Interoperability Plugfest #2
VC/DID Multi-Platform/Multi-Vendor�Interoperability Showcase/Demo
18 March 2021
dhs.gov/science-and-technology/svip
dhs-silicon-valley@hq.dhs.gov
DHS Science & Technology Directorate
SILICON VALLEY INNOVATION PROGRAM
Agenda
2
10:00 AM ET | Welcome, Background & Goals |
10:15 AM ET | Interoperability Showcase Scenarios |
| Digital Personal Credentials (Immigration, Task/License, Vaccination Certificates) |
| Digital Trade Credentials (Steel, Oil, Natural Gas, Food, E-Commerce) |
10:45 AM ET | Digital Personal Credentials Interoperability Showcase/Demo |
| Danube Tech 10:45 AM – 11:05 AM |
| Digital Bazaar 11:05 AM – 11:25 AM |
| SecureKey 11:25 AM – 11:45 AM |
| MATTR 11:45 AM – 12:05 PM |
12:05 PM ET | Break, Q&A Session over Snack/Meal (30 Minutes) |
12:35 PM ET | Welcome Back |
12:50 PM ET | Digital Trade Credentials Scenario Reminder |
1:05 PM ET | Digital Trade Credentials Interoperability Showcase/Demo |
| Transmute 1:05 PM – 1:25 PM |
| Mavennet 1:25 PM – 1:45 PM |
| mesur.io 1:45 PM – 2:05 PM |
| Spherity 2:05 PM – 2:25 PM |
2:25 PM ET | Closing Comments |
2:40 PM ET | Q&A Session (for as long as it lasts) |
Preventing Forgery & Counterfeiting of Certificates and Licenses (2018)
3
DHS Operational Components & Programs:
Develop, Refine, Use and Champion Global Standards to Ensure Interoperability
4
Verifiable Credentials
Decentralized Identifiers
Privacy and Credential �Lifecycle Management
Verifying Global Interoperability … in Practice
Standards Conformance�via Automated Test Suites
This is not enough!
Multi-Vendor Interoperability�via Plugfests
5
VC HTTP API Test Suite
6
Role of the Test suite
Tests core issuance and verification capabilities for a variety of different credential types against different DID methods and signature suites. “Backend-level testing”
Issuance
Credential Types
Signature Schemes
DID Integration (method & resolution)
fixtures
Test objectives
PLATFORM
Verification
Test environment
PLATFORM
PLATFORM
PLATFORM
PLATFORM
PLATFORM
PLATFORM
PLATFORM
Test harness
report
VC HTTP API Spec
CHAPI Interop Testing
7
Role of CHAPI Interop testing
Integrated testing of use case scenarios using web-based wallets and browser-based credential exchange between different vendors and infrastructure. �“End-to-end testing”
Issuer
Credential issuance
Credential presentation + verification
Test objectives
Holder
Verifier
Test harness
Issue capability
Holder capability (wallet)
Verify capability
Test environment
Danube
Digital Bazaar
MATTR
Mavennet
Mesur
SecureKey
Spherity
Transmute
✓
✓
✓
✓
✓
✓
✓
✓
—
✓
✓
—
—
✓
—
✓
✓
✓
✓
✓
✓
✓
✓
✓
DHS/SVIP Multi-Vendor / Multi-Platform�Interoperability Testing ...
