Peer DIDs: a secure and scalable method for DIDs that’s entirely of...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Peer DIDs
a secure and scalable method for DIDs that's entirely off-ledger
Daniel Hardman, November 2019
ssimeetup.org · C...

1. Empower global SSI communities
2. Open to everyone interested in SSI
3. All content is shared with CC BY SA
SSIMeetup.o...

Most DID methods
Acme
public DID: A.did@Any
pairwise DID: A.did@A:B
Bob
pairwise DID: B.did@B:A
shared source of truth (e....

Peer DIDs
Acme
pairwise DID: A.did@A:B
Bob
pairwise DID: B.did@A:B
B.diddoc@A:B
(from Bob)
A.diddoc@A:B
(from Acme)
resolv...

Why?
Scale 99% of DIDs off ledger
Cost No transaction fees, no operating expense, no electrical bill
Security No ledger or...

How to create a peer DID
Make a DID Doc with whatever keys you like, but omit the actual DID value from
the doc. This is c...

SSIMeetup.orgssimeetup.org · CC BY-SA 4.0 International

$Minimal doc { "publicKeys": [ { "crv": "P-256", "kty": "EC", "x": "Gv6c_u05ogFn4HpZHxBS94CdGL8gIv0W307OHjpTSqM ", "y": "Qj...$

How to share a peer DID
Option 1 (recommended): implement Aries RFC 0023 (DID Exchange Protocol)
● Defined conventions wit...

Layers of Support
Coding Time to Implement
DIDComm + 1 week (sync
docs, validate changes)
2-6 hours (generate and
store DI...

Status
Spec now on revision 6 or 7; about 9 months old
A few open issues
Likely to change in one important way (key format...

How to update a peer DID’s DID Doc (simplified)
Generate a delta. This is a JSON fragment that tells what changed.
Compute...

Alice
A.1
A.2
A.3
A.4
Bob
B.3
B.4B.2
B.1
arrows point to an agent/key that might be reached and updated by the proactive a...

Alice
A.1
A.2
A.3
A.4
Bob
B.3
B.4B.2
B.1
arrows point to an agent/key that might be reached and updated by the proactive a...

Alice
A.1
Bob
B.3
B.4B.2
B.1
arrows point to an agent/key that might be reached and updated by the proactive agent/key on ...

Acme
A.3
arrows point to an agent/key that might be reached and updated by the proactive agent/key on the other side
hybri...

Authorization
Need ability to setup protective policies to handle cases like “My phone was
stolen; how do I keep the thief...

Privilege Model
register: can use DID to create Alice:peer connection (only in genesis state)
route: can handle forward me...

Registration (sharing DID with peer)
Exactly 1 key must have the register privilege in the genesis version of the peer
DID...

CRDTs
Most items in the DID doc have an id property.
All changes are modeled as a combination of adds and deletes--there a...

Consensus (coordination), centralization, or forks: pick 1
Consensus
what algorithm tolerates participants with different ...

Consensus (coordination), centralization, or forks: pick 1
Consensus
What algorithm tolerates participants with different ...

Forked Reality
A-land B-topia
B.1
B.2
A.2
A.1
A.3
SSIMeetup.orgssimeetup.org · CC BY-SA 4.0 International

Mental Model
SSIMeetup.orgssimeetup.org · CC BY-SA 4.0 International
● Keys and authorization rules enforce privileges.
● ...

Pending Deltas
Suppose Agent 1 gossips a change to Agent 2, the change requires 2 signatures,
but only 1 is affixed.
Agent...

The ~state decorator
Included with all DIDComm messages to check synchronization. Triggers gossip if
any discrepancy detec...

Why No Merge Conflicts
● Idempotent
● Every item has a unique id that never repeats
● All operations are adds and deletes,...

More Info
http://j.mp/peer-dids-group
https://openssi.github.io/peer-did-method-spec
github issues at https://github.com/o...

Peer DIDs
a secure and scalable method for DIDs that's entirely off-ledger
Daniel Hardman, November 2019
ssimeetup.org · C...

Peer DIDs
http://j.mp/2pmxrDc
(see also http://j.mp/peer-did-layer2) Nov 2019
SSIMeetup.orgssimeetup.org · CC BY-SA 4.0 In...