Re: [toolsCCI] Hypothetical COVID-19 Credential VC Data Model v2

Indeed. A doctor's credentials are only verified when they change jobs, and
then it takes months and can cost thousands of dollars. Typically, the root
of trust is the IT system the doctor is using or Trust on First Use by
making a phone call if a pharmacist wants to check.

- Adrian

On Mon, Apr 20, 2020 at 3:52 PM Orie Steele <orie@transmute.industries>
wrote:

> very well said... I also wanted to share some relevant guidance from the
> airline industry:
>
>
> https://www.airnewzealand.com/special-assistance-flying-with-medical-conditions
>
> If you google for "Medical Authorization to Travel", you will find that
> doctors notes are pretty common, and they don't require a blockchain or
> digital signatures....
>
> We should be careful to support systems that citizens, corporations and
> governments are using today, and establish parity, before pushing the
> boundaries of space time with blockchains and verifiable credentials :)
>
> OS
>
>
>
> On Mon, Apr 20, 2020 at 2:11 PM David Chadwick <
> info@verifiablecredentials.info> wrote:
>
>> Let us unpick decentralised systems and multiple issuers a bit more.
>> There is another dimension we have to consider, and that is one of trust.
>>
>> In VC systems there are always multiple issuers, and those issuers can
>> share a single decentralised system (a DLT). But for any particular VC
>> there is only one issuer and the trust rules of the verifier will determine
>> who it trusts to issue any particular type of VC. If each VC issuer issues
>> its own type of VC, then there will never be multiple issuers of that type
>> of VC on the DLT. That VC will be issued from one source (a centralised
>> issuer, if you like) even though the entire VC system is decentralised, and
>> there are multiple VC Issuers in the eco-system.
>>
>> Even if we have multiple VC issuers of a single type of VC (as we are
>> likely to have in the COVID case), this can still be coordinated outside of
>> the DLT in the trust framework, so that effectively the issuing of this
>> type of VC is coordinated in a centralised way in the trust framework,
>> which is orthogonal to the DLT which stores the meta information. This
>> stops anyone such as myself from deciding I will issue valid COVID VCs. I
>> might issue them, but no verifier would trust them.
>>
>> Ultimately the verifier's trust rules will determine whether there are
>> multiple issuers of the same type of VC or not, and how those issuers are
>> identified. We have many examples today of multiple issuers issuing the
>> same type of credential. Credit cards are the obvious one. Introducing a
>> DLT into the credit card network, eg. so that every actor could have a copy
>> of the entire database, would not alter the trust rules for which card
>> issuers were trusted to issue credit cards.
>>
>>  The trust framework will determine which VC issuers are to be trusted,
>> and how verifiers can determine this. This may be regarded as a centralised
>> control system, or registry, as Orie suggests
>> _._,_._,_
>> ------------------------------
>> Groups.io Links:
>>
>> You receive all messages sent to this group.
>>
>> View/Reply Online (#144) <https://toolsCCI.groups.io/g/main/message/144>
>> | Reply To Group
>> <main@toolsCCI.groups.io?subject=Re:%20Re%3A%20%5BtoolsCCI%5D%20Hypothetical%20COVID-19%20Credential%20VC%20Data%20Model%20v2>
>> | Reply To Sender
>> <info@verifiablecredentials.info?subject=Private:%20Re:%20Re%3A%20%5BtoolsCCI%5D%20Hypothetical%20COVID-19%20Credential%20VC%20Data%20Model%20v2>
>> | Mute This Topic <https://groups.io/mt/73114730/1388286> | New Topic
>> <https://toolsCCI.groups.io/g/main/post>
>>
>> Your Subscription <https://toolsCCI.groups.io/g/main/editsub/1388286> | Contact
>> Group Owner <main+owner@toolsCCI.groups.io> | Unsubscribe
>> <https://toolsCCI.groups.io/g/main/leave/8108734/298559501/xyzzy>
>> [orie@transmute.industries]
>> _._,_._,_
>>
>>
>
> --
> *ORIE STEELE*
> Chief Technical Officer
> www.transmute.industries
>
> <https://www.transmute.industries>
>