8
Plug-Fest 1�May 2020
https://lists.w3.org/Archives/Public/public-credentials/2020Jun/0100.html
Plug-Fest 2�March 2021
Plug-Fest 3+�TBD
DHS/SVIP VC/DID Ecosystem Portfolio Companies
Digital Personal Credentials
Digital Trade Credentials
9
Danube Tech
Vienna, Austria�https://go.usa.gov/xsqdx
Digital Bazaar�Virginia, USA�https://go.usa.gov/xsqdC
MATTR�Auckland, New Zealand�https://go.usa.gov/xsqdr
SecureKey�Toronto, Canada�https://go.usa.gov/xsqd4
Mavennet�Toronto, Canada�https://go.usa.gov/xsqpe�https://go.usa.gov/xsqpz
mesur.io�North Carolina, USA�https://go.usa.gov/xsqpJ
Spherity
Dortmund, Germany�https://go.usa.gov/xsqpS
Transmute
Texas, USA�https://go.usa.gov/xsqph
Digital Trade Credentials Interoperability Scenario
10
3
3PL/Carrier/Transporter
4
CBP/PGA
1a
Steel Mill
Steel
e-commerce
1b
Seller
1c
Farmer
1d
Refiner
2a
Broker
2b
Fulfillment Center
2c
Inspector
2d
Broker
Agriculture
Oil & Gas
Credential presentation
Multi-credential presentation
Supply chain is in the afternoon session; starting 12:50 PM ET
Digital Personal Credentials Interoperability Scenario
11
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Vocabularies
12
Vaccination [ link ]
Citizenship [ link ]
Appointment [ link ]
Traceability [ link ]
Employment [ link ]
^ citizen / danube tech
13
Danube Tech
DIGITAL PERSONAL CREDENTIALS SCENARIOS
Journey 2 – Becoming a permanent resident
14
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
We’re kicking Louis’s journey off assuming he’s received his vaccination certificate as a verifiable credential with selective disclosure features. Louis holdes this in his wallet and is able to use it to prove his vaccination status. Journey 1: Getting vaccinated will be covered alongside Journey 8: Becoming a naturalized citizen.
Journey 2 – Video
15
Journey 2 – Screenshots
16
1
4
5
2
3
6
Journey 3 – Applying for a job
17
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 3 – Applying for a job
18
Louis Pasteur applies for a job , gets hired by Dairy Informatica, and receives an employment credential
Louis Pasteur completes his application for a job with Dairy Informatica.
And shares details from his USCIS digital PRC certificate to prove is eligibility to work.
The digital PRC is digitally verified by Dairy Informatica and Louis is offered the job.
Louis starts his new job.
Dairy Informatica issues an employment credential.
Journey 3 – Video
19
Journey 3 – Screenshots
20
4
5
1
2
3
6
Integration with existing infrastructure
21
Vendor test results
22
VC HTTP API
Interop Features
Three-vendor interop – Video
23
Mattr → Issuer (USCIS)
Digital Bazaar → Veres Wallet
Danube Tech → Verifier (Dairy Informatica)
Cross-border interoperability
24
Cross-border interoperability
25
Cross-border interoperability
26
Additional resources and links
27
Additional links and resources
Universal Resolver: https://uniresolver.io/
Universal Registrar: https://uniregistrar.io/
Universal Issuer: https://uniissuer.io/
Universal Verifier: https://univerifier.io/
W3C DID Core: https://www.w3.org/TR/did-core/
W3C DID Resolution: https://w3c-ccg.github.io/did-resolution/
Decentralized Identity Foundation: https://identity.foundation/
^ citizen / digital bazaar
28
Digital Bazaar
DIGITAL PERSONAL CREDENTIALS SCENARIOS
Journey 4,5,6 – Age-restricted goods
29
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Gray Taylor
Founder, NACS TruAge Program
Executive Director, Conexxus
Retail Deployment of DHS SVIP Technology
30
National Association of Convenience Stores
The Retail Age Verification Challenge
31
National Association of Convenience Stores
152,720 stores nationwide
165M+ transactions per day
200M+ customers per year
50M+ age checks per day
Sell to a minor? $2.5K fine, 12 months jail, lose liquor license - sting enforced
Fraudulent IDs, fallible clerks, no national system for product restrictions
Need digital Federal and State IDs
Needed a privacy-respecting solution - GDPR, CCPA, VCDPA
The TruAge Solution
32
National Association of Convenience Stores
152,720 stores nationwide
200M+ customers per year
Digital Bazaar designed, built, and operates nationwide TruAge Program (offline capable, paper and digital, actively fights tracking collusion)
Entered Pilot-Production Nov 2020
Same Verifiable Credential standards as DHS SVIP
Same Digital Wallet infrastructure as DHS SVIP
NACS wants to consume USCIS Permanent Resident Card
Video footage of TruAge field deployment
Journey 4 – Verifying age
33
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 4 – Verifying age
34
Louis Pasteur wants to celebrate his new job. He would like to buy some alcohol for the celebration but needs to prove his age to the retailer. Louis decides to onboard to an age verification system and claim an over 21 credential to use in his daily life.
Louis Pasteur decides to use his digital PRC to claim an age verification credential.
