1 of 138

Interoperability Plugfest #2

VC/DID Multi-Platform/Multi-Vendor�Interoperability Showcase/Demo

18 March 2021

dhs.gov/science-and-technology/svip

dhs-silicon-valley@hq.dhs.gov

DHS Science & Technology Directorate

SILICON VALLEY INNOVATION PROGRAM

2 of 138

Agenda

2

10:00 AM ET

Welcome, Background & Goals

10:15 AM ET

Interoperability Showcase Scenarios

Digital Personal Credentials (Immigration, Task/License, Vaccination Certificates)

Digital Trade Credentials (Steel, Oil, Natural Gas, Food, E-Commerce)

10:45 AM ET

Digital Personal Credentials Interoperability Showcase/Demo

Danube Tech 10:45 AM – 11:05 AM

Digital Bazaar 11:05 AM – 11:25 AM

SecureKey 11:25 AM – 11:45 AM

MATTR 11:45 AM – 12:05 PM

12:05 PM ET

Break, Q&A Session over Snack/Meal (30 Minutes)

12:35 PM ET

Welcome Back

12:50 PM ET

Digital Trade Credentials Scenario Reminder

1:05 PM ET

Digital Trade Credentials Interoperability Showcase/Demo

Transmute 1:05 PM – 1:25 PM

Mavennet 1:25 PM – 1:45 PM

mesur.io 1:45 PM – 2:05 PM

Spherity 2:05 PM – 2:25 PM

2:25 PM ET

Closing Comments

2:40 PM ET

Q&A Session (for as long as it lasts)

3 of 138

Preventing Forgery & Counterfeiting of Certificates and Licenses (2018)

  • DHS Operational Components and Programs need to issue, validate and verify entitlements, attestations and certificates
    • Citizenship and Immigration Status
    • Employment Eligibility
    • Essential Work and Task Licenses
    • Organizational Identity & Supply Chain Security

  • DHS Operational Components and Programs may be both Issuers of Credentials and Validators and Verifiers of Credentials

  • Current issuance processes are paper based, non-interoperable and susceptible to loss, destruction, forgery, and counterfeiting

3

DHS Operational Components & Programs:

  • U.S. Citizenship and Immigration Services
  • U.S. Customs and Border Protection
  • Office of Privacy

4 of 138

Develop, Refine, Use and Champion Global Standards to Ensure Interoperability

4

Verifiable Credentials

  • A set of claims made by an issuer about a subject in a manner that is:
    • Tamper evident
    • Cryptographically verifiable
  • Digital version of physical credentials/attestations
    • Driver’s Licenses
    • Passports
    • Certificates of Origin

Decentralized Identifiers

  • Globally Unique Identifier without the need for a central registration authority
    • Immutable over time
    • Globally resolvable
    • Privacy respecting
    • Cryptographically verifiable

Privacy and Credential �Lifecycle Management

  • Tackling the hard challenges of scalable implementation
    • Confidential Storage
    • Data Portability
    • Selective Disclosure
    • Revocation with Herd Privacy
  • Path to Standardization via IETF & W3C

5 of 138

Verifying Global Interoperability … in Practice

Standards Conformance�via Automated Test Suites

  • DHS/SVIP mandates the demonstration of standards compliance using automated conformance test suites
    • Contributed to by DHS/SVIP Performers and many others
    • Developed under the purview of the W3C Credential Community Group (Not DHS)
    • With input sought and accepted from the Global technical community

This is not enough!

Multi-Vendor Interoperability�via Plugfests

  • Standards are compromises and as such do not ensure interoperability on their own!
    • Standards allow for multiple ways to accomplish the same thing
    • Standards allow for multiple ways to represent the same thing
  • DHS/SVIP mandates the demonstration of interoperability via a NxN matrix testing of the multiple vendors under contract
  • Open to working with non-DHS funded entities in separate “community plug-fests”

5

6 of 138

VC HTTP API Test Suite

6

Role of the Test suite

Tests core issuance and verification capabilities for a variety of different credential types against different DID methods and signature suites. “Backend-level testing”

Issuance

Credential Types

Signature Schemes

DID Integration (method & resolution)

fixtures

Test objectives

PLATFORM

Verification

Test environment

PLATFORM

PLATFORM

PLATFORM

PLATFORM

PLATFORM

PLATFORM

PLATFORM

Test harness

report

VC HTTP API Spec

7 of 138

CHAPI Interop Testing

7

Role of CHAPI Interop testing

Integrated testing of use case scenarios using web-based wallets and browser-based credential exchange between different vendors and infrastructure. �“End-to-end testing”

Issuer

Credential issuance

Credential presentation + verification

Test objectives

Holder

Verifier

Test harness

Issue capability

Holder capability (wallet)

Verify capability

Test environment

Danube

Digital Bazaar

MATTR

Mavennet

Mesur

SecureKey

Spherity

Transmute

8 of 138

DHS/SVIP Multi-Vendor / Multi-Platform�Interoperability Testing ...

8

Plug-Fest 1�May 2020

https://lists.w3.org/Archives/Public/public-credentials/2020Jun/0100.html

Plug-Fest 2�March 2021

  • [Everything Tested in Plug Fest 1]
  • Traceability Vocabulary�https://w3c-ccg.github.io/traceability-vocab/
  • Vaccination Certificate Vocabulary�https://w3c-ccg.github.io/vaccination-vocab/
  • FIPS Compliant Cryptographic Primitives
  • VC Aggregation and Presentation using Verifiable Presentation (VP)
  • VC Revocation with Herd Privacy
  • did:web to represent Issuers Only
  • VP Support for selective disclosure using BBS+ Signatures

Plug-Fest 3+�TBD

  • QR Code w/ CBOR-LD
  • Issuer support for VC Refresh by Holder Only
  • Issuer support for rich client mobile wallet
  • Verifier support for rich client mobile wallet
  • Issuer support for OIDC Credential Provider
  • More …

