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #HyperledgerMeetups #Blockchain
A
Okay,
well,
as
always,
thanks
for
showing
up
it's
a
little
bit
rainy
out,
but
still
not
bad
it's
autumn
autumn
and
Seattle
can't
beat
it
again,
thanks
for
showing
up
appreciate
your
time
here,
we're
going
to
have
another
great
presentation:
Drummond
Rita's
here
he's
a
great
speaker,
as
most
of
you
already
know,
so
we're
thrilled
to
have
them
so
as
we
get
started.
First
of
all,
thanks
to
our
sponsors,
thanks
to
Evernham
incorporated
for
sponsoring
this
hsm
event,
Thank
You
Drummond
Evernham
is
a
leading
vendor
of
SSI
self
sovereign
identity.
A
Solutions
for
businesses
and
individuals,
The
Saboteur
foundation,
is
an
international
nonprofit
public
trust
for
the
sovereign
network.
Also
thanks
to
Aaron
Barber
of
u-dub.
Commotions
labs
Aaron
lives
here.
So
so
this
venue
is
by
way
of
Aaron,
and
we
always
want
to
thank
him
because
without
Aaron
we
would
have
no
home
we'd
be
on
the
streets
and
that's
always
hard
to
do
a
meet-up
on
the
streets.
If
you're
interested
in
learning
more
commotion,
wdu
is
the
place
to
go
for
that.
A
A
A
A
Just
where
do
you
find
the
time
of
day,
which
is
Oasis
with
the
semantic
data
exchange
protocol
that
implements
privacy
by
design
and
then
prior
to
starting
respect,
network
Drummond
was
executive
director
of
two
industry
foundations,
the
information
card
Foundation
and
open
identity
exchange
he's
also
served
as
a
founding
board.
Member
of
the
Open
ID
foundation
is
TPA,
International,
Security
trust
and
privacy,
Alliance
xti
org
and
identity
Commons,
and
in
2002
Drummond
received
a
digital
identity,
Pioneer
Award
for
digital
ID
world,
and
in
2013
he
was
cited
as
an
oasis,
distinguished
contributor,
holy
cow.
A
B
Yes,
how
many
folks,
in
the
audience,
have
heard
of
decentralized
identifiers,
Oh
surprising
about
how
many
folks
have
heard
that
at
the
w3c
T
PAC
conference
two
weeks
ago,
their
annual
conference
in
the
all
France
there
was
the
di
D
working
group.
Organizational
meeting
had
61
attendees
Comus,
the
largest
organizational
meeting
they've
had
for
a
working
group
in
several
years,
and
it
was
unanimous
among
the
folks
that
it
was
one
one
company
that
apparently
had
a
concern
about.
B
This
was
too
complicated
for
the
w3c,
but
everyone
else
was
like
no,
it's
not
let's
get
into
it.
So
anyway,
that's
just
one
little
piece
of
news:
I
guess,
I
guess:
I'm
gonna
use
these
slides
of
all
yeah,
we'll
be
good
for
that
yeah
sure.
Is
this
picking
up
well
enough
or
do
I
need
to
relocate
the
mic
or
okay,
all
right,
so
today,
I'm
going
to
be
talking
about
governance
frameworks.
B
You
tell
me:
why
is
that
you
probably
I,
think
you
can
see
the
slides
best
that
way
and
for
those
this
is
not
going
to
be
deeply
technical
talk,
because
governance
frameworks
are
really
about
how
you
connect
the
technology
of
blockchain
and
the
various
things
you
build
on
it
with
the
real
world,
actually
solve
the
real-world
problems
and
my
thesis
is
going
to
be
you're
gonna,
see
more
more
about
governments.
Forum
works
because
it's
blockchain
technology
gets
more
and
more
to
real
world
business
solutions.
B
B
A
member
of
the
sovereign
now
called
governance
framework
working
group
has
been
from
the
outset,
and
we've
also
got
another
member
of
Evernham
here,
Nick
Reinhard,
so
we're
all
in
a
position
to
help
answer
your
questions,
afterward
or
dive
down
into
the
end
of
these
topics.
All
right,
let's
dive
in
here
again
rich,
already
covered
all
this.
How
long
I've
been
doing
this
stuff
and
all
I
can
say-
is
20
years
of
doing
this,
and
actually
I
want
to
point
it
right
here.
B
This
conference,
internet
identity
workshop
happened
also,
two
weeks
ago
and
I've
been
to
all
27
that
happens
twice
a
year.
The
last
one
was
the
largest
one
ever
and
it
was
almost
completely
dominated
by
self
sovereign
identity.
It
is
a
watershed
in
this
problem
of
internet
identity
and
and
we'll
be
covering
why,
in
this
whole
thing
so
start
out,
blockchains
and
governance.
B
Now,
if
I
turned
around-
and
you
know
hyper
ledger
generally
considered
to
be-
you
know,
blockchain
for
business
and
governed
private
blockchains
that
are
governed
now,
if
I
turn
around
said
yeah
and
generally
public
block
chains,
what's
different
is
they're
they're
they're
uncovered
how
many
folks
would
generally
agree
with
statement,
go
ahead
and
put
up
your
hand
just
actually
that's
you
didn't.
You
didn't
fall
for
the
bait,
totally
untrue,
okay,
all
blockchains
our
governor
one
way
or
another.
Okay,
the
the
real
bottom
line
is
right.
We
control
the
machines.
B
It's
just
a
question
of
how
and
I'm
going
to
not
drastically,
but
at
least
somewhat
oversimplify
here
by
talking
about
three
major
models
of
governance,
and
this
applies
primarily
to
public
blockchain,
private,
blockchains
or
old,
govern
fairly
explicitly
one
one
way
or
the
other,
and
we'll
talk
about
governance
frameworks
with
private
blockchains,
but
the
public
block
chains.
There
tend
to
be
these
three
models
in
an
evolutionary
in
this
direction.
B
Bitcoin
is
probably
not
fundamentally
changing
that
model.
Aetherium
is
moving
a
model
from
proof
of
work
which
is
very
computationally
and
ecologically
expensive
towards
proof
of
stake
and
with
proof
of
stake
it
may
be
moving
into
a
governance
model
for
a
theorem
itself.
That
is,
you
know,
it
would
actually
take
it
over
to
the
algorithmic
category.
Now
some
of
the
early
other
blockchain
projects
out
there
distinguish
themselves
by
saying
we're
going
to
build
governance
into
the
chain
itself
right.
We're
gonna
have
staking
we're.
Gonna
have
voting
powers
that
are
accumulated
with
tokens.
B
You
know,
developers
are
gonna,
earn
the
ability
to
to
vote
on
that
and
the
algorithm
itself
is
going
to
evolve
in
the
chain,
and
there
are
a
couple
examples.
This
article
highly
recommend
it's
it's
a
good
medium
article
on
the
various
different
approaches
that
are
being
taken
there,
but
still
the
basic
ideas
build
the
governance
into
the
chain,
don't
really
involve
the
humans
other
than
in
the
design
of
that
governance.
B
The
third
model,
which
is
emerging
more
now,
is
governance
frameworks,
and
that's
what
I'm
going
to
be
concentrating
on
here
today
and
giving
you
an
example
of
with
what
we're
doing
with
sovereign,
but
sovereign
is
not
the
only
one.
Okay
Varis
one
is
another
global
watching
designed
specifically
for
self
sovereign
identity
use.
The
governance
framework
has
no
token
associated
with
it
and
then
d
creds
another
very
interesting
project
in
the
EU.
That
also
has
explicit
off
chain
governance
again
to
solve
this
problem,
tying
it
into
the
real
world.
B
So
the
first
reason
is
I
was
explaining
earlier
that
we're
going
to
see
more
about
governance
frameworks.
Is
governance
is
they're
not
just
a
problem
for
the
chain
itself?
You
can
govern
the
chain
perfectly
and
have
something
that
doesn't
tie
into
the
real
world.
It
doesn't
actually
solve
a
problem,
whether
its
land
registries
or
its
medical
records
or
its
supply
chain.
If
you
want
to
solve
those
problems,
you
actually
have
to
connect
with
these.
You
know
totally
unambiguous.
B
Tory
bodies,
right
and
and
legislators
and
government
agencies-
and
you
know,
business
policy
makers.
So
that's
what
governance
frameworks
do
there's
a
second
reason:
you're
gonna
hear
to
start
hearing
a
lot
more
about
governance
frameworks
and
that's
specific
to
self
sovereign
identity,
and
this,
the
the
simple
or
you
know
the
thesis
I've
put
in
front
of
you
is
show
me
a
block,
a
blockchain
project
that
doesn't
need
identity.
I've
been
doing
this
for
long
enough.
Now
that
I,
even
the
ones
worth
like.
No,
no,
we
don't
need
identity.
B
Turning
around
they're
getting
down
the
road
and
they're
low
yeah.
Actually
we
do
need
identity,
so
you're
gonna
have
a
tie
into
every
blockchain
project
out
there.
That
is
gonna
turn
around,
say:
I
need
this,
and
as
soon
as
you
involve
identity,
you're
going
to
involve
governance,
it's
it's
that
simple
you're,
also
Scott's
going
to
say
and
Trust
assurance
and
we'll
get
to
that
in
a
little
bit.
