https://creativecommons.org/lic
enses/by-sa/4.0/
Self-Sovereign Identity and
Open Source Software
Richard Esplin
Product Manager Evernym
Hyperledger Indy project and the Sovrin identity Network
November 12, 2018
1. Empower global SSI communities
2. Open to everyone interested in SSI
3. All content is shared with CC BY SA
SSIMeetup.org
Alex Preukschat @SSIMeetup @AlexPreukschat
Coordinating Node SSIMeetup.org
https://creativecommons.org/licenses/by-sa/4.0/
SSIMeetup objectives
What is Self Sovereign Identity?
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Carriers of Identity
Digital Identity
Also Known As
User-Centric Identity
User-Controlled Identity
User-Owned Identity
Bring Your Own Identity
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
A Brief History of Open Source
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Sharing Early Software
The money is in the
hardware, so why bother
protecting software?
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Unix Culture
Software isn’t our
business.
Unix is academic.
Sharing gets things done.
Homebrew
Hobbyist exploring the limits of computing.
Bill Gates:
Sharing software is theft.
Free Software
Free as in Freedom. (Free as in Speech.)
Sharing is a moral duty.
Proprietary software keeps users divided
and helpless.
Proprietary software does not allow users
to have control of their computing.
Copyleft: hack copyright to enforce sharing.
Open Source
Open source is better
engineering.
With many eyes, all bugs
are shallow.
Scratch your own itch.
Don’t reinvent the wheel.
Collaboration is fun.
Open Culture
Art and media
Legal access
Scientific data access
Scientific hardware
Bio-hacking
Maker movement
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Principles of FLOSS
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Free Software
Open Source Software
Libre Software
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
The Four Freedoms
0. Run the program for any purpose.
1. Study how the program works.
2. Redistribute the program.
3. Improve the program, and redistribute the
improvements.
Open Source Definition
1. Free Redistribution
2. Source Code Availability
3. Derived Works Allowed
4. Integrity of the Author’s Source Code
5. No Discrimination Against Persons or Groups
6. No Discrimination Against Fields of Endeavor
7. Distribution of License
8. License Must Not Be Specific to a Product
9. License Must Not Restrict Other Software
10. License Must Be Technology-Neutral
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Commercial Open Source
Provides customers with:
● A focus on support
● Vendor independence
● Vendor risk mitigation
● An improved negotiating
position
● Compliance with policy
● Fast adoption (no purchase
necessary!)
● An ancillary social benefit
And has a reputation for:
● Low price
● Security
● Innovation
● Transparency
● Interoperability
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Three Types of Licenses
1. Gift:
Apache
2. Sharing with Rules:
GPL
3. In-Between:
LGPL
Bruce Perens, 2009
https://www.datamation.com/osrc/article.php/3803101/Bruce-Perens-How-Many-Open-Source-Licenses-Do-You-Need.htm
Three Types of Licenses
1. Gift:
Maximize adoption, standards, and
collaboration.
Usually community governed.
Apache, CC0, BSD, MIT,
Public Domain, Artistic
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Three Types of Licenses
2. Sharing with Rules:
Share-alike, including derivatives.
Respect the user, while allowing the
copyright holder a privileged position (a
competitive advantage).
Often vendor driven.
GPL, AGPL, CC-SA
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Three Types of Licenses
3. In-Between:
Share-alike changes to the received
work, but not to derivatives.
Respect the user, retain product control,
but allow adoption in a wide set of
derivatives.
LGPL, MPL
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Good Reads
Open Source and SSI
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Ten Principles of Self-Sovereign Identity
1. Users must have an independent existence.
2. Users must control their identities.
3. Users must have access to their own data.
4. Systems and algorithms must be transparent.
5. Identities must be long-lived.
6. Information and services about identity must be transportable.
7. Identities should be as widely used as possible.
8. Users must agree to the use of their identity.
9. Disclosure of claims must be minimized.
10. The rights of users must be protected.
Christopher Allen, 2016
http://www.lifewithalacrity.com/2016/04/the-path-to-self-soverereign-identity.html
A Brief Story
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses a proprietary SSI solution . . .
Alice Bob Soul-less
Mega-corp
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses a proprietary SSI solution . . .
Alice Bob Soul-less
Mega-corp
$$
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses a proprietary SSI solution . . .
Alice Bob Soul-less
Mega-corp
$$$$$$
X
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses an open SSI solution . . .
Alice Bob Soul-less
Mega-corp
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses an open SSI solution . . .
Alice Bob Soul-less
Mega-corp
$$
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses an open SSI solution . . .
Alice Bob Soul-less
Mega-corp
$$$$$$
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Alice uses an open SSI solution . . .
Alice Bob Soul-less
Mega-corp
$$$
$$$
Carol
$$
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
More Than Code
SSIMeetup.org
https://creativecommons.org/licenses/by-
sa/4.0/
Creating Trust
Moral Pressure
Reputational Pressure
Institutional Pressure
Security Systems
Bruce Schneier, 2012
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
The BLT
Business
Legal
Technical
Sovrin Trust Framework
Evernym’s Design Requirements
A reliable self-sovereign solution:
● Provides an open source option
● Implements open standards
● Is private by design
● And private by default
● Exists within a trust framework
https://creativecommons.org/lic
enses/by-sa/4.0/
Self-Sovereign Identity and
Open Source Software
Richard Esplin
Product Manager Evernym
Hyperledger Indy project and the Sovrin identity Network
November 12, 2018

Self-Sovereign Identity (SSI) and Open Source - Richard Esplin

  • 1.
    https://creativecommons.org/lic enses/by-sa/4.0/ Self-Sovereign Identity and OpenSource Software Richard Esplin Product Manager Evernym Hyperledger Indy project and the Sovrin identity Network November 12, 2018
  • 2.