9 of 138

DHS/SVIP VC/DID Ecosystem Portfolio Companies

Digital Personal Credentials

Digital Trade Credentials

9

Danube Tech

Vienna, Austria�https://go.usa.gov/xsqdx

Digital Bazaar�Virginia, USAhttps://go.usa.gov/xsqdC

MATTR�Auckland, New Zealandhttps://go.usa.gov/xsqdr

Mavennet�Toronto, Canadahttps://go.usa.gov/xsqpehttps://go.usa.gov/xsqpz

mesur.io�North Carolina, USAhttps://go.usa.gov/xsqpJ

Spherity

Dortmund, Germany�https://go.usa.gov/xsqpS

Transmute

Texas, USA�https://go.usa.gov/xsqph

10 of 138

Digital Trade Credentials Interoperability Scenario

10

3

3PL/Carrier/Transporter

4

CBP/PGA

1a

Steel Mill

Steel

e-commerce

1b

Seller

1c

Farmer

1d

Refiner

2a

Broker

2b

Fulfillment Center

2c

Inspector

2d

Broker

Agriculture

Oil & Gas

Credential presentation

Multi-credential presentation

Supply chain is in the afternoon session; starting 12:50 PM ET

11 of 138

Digital Personal Credentials Interoperability Scenario

11

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

12 of 138

Vocabularies

12

Vaccination [ link ]

Citizenship [ link ]

Appointment [ link ]

Traceability [ link ]

Employment [ link ]

  • Built referencing existing schema.org definitions
  • Extensible to incorporate any existing vocabulary elements (for example Traceability Vocab uses GS1 vocabulary elements)
  • Standardizes the creation of Verifiable Credentials from standardized JSON-LD, which is generated from JSON Schemas
  • Hosted under the W3C umbrella and open to contributions

13 of 138

^ citizen / danube tech

13

Danube Tech

DIGITAL PERSONAL CREDENTIALS SCENARIOS

14 of 138

Journey 2 – Becoming a permanent resident

14

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

We’re kicking Louis’s journey off assuming he’s received his vaccination certificate as a verifiable credential with selective disclosure features. Louis holdes this in his wallet and is able to use it to prove his vaccination status. Journey 1: Getting vaccinated will be covered alongside Journey 8: Becoming a naturalized citizen.

15 of 138

Journey 2 – Video

15

16 of 138

Journey 2 – Screenshots

16

1

4

5

2

3

6

17 of 138

Journey 3 – Applying for a job

17

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

18 of 138

Journey 3 – Applying for a job

18

Louis Pasteur applies for a job , gets hired by Dairy Informatica, and receives an employment credential

Louis Pasteur completes his application for a job with Dairy Informatica.

And shares details from his USCIS digital PRC certificate to prove is eligibility to work.

The digital PRC is digitally verified by Dairy Informatica and Louis is offered the job.

Louis starts his new job.

Dairy Informatica issues an employment credential.

19 of 138

Journey 3 – Video

19

20 of 138

Journey 3 – Screenshots

20

4

5

1

2

3

6

21 of 138

Integration with existing infrastructure

21

22 of 138

Vendor test results

22

VC HTTP API

Interop Features

23 of 138

Three-vendor interop – Video

23

Mattr → Issuer (USCIS)

Digital Bazaar → Veres Wallet

Danube Tech → Verifier (Dairy Informatica)

24 of 138

Cross-border interoperability

24

25 of 138

Cross-border interoperability

25

26 of 138

Cross-border interoperability

26

27 of 138

Additional resources and links

27

Additional links and resources

Universal Resolver: https://uniresolver.io/

Universal Registrar: https://uniregistrar.io/

Universal Issuer: https://uniissuer.io/

Universal Verifier: https://univerifier.io/

W3C DID Core: https://www.w3.org/TR/did-core/

W3C DID Resolution: https://w3c-ccg.github.io/did-resolution/

Decentralized Identity Foundation: https://identity.foundation/

28 of 138

^ citizen / digital bazaar

28

Digital Bazaar

DIGITAL PERSONAL CREDENTIALS SCENARIOS

29 of 138

Journey 4,5,6 – Age-restricted goods

29

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

30 of 138

Gray Taylor

Founder, NACS TruAge Program

Executive Director, Conexxus

Retail Deployment of DHS SVIP Technology

30

National Association of Convenience Stores

31 of 138

The Retail Age Verification Challenge

31

National Association of Convenience Stores

152,720 stores nationwide

165M+ transactions per day

200M+ customers per year

50M+ age checks per day

Sell to a minor? $2.5K fine, 12 months jail, lose liquor license - sting enforced

Fraudulent IDs, fallible clerks, no national system for product restrictions

Need digital Federal and State IDs

Needed a privacy-respecting solution - GDPR, CCPA, VCDPA

32 of 138

The TruAge Solution

32

National Association of Convenience Stores

152,720 stores nationwide

200M+ customers per year

Digital Bazaar designed, built, and operates nationwide TruAge Program (offline capable, paper and digital, actively fights tracking collusion)

Entered Pilot-Production Nov 2020

Same Verifiable Credential standards as DHS SVIP

Same Digital Wallet infrastructure as DHS SVIP

NACS wants to consume USCIS Permanent Resident Card

Video footage of TruAge field deployment

33 of 138

Journey 4 – Verifying age

33

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

34 of 138

Journey 4 – Verifying age

34

Louis Pasteur wants to celebrate his new job. He would like to buy some alcohol for the celebration but needs to prove his age to the retailer. Louis decides to onboard to an age verification system and claim an over 21 credential to use in his daily life.

Louis Pasteur decides to use his digital PRC to claim an age verification credential.

He goes to the Age Verification System website where he presents his digital PRC as part of the onboarding experience.

The Age Verification System verifies Louis's details and issues his digital 21+ credential.

He is now ready to go shopping either online or at any store accepting the digital credential.