So
that's
where
it's
going
to
tie
in
and
I'll
get
very
specific
as
to
why
I
think
you're
gonna
see
a
lot
more
in
that
area.
B
Now,
in
order
to
explain
that
second
one,
and
to
talk
about
the
specific
example,
the
sovereign
governance
framework
I
need
I'm
gonna
cover
the
same,
slides
I
did
in
my
last
talk,
but
very
quickly.
It's
just
the
standard
way
that
I
explain
one
identity
eating
the
world
right
now
at
least
eating
the
identity
world.
B
Okay,
and
to
do
that,
you
just
have
to
look
at
what
is
the
the
three
major
models
of
identity
that
have
evolved
in
the
last
twenty
years
as
we've
been
dealing
with
the
internet,
the
starting
point
was
exactly
what
we
had
before.
We
had
the
internet,
you
walk
and
you
create
an
account
and
you
log
into
every
single
system
website
or
application
that
you
need
to
interact
with
right.
B
That's
why
we
have
this
huge
list
of
usernames
and
passwords,
and
we
actually
have
a
company
here
that
I've
known
for
a
while
who's
trying
to
say
hey.
Let's
get
you
know,
there's
a
good
technological
solution
to
just
avoiding
that
piece
of
it
all
right
and
I
think
they
will
plug
nicely
into
the
solutions
we're
going
to
talk
about
here.
B
B
B
How
many
folks
are
really
happy
about
doing
that
and
I'd
seen
two
more
hands
go
up
out
there
that
actually
was
becoming
very
popular
and
his
stealing
a
couple
years
ago,
and
it
started
tailing
off
because
largely
of
the
privacy
and
intermediation
problems
that
the
companies
that
were
saying,
oh
yeah,
come
vlog
gun
to
me
of
that
service,
we're
actually
putting
a
service
provider
in
between.
In
that
position
there
are
other.
There
are
other.
You
know,
problems
with
this
federated
identity
is
not
portable.
It's
restricted
to
just
the
services
that
the
identity
provider
offers.
B
You
can't.
You
know
the
organization
behind
it
doesn't
have
any
ability
to
extend
it
and,
as
I
said,
you
end
out
with
the
service
provider
in
the
middle,
but
that's
the
best
we
could
do
until
blockchain,
oh
and
by
the
way
15
years,
were
three
generations
of
standards
to
standardize
how
that's
being
done
out
there.
So
now
we
move
to
the
self
sovereign
identity
model
and
interesting
about
it,
move
back.
It
says
no
service
provider
in
the
middle.
It's
actually
going
to
be
a
peer-to-peer
model
and
it's
no
longer
an
account.
B
B
B
Out
his
wallet
again
right,
yes,
my
number
one
prop.
Okay,
ladies
gentlemen,
can
I
introduce
decentralized
identity?
It's
been
working
well
on
planet
earth
for
at
least
the
last
century,
or
two
okay,
I
carry
this
wallet.
No
one
I
didn't
get
it
anyplace
and
I
control.
It
completely.
I
choose
what
credentials
go
in
there
and
then
the
verifiers
that
I
want
to
use
them
with.
That's
what
we
call
someone
who
accepts
a
credential,
a
verifier
mentor
fires
decide
what
credentials
they
accept
and
issuers
decide
what
credentials
I
qualify
for.
B
Okay,
I'm,
a
Washington
state
resident
every
Washington
state
driver's
license
and
TSA
accepts
it
for
me
to
get
on
a
plane,
there's
no
higher-level
Authority,
it
happens.
The
US
government
says
these
are
the
rules
for
TSA
in
this
country,
but
if
I
go
to
Canada,
you
know
that
very
foreign
country
to
the
north
or
or
New
Zealand
or
someplace
right
it
happens.
We
have
rules
and
they'll
probably
take
the
or
they
might
take
a
passport
or
they
might
take
something
else
right:
different
cards
for
payment.
Everyone
decides
their
own
rules.
B
There's
no
centralized
body
for
doing
that.
With
these
centralized
decentralized
identity
cells
every
day,
all
we're
doing
is
we're
taking
this
and
we're
saying:
let's
have
that
same
capability
online
right,
let's
put
that
digital
wallet
here
and
that's
what
it's
called
and
it
doesn't
even
mobile
device,
it
could
be.
Your
tablet
could
be
a
laptop
could
be
any
computing
device.
You
have
your
car
they're
all
going
to
be
capable
of
doing
that.
That's
how
we
get
anything
Internet
of
Things.
Now.
Why
does
blockchain
help
solve
that
problem?
B
Why
suddenly
can
we
can
we
have
those
it's
because
the
credentials
that
we're
going
to
get
in
that
wallet?
If
you
generate
your
own
credential,
like
I
print
my
own
business
card,
it's
got
a
little
bit
of
value,
but
you
know
what
it's
not
going
to
get
me
on
a
plane,
right,
TSA,
doesn't
say
I,
just
trust!
You,
you
put
your
business
card
I'm,
going
to
get
that
card
from
some
authority
that
they
trust
and
when
it
gets
into
my
wallet,
how
do
they
know
they
can
trust
it?
B
Well,
it's
because
it's
going
to
use
a
digital
signature
from
a
key.
They
have
registered
on
a
public
blockchain,
a
public
watching
that
that
the
TSA
can
instantly
access
and
look
up
and
which
they
trust,
that
they
believe,
in
fact,
that
blockchain
and
the
address
of
that
public,
key
and
they're
blocked
into
something
they
can
trust
like
they
could
trust
a
DNS
entry
if
it
was
secure
enough,
okay
and
then
once
I
have
been
in
my
wallet.
I
can
now
go
to
TSA
and
I
love
asking
this
question.
B
How
many
folks
use
a
mobile
boarding
pass
last
time
you
got
in
a
plane,
yeah
I
did
until
about
three
years
ago.
I
was
like
how
don't
trust
those
things
you
know
it's
just
now,
I'm
like
I,
don't
want
paper.
You
know
if
I
can't
get
this
I
don't
want
to
fly
in
that
airline
and
I
actually
watched
it.
I
just
flew
here
from
Salt
Lake
City,
where
everyone
is
headquartered
and
I
didn't
see.
One
person
in
the
line
I
was
in
use
a
piece
of
paper
to
get
on
that
plane.
B
That's
how
prevalent
what
mobile
boarding
kept
passes
so
you're
experienced
before
I
went
there
though
TSA
I
had
to
get
out
that
piece
of
plastic
I
showed
my
mobile
boarding
pass,
but
then
I
had
to
get
out
the
piece
of
plastic.
That
is
my
my
driver's
license.
The
experience
should
be
that
I
go
when
I
go
yeah.
Here's
my
QR
code
for
my
mobile
boarding
pass
click.
Here's
my
mobile
driver's
license
right.
B
They
scan
that
they
don't
have
to
do
a
backlight,
my
my
ability
to
actually
fake
the
thing
is,
you
know,
just
gone
into
the
toilet
and
they
have
to
do
almost
nothing
to
you
know
they
would
only
would
have
a
picture
to
to
verify
and
that
picture
is,
did
you
know
pass
through
digitally
instead
of
having
to
use
a
piece?
That's
what
we're
talking
about
we're
talking
about
portable
verifiable
digital
credentials.
So
that's
the
the
way.
That's
the
presentation
process
next
step.
So
in
this
system
it
works
again.
Just
like
this.
B
Anybody
in
the
world,
any
organization
can
be
an
issue
of
credentials.
Any
of
us
can
carry
a
wallet
and
accept
those
credentials
from
from
the
issuers,
and
then
we
can
present
them
to
any
verifier
who
can
decide
to
take
them
right,
rich
and
Diane
here
could
say
yeah
we
can
start
issuing
credentials.
You
Partha
see
I'll
block
to
him.
You
meet
up
right.
Restaurants
in
the
area
can
start
say:
hey
yeah.
You
show
us
that
credential
right
just
like
a
piece
of
paper.
B
It's
you
know
it
is
again
decentralized
and
it's
as
strong
as
the
cryptographic
infrastructure
that
will
be
set
up
here.
So
what
we're
doing
to
standardize
that
first
things.
First,
we
are
standardizing
the
decentralized
identifiers
which
are
the
address
of
the
public
key
and
by
the
way,
what
we
call
the
agent
for
you
on
blockchain
sovereign
is
a
blockchain
being
built
just
to
do
that
and
nothing
else.
That's
its
whole
purpose
serve
as
a
global
public
utility,
various
ones.
Another
example
another
blockchain.
It's
got
a
permission
list
model,
but
it's
being
done
to
do
that.
B
But
this
the
D
ID
standard,
which
is
I,
mentioned
the
w3c,
just
basically
said.
Okay,
let's
go
ahead
with
the
process
of
forming
a
full
working
group.
We
didn't
expect
it
to
actually
generate
that
level
of
interest.
We
just
thought
the
specification
would
go
into
an
existing
working
group
there,
but
they've
decided
to
create
a
full
working
group
and
a
two-year
standardization
cycle
to
standardize
on
the
ideas,
decentralized
identifiers,
so
I'm
not
gonna,
go
into
that
really
any
further.