    1. Empower globalSSI communities 2. Open to everyone interested in SSI 3. All content is shared with CC BY SA SSIMeetup.org Alex Preukschat @SSIMeetup @AlexPreukschat Coordinating Node SSIMeetup.org https://creativecommons.org/licenses/by-sa/4.0/ SSIMeetup objectives
  • 4.
    What is SelfSovereign Identity? SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 5.
  • 6.
  • 7.
    Also Known As User-CentricIdentity User-Controlled Identity User-Owned Identity Bring Your Own Identity SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 8.
    A Brief Historyof Open Source SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 9.
    Sharing Early Software Themoney is in the hardware, so why bother protecting software? SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 10.
    Unix Culture Software isn’tour business. Unix is academic. Sharing gets things done.
  • 11.
    Homebrew Hobbyist exploring thelimits of computing. Bill Gates: Sharing software is theft.
  • 12.
    Free Software Free asin Freedom. (Free as in Speech.) Sharing is a moral duty. Proprietary software keeps users divided and helpless. Proprietary software does not allow users to have control of their computing. Copyleft: hack copyright to enforce sharing.
  • 13.
    Open Source Open sourceis better engineering. With many eyes, all bugs are shallow. Scratch your own itch. Don’t reinvent the wheel. Collaboration is fun.
  • 14.
    Open Culture Art andmedia Legal access Scientific data access Scientific hardware Bio-hacking Maker movement SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 15.
  • 16.
    Free Software Open SourceSoftware Libre Software SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 17.
    The Four Freedoms 0.Run the program for any purpose. 1. Study how the program works. 2. Redistribute the program. 3. Improve the program, and redistribute the improvements.
  • 18.
    Open Source Definition 1.Free Redistribution 2. Source Code Availability 3. Derived Works Allowed 4. Integrity of the Author’s Source Code 5. No Discrimination Against Persons or Groups 6. No Discrimination Against Fields of Endeavor 7. Distribution of License 8. License Must Not Be Specific to a Product 9. License Must Not Restrict Other Software 10. License Must Be Technology-Neutral SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 19.
    Commercial Open Source Providescustomers with: ● A focus on support ● Vendor independence ● Vendor risk mitigation ● An improved negotiating position ● Compliance with policy ● Fast adoption (no purchase necessary!) ● An ancillary social benefit And has a reputation for: ● Low price ● Security ● Innovation ● Transparency ● Interoperability SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 20.
    Three Types ofLicenses 1. Gift: Apache 2. Sharing with Rules: GPL 3. In-Between: LGPL Bruce Perens, 2009 https://www.datamation.com/osrc/article.php/3803101/Bruce-Perens-How-Many-Open-Source-Licenses-Do-You-Need.htm
  • 21.
    Three Types ofLicenses 1. Gift: Maximize adoption, standards, and collaboration. Usually community governed. Apache, CC0, BSD, MIT, Public Domain, Artistic SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 22.
    Three Types ofLicenses 2. Sharing with Rules: Share-alike, including derivatives. Respect the user, while allowing the copyright holder a privileged position (a competitive advantage). Often vendor driven. GPL, AGPL, CC-SA SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 23.
    Three Types ofLicenses 3. In-Between: Share-alike changes to the received work, but not to derivatives. Respect the user, retain product control, but allow adoption in a wide set of derivatives. LGPL, MPL SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 24.
  • 25.
    Open Source andSSI SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 26.
    Ten Principles ofSelf-Sovereign Identity 1. Users must have an independent existence. 2. Users must control their identities. 3. Users must have access to their own data. 4. Systems and algorithms must be transparent. 5. Identities must be long-lived. 6. Information and services about identity must be transportable. 7. Identities should be as widely used as possible. 8. Users must agree to the use of their identity. 9. Disclosure of claims must be minimized. 10. The rights of users must be protected. Christopher Allen, 2016 http://www.lifewithalacrity.com/2016/04/the-path-to-self-soverereign-identity.html
  • 27.
  • 28.
    Alice uses aproprietary SSI solution . . . Alice Bob Soul-less Mega-corp SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 29.
    Alice uses aproprietary SSI solution . . . Alice Bob Soul-less Mega-corp $$ SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 30.
    Alice uses aproprietary SSI solution . . . Alice Bob Soul-less Mega-corp $$$$$$ X SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 31.
    Alice uses anopen SSI solution . . . Alice Bob Soul-less Mega-corp SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 32.
    Alice uses anopen SSI solution . . . Alice Bob Soul-less Mega-corp $$ SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 33.
    Alice uses anopen SSI solution . . . Alice Bob Soul-less Mega-corp $$$$$$ SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 34.
    Alice uses anopen SSI solution . . . Alice Bob Soul-less Mega-corp $$$ $$$ Carol $$ SSIMeetup.org https://creativecommons.org/licenses/by- sa/4.0/
  • 35.
  • 36.
    Creating Trust Moral Pressure ReputationalPressure Institutional Pressure Security Systems Bruce Schneier, 2012 Liars and Outliers: Enabling the Trust that Society Needs to Thrive
  • 37.
  • 38.
  • 39.
    Evernym’s Design Requirements Areliable self-sovereign solution: ● Provides an open source option ● Implements open standards ● Is private by design ● And private by default ● Exists within a trust framework
  • 40.
    https://creativecommons.org/lic enses/by-sa/4.0/ Self-Sovereign Identity and OpenSource Software Richard Esplin Product Manager Evernym Hyperledger Indy project and the Sovrin identity Network November 12, 2018