RE: RE: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG from Daniel Buchner on 2020-07-16 (public-credentials@w3.org from July 2020)

From: Daniel Buchner <Daniel.Buchner@microsoft.com>
Date: Thu, 16 Jul 2020 15:26:22 +0000
To: "Herraiz, Victor (SanTech)" <victor.herraiz@santander.co.uk>, "Pulido Moyano, Alberto" <alberto.pulido@santander.co.uk>, Kristina Yasuda <Kristina.Yasuda@microsoft.com>, Wayne Chang <wyc@fastmail.fm>, W3C Credentials CG <public-credentials@w3.org>, Brent Zundel <brent.zundel@evernym.com>, Dave Longley <dlongley@digitalbazaar.com>, Tobias Looker <tobias.looker@mattr.global>, "Boothby, Roderick" <roderick.boothby@gruposantander.com>, Anthony Nadalin <tonynad@microsoft.com>, Mark Haine <mark@considrd.consulting>
Message-ID: <CO2PR00MB0152AD24A955193E84F34EEE817F0@CO2PR00MB0152.namprd00.prod.outlook.com>
>> Inline:

From: Herraiz, Victor (SanTech) <victor.herraiz@santander.co.uk>
Sent: Thursday, July 16, 2020 8:03 AM
To: Daniel Buchner <Daniel.Buchner@microsoft.com>; Pulido Moyano, Alberto <alberto.pulido@santander.co.uk>; Kristina Yasuda <Kristina.Yasuda@microsoft.com>; Wayne Chang <wyc@fastmail.fm>; W3C Credentials CG <public-credentials@w3.org>; Brent Zundel <brent.zundel@evernym.com>; Dave Longley <dlongley@digitalbazaar.com>; Tobias Looker <tobias.looker@mattr.global>; Boothby, Roderick <roderick.boothby@gruposantander.com>; Anthony Nadalin <tonynad@microsoft.com>; Mark Haine <mark@considrd.consulting>
Subject: Re: RE: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

Hi, Daniel.

Sorry, I will try to be more verbose this time.


  *   Extensible: phone_number not only require a format and constrain but all the rules that have to follow to fulfil equality. In the implementation, before any comparation we execute a normalization. This normalization is associated to the type of the data evaluated in this specific predicate. Decimal  (text representation of an arbitrary precision number) is another example, before executing a “gt” the type requires a transformation that support this kind of comparation, it is not compare as a String but as a number. As you could see the scope of the language differ a little. The assertion (I really do not like this name…) language is the body of a predicate, and the types expose not only format and constrains but operations as well.

>>> But where are these specific types, and their value processing rules, defined? Is the spec defining these types, or is it a framework that implies a userland definition of the types will happen ad hoc between participants?


  *   Safe: At the point of we made our minds,  we want the relaying parties (the ones that code the assertion) to  have a flexible language, but we were afraid of what kind of contraptions they could build, some people could have an incredible mind. We could further discuss this point, we appreciate as much feedback as possible as you do.

>>> If the types are codified (along with their processing, regexes, and other evaluatory bits), then I don’t understand why you would need to fear someone creating a document with some string/number value of a given type. If this is not codifying the actual types, and that is something defined ad hoc in the code of every userland exchange, that could be an issue.


  *   Natural language: When the user has to “consent” a request from the RP, the UI has to present an “easy to understand” sentence about what the relaying party is asking. The possible outcomes of the consent in case of an assertion claim are: True, False or Missing/User rejects disclosure. (Error too…). Therefore the expression is “translated” to natural language. Example: assertion for the claim “age” { “gte”: 16 }, is translated to  “User is at least 16 old”.

>>> So what you’re saying here is that you want to ensure that any type/value system used can have known properties and that you can give verbose word equivalences to for composition of UI representation? That makes sense, but I am trying to understand why that’s uniquely produced by this particular construction, vs others that may exist.

As you could see, I did not understand well the question about the type system, could you help me with that?  This “assertion claims” are not related to proof, even ZKP.


From: Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>
Date: Thursday, 16 July 2020 at 15:29
To: "Herraiz, Victor (SanTech)" <victor.herraiz@santander.co.uk<mailto:victor.herraiz@santander.co.uk>>, "Pulido Moyano, Alberto" <alberto.pulido@santander.co.uk<mailto:alberto.pulido@santander.co.uk>>, Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>, Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>, W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>, Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>, Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>, Tobias Looker <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>, "Boothby, Roderick" <roderick.boothby@gruposantander.com<mailto:roderick.boothby@gruposantander.com>>, Anthony Nadalin <tonynad@microsoft.com<mailto:tonynad@microsoft.com>>, Mark Haine <mark@considrd.consulting<mailto:mark@considrd.consulting>>
Subject: #External Sender# RE: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