The
second
key
standard
we
need
is
interoperable
wallets
these
wallets.
B
B
This
is
also
a
standard
that
Evernham
has
had
a
contract
with
the
Department
of
Homeland
Security
to
do
the
original
spec
that
a
spec
of
the
architecture
is
at
hyper
Ledger
indy
happy
to
share
that
you
can
just
literally
the
hyper
ledger
in
DD,
KMS
and
you'll
get
the
address
of
that
document.
The
third
one
is
called
the
ID
off.
It's
how
you
use
decentralized
identifiers,
private
key
to
authenticate
to
any
other
person
or
organization
recite.
This
is
how
we're
gonna
trends
in
in
the
next
five
years.
Believe
it
or
not.
B
The
username
and
password
is
gonna
start
to
look
like
the
fax
machine,
I'm
serious.
You
know
a
lot,
there's
been
a
lot
of
work
to
Fido
and
other
things
to
get
there,
but
it's
actually
gonna
be
daddy's
and
get
us
over
the
hump
right,
and
we
will
not
have
to
worry
about
that
and
then
likely.
The
most
advanced.
All
of
them
is
verifiable
credentials
that
formal
working
group
is
called
verifiable
claims
working
group
at
WC.
They
are
six
months
from
being
done.
B
A
B
Really
good
question
I'm
going
to
give
you
the
short
form
answer,
which
is
the
D
ID
specification
is
not
block
chain
specific.
In
fact,
it's
designed
to
say
here's
the
generic
way
you
do
it,
and
then
you
write,
what's
called
a
D
ID
method
for
each
type
of
block
chain,
so
there's
a
sovereign
D,
ID
method,
varus,
1,
D,
ID
method,
etherium,
Bitcoin,
etc.
B
Those
will
get
you
interoperability
at
this
level
of
D
IDs.
Ok,
now,
when
you
get
up
to
this
level
and
the
the
need
to
be
able
to
have
interoperable
credentials
that
you
can
verify
and
revoke
the
same
way,
you
need
to
credential
B
revocable
that
involves
features
of
a
block
chain
that
not
all
of
them
support.
So
you
have
one
level
of
interoperability
here,
but,
as
you
go
up
the
stack,
they
may
not
be
interoperable
interoperable.
We
are
working
on
it.
B
This
actually
fits
fairly
nicely.
This
was
called
web
authentication
web
off,
which
is
just
reached
the
the
basically
the
first
public
review
stage
at
the
w3c,
and
it's
got
major
company
backing.
It's
basically
going
to
be
if
you're
familiar
with
Fido,
which
is
how
you
use
your
phone
to
do,
cryptographic
based,
authentication,
no
username,
password
you're,
just
you
know,
registering
with
site
and
then
you're
just
using
a
biometric,
and
it's
sending
a
sign
message
to
log
you
in
web
offender
and
and
and
moving
that
into
your
browser.
B
We
thought
there
would
be
a
bunch
of
resistance
to
adding
this
to
that
or
or
you
know
that
it
was
going
to
take
two
or
three
years
to
work
through
that
politics.
The
w3c,
the
the
D
IDs
have
so
much
momentum
at
w3c
that
I
just
learned
this
morning.
I
wasn't
there
at
T,
PAC
I
was
at
iw
that
that
group,
the
web
of
authentication
group,
met
and
said
we
will
integrate
that
into
the
web
authentication
standard
as
their
next
more
project,
so
things
are
going
to
go
faster
than
we
expect
it
I.
B
A
B
No
I
was
talking
about
an
adoption
timeline
and
okay.
I
will
give
you
the
reason
for
my
the
justification
and
it'll
invite
you
to
see
the
rest
of
the
presentation
and
see
whether
you
agree
self
sovereign
identity
is
developing
amazing
momentum.
I
think
even
those
of
us
that
are
very
close
to
it
are
surprised
at
how
fast
this
model
is
is
is
being
adopted.
I
was
just
telling
someone
hear
this
story,
IBM,
you
think
of
IBM
and
hyper
ledger.
You
think
fabric
right.
That
was
the
project
that
contributed
the
outset.
B
They
have
the
most
maintainer
zon
it
they're
very
associated
with
it.
At
the
last
hyper
ledger.
Member
meeting
in
Montreal
those
of
us
who
were
there
noted
that
there
was
as
much
discussion
general
discussion
about
hyper
ledger,
indie
and
identity
as
the
was
about
fabric
it
reached
that
level
of
interest
and
believe
me,
IBM
has
been
playing
attention.
They
they
have
become
a
sovereign
steward,
I'll,
explain
what
that
is
in
a
little
bit.
They
have
a
whole
team
on
sovereign,
now,
they're,
integrating
sovereign
with
fabric
and
that's
one
example.
B
It's
gonna
pick
up
speed
the
same
way
the
web
did
write.
The
web
was
sort
of
there
there
it
was
at
the
edge
and
then
all
sudden
it
was
all
you
heard
about
for
the
next
couple
of
years.
Right
and
I.
Think
that's
what's
going
to
be
going
on
here
now,
I'm,
not
saying
all
the
problems
can
be
solved
in
next
five
years,
but
I
think
is
gonna,
see
a
lot
of
momentum.
Go
ahead.
B
Love
that
I'm
going
to
talk
specifically
at
the
end
of
this
as
I
get
through
it
by
the
way
this
I
prefer
to
have.
You
know
interactive
ongoing
questions,
so
this
takes
a
little
bit
longer
rich
and
what
will
still
have
had
lots
of
dialogue
throughout
good,
so
I
can't
say,
financial
services,
very,
you
know
tip
of
the
spear
they
tend
to
you
know.
This
makes
a
big
difference
in
their
area,
and
the
credit
union
industry
specifically
is
heavily
involved.
B
Government
is
extremely
interested
because
they're
all
in
the
identity,
business
one
way
or
the
other,
they
all
want
to
increase,
trust
and
they're
all
looking
at
block
payments
at
some
level.
Healthcare
is
definitely
at
the
table,
it's
very
hard
to
break
into,
but
they
too
were
seeing.
Hey
we've
been
looking
for
these
solutions
for
a
long
time,
travel
very,
very
strong
in
for
obvious
reasons,
when
you
look
at
the
cross
border,
the
friction
involved,
you
know
with
with
travel
and
and
the
benefits
the
travel
industry
of
eliminating
that
friction
right.
Those
are
four
examples.
B
A
Okay,
the
big
issue
is,
as
Drummond
had
mentioned,
that
one
and
two
are:
they
don't
work,
they
don't
scale
and
there's
pent
up
demand
to
get
secured
applications
to
being
to
be
produced
in
the
next
layer
of
the
internet.
That
is
waiting
for
self
sovereign
identity
to
come
through.
So
there
is
a
push
by
industry
to
get
this
thing
solved
just
so
that
they
get
everything
else
on.
B
B
Says
that
being
an
expert
in
when
I
point
down
I'm
talking
about
to
the
basics
of
public
key
certificates,
key
verification
and
and
what's
called
PKI
public
key
infrastructure
that
we
have
to
have
today.
Every
time
you
see
the
lock
in
your
browser,
it's
because
the
website
has
a
certificate
for
its
public
key
that
infrastructure
which
took
you
know
last
fifteen
years
to
develop
and
Scott's
one
of
the
web
trust
auditors
that
can
go
on
audit
the
the
certificate
authorities
that
issue
those
it's
heavy
weight,
its
centralized
and
it's
not
nearly
flexible
enough
to
handle.
B
You
know
the
Internet
in
value,
so
Scott
is
here
and
part
of
the
sovereign
governance
working
group,
because
what
we're
calling
the
sovereign
web
of
trust
is
the
whole
next
generation
of
that
and
he's
not
alone.
Three
of
the
largest
CAS
in
the
world.
Certificate
authorities
in
the
world
are
sovereign
stewards
and
active
in
the
development
of
this.
So
this
is
the
whole
next
generation
of
trust
on
the
internet.
I
think
it
would
be
safe.
Okay,
go
ahead
in.
B
I
love
that
no
absolutely
will,
in
fact
that's
one
of
the
things
that
one
of
the
reasons
iBM
is
at
the
table.
Now
these
standards
for
D,
IDs
and
and
this
whole
stack
applies
as
much
to
the
Internet
of
Things,
including
anything
you
would
ship
or
track
or
produce
and
take
through
a
life
cycle
as
much
to
those
as
they
do
to
people
and
organizations
that
interact
and
control
those.
We
can't
design
the
whole
internet
value
without
all
those
components.
B
The
IDS
are
highly
scalable
because
even
more
scalable
I
know
the
DNS
and
you're
going
to
go.
Wait
a
minute
DNS
serving
billions
of
lookups
every
day.
Dns
is
still
centralized
system
with
with
the
IDS.
Any
blockchain
can
serve
up
a
D
ID
and
every
server
on
that
chain
can
give
you
an
authenticated,
verified
response
to
a
request,
so
sovereigns
being
scaled
is
specifically
to
do
that.
But
so
is
Varys
one
you
could
use
Bitcoin
etherium,
you
know
we
can
have
hundreds
or
thousands
of
blockchain
serving
up
D
IDs
same
standard
every
place.