He goes to the Age Verification System website where he presents his digital PRC as part of the onboarding experience.
The Age Verification System verifies Louis's details and issues his digital 21+ credential.
He is now ready to go shopping either online or at any store accepting the digital credential.
Journey 5 – Buying age restricted products online
35
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 5 – Buying age restricted products online
36
Louis Pasteur goes to the Tous-les-Jours website and makes his selection.
Tous-les-Jours asks Louis to prove he is over 21. ��Louis presents his digital age verification credential and the retailer performs an instant validation.
The delivery service asks Louis to use a touch-less age verification check by scanning the Age Verification QR code.
Tous-les-Jours dispatches Louis' shopping via a delivery service
Louis Pasteur visits the Tous-les-Jours website to purchase his celebration cake and some champagne.
Louis is ready to enjoy his party!
21
Journey 6 – Updating residency status
37
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 6 – Updating residency status
38
USCIS is able to automatically update Louis' Permanent Resident Card credential before it expires.
USCIS identifies that Louis PRC credential needs to be extended
Behind the scenes Louis digital wallet automatically updates itself and the new extend expiration date appears on the Permanent Resident Card credential.
Onboarding with a Permanent Resident Card
39
National Association of Convenience Stores
Screenshots
40
Onboard using Virtual USCIS Permanent Resident Card
TruAge Privacy-protecting Single Use Tokens in Digital Wallet
Show Photo and TruAge Token at Point of Sale in Store
Single Use TruAge Token (Verifiable Credential) works online and offline
Vendor test results
✔ Passing all implemented
CHAPI tests
✔ Passing all implemented VC HTTP API tests
✔ Issue/Verify all Credentials under test
41
Journey 4,5,6 – Additional resources and links
42
Digital Bazaar
Blacksburg, Virginia, USA
(Our backyard: The Blue Ridge Mountains)
NACS
TruAge Program
Over 500 Digital Bazaar code repositories on Github:
Veres One (did:v1)
Credential Handler API
CHAPI Test Suite
VC HTTP API Test Suite
^ citizen / securekey
43
SecureKey
DIGITAL PERSONAL CREDENTIALS SCENARIOS
Journey 7 – Booking a Flight
44
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 7 – Booking and Checking in to a Flight
45
Louis Pasteur wants to take a vacation, and books to fly with Taylor Chartered Flights
Louis books a trip via the Taylor Chartered Flights website.
Taylor Chartered Flights confirm Louis's booking and sends him a Booking Credential.
Louis Pasteur arrives at the airport to check into his flight. Taylor Chartered Flights check in agent makes a multi-credential request.
Louis' credentials are verified by Taylor Chartered flights and he is cleared to board his flight.
Multi-credential presentation with selective disclosure
Booking credential – Booking ID presented
PRC credential – Presentation of this credential qualifies as TSA REAL ID
Vaccination Certificate Credential – with selective disclosure (Louis provides consent to present his name, issuing country and issuance date from his Vaccination Certificate Credential)
Louis is asked to consent to present details from three credentials to confirm his eligibility to take the flight.
Journey 7 – Screenshots – Booking
46
Leverages existing infrastructure for their business case.
Journey 7 – Screenshots – Check-in
47
Leverages available credentials
Low integration cost
48
Demonstration video uses the TrustBloc ‘developer’ browser wallet. Audio muted by default
Why this work is important
In Canada,
49
Value Of Interoperability
Enables Networks of Trust:
Reduces solution costs, leveraging:
50
Proving You are You, Digitally
51
Authoritative Identity
Government
Financial
Telecomm
Healthcare
Education + Training
Trusted Relationships
Financial data
Qualifications &
Certifications
SIM Verification
Location
Health & Safety
Vendor test results
52
Includes
source:
https://w3c-ccg.github.io/vc-http-api/test-suite/securekey/
https://github.com/w3c-ccg/vc-http-api/tree/master/packages/vc-http-api-test-server
VC HTTP API
CHAPI
Issuer/Verifier/Wallets Covered:
source: Digital Bazaar’s Test suite
https://github.com/trustbloc/chapi-interop-test-suite
Journey 7 – Additional resources and links
53
Toronto, Ontario, Canada
Contact
Didier Serra, EVP Sales & Marketing �sales@securekey.com
Engage with the Community
TrustBloc Open Source projects:
^ citizen / mattr
54
MATTR
DIGITAL PERSONAL CREDENTIALS SCENARIOS
Getting vaccinated & becoming a naturalized citizen
55
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
A spotlight on:
56
Digital inclusion
Upgrade model
Managing privacy
Selective Disclosure
PAPER CREDENTIAL
LO-FI DIGITAL
DIGITAL FIRST
Credentials can be ‘upgraded’ as we move through the lifecycle, depending on constraints at issuance time, holder capability and verification assurance requirements.