35 of 138

Journey 5 – Buying age restricted products online

35

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

36 of 138

Journey 5 – Buying age restricted products online

36

Louis Pasteur goes to the Tous-les-Jours website and makes his selection.

Tous-les-Jours asks Louis to prove he is over 21.  ��Louis presents his digital age verification credential and the retailer performs an instant validation.

The delivery service asks Louis to use a touch-less age verification check by scanning the Age Verification QR code.

Tous-les-Jours dispatches Louis' shopping via a delivery service

Louis Pasteur visits the Tous-les-Jours website to purchase his celebration cake and some champagne.

Louis is ready to enjoy his party!

21

37 of 138

Journey 6 – Updating residency status

37

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

38 of 138

Journey 6 – Updating residency status

38

USCIS is able to automatically update Louis' Permanent Resident Card credential before it expires.

USCIS identifies that Louis PRC credential needs to be extended

Behind the scenes Louis digital wallet automatically updates itself and the new extend expiration date appears on the Permanent Resident Card credential.

39 of 138

Onboarding with a Permanent Resident Card

39

National Association of Convenience Stores

  1. Use USCIS Permanent Resident Card to onboard into TruAge system.
  2. USCIS digitally signed photo is used as official photo for TruAge system.
  3. TrueAge Single Use Tokens provided to combat unauthorized tracking and ensure privacy during transactions.
  4. TruAge Photo ID + QR Code provided for physical/offline interactions.
  5. TruAge Single Use Tokens (no photo) can be used for privacy-preserving online interactions.
  6. Use of physical ID (Driver's License) continues to be possible.

40 of 138

Screenshots

40

Onboard using Virtual USCIS Permanent Resident Card

TruAge Privacy-protecting Single Use Tokens in Digital Wallet

Show Photo and TruAge Token at Point of Sale in Store

Single Use TruAge Token (Verifiable Credential) works online and offline

41 of 138

Vendor test results

Passing all implemented

CHAPI tests

Passing all implemented VC HTTP API tests

Issue/Verify all Credentials under test

41

42 of 138

Journey 4,5,6 – Additional resources and links

42

Digital Bazaar

Blacksburg, Virginia, USA

msporny@digitalbazaar.com

(Our backyard: The Blue Ridge Mountains)

NACS

  • https://convenience.org/

TruAge Program

Over 500 Digital Bazaar code repositories on Github:

Veres One (did:v1)

  • https://veres.one/

Credential Handler API

CHAPI Test Suite

VC HTTP API Test Suite

43 of 138

^ citizen / securekey

43

SecureKey

DIGITAL PERSONAL CREDENTIALS SCENARIOS

44 of 138

Journey 7 – Booking a Flight

44

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

45 of 138

Journey 7 – Booking and Checking in to a Flight

45

Louis Pasteur wants to take a vacation, and books to fly with Taylor Chartered Flights 

Louis books a trip via the Taylor Chartered Flights website.

Taylor Chartered Flights confirm Louis's booking and sends him a Booking Credential.

Louis Pasteur arrives at the airport to check into his flight. Taylor Chartered Flights check in agent makes a multi-credential request.

Louis' credentials are verified by Taylor Chartered flights and he is cleared to board his flight.

Multi-credential presentation with selective disclosure

Booking credential – Booking ID presented

PRC credential – Presentation of this credential qualifies as TSA REAL ID

Vaccination Certificate Credential – with selective disclosure (Louis provides consent to present his name, issuing country and issuance date from his Vaccination Certificate Credential)

Louis is asked to consent to present details from three credentials to confirm his eligibility to take the flight.

46 of 138

Journey 7 – Screenshots – Booking

46

Leverages existing infrastructure for their business case.

47 of 138

Journey 7 – Screenshots – Check-in

47

Leverages available credentials

Low integration cost

48 of 138

48

Demonstration video uses the TrustBloc ‘developer’ browser wallet. Audio muted by default

49 of 138

Why this work is important

  • Multiple sources used in a single transaction, including selective disclosure.
  • Ability to share protected attributes, limiting unauthorized disclosure.
  • Ledger independence.
  • Supports a cloud wallet, browser wallet, and native mobile wallet.
  • Enables dynamic claims in addition to static claims for provenance and accuracy.

In Canada,

  • Enables Financial Institutions with their strong authentication and trust relationship to act as a ‘Safety Deposit Box’ for their customer’s digital identity assets.
  • Usable across all platforms without the need for a physical device.
  • Enables 7x24 bi-lingual customer support including call center.

49

50 of 138

Value Of Interoperability

Enables Networks of Trust:

  • Digital assets can now easily cross trust domains.
  • Increases personal protection and data reliability

Reduces solution costs, leveraging:

  • ‘Utility’ infrastructure like wallets and ledgers
  • Common ‘vocabulary’ for data

50

51 of 138

Proving You are You, Digitally

51

Authoritative Identity

Government

Financial

Telecomm

Healthcare

Education + Training

Trusted Relationships

Financial data

Qualifications &

Certifications

SIM Verification

Location

Health & Safety

52 of 138

Vendor test results

52

  • Issue Credential (38 passed)
  • Verify Credential (51 passed)
  • Verify Presentation (5 passed)

Includes

  • Revocation (RevocationList2020)
  • BBS+ signature suite (selective disclosure)

source:

https://w3c-ccg.github.io/vc-http-api/test-suite/securekey/

https://github.com/w3c-ccg/vc-http-api/tree/master/packages/vc-http-api-test-server

VC HTTP API

CHAPI

Issuer/Verifier/Wallets Covered:

  • DanubeTech
  • Digital Bazaar
  • MATTR
  • Transmute
  • TrustBloc

source: Digital Bazaar’s Test suite

https://github.com/trustbloc/chapi-interop-test-suite

53 of 138

Journey 7 – Additional resources and links

53

Toronto, Ontario, Canada

Contact

Didier Serra, EVP Sales & Marketing �sales@securekey.com

Engage with the Community

TrustBloc Open Source projects:

  • github.com/trustbloc
    • demos,
    • running components,
    • wallet source.