B
A
B
B
We
are
going
to
build
as
much
protection
as
we
can
into
it,
but
these
are
tools
that
are
going
to
be
able
to
be
used
by
anyone
that
uses
the
Internet
and
and
in
some
cases
they
will
be
able
to
use
to
cloak
things
that
are
going
on,
I,
believe
the
governance
frameworks
and
the
trust
railroads
we're
talking
about
building
are
going
to
help
with
that.
But
there's
no
perfect
answer,
maybe
one
more
question
that
will
keep
going
is.
A
B
Definitely,
as
I
said,
D
IDs
are
designed
to
work
with
any
any
modern
blockchain.
Interestingly
Bitcoin,
because
of
its
pretty
constrained
architecture,
it's
taken
the
most
work
to
develop
a
D
ID
method
for,
but
it
works
and
there's
a
there's,
a
community.
That's
specifically
been
developing
that
they
have
a
spec
called
a
Bitcoin
Daddy
methods
back
and
that's
so
so
a
appear.
We
call
these
agents
in
sovereign
that
would
communicate
over
a
connection.
You
can
have
an
agent
using
a
sovereignty
ID
talking
to
an
agent
using
a
Bitcoin,
D
ID
or
a
etherium
D
ID.
B
You
name
it
right,
it's
not
quite
as
interoperable
as
two
DNS
domains,
right,
I
use,
com,
use,
org
but
close
and
over
time,
I
think
we'll
get
even
closer.
So
what
we're
really
about
is
decentralized,
encrypted
private
peer-to-peer
communications
between
ami
entities
out
there
right
all
right.
One
more
question:
sorry,
but
yeah
well
limited
this
and
then
we'll
try
it
because
I
hopefully,
will
have
a
bunch
of
questions
about
the
next
section.
So.
A
I
appreciate
the
question
back
there
about
secret
societies,
because
one
of
the
concerns
is
and
I'd
say
that,
at
the
same
time
as
you
see,
nefarious
use
surround
that,
let's
say
terrorism,
but
at
the
same
time
those
are
ways
in
which
we
can
get
around
in
countries
that
are
don't
have
high
human
rights,
such
as
China,
with
its
Great
Firewall,
and
the
ability
for
perhaps
people
who
are
working
behind
the
scenes
to
identify
that
hey.
Is
this
an
Asian
of
the
government,
and
this
is
really
my
frame
working
in
human
rights
together.
A
B
Interestingly
enough,
two
years
ago,
18
months
ago,
when
this
was
newer,
we
were
hearing
more
of
that,
and
we
even
thought
was
a
little
interesting
that
the
department
homeland
security
here
in
the
US
was
sponsoring.
They
literally
sponsored
the
development
of
the
work
that
led
to
this
standard,
and
this
one
and
as
I
said
every
name,
you
know
I
led
the
projects
to
do
these,
but
we
enlisted
everyone.
You
know
pretty
much.
B
B
Excuse
me,
identity
and
data
privacy
group
there,
who
believes
that
just
like
TLS
makes
for
a
stronger
internet
right,
even
if
you've
got
a
TLS.
You
know
with
with
you
know,
for
a
site
that
you
wouldn't
you
know
you
wouldn't
support,
but
they
too
can
have
an
SSL
certificate
that
overall,
cyber
security
will
be
increased.
Our
national
security
will
be
increased
with
this
infrastructure
and,
yes,
absolutely
will
it
enable
Human
Rights
and
will
it
support
things
like
refugee
for
identities?
B
I
mean
for
identity
for
refugees,
potentially
in
countries
where
the
government
is
is,
is
actively
opposing
that
or
or
blocking
that
right
self
sovereign
ending
will
will
enable
that
so
there's
a
lot
of
actually
work
going
on.
In
fact,
I'll
highlight
mr.
bill
Donnelly
here:
who's
on
the
board
of
a
company
called
I
respond
that
is
providing
self
sovereign
identity
in
Myanmar
and
Thailand.
Today
for
migrant
workers
in
the
fishing
industry,
who
the
whole
point
is
stopping
human
slavery,
and
he
can
take
more
about
that
in
the
break.
B
All
right,
I'm,
gonna,
pause
here
and
now
we'll
go
back
and
again,
I
invite
more
rounds
of
questions
as
well.
We'll
dive
forward
I'm,
going
to
briefly
before
I,
get
into
governance
frameworks.
I
want
to
make
sure
that
that
the
story
of
what
you're
going
to
do
with
verifiable
credentials
is
clear.
Because
again,
this
is
what's
going
to
you're,
going
to
lead
to
why
governance
frameworks
and
how
are
they
going
to
be
so
useful?
So,
as
I've
explained,
they
are
the
cryptographically
verifiable
equivalents
of
this
of
the
credentials
in
this
wallet.
B
Now
there
are
these
three
roles:
the
issue
over
the
credential
gets
a
D
ID
and
uses
that
to
sign
the
credential
issues
it
into
your
wallet,
your
digital
wallet
here
and
then,
when
you
go
to
a
verify
like
TSA,
you
present
the
credential
and
you
have
set
up
relationship
and
you
sign
it
as
well
and
with
with
your
own
D
ID.
Now,
that's
that's
the
basic
infrastructure,
those
three
roles
works
for
all
verifiable
credentials
every
place,
and
but
anyone
who
wants
copy
this
presentation,
I
assure
it,
and
you
can
get
it
publicly.
B
You
can
use
all
these
slides
wherever
you
would
like
now,
I
want
to
point
out
two
things
to
set
up.
This
is
the
generic.
This
is
the
overall
generic.
All
digital
verified
credentials.
Work
this
way
inside
sovereign
and
specifically
supported
in
hyper
ledger
in
D,
which
is
the
hyper
ledger
project
devoted
to
self
sovereign
identity.
The
code
was
initially
contributed
by
the
by
the
sovereign
foundation
to
to
hyper
ledger.
There
are
two
additional
features
for
privacy
purposes.
B
The
first
one
is
that,
by
default,
whenever
you,
the
holder,
form
a
relationship
with
an
issuer
or
with
a
verifier
and
set
up
that
connection
peer-to-peer,
you
don't
use
a
D
ID
on
the
public
blockchain.
You
exchange
what
we
call
pairwise
synonymous
D,
IDs
they're,
not
publicly
discoverable,
there's.
Basically,
what
you're
doing
is
you're
exchanging
key
pairs,
but
because
you're
doing
with
D
IDs
each
of
you
can
rotate
your
keys
and
never
have
to
affect
the
relationship
and
that
connection
you're,
creating
I
want
to
point
out.
B
There's
never
been
any
like
that
in
the
history
of
the
internet,
a
connection
between
two
of
you
as
individuals
or
you
in
an
organization,
or
you
want
a
device
that
has
no
service
provider
in
the
middle.
It's
yours
for
life
or
for
as
long
as
the
two
parties
want
to
you
maintain
that
connection
either
one
of
them
can
break
it,
but
no
one
else
can
in
fact
no
one
else
even
knows
about
it
and
that
key
pair
that
you're
using
is
unique
to
that.
That's.
Why
there's
an
important
point?
B
An
issuer
like
the
Washington
State
driver's
license
or
T
has
to
get
a
public
D
ID,
so
the
credentials
that
it
issues
can
be
checked
by
any
verifier
right.
Any
verifier
on
the
internet,
anyplace
could
verify
yep
that
was
signed
by
the
Washington
State
drivers
less
than
authority
it's
issued
into
my
wallet,
but
when
presented
to
TSA
once
created
a
connection
with
them,
I'll
sign
it
with
that
unique
private,
D
ID
and
they
know
it
came
from
me
and
no
one
else
can
produce
that
signature.
B
So
that's
point
number
one.
This
is
a
major
piece
of
our
privacy
by
design
architecture.
The
second
one
even
deeper,
which
is
there
going
to
be
three
basic
credential
formats
standardized
at
w3c
in
that
work
and
the
one
that
sovereign
is
standardizing.
We
have
submitted,
uses
zero-knowledge,
cryptography
encoding
of
the
credential,
so
that
what
you
produce
here
to
the
verifier
is
called
a
proof
of
the
credential
zero
knowledge
proof
of
the
credential
and
without
going
into
details.
What
it
means
is,
rather
than
just
sharing
this
whole
driver's
license.
B
I
can
share
exactly
the
information
they
need.
I
can
prove,
for
instance,
I'm
a
Washington
state
resident
I
have
a
little
Genet
driver's
license.
They
don't
see
anything
else,
I
go
in
a
bar
and
prove
I'm
over
the
legal
drinking
age
in
your
bar
and
that's
it
you
don't
get
to
see
any
of
their
information.
I'm
not
gonna,
go
deep
into
zero
knowledge.
Proof,
cryptography,
I'm,
just
gonna
say
this
is
the
first
infrastructure
on
a
global
basis
that
I'm
aware
of
that's
actually
implementing
as
the
standard
as
a
default.
B
This
feature
of
sovereign
has
attracted
more
interest
from
more
governments
from
large
corporations.
This
is
what
really
got
I,
be
ms
attention
and
key
announcement
again.
