- Antitrust Policy and introductions - VB duration-depends on participation
- Main event: Digital ID and fast contact tracing, credentials etc-developing space
- Future talks (we are working with some of these folks on nailing down dates)
- Kiva - current status. Alan Krassowski - possible talk later.
- Guardianship - a Sovrin whitepaper
- Identity for IOT- Blockchain implications Bhawana Singh, JNU
- Trust for Dangerous goods, the IAM aspect - project in HL Fabric - Roland Aerosurete
- NIST 800-63: https://pages.nist.gov/800-63-3/sp800-63-3.html
- ID2020: What happened and why is it important Vipin Bharathan
- Ongoing:
- How can we follow up on past presentations? Kim Cameron certainly wishes input on his presentation and debates on items raised by him.
- IEEE:P2733 for Clinical IoT Data and Device Trust, Identity, Privacy, Protection, Safety and Security (TIPPSS) - report on call, for those who have registered.
- Identity WG Implementer call - report -
- Meeting Notes TBD
- A GitHub repo was created under Hyperledger for IDWG. A note will be prepared about governance and contribution.
- Discuss IDWG paper
- DCIWG Survey currently on line
- Implementing metrics from Chaoss... DCIWG- let us reopen.
Attendees
Dan Bachenheimer Rhonda Okamoto Roland Aerosurete Jaime Ramirez | Venu Reddy Jason P Brian Behlendorf Kumaravel N Ted Achtem Stephane Mouy Clive Boulton Axel | Red Hat | Cam Weyhrich Clive Boulton Jim Mason Kumaravel N Mic Bowman Miguel Jimenez Ram Jagadeesan |
Audio/Video Link
Minutes
CCI Initiative - Drummond Introduces
| Article https://www.coindesk.com/covid-19-immunity-passport-unites-60-firms-on-self-sovereign-id-project Website: https://www.covidcreds.com/ |
|---|---|
| Slow the growth of the virus + Open the economy Having ways to prove things relevant to certain activities - basically enable employers, governments, or health care providers - us as potential patent vectors. Never been easier to explain what I do - hey, we need digital credentials |
| Use Case Team Every one of these is a different contextual credential Some are labs, others issued by employers, ie., you are an essential worker, etc. A spectrum of credentials - digital - issued quickly, revoked quickly, portable, strongly verifiable. Difficult to defraud. SSI - community-wide initiative. No particular organization or company. Everynm was doing healthcare-related credentials, and those customers started talking C-19. Evernym already doing - CCI initiative started with Tony Rose at Proof Market. He was focused on the agriculture supply chain. He refocused on the need for C-19 related credentials. We should collaborate as a community toward interoperable credentials. Different jurisdictions can specialize. Who will be the issuers? Public initiative. NHS in the UK working on digital credentials to deploy due to massive C-19, one example. Workstreams:Use Cases: Problem/Solution Fit, Meeting Stream, Tools Communications Link to this document to join the initiative and sign up for mailing lists or committees |
Link to the presentation below with live links: Digital ID and fast contact tracing, anonymization - further developments-
Questions:
Decentralized Ledgers
Value of DLT vs Server
If we bring DLTs in - what are the additional capabilities we can offer? Careful about must-have DLT to make it work. Systems are starting to emerge - what benefit can we add in the space? Avalon, FPC, PDO (private computations). Identity - with nice characteristics for scalable, decentralized, verifiable. What else? As Hyperledger, what can we bring that adds value.
The server itself does not possess anything that can reveal the identity of the people who are infected or people who have been notified they need to test. The server does not contain information - the point is, will there be an achievement of scale? Privacy doesn't enter the picture if a protocol is preserving privacy in a robust way. Where DLT can help is by having smart contracts or other intelligence check the uploads in a distributed way and disseminate information in a distributed way.
DLT - scale, availability, DLT is a strong way of dealing with that issue.
People may be more inclined to try these apps after longer than weeks - done though trusted interlocutor - otherwise, no one will download the apps.
Focus on credentialing over contract tracing? Not sure in short- to mid-term.
What happens after the contract-tracing app says you're exposed?
Credentialing - no solution yet that can achieve scale. Nothing concrete pushed out. Wants it to happen. Wallets will be important.
Identity - don't need to know who you are. Perhaps, state you need a test. Don't need an identity layer - need to notify. Relates to goal of the app.
Chat:
Contact Tracing is a SEPARATE issue it is NOT decentralized identity
Contact tracing and COVID-19 credentials can work together but they are separate parallel efforts.
deployed successfully? what's the measure of success… we don't even know clearly how hight a percentage of the population needs to use these apps for them to function, do we? I mean, Singapore eventually had to go into lockdown, and less than 20% of the population ended up using it, AFAIK
good point... is *anything* successful. I'll measure success at this point as "having a prayer of being deployed widely enough to be useful" because the first issue for all of these is that without broad deployment they are not helpful
[off topic] Contact tracing apps broaden the diversity of developers using HL DLT projects. Same effect Android/IOS apps at Google/Apple
@Mic: but we don't measure the efficiency of new medicines and clear them to be made available to the general public that way… they, first of all, have to prove that they won't do more harm than good. These apps should also be approached in this way, I think.
Agree with Brian that probably not a time to push for DLT/BC. Really, you can reach 8 million people with a good set-up cluster of servers, under the control of one actor. De we love that idea? nope, but technically, you can.
I mean, Google pushes hundreds of notifications a day…
COVID19 still open for help to updated and edit. Thanks!
1 Comment
Clive Boulton
I came away disappointed with today's identity WG presentation. Feeling cold water was thrown on contract tracing apps and HL projects. Currently distributed computing suffers from ecosystem insecurity--leading to data leaks. Interoperability requires privacy sensitive protocols to secure data. Fostering diverse app developers to build with HL projects drives inclusive contributions from the edges nearer to customers and toward resilient secure distributed computing. This should lead to better architecture for more connected social business. Good for all concerned.