The LO-FI digital solution is a digital paper-based credential for mobile with anti-fraud measures.
Journey 1 – Getting Vaccinated
57
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 1 – Getting vaccinated
58
Louis Pasteur receives vaccination for COVID-19
Louis Pasteur presents at a vaccination center and receives a vaccination for COVID-19
He receives a vaccination certificate from the US Public Health Agency with a QR code and instructions on how to claim a digital version of this credential.
The QR code acts as a token / possession factor and provides a link between Louis and the vaccination dose.
He scans the QR code and goes through an authentication process with US Public Health Agency to claim is digital vaccination certificate.
Louis receives his vaccination certificate in his digital wallet.
This is a simplified journey for the purposes of issuance for the Plugfest. For more a more detailed view of considerations in vaccination credentials refer to links on MATTR’s “Additional resources and links” slide
Prototype Demonstration
59
Paper-based Vaccination Certificate
Paper-based token
Paper-based token
Digital VaxCert in mobile wallet
VaxCert in PDF
^demo-paper-based
Journey 1 – Screenshots
61
1
2
3
4
5
6
7
8
Interop testing video – Testing vaccination issuance journey used to get a PRC [ link ]
Screenshots of vaccination credential issuance into a MATTR web wallet as part of the interoperability testing
Journey 8 – Becoming a naturalized citizen
62
Digital Vaccination Certificate
Digital Permanent Resident Card
Digital 21+ Credential
Taylor Chartered Flights
Appointment Credential
Louis’s Journey
Employer
US Public Health Agency
Relying Party
(Louis shares his credentials)
Louis’s Wallet
Credential Issuers
USCIS
Age Verification Services
PRC (Update)
Taylor Chartered Flights
Booking Credential
USCIS
USCIS
USCIS
Age Verification Services
USCIS
Selective Disclosure
PRC Revoked
(Credential of Naturalization issued)
1. Getting vaccinated
2. Becoming a permanent resident
3. Applying for a job
4. Verifying age
6. Updating residency status
7. Booking a Flight
8. Becoming a naturalized citizen
5. Buying age restricted products online
Store
Delivery
Employer
Employee Credential
Journey 8 – Becoming a naturalized citizen
63
After some time, Louis Pasteur qualifies to become a naturalized citizen
Louis Pasteur presents his PRC Credential to USCIS to demonstrate his eligibility for naturalization.
USCIS invites Louis to a series of appointment at one of USCIS site locations.
USCIS issue Louis three different appointment notices in a verifiable credential format.
Louis attends USCIS offices and presents his appointment credentials. He gains access and completes his biometric and interview appointments.
Louis uses his oath ceremony appointment credential to gain access to his oath ceremony.
USCIS staff satisfy themselves that Louis has completed his naturalization process, revoke the digital PRC credential and present Louis with his Certificate of Naturalization.
Selective Disclosure
Prototype Demonstration
64
Claiming appointment notice
Appointment notice with selective disclosure
USCIS Appointment Credential
^demo-web-wallet
Journey 8 – Screenshots
66
USCIS Website �Sign in
USCIS Website Appointment Notice with QR Code
Wallet
Scan QR Code
Credential
in Wallet
Notice of Appointment (digital and paper based)
Appointment Notice with a QR Code
Wallet
Scan QR Code
Claim Journey from Wallet handed off to USCIS Website
Enter username and password
Select appointment notice to claim
Credential
in Wallet
Claim Journey from Wallet handed off to USCIS Website
Enter username and password
Select appointment notice to claim
Appointment Notice with a QR Code
MATTR test results
67
VC HTTP API
MATTR’s comprehensive feature coverage allow us to pass a broad set of tests (including those for revocation, BBS+ signatures, and support for different DID methods)
For detailed results by API, please follow the link below and click the “Expand All” toggle.