Just
happened
earlier
this
week,
the
crypto
library
that
goes
behind
this
wallet
and
one
called
the
agent
it's
called
the
Indy
agent
project
at
the
age
hyper
laser
Indy
has
got
an
old
project
for
the
blockchain,
an
ancient
project
for
this
for
the
credential
exchange
and
the
key
management.
The
agent
project,
the
crypto
library,
turned
out
to
be
the
most
advanced
crypto
library
there.
B
Despite
having
IBM
and
Intel-
and
you
know,
Roja
these
other
projects
there,
none
of
them
had
tackled
these
projects.
Now
it
is
based
on
work
that
IBM
has
been
doing
the
last
20
years,
but
that
crypto
project
and
the
fact
they
have
a
fantastic
security
maven
named
Dave
Hughes,
be
meant
that
they
finally
said
hey.
Let's
take
it
get
together
and
create
a
shared
crypto
library
for
all
hyper
ledger
projects.
Let's
take
the
standards
in
Indy
was
developing
and
let's,
let's
get
you
know
all
of
key
cryptographers
together
and
create
a
shared
project.
B
It's
been
in
the
labs
last
couple
months
and
this
last
week
it
was
approved
by
the
techno
steering
committee
to
become
hyper
ledger:
ursa
urs
a
yes,
so
that's
I
think
they're
gonna.
It's
gonna
be
officially
announced
here
soon,
don't
say
anything
you
know
if
I
was,
if
I
jump
the
gun
there
a
little
bit
so
so
so
now
that
crypto
is
gonna,
be
available
to
any
hyper
ledger
project.
B
A
B
Well,
the
answer
there
is
that
the
the
DMS
functionality
that
is
there
right
now
is
in
it's
called
Lib
Indy,
it's
the
the
main
hyper
ledger
library.
The
key
management
inside
of
that
is
implementing
the
DKMS
design
as
fast
as
they
can
do.
It
there's
some
features
that
are
there
already
and
and
it's
going
to
be
coming
and
now
it's
going
to
it's
going
to
again.
Live
Indie
is
now
going
to
turn
into
Ursa
and
Ursa,
plus
the
other
agent.
The
hyper
ledger
agent
in
da
jet
project
is
going
to
be
implementing
DKMS
features.
B
The
agent
libraries
in
the
agent
in
D
dash
agent,
okay
and
there's
a
rocket
chat
channel
there
at
hyper
ledger
for
Indy
agent
and
the
other
ones
in
D
dash
node
and
in
D
dash
agent.
Yeah
I
can
just
go
in
and
ask
them
about
the
what's
currently
hyper
ledger:
lid
Indy
and
that's
the
that's
crypto
library
that
has
the
key
management
and
just
ask
about
DKMS
and
folks
will
chime
in
there.
You.
A
B
Alright,
now,
let's,
let's
talk
about
governance
frameworks,
again
I'm
done
with
tech.
Now
now
we're
going
to
talk
about
how
we
tie
tech
to
the
real
world,
and
it's
all
about
blt
business,
legal
and
technology
rules
that
govern
not
just
the
blockchain
project
and
a
lot
about
a
lot
of
articles
out
there
about
walk
chain
governance.
B
Yes,
but
if
you
actually
want
a
solution
for
the
real
world,
your
governance
is
almost
certainly
going
to
extend
to
things
that
are
off
chain,
like
those
agents
like
the
credentials
and
that's
what
I'm
about
exploded
about
to
explain
now
a
quick
visual
metaphor
and
remember
the
BLT
sandwich.
I
didn't
come
up
with
this.
By
the
way
it
was.
B
Does
a
green
wood
at
MIT
that
that
came
up
with
that
acronym,
but
that's
what
all
governance
framers
come
down
to
is
just
what
are
your
business
legal
and
technical
policies
for
governing
the
whole
thing
best
example
of
governance
framework
visa
massacre?
What
makes
this
credit
card
in
here?
Work:
yeah,
there's
a
network
behind
it
and
there's
a
pile
rules
about
that
thick.
B
B
In
fact,
a
simple
way
to
put
it
is
every
digital
credential,
that's
not
single-use,
meaning
just
issued
by
an
issue
were
to
accept
back.
There
is
gonna,
have
a
governance
framework
behind
it.
That's
what
allows
all
the
other
verifiers
to
go.
Yeah
I
know
that's
a
driver's
license.
It
was
issued
by
Washington
State.
B
We
already
have
a
set
of
states
saying
three
right
now
and
about
four
or
five
more
on
the
horizon,
they're
saying
hey,
we
probably
need
a
governance
framework
for
driver's
licenses
in
the
US
and
maybe
maybe
they're
only
you
know
four
or
five
states.
Initially
that
start
issuing
those
driver's
licenses,
but
now
there's
a
framework
that
would
cover
every
other
state
as
they
come
online
and
guess
what
they're
going
to
be
using
a
hyper
ledger
in
d-
and
you
know,
they're
gonna,
be
using
that
code
base
and
you're
sending
I
think
how
far-fetched
is
that?
B
Yet
so
you
might
have
to
elide
this,
but
I'm
gonna
tell
this
group
Ottawa
has
issued
four
and
a
half
million
business
credentials.
They
took
a
database
of
all
the
public
business
credentials
for
businesses
in
Ottawa
and
they've,
converted
them
into
Indy
credentials
and
they're.
Having
a
centralized
directory
service
for
it
and
called
the
or
book
BC
Govan,
1.4
million
credentials,
it
hasn't
been
announced
publicly,
yet
all
the
systems,
but
it's
not
it's
not
just
through
testing
everything
else.
B
It's
done
it's
in
production
and
now
they're,
saying:
okay,
everything
works,
we're
gonna,
announce
it
sometime
between
now
and
the
end
of
the
year.
But
again
don't
say
anyone
get
any.
What
about
that?
Okay,
so
so
this
is
the
reason.
Ss
I'm,
we're
gonna,
see
an
explosion
of
trust.
France
honey
I
want
to
get
more
specific
about
that.
When
you
have
all
this
infrastructure
that
exists
and
the
technology
is
there,
the
open
standards
are
there
and
then,
as
I'll
explain
shortly.
B
You
have
a
base
trust
framework
for
this,
then,
all
of
a
sudden,
if
you
want
you,
need
a
credential
or
family
of
Prudential's
to
establish
trust
for
your
community
online.
It
might
be
an
industry
community,
my
big
government,
it
might
be
a
smart
city
right,
it
might
be
a
supply
chain.
All
you
need
now
for
a
governance
framework
is
something
that
says
what
issuers
issue,
what
credentials
to
what
holders
and
what
verifiers,
under
what
policies?
I'm
not
saying
it's
trivial,
but
that
is
a
much
more
tractable
most
of
the
projects.
B
We're
looking
right
now
we're
looking
at
half
dozen
of
these
projects.
Every
name
is
consulting
in
the
suburbs,
and
this
is
helping
in
there
looking
like
six
months
and
it's
not
the
technology.
At
this
point.
It's
just
the
definition
of
the
policies,
ratification
of
the
policies
by
the
communities
involved.
So
I'm
going
to
talk
to
you
quickly
about
the
specifically
governance
framework
that
sovereigns
developed
it
sovereign
by
the
way,
just
to
make
sure
we're
all
on
the
same
page.
B
I
think
I
just
skipped
over
the
slide
earlier
on,
where
I
explained
that
hyper
ledger
indie
open
source,
anyone
can
go,
create
identity
solutions
based
on
that
self
sovereign.
Today
solutions,
the
sovereign
foundation
is
a
nonprofit
governance
organization
set
up
to
govern
a
network,
a
global
network
for
self
sovereign
identity
using
hyper
ledger
in
decode.
They
actually
contributed
that
code
to
hyper
ledger
to
get.
You
know
to
have
it:
a
community
grow
around
it
ever
name
is
simply
a
commercial
vendor.
B
We
were
the
original,
and
you
know,
creators
of
that
code
base
helped
create
the
sovereign
foundation
because
we've
recognized
had
to
be
a
global
public
utility,
and
now
our
very
active
contributors
have
to
ledger.
Indeed
we're
just
a
commercial
company,
that's
building
solutions
on
top
of
of
sovereign,
so
sovereign
is
not
just
a
blockchain.
It's
always
been
from
the
outset
designed
to
be
the
home
of
a
governance
framework.
That's
what
the
nonprofit
is
for.
B
That's
the
working
group
that
I
chair
it
was
originally
called
a
trust
framework
and
I'll
explain
in
a
minute
why
we
change
the
name.
This
is
actually
a
chart
from
World
Economic
Forum,
a
paper
back
in
January
that
laid
out
the
whole
sort
of
how
decentralized
ourself
sovereign
identity
is
evolving
and
the
different
solutions
out
there
and
yes,
sovereign,
is
the
most
hind
to
the
right.
But
you'll
notice
you
port,
which
is
aetherium
based
learning
machine,
which
is
actually
wants
to
be
neutral,
with
support
multiple
di
D
methods.
B
Are
there?
That's
again,
that's
that's
a
public
white
paper.
You
can
go
look
up
and
what's
unique
about
sovereign.
Is
it's
been
governed
from
the
asset?
It's
called.
