This presentation involves Basic Concept of Sovereign Identity, The general architecture of sovereign identity

1. Sovereign Identity
Presented By :
Amrita B. Chavan
SYME
PCCoE,Nigdi,Pune
Guided By :
Dr. K. Rajeswari
HOD of Computer Engineering
PCCoE,Nigdi,Pune

2. Introduction
● Identities are no longer simple.
● The method for defining an individual’s identity grow more and more
complex.
● While advances in technology have made the management of data easier,
they have also created a need for people to have digitized identities.
● Identities have changed over time to include other details
● Identity fraud and theft are some of the most frequent crimes today
10-Sept-2018 Seminar II
2

3. 3
Seminar II10-Sept-2018
Evaluation
We can separate it into 3 sections:
1. Centralized Identity: Administrative control by a single authority.
Ex : SSN (Social Security Number), Validation Of IP Addresses, Distribution
of DNS.
2. Federated Identity : Administrative control by multiple authorities.
Ex : Microsoft Passport
3. User-Centric : Administrative control across multiple authorities.
Ex : OpenID, 0Auth, or FIDO

4. 410-Sept-2018 Seminar II
Source : https://www.altoros.com/blog/the-journey-to-a-self-sovereign-digital-identity-built-on-a-blockchain/

5. 5
Problems
● We have yet to reach that fourth phase of self-sovereign identity
● Individuals generally have no control over the information that covers
their identities
● Without visibility into the exchange of identity attributes across the
enterprise for authentication, verification, and authorization, individuals
are vulnerable to identity fraud
10-Sept-2018 Seminar II

6. 610-Sept-2018 Seminar II
Source : https://www.altoros.com/blog/the-journey-to-a-self-sovereign-digital-identity-built-on-a-blockchain/

7. 7
Problems Contd...
We have different organizations for varying elements of identity. This presents
a number of problems and challenges
For individuals:
○ Too many steps and documents involved in proving identity
○ Unpleasant experiences and unwanted services
○ Limited control over identity information and identity theft concerns
Seminar II10-Sept-2018

8. 8
Problems Contd...
For Bussiness:
○ Compliance and regulation
○ Fraud, identity theft, and data
breach
○ Costs, complexity, and
unreliability
For Governments:
○ Ensuring citizens’ privacy and safety
○ Theft while simplifying experience
○ Increasing costs and complexity of
physical ID issuance, renewal,
maintenance, monitoring, and
verification
10-Sept-2018 Seminar II

9. 9
10-Sept-2018 Seminar II
Required Technologies :
To address the challenges, there is a need to create a trusted digital identity
network, which adopts such technologies as:
● Cognitive applications that collect data from cumulative online
interactions to simplify and expedite routine tasks
● Applications that simplify transactions
● Holistic health care applications that give doctors and pharmacists access
to patients’ electronic medical records

10. 10
Solution : Sovereign Identity
True self-sovereign identity requires a few features:
1. Users must be unique.
2. Users must have control over who views their identity.
3. Users must be able to access their own identity.
4. The verification process must be clear and unconcealed.
5. Identities must be interoperable.
6. Users must be protected.
10-Sept-2018 Seminar II

11. 11
Transparent Verification Process
● Identity verification has always been centralized in some way.
● The complete decentralization of it is simply not possible. There will
always be an organization that has to verify the identity.
● In order to minimize this centralized power as much as possible, we make
the verification process as transparent as possible.
● This aspect of self-sovereign identity is just as important to the user, as it
is to the security of the whole system.
10-Sept-2018 Seminar II

12. 12
Architecture
10-Sept-2018 Seminar II
Source: https://www.xoken.org/blog/self-sovereign-identity/
● User: The person whose identity needs to
be verified.
● Issuer: The party responsible for
verifying the identity and issuing a
certificate.
● Requester: The party requesting whether
or not the user has been verified.
● Public Ledger: The blockchain that is
being used.

13. 13
Architecture contd...
2 Forms of Data:
1. Certificate: Proof that the user has been verified
2. Verification Data: Data hosted by user that allows access to the certificate
There are various steps to be involved :
10-Sept-2018 Seminar II

14. 14
Steps :
1. The user sends information to be validated by the issuer. The Issuer
verifies the information through a public process. If the public process is
passed, the Issuer sends the user verification data.
2. If the user passes, a certificate is added to the public ledger by the issuer.
3. The user wants access to an application. The requestor asks the user for the
verification data. If the request is accepted by the User, the verification
data is sent to the requestor.
10-Sept-2018 Seminar II

15. 15
Steps contd...
4. The Requester uses the verification data in order to access the certificate
on the public ledger. The certificate is proof that the user’s identity has
been verified.
The certificate is proof that the user’s identity has been verified
10-Sept-2018 Seminar II

16. 16
Other Projects
CIVIC: Identity Verification System
Steps :
1. User submits personal information to Civic and the information is
validated . If the user passed, the verified identity data is sent to the user’s
Civic App.
2. Civic sends a certificate to the blockchain confirming that the user’s
identity has been verified.
10-Sept-2018 Seminar II

17. 17
3. An Identity requester defines the requirements for identity validation. The
requester asks the user for his verified identity data. If the User accepts the
request, the verified identity data is sent from the civic app to the
requester.
4. Using the verified identity data, the requester can check the authenticity of
the data by checking the blockchain. Confirmation of ownership and
validity of the identity is returned to the requester.
Civic contd...
10-Sept-2018 Seminar II

18. 18
References :
1. Der, Uwe, Stefan Jähnichen, and Jan Sürmeli. “Self-Sovereign Identity – Opportunities and Challenges for the Digital
Revolution,” n.d., 6.
2. Subramanian, Aravind. “Self-Sovereign Identity.” Xoken. Accessed September 9, 2018.
https://www.xoken.org/blog/self-sovereign-identity/.
3. Takemiya, Makoto, and Bohdan Vanieiev. “Sora Identity: Secure, Digital Identity on the Blockchain.” In 2018 IEEE 42nd
Annual Computer Software and Applications Conference (COMPSAC), 582–87. Tokyo, Japan: IEEE, 2018.
https://doi.org/10.1109/COMPSAC.2018.10299.
4. “The Journey to a Self-Sovereign Digital Identity Built on a Blockchain.” Altoros (blog), April 12, 2017.
https://www.altoros.com/blog/the-journey-to-a-self-sovereign-digital-identity-built-on-a-blockchain/.
10-Sept-2018 Seminar II