  • github.com/hyperledger/aries-framework-go
    • go-lang libraries for specs,
    • hyperledger aries protocols.

54 of 138

^ citizen / mattr

54

MATTR

DIGITAL PERSONAL CREDENTIALS SCENARIOS

55 of 138

Getting vaccinated & becoming a naturalized citizen

55

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

56 of 138

A spotlight on:

56

Digital inclusion

Upgrade model

Managing privacy

Selective Disclosure

PAPER CREDENTIAL

LO-FI DIGITAL

DIGITAL FIRST

Credentials can be ‘upgraded’ as we move through the lifecycle, depending on constraints at issuance time, holder capability and verification assurance requirements.

The LO-FI digital solution is a digital paper-based credential for mobile with anti-fraud measures.   

57 of 138

Journey 1 – Getting Vaccinated

57

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

58 of 138

Journey 1 – Getting vaccinated

58

Louis Pasteur receives vaccination for COVID-19

Louis Pasteur presents at a vaccination center and receives a vaccination for COVID-19

He receives a vaccination certificate from the US Public Health Agency with a QR code and instructions on how to claim a digital version of this credential.

The QR code acts as a token / possession factor and provides a link between Louis and the vaccination dose.  

He scans the QR code and goes through an authentication process with US Public Health Agency to claim is digital vaccination certificate.

Louis receives his vaccination certificate in his digital wallet. 

This is a simplified journey for the purposes of issuance for the Plugfest. For more a more detailed view of considerations in vaccination credentials refer to links on MATTR’s “Additional resources and links” slide

59 of 138

Prototype Demonstration

59

Paper-based Vaccination Certificate

  1. Issuance – use paper-based token to claim:
    1. paper-based VaxCert in PDF
    2. digital VaxCert in mobile wallet

  • Verification – present your proof of vaccination:
    • paper-based VaxCert PDF verification with mobile Verifier app
    • digital wallet VaxCert verification with mobile Verifier app

Paper-based token

Paper-based token

Digital VaxCert in mobile wallet

VaxCert in PDF

60 of 138

^demo-paper-based

61 of 138

Journey 1 – Screenshots

61

1

2

3

4

5

6

7

8

Interop testing video – Testing vaccination issuance journey used to get a PRC [ link ]

Screenshots of vaccination credential issuance into a MATTR web wallet as part of the interoperability testing

62 of 138

Journey 8 – Becoming a naturalized citizen

62

Digital Vaccination Certificate

Digital Permanent Resident Card

Digital 21+ Credential

Taylor Chartered Flights

Appointment Credential

Louis’s Journey

Employer

US Public Health Agency

Relying Party

(Louis shares his credentials)

Louis’s Wallet

Credential Issuers

USCIS

Age Verification Services

PRC (Update)

Taylor Chartered Flights

Booking Credential

USCIS

USCIS

USCIS

Age Verification Services

USCIS

Selective Disclosure

PRC Revoked

(Credential of Naturalization issued)

1. Getting vaccinated

2. Becoming a permanent resident

3. Applying for a job

4. Verifying age

6. Updating residency status

7. Booking a Flight

8. Becoming a naturalized citizen

5. Buying age restricted products online

Store

Delivery

Employer

Employee Credential

63 of 138

Journey 8 – Becoming a naturalized citizen

63

After some time, Louis Pasteur qualifies to become a naturalized citizen

Louis Pasteur presents his PRC Credential to USCIS to demonstrate his eligibility for naturalization.

USCIS invites Louis to a series of appointment at one of USCIS site locations. 

USCIS issue Louis three different appointment notices in a verifiable credential format.  

Louis attends USCIS offices and presents his appointment credentials. He gains access and completes his biometric and interview appointments.

Louis uses his oath ceremony appointment credential to gain access to his oath ceremony. 

USCIS staff satisfy themselves that Louis has completed his naturalization process, revoke the digital PRC credential and present Louis with his Certificate of Naturalization.

Selective Disclosure

64 of 138

Prototype Demonstration

64

  1. Issuance - digital journey of claiming an Appointment Notice from USCIS website

  • Verification - digital journey of presenting Appointment Notice with selective disclosure

Claiming appointment notice

Appointment notice with selective disclosure

USCIS Appointment Credential

65 of 138

^demo-web-wallet

66 of 138

Journey 8 – Screenshots

66

USCIS Website �Sign in

USCIS Website Appointment Notice with QR Code

Wallet

Scan QR Code

Credential

in Wallet

Notice of Appointment (digital and paper based)

Appointment Notice with a QR Code

Wallet

Scan QR Code

Claim Journey from Wallet handed off to USCIS Website

Enter username and password

Select appointment notice to claim

Credential

in Wallet

Claim Journey from Wallet handed off to USCIS Website

Enter username and password

Select appointment notice to claim

Appointment Notice with a QR Code

67 of 138

MATTR test results

67

VC HTTP API

MATTR’s comprehensive feature coverage allow us to pass a broad set of tests (including those for revocation, BBS+ signatures, and support for different DID methods)

  • Passing 130 VC HTTP API tests

  • Passing all core CHAPI tests

  • Issue/Verify all Credential Types covered by both Virtual and Supply Chain scenarios

For detailed results by API, please follow the link below and click the “Expand All” toggle.

68 of 138

Building bridges and breaking silos –

68

by using open standards and designing capabilities to meet people where they are

Designed for extensibility to support practical implementations

Paper based onboarding & VC

Open data vocabularies

Bridging human concerns

Education and resources �learn.mattr.globalmattr.global/resources

Generalized infrastructure for relying parties

Bridging into existing internet infrastructure

OpenID Client

69 of 138

In summary

69

69

The standards, technologies, vocabulary and bridging solutions we have demonstrated in both of our scenarios today have allowed us to showcase:

Spotlight on difficult challenges

Managing privacy

Exchange data securely with the ability to do so in a privacy-preserving manner

Digital inclusion

Support inclusion objectives by accommodating and supporting paper and digital options using common infrastructure

Demonstrate confidence through testing

Proven practical interoperability

Support global interoperability – at both the vocabulary and the technology layer

Outcomes

Adapt to almost any scenario for verifiable data and digital trust – verifiable credentials don’t care what the data is about!

