Nowadays, most of our data is owned by private companies, and everyone knows everything about us because privacy online is not well preserved. Imagining a world different from this is difficult, but things can change thanks to Self-Sovereign Identity (SSI). SSI approach aims to bring credentials back to the actual owners, the people. This is possible through cryptography and secure authentication layers (e.g., OAuth, OpenIDConnect). The developed product embraces this philosophy and offers a solution where the users are the holders, issuers, or verifiers of Verifiable Credentials (VCs). Specifically, will be developed software agents who create, issue, verify, modify or even revoke the credentials, leveraging an SSI Kit. In this thesis, we propose a methodology to merge SSI off-chain (i.e., outside the blockchain) operations with on-chain smart contracts. In particular, the job has been divided into three macro stages: firstly, has been done a deep dive into the SSI technology, studying all of its primitives and analyzing the problem; secondly, has been developed a Software Development Kit (SDK), which enabled us to dialog with an SSI Kit (off-chain logic); in the meantime, my friend and co-worker Matteo Midena developed the smart contracts (on-chain logic); finally, off-chain and on-chain solutions has been merged into a proof of concept web application. One of the final features is that the verifier (who inspects the validity of the credentials) can reflect on-chain the off-chain verification results, saving time for the following examinations. Improvements and additional features are needed to complete the software, but this constitutes a good baseline for future works.
Nowadays, most of our data is owned by private companies, and everyone knows everything about us because privacy online is not well preserved. Imagining a world different from this is difficult, but things can change thanks to Self-Sovereign Identity (SSI). SSI approach aims to bring credentials back to the actual owners, the people. This is possible through cryptography and secure authentication layers (e.g., OAuth, OpenIDConnect). The developed product embraces this philosophy and offers a solution where the users are the holders, issuers, or verifiers of Verifiable Credentials (VCs). Specifically, will be developed software agents who create, issue, verify, modify or even revoke the credentials, leveraging an SSI Kit. In this thesis, we propose a methodology to merge SSI off-chain (i.e., outside the blockchain) operations with on-chain smart contracts. In particular, the job has been divided into three macro stages: firstly, has been done a deep dive into the SSI technology, studying all of its primitives and analyzing the problem; secondly, has been developed a Software Development Kit (SDK), which enabled us to dialog with an SSI Kit (off-chain logic); in the meantime, my friend and co-worker Matteo Midena developed the smart contracts (on-chain logic); finally, off-chain and on-chain solutions has been merged into a proof of concept web application. One of the final features is that the verifier (who inspects the validity of the credentials) can reflect on-chain the off-chain verification results, saving time for the following examinations. Improvements and additional features are needed to complete the software, but this constitutes a good baseline for future works.
Owning your data through Self-Sovereign Identity: agents implementation for Verifiable Credentials interaction
CASONATO, MATTEO
2021/2022
Abstract
Nowadays, most of our data is owned by private companies, and everyone knows everything about us because privacy online is not well preserved. Imagining a world different from this is difficult, but things can change thanks to Self-Sovereign Identity (SSI). SSI approach aims to bring credentials back to the actual owners, the people. This is possible through cryptography and secure authentication layers (e.g., OAuth, OpenIDConnect). The developed product embraces this philosophy and offers a solution where the users are the holders, issuers, or verifiers of Verifiable Credentials (VCs). Specifically, will be developed software agents who create, issue, verify, modify or even revoke the credentials, leveraging an SSI Kit. In this thesis, we propose a methodology to merge SSI off-chain (i.e., outside the blockchain) operations with on-chain smart contracts. In particular, the job has been divided into three macro stages: firstly, has been done a deep dive into the SSI technology, studying all of its primitives and analyzing the problem; secondly, has been developed a Software Development Kit (SDK), which enabled us to dialog with an SSI Kit (off-chain logic); in the meantime, my friend and co-worker Matteo Midena developed the smart contracts (on-chain logic); finally, off-chain and on-chain solutions has been merged into a proof of concept web application. One of the final features is that the verifier (who inspects the validity of the credentials) can reflect on-chain the off-chain verification results, saving time for the following examinations. Improvements and additional features are needed to complete the software, but this constitutes a good baseline for future works.File | Dimensione | Formato | |
---|---|---|---|
tesi-casonato-matteo.pdf
accesso aperto
Dimensione
2.68 MB
Formato
Adobe PDF
|
2.68 MB | Adobe PDF | Visualizza/Apri |
The text of this website © Università degli studi di Padova. Full Text are published under a non-exclusive license. Metadata are under a CC0 License
https://hdl.handle.net/20.500.12608/34924