We
call
it
hybrid,
because
it's
a
public
blockchain,
that's
going
to
be
accessible
by
anyone
once
the
full
governance
remember
is
in
place,
but
the
nodes
are
actually
run
by
trusted.
Institutions
and
the
governance
framework
is
what
defines
what
that
means.
There's
seven
categories
of
institutions
that
can
qualify
plus.
Actually
the
eighth
is
any
other.
Even
a
commercial
vendor
right
can
come
along
and
say
we'll
make.
B
The
promise
is
necessary
that
we're
going.
You
know
we're
going
to
adhere,
buy
this
framework
and
we're
going
to
support
this
mission
and
by
the
way,
all
of
them
as
as
stewards
running
a
node
they're,
not
paid
assent,
there
is
no
inherent
reward
in
being
a
steward
other
than
the
reputational
benefit
and
you're.
You
know.
You're
able
to
you,
know,
learn
and
get
steeped
in
the
technology,
and
there
are
now
more
than
50
approved
stewards.
I
think
it's
gonna
be
close
to
60
by
December.
B
This
is
just
a
smattering
of
examples,
so
the
government's
working
group
there,
which
was
the
the
second
one
after
the
technical
governments
board
to
be
formed,
has
over
30
people
working
on
it.
We've
been
working
for
the
last
year
on
the
second
generation,
the
first
generation
called
sovereign
Trust
framework
was
about
a
nine-month
effort
and
it's
approved
in
July
and
the
network
went
live
in
July
of
last
year,
July
31st
we
had
the
Genesis
ceremony,
ten,
the
initial
stewards
and
all
the
genesis
transactions
were
done.
B
That's
that
working
group
for
the
last
year
has
been
developing
it
and
that's
the
address.
If
you
just,
you
can
also
google
sovereign
governance
forum,
Rick
will
take
you
right
there
and
you
can
see
all
their
links
to
Google
to
eight
Google
Docs
that
represent
this
and
I'm
not
going
to
go
deep
into
this.
But
if
you're
wondering
well,
what
is
it
you
know?
What's
the
structure
of
one
of
these
governance
frameworks,
we've
actually
developed
this
and
that
the
legal
team
and
the
policy
team
worked
on
this?
B
To
say
this
is
a
structure
of
the
government
of
the
sound
governance
trust
framework
and
you
can
use
it
for
any
other
government
for
the
framework.
Do
you
need
it's
really
a
template
and
the
basic
idea
the
template?
Is
you
have
the
master
documents
or
the
root
of
everything
else,
and
that
says
okay,
this
is
this.
Is
the
structure
of
the
whole
thing
you
separate
out
the
glossary,
because
it's
so
critical.
This
glossary
now
has
over
200
terms
in
it.
B
So
if
you
really
want
to
dive
deep
into
understanding
self
sort
of
an
identity-
and
it's
it's
very
readable-
it's
just-
there
are
a
lot
of
terms.
There's
what
legal
agreement
and
the
whole
thing,
because
the
sovereign
network
only
needs
the
an
agreement
when
sovereign
foundation
and
each
steward?
Okay,
all
around
the
world,
other
governance
frameworks,
you
might
have
different
agreements
with
the
different
parties
that
are
involved,
that's
part
of
what
you
design
and
then
we
developed
this
figure.
We
call
the
control
documents,
which
is
rather
than
stuffing
everything
into
one
big
document.
B
This
is
more
like
the
Constitution,
and
this
is
legislation
where
you
take
groups
of
policies
that
should
be
governed
by
different
stakeholders
and
group
them
together
and
then
let
them
manage
those
these
now
can
be
versioned
independently
and
there
four
of
them
that
we've
designed
and
that
whole
list
is
that
that
URL
that
I
had
on
last
slide
now.
In
addition
to
this,
these
are
what
we
call
a
normative
documents:
the
ones
that
are
instance
these
as
appendices.
B
These
are
just
inherited
Bible
those
we
have
over
here,
which
we
call
the
the
trust
assurance
framework
big
nod
to
Scott
there.
He
is
the
primary
author,
the
lead
author
of
that,
if
you
think,
if
this
is
going
to
set
up
the
policy,
the
blt
rules,
this
is
how
you
can
assess
any
actor
in
the
covered
by
the
trust
remember
as
to
their
compliance,
and
that
means,
in
our
case
it's
stewards
right
are
you
is
your
note?
Is
it
properly
secured?
Are
you
following
the
privacy
practices
right?
B
A
A
So,
for
example,
under
the
control
documents
might
one
of
those
things
be
particular
for,
like
banking
investment,
we
have
a
lot
of
kyc
AML,
so
know
your
customer
and
I'm
on
there
money
laundering
stuff
that
that
has
to
be
done
in
the
investment
in
banking
world
that'd
be
one
of
the
control
documents,
that's
sort
of
a
subset
of
okay.
That's.
B
A
good
example,
ironically,
you
bring
up
that
example
and
I'm
going
to
show
you
in
a
minute
that
subject
is
so
big.
We
expect
there
to
be
an
entire
call
domain,
specific
trust
from
about
that.
And
if
you
look
at
it
that
way,
and
then
you
could
say,
oh
well,
what
would
be
a
control
document
there?
It
might
be
okay,
there's
a
set
of
procedures
that
are,
you
know,
call
onboarding
procedures
that
are
standardized.
You'd
have
one
control
document
for
that
you'd
have
another
control
document
for
maybe
something
I
shared
signaling
right.
B
You
see,
you
know
you
got
problems,
you
want
to
what
it's
a
standard
way
that
you
turn
around
and
if
you,
if
you
run
into
an
issue,
it's
reported
right,
then
regulatory
compliance
whatever
it
is
how
you
want
to
parse
out
your
policies,
your
BLT
policies,
so
that
there's
a
group
now
another
exactly
I'm,
not
gonna,
go
on
that
example.
I'm
going
to
get
into
in
a
minute
go
ahead.
A
Govern
sovereign
and
the
industry
layer
that
you're
talking
about
the
banking
industry
will
be
in
a
layer
on
top
of
this.
That
will
need
to
have
its
own
governance
structure
yeah.
So
this
is
fairly
simple
because
it
only
governs
what
sovereign
does,
which
is
the
sow,
the
steward
network
and
the
interoperability
in
cooperation
amongst
themselves
and
with
the
sovereign
governance
board.
So
it's
fairly
simple,
but
as
you
get
to
more
regulated
industries,
that
governance
structure
gets
a
lot
more
complicated.
Exactly.
B
In
fact,
hold
any
other
questions
for
a
minute
because
I'm
about
to
cover
that
and
then
what
it'll
really
set
up
I
think
questions
about
applicability
to
your
specific
spaces
domain,
specific
governance
frameworks.
Okay,
here
is
what
is
always
been
a
particular
sovereign
trust
framework.
Initially
now
sovereign
government
has
always
been
designed
to
be
this
foundation.
That
Scott
was
just
talking
about
for
other
governance
frameworks
and
we've
used
this
for
a
long
time.
B
I
had
two
boys
and
mountains
of
Legos
at
my
at
my
house,
and
so
that
baseboard
you
get
for
super
large
LEGO
sets
is
a
good
example
of
that's
what
the
sovereign
government's
written
very
thin,
but
very
broad,
and
what
you
do.
Is
you
plug
in
higher-level?
What
we
call
domain-specific
governance
frameworks
now
I
just
use
the
example
of.
In
the
you
know,
financial
services,
industry,
where
there's
banks
or
credit
unions
kyc
is
a
regulatory
requirement
pretty
much
around
the
world.
B
The
regulation
is
not
the
same
every
place,
but
the
requirements
are
similar
and
there's
all
this
talking
about
portable
kyc.
Why
would
you
have
to
go
and
redo
the
whole
kyc
project
in
a
process
with
every
bank
and
credit
union?
Well
regulations
currently
require
that,
but
the
emergence
of
SSI
and
digital
credentials
is
going
to
make
it
possible
to
finally
have
portable
kyc,
and
we
believe
we
talking
to
regulatory
authorities
that
are
like
hey.
B
That
could
be
a
good
thing
and
we
could
enable
that
in
legislation
to
save
everyone
money
and
time
and
actually
do
a
better
job
at
kyc,
that
would
be
a
very
broad
but
still
domain-specific,
of
governance
framework.
Now
it
might
be
that
initially
is
kyc
domain
framework
just
for
the
u.s.
or
North
America
or
a
particular
industry,
but
we
do
believe
that's
one
area.
What's
a
good
example,
you
could
have
one.
That's
that's
brought
classic.
Examples
are
country
based
governance
frameworks.
Finland
is
already
looking
at
one
Estonia,
smart
cities.
B
B
A
simple
way
to
look
at
it
is
sovereign
governments
frame
design,
be
this
baseboard
I'm
going
to
talk
about
this
one
see,
UID
and
and
briefly
about
this
one
from
Medical
Licensing
Pharma
is
interested
in
that
right,
medical,
drug
testing-
and
this
is
the
sharing
of
medical
records
and
clinical
trial
information,
lots
of
privacy,
information
about
that
international
travel,
we're
already
working
with
Sita
and
some
other
folks.
In
that
area
there
will
be
hundreds,
thousands
of
domains
for
the
governance
frameworks.