No dependence on a single vendor and no lock in

Internet scale

Solve complex security & digital trust problems at scale whilst considering practical challenges.

High trust interactions

Support high-trust interactions with transparent assurances for all parties involved - allowing us to meet people where they are.

The value of an extensible architecture

70 of 138

Journey 1 & 8 – Additional resources and links

70

[ Link ]

[ Link ]

BBS+ Interoperability (Transmute and MATTR) [ link ]

Interop Plugfest testing

[ link ]

[ Link ]

[ Link ]

Useful reference material:

  • Web of Trust [ link ]

  • Digital Wallet [ link ]

  • Semantic Web [ link ]

  • Selective Disclosure [ link ]

  • Introducing OIDC Credential Provider [ link ]

  • Solution for privacy-preserving verifiable credentials [ link ]

  • Intro to DIDs for people [ link ]

  • MATTR Products [ link ]

[ Link ]

[ Link ]

71 of 138

71

Wrap up

DIGITAL PERSONAL CREDENTIAL SCENARIOS

72 of 138

Morning Session Close Out

72

73 of 138

73

Break + Snack/Meal with the Teams

(Q/A and virtual social time // 12:05 ~ 12:35 PM ET)

74 of 138

Agenda

74

10:00 AM ET

Welcome, Background & Goals

10:15 AM ET

Interoperability Showcase Scenarios

Digital Personal Credentials (Immigration, Task/License, Vaccination Certificates)

Digital Trade Credentials (Steel, Oil, Natural Gas, Food, E-Commerce)

10:45 AM ET

Digital Personal Credentials Interoperability Showcase/Demo

Danube Tech 10:45 AM – 11:05 AM

Digital Bazaar 11:05 AM – 11:25 AM

SecureKey 11:25 AM – 11:45 AM

MATTR 11:45 AM – 12:05 PM

12:05 PM ET

Break, Q&A Session over Snack/Meal (30 Minutes)

12:35 PM ET

Welcome Back

12:50 PM ET

Digital Trade Credentials Scenario Reminder

1:05 PM ET

Digital Trade Credentials Interoperability Showcase/Demo

Transmute 1:05 PM – 1:25 PM

Mavennet 1:25 PM – 1:45 PM

mesur.io 1:45 PM – 2:05 PM

Spherity 2:05 PM – 2:25 PM

2:25 PM ET

Closing Comments

2:40 PM ET

Q&A Session (for as long as it lasts)

75 of 138

DHS/SVIP VC/DID Ecosystem Portfolio Companies

Digital Personal Credentials

Digital Trade Credentials

75

Danube Tech

Vienna, Austria�https://go.usa.gov/xsqdx

Digital Bazaar�Virginia, USA�https://go.usa.gov/xsqdC

MATTR�Auckland, New Zealand�https://go.usa.gov/xsqdr

Mavennet�Toronto, Canada�https://go.usa.gov/xsqpehttps://go.usa.gov/xsqpz

mesur.io�North Carolina, USA�https://go.usa.gov/xsqpJ

Spherity

Dortmund, Germany�https://go.usa.gov/xsqpS

Transmute

Texas, USA�https://go.usa.gov/xsqph

76 of 138

76

Digital Trade Credentials Interoperability Scenarios

77 of 138

The focus of the supply chain traceability is on applying Virtual Credentials in the context of supply chains across different industries

77

Asset Centric Credentials

Cohort Members

Louis

Wallet

Identity VCs

Steel

Agricultural

Oil

E-Commerce

Gas

78 of 138

The complexity of supply chains makes it hard to traceback documentation of a specific asset, as the information does not typically travel with the asset itself.

78

Firms exchange the most information in trade is still close-to-paper format resulting in:

  • Reconciliation gaps
  • Easy to counterfeit
  • Expensive and lengthy audits
  • Typos
  • Delays

Regulatory Agencies

Border Control

Customs

Brokers

OEMs

Manufacturers

Traders

Carriers

?

Raw Materials Producers

79 of 138

We are aiming at building a future where trade is fully digital, which opens a wide range of business and technical opportunities

79

Frictionless & Secure

Border Clearance

Automatic Regulatory Reporting

Programmable Trade Finance

Environmental Accounting

Etc.

Business Cases

80 of 138

An open traceability vocabulary is being used for asserting verifiable credentials related to asset traceability information

80

  • Built based on existing Schema.org and GS1 vocabulary elements
  • Standardizes the creation of Verifiable Credentials from standardized JSON-LD, which is generated from JSON Schemas
  • Currently supports primary contributions from five main market segments: Agriculture, E-Commerce, Oil, Gas, and Steel and Metals
  • GS1 compatible extensible representations of Organization, Bill of Lading, and Inspection Reports
  • Hosted under the W3C umbrella and open to contributions

Contributions and feedback are welcome!!

81 of 138

Digital Trade Credentials Interoperability Scenario

81

3

3PL/Carrier/Transporter

4

CBP/PGA

1a

Steel Mill

Steel

e-commerce

1b

Seller

1c

Farmer

1d

Refiner

2a

Broker

2b

Fulfillment Center

2c

Inspector

2d

Broker

Agriculture

Oil & Gas

Credential presentation

Multi-credential presentation

82 of 138

^ supply-chain / transmute

82

Transmute

DIGITAL TRADE CREDENTIALS SCENARIOS

83 of 138

Steel Import Scenario

83

Verifiable credentials enable certainty about:

  • Where do steel materials originate?
  • What company manufactured them?
  • Who else was involved in the shipment process?
  • Have all parties presented required documentation?
  • Are the arriving materials consistent with the original shipment description?