I am not sure I fully understand the issues in the bullet points you listed below for “Extensible”, “Safe”, and “Easy to translate to natural language”. Can you help clarify why something like a phone number would not work as an addition to the set of built-in formats (https://json-schema.org/understanding-json-schema/reference/string.html#built-in-formats<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fjson-schema.org%2Funderstanding-json-schema%2Freference%2Fstring.html%23built-in-formats&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255033369&sdata=MmupZ7%2B2h0sqtmp051GufoQXLq0o2AZOcBlnJ2KnaCU%3D&reserved=0>) for something like JSON Schema? I understand that regex eval can be a vector for certain processing/perf issues when evaluating regexes from untrusted userland parties, but given a set of types for common ZKP circuits would need to be standardized, and their type/value parsing logic strictly codified, why would such an issue exist for the standard type system and those using libraries coded to evaluate that type system? I am not really clear on the last bullet, but an example that shows how one would ‘not know what is going on’ vs ‘know what is going on’, might help.

- Daniel

From: Herraiz, Victor (SanTech) <victor.herraiz@santander.co.uk<mailto:victor.herraiz@santander.co.uk>>
Sent: Thursday, July 16, 2020 4:22 AM
To: Pulido Moyano, Alberto <alberto.pulido@santander.co.uk<mailto:alberto.pulido@santander.co.uk>>; Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>; Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>; Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>; W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>; Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>; Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>; Tobias Looker <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>; Boothby, Roderick <roderick.boothby@gruposantander.com<mailto:roderick.boothby@gruposantander.com>>; Anthony Nadalin <tonynad@microsoft.com<mailto:tonynad@microsoft.com>>; Mark Haine <mark@considrd.consulting<mailto:mark@considrd.consulting>>
Subject: Re: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

Hello everyone,

We considered many alternatives for the design of the assertion language, but first of all the name. Predicate is indeed a better name, false or true are both valid outcomes. On the other hand Assertions could be interrelated as the only valid option is true and false is a failure.

About the expression language, we consider different approaches:


  *   MongoDB “where” language
  *   JSON Schema types and constrains.
  *   A Expression language like Spring EL

At the end we choose something like the mongodb query syntax but without the problem of mixing operands and literals that gave them so many problems.

Some of the requirements were:

  *   Extensible: Adding types like phone_number that require a normalization before execution without including this massive dependencies.
  *   Safe: For example, regular expression are forbidden to avoid ReDoS.
  *   Easy to translate to natural language: The owner of the data must know what is going on… 😃

JSON Schema was discarded for those reasons and because the scope of the language is validation not a simple predicate. The current implementations are bind to that rule.




From: "Pulido Moyano, Alberto" <alberto.pulido@santander.co.uk<mailto:alberto.pulido@santander.co.uk>>
Date: Thursday, 16 July 2020 at 11:45
To: Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>, Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>, Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>, W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>, Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>, Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>, Tobias Looker <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>, "Herraiz, Victor (SanTech)" <victor.herraiz@santander.co.uk<mailto:victor.herraiz@santander.co.uk>>, "Boothby, Roderick" <roderick.boothby@gruposantander.com<mailto:roderick.boothby@gruposantander.com>>, Anthony Nadalin <tonynad@microsoft.com<mailto:tonynad@microsoft.com>>, Mark Haine <mark@considrd.consulting<mailto:mark@considrd.consulting>>
Subject: Re: #External Sender# Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

Hi Kristina and all,

Thanks for looping me in, also adding Victor and Rod to the thread.

I include as well Anthony and Mark, since they are helping moving forward this issue under eyk-ida WG.

We did this specification with the intention to create an extension to OpenId, where a new type of claims (assertions/predicates)  is in place, so that user privacy is enhanced.

It is part of a wider set of specs we´ve been working as a research project and based on actual use cases we have identified that could work for us. However, we are trying to contribute and reach to a wider community to see if some of those ideas help providing standards for solving similar problems that W3C VC solves. Actually, we always though somehow we could provide the transport layer for Verifiable Credentials in a form of proof or evidence in case the RP demands it, always associated with the request for a particular verified claim/set of claims. Our aim is as well to influence the great work done by the ekyc-ida WG, were we are actively contributing.

The overall Santander project public documentation can be found here: https://gruposantander.github.io/digital-trust-docs/<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2F&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255033369&sdata=qi%2FSGNirt5FRqaoXGuak9kHqP63L066IcngkMlld5S0%3D&reserved=0>

Regarding assertions (maybe derivative predicates it´s even a better name for what we did!), we defined the specs to be extensible so that each OP defines their own claim types and supported operands, and leaving the implementation of the spec with their own rules. For instance, when implementing the phone_number operand for “eq”, we did plugin a library from google (google-libphonenumber) to normalize the data before comparing the data.


Happy to jump into a call and provide more info if needed, I do see great opportunity now that we are connected thanks to Kristina and Mark!