Building bridges and breaking silos –
68
by using open standards and designing capabilities to meet people where they are
Designed for extensibility to support practical implementations
Paper based onboarding & VC
Open data vocabularies
Bridging human concerns
Education and resources �learn.mattr.global�mattr.global/resources
Generalized infrastructure for relying parties
Bridging into existing internet infrastructure
OpenID Client
In summary
69
69
The standards, technologies, vocabulary and bridging solutions we have demonstrated in both of our scenarios today have allowed us to showcase:
Spotlight on difficult challenges
Managing privacy
Exchange data securely with the ability to do so in a privacy-preserving manner
Digital inclusion
Support inclusion objectives by accommodating and supporting paper and digital options using common infrastructure
Demonstrate confidence through testing
Proven practical interoperability
Support global interoperability – at both the vocabulary and the technology layer
Outcomes
Adapt to almost any scenario for verifiable data and digital trust – verifiable credentials don’t care what the data is about!
No dependence on a single vendor and no lock in
Internet scale
Solve complex security & digital trust problems at scale whilst considering practical challenges.
High trust interactions
Support high-trust interactions with transparent assurances for all parties involved - allowing us to meet people where they are.
The value of an extensible architecture
Journey 1 & 8 – Additional resources and links
70
[ Link ]
[ Link ]
Interop Plugfest testing
[ link ]
[ Link ]
[ Link ]
Useful reference material:
[ Link ]
[ Link ]
71
Wrap up
DIGITAL PERSONAL CREDENTIAL SCENARIOS
Morning Session Close Out
72
73
Break + Snack/Meal with the Teams
(Q/A and virtual social time // 12:05 ~ 12:35 PM ET)
Agenda
74
10:00 AM ET | Welcome, Background & Goals |
10:15 AM ET | Interoperability Showcase Scenarios |
| Digital Personal Credentials (Immigration, Task/License, Vaccination Certificates) |
| Digital Trade Credentials (Steel, Oil, Natural Gas, Food, E-Commerce) |
10:45 AM ET | Digital Personal Credentials Interoperability Showcase/Demo |
| Danube Tech 10:45 AM – 11:05 AM |
| Digital Bazaar 11:05 AM – 11:25 AM |
| SecureKey 11:25 AM – 11:45 AM |
| MATTR 11:45 AM – 12:05 PM |
12:05 PM ET | Break, Q&A Session over Snack/Meal (30 Minutes) |
12:35 PM ET | Welcome Back |
12:50 PM ET | Digital Trade Credentials Scenario Reminder |
1:05 PM ET | Digital Trade Credentials Interoperability Showcase/Demo |
| Transmute 1:05 PM – 1:25 PM |
| Mavennet 1:25 PM – 1:45 PM |
| mesur.io 1:45 PM – 2:05 PM |
| Spherity 2:05 PM – 2:25 PM |
2:25 PM ET | Closing Comments |
2:40 PM ET | Q&A Session (for as long as it lasts) |
DHS/SVIP VC/DID Ecosystem Portfolio Companies
Digital Personal Credentials
Digital Trade Credentials
75
Danube Tech
Vienna, Austria�https://go.usa.gov/xsqdx
Digital Bazaar�Virginia, USA�https://go.usa.gov/xsqdC
MATTR�Auckland, New Zealand�https://go.usa.gov/xsqdr
SecureKey�Toronto, Canada�https://go.usa.gov/xsqd4
Mavennet�Toronto, Canada�https://go.usa.gov/xsqpe�https://go.usa.gov/xsqpz
mesur.io�North Carolina, USA�https://go.usa.gov/xsqpJ
Spherity
Dortmund, Germany�https://go.usa.gov/xsqpS
Transmute
Texas, USA�https://go.usa.gov/xsqph
76
Digital Trade Credentials Interoperability Scenarios
The focus of the supply chain traceability is on applying Virtual Credentials in the context of supply chains across different industries
77
Asset Centric Credentials
Cohort Members
Louis
Wallet
Identity VCs
Steel
Agricultural
Oil
E-Commerce
Gas
The complexity of supply chains makes it hard to traceback documentation of a specific asset, as the information does not typically travel with the asset itself.