84 of 138

Steel Landscape

China

Largest global exporter

Largest global producer @ ~928 million tons/year

U.S.

Largest global importer

4th largest producer at ~87 million tons/year

World Crude Demand

> 1.8 billion tons in 2019

Emerging Markets Demand

> 1.3 million tons in 2020

85 of 138

Steel Scenario Challenges

85

Steel originates in China

Arrives to US Port of Entry

Received by customer

Shipped to Vietnam

86 of 138

Steel Scenario Challenges

86

Arrives to US Port of Entry

Received by customer

Shipped to Produced in Vietnam

87 of 138

Steel Scenario Challenges

87

Arrives to US Port of Entry

Received by customer

Shipped to Produced in Vietnam

“It’s like whack-a-mole. Trade cases take years, so they can cheat for years and then just go to a different mill.”

-Large Steel Company

88 of 138

Steel Scenario Challenges

88

Arrives to US Port of Entry

Received by customer

Shipped to Produced in Vietnam

“It’s like whack-a-mole. Trade cases take years, so they can cheat for years and then just go to a different mill.”

-Large Steel Company

“If someone can buy it for less, they will gravitate towards that.”

89 of 138

Steel Import Track & Trace

89

Transmute gives companies and governments need-to-know access to verifiable trade data.

✓ Machine readable

✓ Digitally verifiable

✓ Tamper-evident

✓ Accessible across systems

✓ Access protected

✓ Cross-linked

89

CURRENT PAPER PROCESS EXAMPLE

DIGITAL TWIN ECOSYSTEM with TRANSMUTE

90 of 138

Steel Inc

Ocean Carrier

Customs Broker

US CBP

Steel Customer

91 of 138

Simple Steel Import Scenario

91

Stacy from Steel Inc issues origin and shipment documentation for its steel product. This includes a Mill Test Report and a Commercial Invoice

Stacy presents these verifiable trade documents to the Customs Broker responsible for gathering entry documentation for US CBP.

Customs Broker receives and verifies all presented documentation and prepares entry materials.

All three verifiable trade documents are presented to US CBP.

The steel product is shipped to the US on an Ocean Carrier.

That Carrier also issues a verifiable Bill of Lading and presents it both to Steel Inc and to the Customs Broker

US-based Steel Customer has purchased rebar from Steel Inc.

The materials will be shipped from Brazil to the United States

US CBP receives and verifies the presentation.

92 of 138

Interoperable Steel Credentials

92

Demonstration of interop across supply chain vendors

93 of 138

Transmute Test Results

93

  • Passing all implemented VC HTTP API tests – Details Here

  • Issue/Verify Credential Types covered by both Virtual and Supply Chain scenarios

  • Multiple DID Methods

  • Support for verifiable presentations and selective disclosure (BBS+)

94 of 138

Connecting Supply Chain to Virtual People Credentials

94

Judith vaccinates patient Olga and issues a verifiable Covid 19 Vaccination Certificate.

Olga claims the credential and save it in her wallet.

Olga selectively presents evidence of her vaccination certification to Stacy at Steel Inc.

She only needs to show Stacy her name, her vaccination status, and the issuer.

All other personal data can be omitted.

A steel facility auditor is able to selectively present her vaccination certificate in order to perform an on-site audit.

Stacy verified Olga’s vaccine certificate presentation and she clears Olga to enter the facility

Nurse Judith

Facility Auditor Olga

Steel Manager Stacy

95 of 138

Connecting Supply Chain to Virtual People Credentials

95

A steel facility auditor is able to selectively present her vaccination certificate in order to perform an on-site audit

96 of 138

Steel Scenario: Ecosystem Value

96

Global Trade Industry Benefits

Improve compliance and business operations simultaneously:

  • Real-time data creation and retrieval
    • Reduce administrative costs up to 90%
    • Recognize up to 20% more revenue
  • Streamlined ecosystem management
  • Maximum supply chain visibility and resilience

Government Benefits

Increase trade facilitation and enforcement activities at the same time:

  • Real-time data retrieval
    • 100% reduction in mill cert discovery time
    • Nearly $150K in annual savings
  • Rapid importer facilitation
  • Targeted enforcement

Authoritative, actionable trade data powers:

97 of 138

Transmuting Trade for Good

97

Verifiable trade data is the gateway to provably healthier supply chains in steel and beyond.

Enterprise Platform, API & Microservices

98 of 138

Additional Resources and Links

98

Get in Touch:

Email: info@transmute.industries

Typeform: https://transmute.typeform.com/to/RshfIw

Twitter: @TransmuteNews

Medium: https://medium.com/transmute-techtalk

Website: https://www.transmute.industries

Built in Austin, TX

Trusted data exchange for the future of global trade.

Founders:

Karyl Fowler, CEO: karyl@transmute.industries

Orie Steele, CTO: orie@transmute.industries

99 of 138

^ supply-chain / mavennet

99

Mavennet

DIGITAL TRADE CREDENTIALS SCENARIOS

100 of 138

Physical commodities do not have an end-to-end digital view, just disparate transaction records locked in silos

1

2

3

4

5

6

7

8

The Journey of a Barrel of Oil across the Canada-US Border

1

2

3

4

5

6

7

8

Produce: crude oil is produced, record of raw material is created.

Pain point: Complex, manual royalty payment calculations lead to inconsistencies, causing risk of manipulation

Upgrade: Upgrade record, waybill document, origin document and schedule inspection are created

Inspect: quality inspection. Inspection record is created.