Kind regards

[cid:image001.png@01D65B4A.C8CD3ED0]
[cid:image002.png@01D65B4A.C8CD3ED0]
Alberto Pulido
Technical Expert
Innovation Hub
+44 (0)7710 380 464
Milton Keynes, UK



From: Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>
Date: Thursday, 16 July 2020 at 09:56
To: Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>, Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>, W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>, Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>, Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>, Tobias Looker <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>, Alberto Pulido Moyano <alberto.pulido@santander.co.uk<mailto:alberto.pulido@santander.co.uk>>
Subject: #External Sender# Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

+ Alberto who wrote the expression language spec.

If derivative predicates and expression language are trying to achieve the same (looks like they are, correct me if I am wrong), can derivative predicates also be achieved via modifications to JSON Schema?


________________________________
差出人: Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>
送信日時: 2020年7月16日 12:43
宛先: Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>; Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>; W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>; Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>; Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>; Tobias Looker <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>
件名: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and "Expression Language" of OIDF ekyc-ida WG

That's an interesting proposal to extend JSON Schema. If one day it gets promoted to an IETF standard from its draft status, that might get easier to do. I'm curious about the direction of supporting things like references to ISO currency codes (https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.iso.org%2Fiso-4217-currency-codes.html&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=b3t5XY%2FHT0zaSV%2B0oO8VPreNTKC1wu96SrwHkIHH2HY%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.iso.org%2Fiso-4217-currency-codes.html&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255043360&sdata=UsenOeTEv8%2BOgpfiUArENMk9NANZyBBwG6Sh7UohMyo%3D&reserved=0>) in some kind of claims request language, and URI-referenced validation operations on top of that. JSON Schema is focused on validating JSON Document structures only, so this direction might be out of scope for it (and admittedly I'm pretty ignorant around JSON Hyper-Schema for which I haven't been able to find many well-supported libraries, and also not sure about its possible relationship to JSON-LD for that matter).

Furthermore, if the validation operators have special rules around processing typed values (for example, "the given HTTPS URL must be CA root cert-valid and resolve to 200 OK"), then it would probably have to live in a separate use case-specific extension to JSON Schema or other form of operator definition.

I think a similar conversation in Presentation Exchange involves the specification of trust frameworks hosted somewhere else:
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdecentralized-identity%2Fpresentation-exchange%2Fissues%2F24&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=i6KZbndzraspRu9zs05drOfQuBtdg%2Bqu384JihBcgd0%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdecentralized-identity%2Fpresentation-exchange%2Fissues%2F24&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255043360&sdata=J4AlfVATtMko5Q7Sea8BsAJvOUTcUKY5fLZyogHYjeQ%3D&reserved=0>

On Wed, Jul 15, 2020, at 10:22 PM, Daniel Buchner wrote:
> Wow, if that's the case, it's super unfortunate, because they can do
> literally every other type/value evaluation with JSON Schema. Have they
> consider working to add a stringified numeric type to JSON Schema?
> Seems like such a good opportunity to add value to an existing thing
> that does 90% of what they want.
>
> - Daniel
>
> -----Original Message-----
> From: Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>
> Sent: Wednesday, July 15, 2020 7:04 PM
> To: Daniel Buchner <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>; Kristina Yasuda
> <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>; W3C Credentials CG
> <public-credentials@w3.org<mailto:public-credentials@w3.org>>; Brent Zundel <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>;
> Dave Longley <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>; Tobias Looker
> <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>
> Subject: Re: [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and
> "Expression Language" of OIDF ekyc-ida WG
>
> Hey Dan, just some initial thoughts here after a brief review of the spec.
>
> In the following example, it seems that the spec allows for certain
> semantic/industry-specific comparison using the "gt" operator on
> strings, which would be not possible in JSON Schema:
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-example&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=20dNlGdQOW6OPIOuCfC8jOOLgJnEjH4fcZkBdBOVmw4%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-example&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255053357&sdata=YFkahD%2FIwYaiMqfl%2FEgaWNyb1PAknJxOH67J%2BzPiAbQ%3D&reserved=0>
>
> It's pretty common in the financial sector to represent currencies as
> strings as prevent unintentional IEEE 754 mantissa-bending from getting
> settlements wrong and sending everyone to jail. There is also a
> capabilities negotiation section with
> "assertion_claims_query_language_supported" that may benefit from
> universal identifiers like
> "https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fschema.bigbankstandards.com%2Foperators%2Fgt&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=ECb4KnJl%2Bf1Ci9t%2B8d45mZsNDv%2BeKK%2FQzPxssEWBUIc%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fschema.bigbankstandards.com%2Foperators%2Fgt&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255053357&sdata=qAxOPnbHVhBgIw%2BkSniN0qaYyZ2%2B5IEb6v2y8DXfSQM%3D&reserved=0>". These semantics might be different enough to target a goal other than recreating JSON Schema.
>
>
>
> On Wed, Jul 15, 2020, at 9:53 PM, Daniel Buchner wrote:
> > I guess my first question would be: why are the folks who created this Open ID proposal trying to recreate JSON Schema, when we already have JSON Schema?
>
> >
>
>
> > *From:* Wayne Chang <wyc@fastmail.fm<mailto:wyc@fastmail.fm>>
> > *Sent:* Wednesday, July 15, 2020 6:05 PM
> > *To:* Kristina Yasuda <Kristina.Yasuda@microsoft.com<mailto:Kristina.Yasuda@microsoft.com>>; W3C Credentials
> > CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>; Brent Zundel
> > <brent.zundel@evernym.com<mailto:brent.zundel@evernym.com>>; Daniel Buchner
> > <Daniel.Buchner@microsoft.com<mailto:Daniel.Buchner@microsoft.com>>; Dave Longley
> > <dlongley@digitalbazaar.com<mailto:dlongley@digitalbazaar.com>>; Tobias Looker
> > <tobias.looker@mattr.global<mailto:tobias.looker@mattr.global>>
> > *Subject:* [EXTERNAL] Re: "Derivative predicate" of W3C VC WG and
> > "Expression Language" of OIDF ekyc-ida WG
>
> >
>
> > Thanks for your message, Kristina! Directly adding Brent + Dan + Dave + Tobias here, whom I believe have been working on related efforts in this problem space across Aries, DIF, and CCG. I hope there's an opportunity consolidate efforts.
>
> >
>
> > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fw3c-