78
Firms exchange the most information in trade is still close-to-paper format resulting in:
Regulatory Agencies
Border Control
Customs
Brokers
OEMs
Manufacturers
Traders
Carriers
?
Raw Materials Producers
We are aiming at building a future where trade is fully digital, which opens a wide range of business and technical opportunities
79
Frictionless & Secure
Border Clearance
Automatic Regulatory Reporting
Programmable Trade Finance
Environmental Accounting
Etc.
Business Cases
An open traceability vocabulary is being used for asserting verifiable credentials related to asset traceability information
80
[Link]
Contributions and feedback are welcome!!
Digital Trade Credentials Interoperability Scenario
81
3
3PL/Carrier/Transporter
4
CBP/PGA
1a
Steel Mill
Steel
e-commerce
1b
Seller
1c
Farmer
1d
Refiner
2a
Broker
2b
Fulfillment Center
2c
Inspector
2d
Broker
Agriculture
Oil & Gas
Credential presentation
Multi-credential presentation
^ supply-chain / transmute
82
Transmute
DIGITAL TRADE CREDENTIALS SCENARIOS
Steel Import Scenario
83
Verifiable credentials enable certainty about:
Steel Landscape
China
Largest global exporter
Largest global producer @ ~928 million tons/year
U.S.
Largest global importer
4th largest producer at ~87 million tons/year
World Crude Demand
> 1.8 billion tons in 2019
Emerging Markets Demand
> 1.3 million tons in 2020
Steel Scenario Challenges
85
Steel originates in China
Arrives to US Port of Entry
Received by customer
Shipped to Vietnam
Steel Scenario Challenges
86
Arrives to US Port of Entry
Received by customer
Shipped to Produced in Vietnam
Steel Scenario Challenges
87
Arrives to US Port of Entry
Received by customer
Shipped to Produced in Vietnam
“It’s like whack-a-mole. Trade cases take years, so they can cheat for years and then just go to a different mill.”
-Large Steel Company
Steel Scenario Challenges
88
Arrives to US Port of Entry
Received by customer
Shipped to Produced in Vietnam
“It’s like whack-a-mole. Trade cases take years, so they can cheat for years and then just go to a different mill.”
-Large Steel Company
“If someone can buy it for less, they will gravitate towards that.”
Steel Import Track & Trace
89
Transmute gives companies and governments need-to-know access to verifiable trade data.
✓ Machine readable
✓ Digitally verifiable
✓ Tamper-evident
✓ Accessible across systems
✓ Access protected
✓ Cross-linked
89
CURRENT PAPER PROCESS EXAMPLE
DIGITAL TWIN ECOSYSTEM with TRANSMUTE
Steel Inc
Ocean Carrier
Customs Broker
US CBP
Steel Customer
Simple Steel Import Scenario
91
Stacy from Steel Inc issues origin and shipment documentation for its steel product. This includes a Mill Test Report and a Commercial Invoice
Stacy presents these verifiable trade documents to the Customs Broker responsible for gathering entry documentation for US CBP.
Customs Broker receives and verifies all presented documentation and prepares entry materials.
All three verifiable trade documents are presented to US CBP.
The steel product is shipped to the US on an Ocean Carrier.
That Carrier also issues a verifiable Bill of Lading and presents it both to Steel Inc and to the Customs Broker
US-based Steel Customer has purchased rebar from Steel Inc.
The materials will be shipped from Brazil to the United States
US CBP receives and verifies the presentation.
Interoperable Steel Credentials
92
Demonstration of interop across supply chain vendors
Transmute Test Results
93
Connecting Supply Chain to Virtual People Credentials
94
Judith vaccinates patient Olga and issues a verifiable Covid 19 Vaccination Certificate.
Olga claims the credential and save it in her wallet.
Olga selectively presents evidence of her vaccination certification to Stacy at Steel Inc.
She only needs to show Stacy her name, her vaccination status, and the issuer.
All other personal data can be omitted.
A steel facility auditor is able to selectively present her vaccination certificate in order to perform an on-site audit.