Trade & Transport: create Financing documents (LOC, LOI) and Proof of Product document set

Pain point: Risk of information discontinuity

Border Control: inspection and tariffs

Pain point: Risk of delays due to manual processing, labor-intensive risk assessment to prevent fraud and forgery

Store

Refine: Create record of final product, arrange Transportation/Retail, create transportation document

Pain point: Risk of information discontinuity

Deliver: Create record of final product, arrange Transportation/Retail, create transportation document

Pain point: Risk of information discontinuity

101 of 138

Vision: “Nexus for Oil & Gas”

101

  • Conceptually Neoflow’s vision is to allow digital cross-border clearance, reducing friction AND also increasing security.
  • Avoid rip and Replace.
  • Different than a person, oil can be pooled, commingled, split, etc.
  • Gas is a displacement commodity so what needs to be tracked is the chain of custody and ownership, rather than the specific molecule.

102 of 138

Digitization between companies and governments can have a large impact in operations for the industry…

102

  • Verifiable End-to-End CO2 / CH4 Emissions Footprint
  • Royalties and dispute resolution
  • Regulatory reporting
  • Contract and payment Automation
  • Value chain optimization
  • Proof of origin

…and open the door to many other use cases

Expected Business Value

25¢ per Barrel

(5-11¢ from Border Clearance)

103 of 138

Oil Supply chain Business Scenario

Case 1: Purchase by refiner at the feeder pipeline

103

Producer extracts bitumen at their field north of Hardisty

NF API or UI:

  • Basic physical/chemical specs

Producer upgrades bitumen with Canadian diluent producing a heavy stream (LLB)

Data received via API:

  • Basic physical/chemical specs
  • Diluent mix

1

2

3

4

5

Product VC is issued, verified

Product VC is issued, verified

Enbridge (Pipeline) receives LLB transfer of custody from Marathon, create a transport event, starting delivery

NF API or UI – Acceptance of custody, transportation

Delivery Ticket (BOL) VC is issued

AN Deringer (Broker) Reviews VC

Record QP No

6

Producer Triggers Transfers

Custody to Enbridge (Pipeline)

VC is Created

VP is verified

CBP Reviews Verifiable Presentation

104 of 138

104

105 of 138

Interoperability Test results

105

VC HTTP API

106 of 138

A secure protocol for Energy data exchange

106

Digitalizing Energy End-to-End, from well to pump

107 of 138

Trusted. Digital. Energy

We’re bringing commodities to life.

Contact: Patrick Mandic, CEO - patrick@mavennet.com

W3C Vocab: https://w3c-ccg.github.io/traceability-vocab/

108 of 138

^ supply-chain / mesur

108

DIGITAL TRADE CREDENTIALS SCENARIOS

mesur.io

109 of 138

mesur.io – Food & Agricultural Imports

109

  • 1.3B tons of food wasted each year
  • A significant contributor to this is spoilage during transport
  • Data arrives late, and inspectors enter the same data over and over
  • 30% of certain food shipments are held for additional inspections

110 of 138

mesur.io – Food & Agricultural Imports

110

  • Can we reduce data entry and prevent duplicates?
  • Can we ensure all parties who need to know, do? and can we let them know as soon as an event occurs?
  • Can we enable a “fast track” for products with a high likelihood of spoilage?
  • Can we ensure that the regulatory requirements of multiple agencies can be supported broadly?

111 of 138

mesur.io – How we solve this problem

111

Phase 1 Focused on Blueberries and Avocados

112 of 138

mesur.io – User Experience – Field / Farmer

112

  • Provide the Farmer a compelling reason to Provide Data
  • Support Offline / Loosely Connected Workflows
  • Multiple Language Support
  • Voice and QR Code inputs
  • Keep it Simple

113 of 138

mesur.io – User Experience – Field / Farmer / Processor

113

  • Register intent to sell as soon as the Farmer knows the product is destined for the US - this could be at
    • Planting
    • Field Inspection
    • Harvest
    • On-farm Packaging

  • Ensures data is immediately available to anyone who has a need to know
    • Purchaser
    • Inspectors
    • CBP / PGAs

114 of 138

mesur.io – User Experience – Field / Inspector

114

  • Quickly Scan and Retrieve all data known

  • Switch to a mode of Data Verification, rather than Data Creation
    • no more duplicate data entry

  • Flexible support of multiple Inspection types by product and region

  • Data provided as it arrives to all parties

  • Know if you need to bring your muck boots

115 of 138

mesur.io – User Experience – Office / Analytics

115

Highlight and detect problems, before they occur

Export and Selectively Share Data (think FDA CTEs and KDEs)

116 of 138

mesur.io – Enterprise integration

116

  • VC-HTTP-API for All Credential Operations

  • All Payloads/Data interchange Standardized in W3C Traceability Vocab

  • Published, open source, OpenAPI specs for all Trade / End-user facing APIs

  • End User Insulated from complexity, while still being able to peek under the hood

  • Direct connections to standard Enterprise tools such as SAP, Qlik, PowerBI, Snowflake

117 of 138

mesur.io – Enterprise integration

117

  • VC-HTTP-API for All Credential Operations

  • All Payloads/Data interchange Standardized in W3C Traceability Vocab

  • Published, open source, OpenAPI specs for all Trade / End-user facing APIs

  • End User Insulated from complexity, while still being able to peek under the hood

  • Direct connections to standard Enterprise tools such as SAP, Qlik, PowerBI, Snowflake

118 of 138

mesur.io – Additional Value Adds

118

  • All Supply Chain data is linked with all of the core mesur.io AutoML providing risk and environmental modeling while supporting enterprise sustainability and product loss goals

  • mesur.io has proprietary models for providing core historical and forecast values at the microclimate level, such as:

    • Climate and Weather
    • Soil conditions
    • Plant conditions and health
    • Biological activity
    • Pathogens, Insects, Weeds
    • Spoilage and Contamination

