Miro Lecture SSI Flashcards

1
Q

Types of Identity Paradigms

A

Centralized
Federated
Decentralized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the centralized identity paradigm?

A
  • every internet service requires a separate account that the service administrates
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is federated identity paradigm?

A
  • ID Zones or social logins (Google, Apple)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is decentralized identity paradigm?

A
  • everyone keeps their own identity data and presents it
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Motivation behind decentralized identity?

A

Today’s identity providers have immense amounts of power over us and metadata about us

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What can you do in SSI with the account?

A
  • create an account (identifier)
  • no one can shut it down
  • the account is accepted by every online service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the trust triangle?

A
  • issuer, holde, and verifier form the trust triangle
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the holder request from the issuer?

A

Verifiable Credentials (VCs) that the holder can keep in a wallet and present when requested

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the job of the issuer?

A
  • source of the VCs

- could be a university

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the verifier do?

A
  • relies on claims of VCs

- signature allows for verification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Definition of SSI

A
  • entities are represented by digital identities and every entity has sole ownership over the ability to control their identity data
  • an identity can be seen as an account. The account has pseudonymous identifiers and and attributes that can be confirmed.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Two core specifications for SSI

A
  • Decentralized Identifier (DID)

- Verifiable Credentials (VC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

DID

A
  • an identifier for every entity in the SSI ecosystem

- global unique identification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a VC?

A

Verifiable Credentials:

- means of making verifiable claims about an identity. Like a university stating that a diploma belongs to them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What form do VCs have?

A

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Things that VC contain

A
  • Context
  • Issuer
  • Timestamp
  • Subject
  • Cryptographic proof
17
Q

What is a VP?

A

Verifiable Presentation
- data from a VC (or several VCs) that can be generated by holders of the VC and be shared with a verifier. Holders do this to prove claims regarding their identity.

18
Q

What is selective disclosure?

A
  • enables individuals to share no more of their private data than is strictly necessary
  • if a VC supports selective disclosure, holders can create a VP containing only parts of the VC
19
Q

Why is there a need for publicly accessible data storage for an SSI ecosystem?

A

It allows:

  1. Logging
  2. Revocation
20
Q

What does logging provide?

A
  • auditability (to detect fraudulent activity)
21
Q

What is stored in a publicly readable Verifiable Data Registry?

A
  • only serial numbers or hashes of credentials

- not private information

22
Q

What does blockchain enable when used as a verifiable data registry?

A
  • eliminates the need for participants to run server infrastructure
  • transparency
  • timestamping
23
Q

What does DID mainly define?

A

How to

  • create an identifier
  • retrieve information about identifier
  • update information about the identifier
24
Q

Structure of a DID?

A

Scheme (static) = did, method (short, publicly documented DID method), method-specific identifier (arbitrarily long)

25
Q

What is a DID document?

A
  • accessible by anyone who resolves a DID
26
Q

What is DID resolution?

A
  • DID resolver is a piece of software resolving a DID into a DID document
27
Q

Advantage of DID compared to blockchain acccounts?

A
  • flexibility to update keys, and add meta information
28
Q

What is the governance challenge?

A
  • Which issuers are trusted?

- revocation

29
Q

What can be a solution to the governance challenge?

A
  • trusted issuer registry
  • but there are no good implementations
  • revocation is also unsolved
30
Q

SSI Criticism

A
  • many different DID methods might limit interoperability

- environmental concerns of DID