Stacy verified Olga’s vaccine certificate presentation and she clears Olga to enter the facility
Nurse Judith
Facility Auditor Olga
Steel Manager Stacy
Connecting Supply Chain to Virtual People Credentials
95
A steel facility auditor is able to selectively present her vaccination certificate in order to perform an on-site audit
Steel Scenario: Ecosystem Value
96
Global Trade Industry Benefits
Improve compliance and business operations simultaneously:
Government Benefits
Increase trade facilitation and enforcement activities at the same time:
Authoritative, actionable trade data powers:
Transmuting Trade for Good
97
Verifiable trade data is the gateway to provably healthier supply chains in steel and beyond.
Enterprise Platform, API & Microservices
Additional Resources and Links
98
Get in Touch:
Email: info@transmute.industries
Typeform: https://transmute.typeform.com/to/RshfIw
Twitter: @TransmuteNews
Medium: https://medium.com/transmute-techtalk
Website: https://www.transmute.industries
Built in Austin, TX
Learn More:
Transmute Interoperability Demo Site
Selective Disclosure with BBS+
Sidetree Protocol: Scalable DIDs
Transmute Offline Paper Vaccination Credentials Demo
Trusted data exchange for the future of global trade.
Founders:
Karyl Fowler, CEO: karyl@transmute.industries
Orie Steele, CTO: orie@transmute.industries
^ supply-chain / mavennet
99
Mavennet
DIGITAL TRADE CREDENTIALS SCENARIOS
Physical commodities do not have an end-to-end digital view, just disparate transaction records locked in silos
1
2
3
4
5
6
7
8
The Journey of a Barrel of Oil across the Canada-US Border
1
2
3
4
5
6
7
8
Produce: crude oil is produced, record of raw material is created.
Pain point: Complex, manual royalty payment calculations lead to inconsistencies, causing risk of manipulation
Upgrade: Upgrade record, waybill document, origin document and schedule inspection are created
Inspect: quality inspection. Inspection record is created.
Trade & Transport: create Financing documents (LOC, LOI) and Proof of Product document set
Pain point: Risk of information discontinuity
Border Control: inspection and tariffs
Pain point: Risk of delays due to manual processing, labor-intensive risk assessment to prevent fraud and forgery
Store
Refine: Create record of final product, arrange Transportation/Retail, create transportation document
Pain point: Risk of information discontinuity
Deliver: Create record of final product, arrange Transportation/Retail, create transportation document
Pain point: Risk of information discontinuity
Vision: “Nexus for Oil & Gas”
101
Digitization between companies and governments can have a large impact in operations for the industry…
102
…and open the door to many other use cases
Expected Business Value
25¢ per Barrel
(5-11¢ from Border Clearance)
Oil Supply chain Business Scenario
Case 1: Purchase by refiner at the feeder pipeline
103
Producer extracts bitumen at their field north of Hardisty
NF API or UI:
Producer upgrades bitumen with Canadian diluent producing a heavy stream (LLB)
Data received via API:
1
2
3
4
5
Product VC is issued, verified
Product VC is issued, verified
Enbridge (Pipeline) receives LLB transfer of custody from Marathon, create a transport event, starting delivery
NF API or UI – Acceptance of custody, transportation
Delivery Ticket (BOL) VC is issued
AN Deringer (Broker) Reviews VC
Record QP No
6
Producer Triggers Transfers
Custody to Enbridge (Pipeline)
VC is Created
VP is verified
CBP Reviews Verifiable Presentation
104
Interoperability Test results
105
VC HTTP API
A secure protocol for Energy data exchange
106
Digitalizing Energy End-to-End, from well to pump
Trusted. Digital. Energy
We’re bringing commodities to life.