B
All
of
them
can
use
the
same
underlying
technology
same
underlying
framework
now
I'm
going
to
quickly
just
any
of
you
out
there.
Thinking
about
your
business.
Think
about
it.
This
way,
if
you
need
trust
in
your
community,
think
about
the
digital
credentials
and
just
think
about
the
physical
credentials.
If
you
could
do
them,
if
you
could
do
them
online
think
about
them,
how
many
issuers
and
verifiers
would
be
involved?
Okay,
what
credentials
would
be
involved
if
you
have
something
that
a
community
needs?
You
need
a
governance
framework,
but
don't
look
at
it
as
hey.
B
B
Now
folks
are
coming
this
I,
just
sovereign
stewards,
but
others
are
recognized
as
light
bulbs
going
on
and
they're
coming
and
saying.
How
can
we
do
this?
One
of
our
next
things,
the
the
governance
working
with
a
sovereign
foundation,
is
produced
a
template
for
these
domains.
Film.
We
have
enough
folks
coming
they're
like
okay,
give
us
a
template,
so
we're
gonna
be
doing
that
and
the
thing
to
understand
is
digital
credentials.
B
Just
like
every
Dalek,
like
websites
had
a
network
effect
right,
everyone
that
came
to
your
site
and
then
form
links
to
your
site
brought
more
people
to
your
site.
The
same
thing
is
going
to
be
true
of
digital
credentials.
Right,
it's
the
same
network
effect
that
telephones
had
only
apply
it
to
credentials.
Every
credential
that
you
issue
as
an
issuer
is
a
new
connection
potentially
for
life
with
that
customer
or
that
supplier,
okay,
and
it
has
the
same
network
as
any
other
network.
B
So
yeah
I
was
just
just
saying
the
same
thing,
so
I'm
gonna,
I'm
gonna
finish
by
really
taking
this
all
the
way
down
to
the
you
know,
to
the
bare
metal
with
an
example
of
what
Cu
ledger
is
doing.
My
CID
Cu
ledger
is
global
consortium
created
for
one
purpose:
blockchain
solutions
for
the
credit
union
industry
starred
in
the
US
Canada
came
on
board
and
then
about
six
months
ago,
world
council
credit
unions
they're
all
in
unanimous
across
all
of
their
and
they
buy
the
we're
own.
B
It's
it's
technically
a
cue,
so
credit
union
service
organization
owned
by
credit
unions
and
other
CUSOs.
So
it's
a
it's
an
industry
inside
organization
and
their
first
initiative
is
a
standard
digital
credential
credit
union
membership.
If
they
can
standardize
that
any
credit
union
in
the
world
can
issue
one,
you
can
do
all
kinds
of
new
financial
services
across.
B
So
their
goal
by
the
way,
a
million,
the
first
million
operating
digital
credentials
in
your
self
sovereign
wallet
on
your
Android
or
iOS
phone
by
the
middle
of
next
year
and
they're
235
million
you
know
or
234
million
to
go.
So
that's
just
the
tip
of
the
iceberg
and
the
way
the
way
we
like
to
put
it
is
the
race
is
on
it's
not
just
about
what's
in
your
wallet,
but
for
your
standpoint
as
a
business
owner.
What's
in
your
customers,
wallet,
it's
gonna,
give
a
whole
new
meaning
to
that
term.
So
that's
it!
B
Sorry,
I
didn't
quite
hear
the
hole
okay.
So
when
can
we
use
these
on
fabric?
Oh
okay,
so
so
D
IDs
come
in
specific
flavors
called
a
D
ID
method
designed
for
a
specific
chain,
so
so
their
sovereignty,
IDs
for
sovereign
and
as
I
just
explained,
the
first
ones
are
now
in
production,
issuing
government
credentials
in
two
provinces.
Canada.
B
Their
various
one,
another
number
one
self
sovereign
identity
blockchains
has
been
issuing
or
you
can
go
and
register
a
personal
D
ID
today
on
Baris
one
for
you
as
an
individual
and
their
libraries,
they
have
to
essentially
use
that
they
there's
a
call
to
credential
handler
API
and
you
basically
have
your
wallet
in
the
cloud
and
they
offer
that
service.
Today
you
can
go,
you
can
use,
it
I
think,
there's
just
a
couple
sites
that
are
starting
to
use
it.
Okay,
that's
one
configuration
how
this
can
be.
B
You
port
for
aetherium
is
issuing
credentials
today
that
you
can
go
and
get
the
IDS
that
are
theory
and
based,
and
there
are
a
couple
other
examples
out
there
that
I
think
you
can.
You
can
I
PFS
has
a
form
of
the
ID,
so
all
of
those
all
those
chains
are
actually
issuing.
Now
we
say
issuing
another
thing
to
point
out
about
D
IDs
is
the
method
defines
how
the
D
ID
is
actually
created
in
Bitcoin
or
aetherium?
Your
D
ID
is
based
on
your
address
on
the
ledger.
B
Okay,
so
you
don't
actually
have
a
D
idea
until
you've
done
a
transaction
with
the
ledger
and
you
get
that
address.
Okay,
sovereign
turns
that
around
your
D
ID
is
based
on
an
e
d,
two
five,
five
one:
nine
key
pair
elliptic
curve
key
pair.
It's
the
first
128
bits
of
your
public
key
or
verification
key
base,
56
encoded,
you
have
a
D
ID,
you
generated
in
your
wallet.
That's
why
when
we
do
pairwise
the
idea
exchange
doesn't
involve
a
public
ledger
at
all.
It's
direct
agent
agent.
B
You
don't
need
a
ledger,
so
different
D,
ID
methods
define
the
format
and
then
the
the
operations
for
how
the
D
ID
is
created
looked
up.
You
know
updated
and
revoked.
Hopefully
that
answers
your
question
happy
to
go
deeper
into
D
IDs
I
am
the
co-editor
to
that
speken.
Put
a
lot
of
a
lot
of
time
frame
for
that
one,
more
questions.
A
B
B
Union
on
their
website
or
at
the
bank
perfect
question,
so
the
that
that
program
I
was
talking
about.
It's
called
the
million
member
milestone
program
and
the
question
you
just
asked
is:
is
the
only
question
they're
going
after
initially
the
very
first
use
case?
They
call
it
call
in
walk
and
login,
and
it's
to
take
yourself
severide
any
wallet
and
you're
my
Cu
ID
credential,
and
be
able
to
use
it
to
etiquette
yourself.
B
If
you
call
into
a
website
into
a
call
center,
that's
actually
the
first
one,
because
it's
the
highest
potential
for
fraud,
so
it's
the
first
one
they
want
to
tackle
and
then
how
you
do
it
walking
in
so
so
literally,
like
I,
said
the
barcode,
instead
of
showing
it
like
a
driver's
license
and
then
the
third
one
is
login
on
the
website
and
the
reason
they
put
that
one
third
is
because
that
does
involve
integration
with
the
website.
So
they
literally
in
it
stack
ranking.
B
The
next
time
you
call
in
their
records
will
be
marked.
You
will
already
have
a
my
see
ID
as
soon
as
your
call
comes
in
your
phone
will
buzz
you
added
biometric
you're
authenticated,
that's
and
then
the
same
thing
like
I
said
the
mobile
version
and
then
the
the
web
version.
You
will
actually
scan
a
QR
code
on
the
website
and
and
and
and
that
is
what
generates
the
authentication
response.
A
B
You
know
it's
a
great
question,
that's
actually
that's
this!
The
standards
we're
doing
that
are
going
to
be.
That's,
that's
the
idea
off
and
it's
it's
basically
our
initial
specification
of
doing
that.
The
policies
for
issuing
the
credential
and
accepting
it
are
going
to
be
part
of
the
CID,
my
CID
governance
framework,
and
we
are
we
meaning
Evernham
some
foundation
and
a
few
other
industry
organizations
are
working
with
Cu
Leger
on
that
today.
Anyone
who's
interested
in
being
part
of
that
by
the
way
you
can
do
it,
it's
it's
an
open
there.
B
We
could
have
a
whole
session
just
on
that
I
work
with.
Actually
the
only
other
person
my
group
at
Evernham
name
is
Elizabeth
Hren
Eris
is
is
one
of
my
favorite
privacy
attorneys
in
the
world
and
and
the
only
u.s.
member
of
the
EU
blockchain
Observatory
advisory.
Advise
me,
you
know
the
EU
Commission
on
block
chains
in
gdpr,
because
there's
an
inherent
tension
there
right
block
chains
are
open.
Public,
immutable,
Ledger's
and
GBP
are
says:
hey
you
need
the
right
to
be
able
to.
You
know,
forget
data
and
we're
literally
tackling
this
question.
B
Well,
if
you
as
an
individual,
have
the
right
to
go,
have
a
di
D
on
the
sovereign
public
ledger
public,
the
idea,
if
you
want
one,
it's
immutable,
that's
part
of
the
security
property.
So
what
are
they?
Are
they
saying?
No
individuals?
You
should
not
be
able
to
have
self
summary
identity
in
a
public.
It's
it's
put
us
in
a
bind.
We
are
actively
developing
that
dialogue
and
and
the
sovereign
foundation.
The
stewards
are
trying
to
come,
go
public
and
talk
to
you
and
go.