119 of 138

mesur.io – Interop Data Flow

119

VC

VP

VP

Example Credential Flow

Issues and Verifies Package, Product, Inspections

Farmer Packages Avocados, they are Inspected, and they are Shipped to the US

In the Field

Carrier

Bundles VCs, signs, Creates BOL

CBP

PURCHASER

Receives BOL, cross checks that all requirements are met

Receives a portion of an Inspection VC showing that fumigation is required

120 of 138

mesur.io – Interop Data Flow

120

VC

VP

VP

Example Credential Flow

Issues and Verifies Package, Product, Inspections

Farmer Packages Avocados, they are Inspected, and they are Shipped to the US

In the Field

Carrier

Bundles VCs, signs, Creates BOL

CBP

PURCHASER

Receives BOL, cross checks that all requirements are met

Receives a portion of an Inspection VC showing that fumigation is required

121 of 138

mesur.io – Community Test Results

121

122 of 138

mesur.io – links and resources

122

Technical

Michael Prorock

CTO, Founder

mprorock@mesur.io

+1.919.633.8773

Business

Tom Rump

CEO

tom@mesur.io +1.650.207.5790

123 of 138

^ supply-chain / spherity

123

Spherity

DIGITAL TRADE CREDENTIALS SCENARIOS

124 of 138

Introduction

124

Large effort to correlate and make sense of all these data shapes (data formats).

What is the problem?

Non-standardized and fragmented supply chain data creates a world of headaches.

Order data

Product data

Transport data

Marketplace

Manufacturer

Carrier

125 of 138

Introduction

125

Linked data

How do you we fix this?

Our software transforms clunky data into a language everyone can understand.

Order data

Product data

Transport data

This is much more secure, transparent and easier to search through and analyse using ML algorithms.

Cohort data mapping

CBP API gateway

Signed by immutable identifier linked to Legal Entity Identifier (LEI)

Linked data

Compliance-by design, improved efficiency and trust

Marketplace

Manufacturer

Carrier

126 of 138

Video demonstration

126

Individual in the USA purchases eCommerce product from overseas on a marketplace

Product list is put together and bundled by fulfilment centre

Handoff to third party logistics provider. Products are labelled with package identifier

Delivery vessel assigned for transport to the USA

Customs broker reviews the packages and the items are imported into the USA

Part 1: E-Commerce Package Journey

127 of 138

Package Journey

127

Product submission

Invoice submission

Order submission

Market-�place

US CBP

Binding data submission

Verified legal entity identifier credential

Linked data submissions

Packing List submission

Product Receipt submission

Package submission

Way Bill submission

Fulfillment centre

3PL Carrier / Broker

US Consumer

Intent to Sell

Purchase

Order Confirmation

Packing products

Packaging

Shipping

Entry to US

Real world event

Invoicing

128 of 138

Package Journey (Simplified for demonstration)

128

Product

Invoice

Order

Marketplace

US CBP

Binding data

Verified legal entity identifier credential

Linked data submissions

Packing List

Product Receipt

Package

Way Bill

Fulfillment centre

3PL Carrier / Broker

129 of 138

Demonstration

129

What are we going to show?

  1. A working flow of interoperable, signed data being sent as Verifiable Credentials between multiple supply chain participants;
  2. How supply chain data links together;
  3. How CBP can receive this data in real time.

  • Efficiency because each participant in the supply chain will be communicating in the same technical language
  • Integrity through cryptographic verification of each participant and the event data in the supply chain
  • Higher data quality, with the ability for CBP to effectively run data analytics on event submissions in real time
  • Improved security through linked data, which will allow CBP to check that all data in the chain is consistent, and inconsistencies will be automatically flagged

Key value adds:

130 of 138

Interoperability demonstration

130

131 of 138

Part 2: E-Commerce Targeting Demonstration

131

  • A mock up of a CBP dashboard;
  • How inconsistencies in data can be visualised;
  • How CBP can flag issues to relevant PGAs quickly and early in the supply chain.

  • Transparent, strategic overview over entire supply chain flow
  • Catch inconsistencies in real time by highlighted data which does not correlate
  • Investigate specific issues and flag them to relevant PGAs
  • Confirm that parties in transaction are verified by Verifiable and Trusted Legal Entity Identifiers for each party
  • Explore detailed, verified breakdown of product and product registration as detailed in received product credentials and evidence documents.

Key value adds:

What are we going to show next?

132 of 138

Demonstration

132

133 of 138

Vendor test results

133

VC HTTP API Profile under test

  • Core Proof formats (Ed25519, P-384, JWT+LDP)
  • Revocable Credentials (RL-2020)
  • OAuth2 for API-to-API Authentication
  • DID:Web and DID:Key

  • BBS+ Presentation mode & signatures
  • DID:Web and DID:Key for this demo
  • Revocable Credentials (RL-2020)
  • CHAPI for credential exchange
  • Full support for DID:sov & CL-ZKP
  • DID:Photon & EDV implementation

Roadmap 2021

Spherity has successfully passed the required VC-HTTP-API tests

  • Passing 80 VC HTTP API tests

  • Issue/Verify all Credential Types covered relevant for Supply Chain scenarios

134 of 138

Additional resources and links

134

Project Manager

Alex Tweeddale

alex.tweeddale@spherity.com

Links:

Technical

Andreas Freund

andreas.freund@spherity.com

Juan Caballero

juan.caballero@spherity.com

135 of 138

135

Wrap up

136 of 138

Contact information + how to get involved

136

Danube Tech

Vienna, Austria�https://go.usa.gov/xsqdx

Digital Bazaar�Virginia, USA�https://go.usa.gov/xsqdC

MATTR�Auckland, New Zealand�https://go.usa.gov/xsqdr

Mavennet�Toronto, Canada�https://go.usa.gov/xsqpehttps://go.usa.gov/xsqpz

Mesur.io�North Carolina, USA�https://go.usa.gov/xsqpJ

Spherity

Dortmund, Germany�https://go.usa.gov/xsqpS

Transmute

Texas, USA�https://go.usa.gov/xsqph

137 of 138

137

Q & A

138 of 138

138

Silicon Valley Innovation Program