Contact: Patrick Mandic, CEO - patrick@mavennet.com
^ supply-chain / mesur
108
DIGITAL TRADE CREDENTIALS SCENARIOS
mesur.io
mesur.io – Food & Agricultural Imports
109
mesur.io – Food & Agricultural Imports
110
mesur.io – How we solve this problem
111
Phase 1 Focused on Blueberries and Avocados
mesur.io – User Experience – Field / Farmer
112
mesur.io – User Experience – Field / Farmer / Processor
113
mesur.io – User Experience – Field / Inspector
114
mesur.io – User Experience – Office / Analytics
115
Highlight and detect problems, before they occur
Export and Selectively Share Data (think FDA CTEs and KDEs)
mesur.io – Enterprise integration
116
mesur.io – Enterprise integration
117
mesur.io – Additional Value Adds
118
mesur.io – Interop Data Flow
119
VC
VP
VP
Example Credential Flow
Issues and Verifies Package, Product, Inspections
Farmer Packages Avocados, they are Inspected, and they are Shipped to the US
In the Field
Carrier
Bundles VCs, signs, Creates BOL
CBP
PURCHASER
Receives BOL, cross checks that all requirements are met
Receives a portion of an Inspection VC showing that fumigation is required
mesur.io – Interop Data Flow
120
VC
VP
VP
Example Credential Flow
Issues and Verifies Package, Product, Inspections
Farmer Packages Avocados, they are Inspected, and they are Shipped to the US
In the Field
Carrier
Bundles VCs, signs, Creates BOL
CBP
PURCHASER
Receives BOL, cross checks that all requirements are met
Receives a portion of an Inspection VC showing that fumigation is required
mesur.io – Community Test Results
121
mesur.io – links and resources
122
Links
mesur.io https://mesur.io/
VC API https://vc.mesur.io/
Open Food Trust https://github.com/mesur-io/openfoodtrust
VC-HTTP-API https://w3c-ccg.github.io/vc-http-api/
Traceability Vocab https://github.com/w3c-ccg/traceability-vocab/
^ supply-chain / spherity
123
Spherity
DIGITAL TRADE CREDENTIALS SCENARIOS
Introduction
124
Large effort to correlate and make sense of all these data shapes (data formats).
What is the problem?
Non-standardized and fragmented supply chain data creates a world of headaches.
Order data
Product data
Transport data
Marketplace
Manufacturer
Carrier
Introduction
125
Linked data
How do you we fix this?
Our software transforms clunky data into a language everyone can understand.
Order data
Product data
Transport data
This is much more secure, transparent and easier to search through and analyse using ML algorithms.
Cohort data mapping
CBP API gateway
Signed by immutable identifier linked to Legal Entity Identifier (LEI)
Linked data
Compliance-by design, improved efficiency and trust
Marketplace
Manufacturer
Carrier
Video demonstration
126
Individual in the USA purchases eCommerce product from overseas on a marketplace
Product list is put together and bundled by fulfilment centre
Handoff to third party logistics provider. Products are labelled with package identifier
Delivery vessel assigned for transport to the USA
Customs broker reviews the packages and the items are imported into the USA
Part 1: E-Commerce Package Journey
Package Journey
127
Product submission
Invoice submission
Order submission
Market-�place
US CBP
Binding data submission
Verified legal entity identifier credential
Linked data submissions
Packing List submission
Product Receipt submission
Package submission
Way Bill submission
Fulfillment centre
3PL Carrier / Broker
US Consumer
Intent to Sell
Purchase
Order Confirmation
Packing products
Packaging
Shipping
Entry to US
Real world event
Invoicing
Package Journey (Simplified for demonstration)
128
Product
Invoice
Order
Marketplace
US CBP
Binding data
Verified legal entity identifier credential
Linked data submissions
Packing List
Product Receipt
Package
Way Bill
Fulfillment centre
3PL Carrier / Broker
Demonstration
129
What are we going to show?
Key value adds:
Interoperability demonstration
130
Part 2: E-Commerce Targeting Demonstration
131
Key value adds:
What are we going to show next?
Demonstration
132
Vendor test results
133
VC HTTP API Profile under test
Roadmap 2021
Spherity has successfully passed the required VC-HTTP-API tests
Additional resources and links
134
Links:
135
Wrap up
Contact information + how to get involved
136
Danube Tech
Vienna, Austria�https://go.usa.gov/xsqdx
Digital Bazaar�Virginia, USA�https://go.usa.gov/xsqdC
MATTR�Auckland, New Zealand�https://go.usa.gov/xsqdr
SecureKey�Toronto, Canada�https://go.usa.gov/xsqd4
Mavennet�Toronto, Canada�https://go.usa.gov/xsqpe�https://go.usa.gov/xsqpz
Mesur.io�North Carolina, USA�https://go.usa.gov/xsqpJ
Spherity
Dortmund, Germany�https://go.usa.gov/xsqpS
Transmute
Texas, USA�https://go.usa.gov/xsqph
137
Q & A
138
Silicon Valley Innovation Program