B
We
think
we've
got
a
great
tool
to
help
you
with
GT
PR,
but
help
us
by
clarifying
it
can
be
used
by
individuals.
That's
only
half
the
question.
The
question
you're
asking
is:
if
I've
got
this
wallet
here,
I'll
pull
up
this.
This
version
right
and
it's
got
all
these
credentials.
All
the
sensitive
information
I
could
share
now
with
just
one
click
of
a
button.
What's
to
prevent
that
from
going
out
right
what's
to
prevent
sites
from
now,
I'm.
Just
saying
just
give
me
everything
in
your
wallet
or
give
me
all
this
information.
B
You
built
all
these
wonderful
privacy
of
respecting
features,
but
now
it's
just
that
easy
to
just
give
away
this
data,
and
so
she
lobbed
the
question
at
me
and
said
what
what
would
you
say
to
that
right
and
my
answer
was
two
things.
First,
all
the
information
that
comes
in
and
out
of
that
wallet
goes
through
an
agent
that
agent
is
not
provided
it.
Doesn't
it's
not
Facebook
or
Google
or
a
third
party
that
has
an
interest
in
getting
all
your
data.
B
Its
interest
isn't
working
in
your
behalf,
so
what
we
will
see
is
a
competition
for
agents
that
are
protecting
your
privacy,
okay
and
I'm.
Literally
talking
about
a
tie
that
is
literally
saying
hey.
That
website
should
not
be
asking
for
that
information.
My
agent
can
see
what
they're
asking
for
no
one
else
can,
but
my
agent
can
turn
around
say
you
don't
need
to
give
that
up
or
in
fact
this
site
over
here
is
not
asking
for
that
information
and
they
offer
the
same
to
better
serve.
B
A
Yeah
sure
so
do
you
feel,
like
the
ideas
behind
sovereign
are
good
enough,
that
they
could
have
legs
beyond
their
current
governance
model
like,
for
example,
could
somebody
fork
sovereign?
Would
they
have
any
barriers
to
doing
that
from
a
technical
or
legal
intellectual
property
standpoint?
And
what
role
do
you
feel
the
ability
to
do
that
plays
in
the
governance,
I,
guess
of
open
source
projects
and
public
blockchain
projects
in
general?
Yes,.
B
So,
first
unqualified
yes,
in
fact,
an
enthusiastic
yes,
we
would
love
to
see
hyper
legit,
so
that
code
base
is
hyper.
Ledger
indie,
okay,
sovereign
as
a
as
a
public
trust
organization,
chooses
to
run
it.
In
fact,
as
part
of
the
governance
framework,
as
a
sovereign
steward,
thou
shalt
run
the
approved
version
of
the
hyper
ledger
in
decode
so
but
that
hyper
lid,
your
ending
code,
is
there
for
anybody
to
run
for
any
purpose.
There
are
already
other
folks
setting
up
private
self,
sovereign
identity
networks
and
there's
even
been
discussion
of
other
public
self.
B
Sorry,
Daniel
networks
based
on
the
same
code
base
just
with
different
governance.
I,
couldn't
be
more
enthusiastic
if
we
have
a
global
competition
for
the
best
self
sovereign
identity.
We're
gonna
have
a
much
better
internet
for
all
of
us,
no
matter
who
wins
and
I
say
that
you
know
as
a
stakeholder
in
sovereign
I,
you
know,
I
would
rather
see
selfsame
identity
win
than
any
one
company,
even
Evernham,
or
even
one
sovereign
is
a
non-profit,
the
sovereign
foundation.
So
we
just
want
to
see
it
happen
and
by
the
way
there
is
one
more
point
there.
B
A
B
So
you've
asked
a
question
that
the
sovereign
Foundation
has
been
working
actively
on
for
the
last
two
years
and
we
published
a
white
paper
in
January
that
did
describe
the
general
purpose
or
general
goal
of
a
sovereign
token,
which
is
economic
sustainability
of
sovereign
ISM,
Network
and
I
am
part
of
also
that
what's
called
Economic
Advisory
Council
in
terms
of
figuring
that
out
I've
learned
more
about
tokens
and
token
mcc's
than
I
ever
expected
in
my
life
and
it's
hard.
It
is
really
hard.
B
B
So
there
are
many
other
upgrades
in
the
code,
and
so
that
is
there
you
can
go
to
hyperlink
and
look
at
that
code,
the
actual
it's
actually
a
plug-in
architecture
for
tokens
and
the
actual
sovereign
token
is
being
developed
open-source
also
on
github,
but
in
the
under
the
sovereign
foundation.
So
it's
not
you
know
so
that
its
sovereign
specific,
whereas
hyper,
ledger
India's
for
anyone
that
wants
to
use.
So
anyone
could
create
a
token
plug-in
and
you
know
and
use
it
with
that
code
base.
The
design
of
the
sovereign
token
is
weld
I.
B
A
A
You
so
I
was
waiting
to
the
end
of
the
session
to
ask
this
question
because
it's
kind
of
a
very
high-level
question,
so
we
are
talking
about
the
exercise,
and
this
is
great
at
the
same
time.
Currently
we
have
this
big
companies
that
are
based
on
using
people's
information,
even
sell
it
with
Edward,
give
it
to
advertisers
and
they
are
not
going
anywhere
anytime
soon.
A
B
I'm
going
to
give
you
a
very
personal
or
direct
point
of
view
on
that,
watching
that
whole
thing
evolve
and
knowing
that
some
of
those
companies
I've
worked
with
identity
teams
at
almost
every
one
of
those
companies
over
the
last
twenty
years.
Right
Google
is
one
of
the
sponsors
Microsoft
regularly
of
the
internet
identity
workshop.
So
all
of
them
are
aware
of
what's
happening
with
SSI
I,
believe
all
of
them
are
figuring
out
or
working
right.
Now
they
probably
have
teams
assigned.
What
are
we
going
to
do
about
this?
B
Okay,
one
thing
I
can
tell
you
Google's
doing
right
now.
Is
it's
coming
to
conferences
with
a
team
turn
number
of
the
name
of
the
projects
I
want.
It's
I
think
it's
called.
It
used
to
be
called
data
portability
project.
They
have
a
new
name
for
it
now,
but
basically
they're
saying
we're
building
tools
and
API,
so
you
can
export
your
data
out
of
Google.
It
doesn't
mean
you
can
delete
it
all
out
of
Google.
B
That's
a
separate
GDP,
our
related
thing,
but
you
can
take
it
all
and
put
it
into
other
services,
which
means
one
of
the
places
you'll.
Be
able
to
put
it
is
under
under
the
control
of
your
agent
I
believe
that
each
of
them
have
their
own
strategy
and
analysis
of
how
to
deal
with
SSI
I
haven't
seen
any
signs
that
those
companies
are
going
to
actively
try
and
block
it.
In
fact,
the
question
comes
in
more
often,
are
they
gonna
try
and
subsume
it?
Are
they
gonna
turn
around?
Go
wait
a
minute.
Here's
your
Google!
B
You
know
self
sovereign
identity,
here's
your
agents,
it's
all
set
up
for
you
just
turn
it
on
like
Google+,
Google
agent,
right
or
Apple
agent,
right,
hey,
Siri
and
all
those
things
you
know,
they're
all
they're,
all
working
on
verse,
the
actual
strategic
impact
on
them
as
companies
I
think
is
it's
it's
like
you're
seen.
That
would
be
the
tip
of
the
iceberg.
The
thing
to
worry
about
is:
is
there
iceberg
gonna
sink
their
Titanic?
The
shifts
in
what
will
happen,
I
think
with
personal
data
and
how
much
we
can
control
it.
B
I
think
are
going
to
be
cataclysmic
and
you
know
don't
ask
me
to
predict.
What's
gonna
happen
there,
but
I
do
think
that
we
will
see
it's.
It's
we're
going
to
see
a
I
heard
this
term
recently,
a
clawback
of
privacy
right
and
I.
Think
it's
a
financial
term
clawback
right,
I
think
we're
going
to
see
a
resurgence
of
privacy
on
the
Internet
and
what
I
think
we're
gonna
see.
B
Is
companies
that
start
to
realize
if
they're
not
directly
in
the
business
of
monetizing,
your
personal
data,
they're
gonna,
start
jumping
over
this
side
and
saying
no?
No,
we
want
that
trusted
relationship.
We
want
that
direct
connection
with
you
and
we're
going
to
agree
to
your
terms
for
respecting
your
data,
because
they've
already
gotten
TVP
are
pushing
them
in
that
direction.
One
side
and
suddenly
it's
like
that's
the
stick.
Here's
the
carrot!
A
new
trusted
relationship.
B
What
Timothy
ruff
the
CEO
of
M&M
calls
the
new
relationship
selfsame
identity,
it's
going
to
be
less
about
identity,
more
about
the
new
trust
relationship,
the
new
set
of
products
and
services
you
can
get
through
that
community
connection
and
that
I
think
more
than
anything
is
going
to
be.
You
know
it's
going
to
change
the
status
quo
of
the
web
today.
So
thanks
for
that
great
question.
Thanks
for
all
of
the
great
questions
happy
to
keep
talking
about
this
in
our
after
thank.