> > ccg.github.io%2Fvp-request-spec%2F&amp;data=02%7C01%7CDaniel.Buchner%4
> > 0microsoft.com%7C8856a60f31f142f0399508d8292c9f9c%7C72f988bf86f141af91
> > ab2d7cd011db47%7C1%7C0%7C637304618921838596&amp;sdata=64kakuLf5f3F%2Bo
> > L39cjYY05nIRZZGN8dOHuBZXNPWGU%3D&amp;reserved=0
> > <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fw3c

<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fw3c%0b>> > -ccg.github.io%2Fvp-request-spec%2F&amp;data=02%7C01%7CDaniel.Buchner%
> > 40microsoft.com%7C8856a60f31f142f0399508d8292c9f9c%7C72f988bf86f141af9
> > 1ab2d7cd011db47%7C1%7C0%7C637304618921838596&amp;sdata=64kakuLf5f3F%2B
> > oL39cjYY05nIRZZGN8dOHuBZXNPWGU%3D&amp;reserved=0>
>
> > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fiden

> > tity.foundation%2Fpresentation-exchange%2F&amp;data=02%7C01%7CDaniel.B
> > uchner%40microsoft.com%7C8856a60f31f142f0399508d8292c9f9c%7C72f988bf86
> > f141af91ab2d7cd011db47%7C1%7C0%7C637304618921848592&amp;sdata=wAVCy3Nd
> > VrdTBykEW373ATo%2FxOj2sUs1FdarG7QJlws%3D&amp;reserved=0
> > <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fide

<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fide%0b>> > ntity.foundation%2Fpresentation-exchange%2F&amp;data=02%7C01%7CDaniel.
> > Buchner%40microsoft.com%7C8856a60f31f142f0399508d8292c9f9c%7C72f988bf8
> > 6f141af91ab2d7cd011db47%7C1%7C0%7C637304618921848592&amp;sdata=wAVCy3N
> > dVrdTBykEW373ATo%2FxOj2sUs1FdarG7QJlws%3D&amp;reserved=0>
>
> > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmatt

> > rglobal.github.io%2Foidc-client-bound-assertions-spec%2F&amp;data=02%7
> > C01%7CDaniel.Buchner%40microsoft.com%7C8856a60f31f142f0399508d8292c9f9
> > c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304618921848592&amp;
> > sdata=UGG%2Fw4IWYH7oieOqoMV9G9Moj0QYv0QYxE24SAXKdBg%3D&amp;reserved=0
> > <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmat

<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmat%0b>> > trglobal.github.io%2Foidc-client-bound-assertions-spec%2F&amp;data=02%
> > 7C01%7CDaniel.Buchner%40microsoft.com%7C8856a60f31f142f0399508d8292c9f
> > 9c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304618921848592&amp
> > ;sdata=UGG%2Fw4IWYH7oieOqoMV9G9Moj0QYv0QYxE24SAXKdBg%3D&amp;reserved=0
> > >
>
> >
>
> > Best,
>
> > - Wayne
>
> >
>
> > On Wed, Jul 15, 2020, at 7:58 PM, Kristina Yasuda wrote:
>
> >> Hi,
>
> >>
>
> >> I am reaching out since there seems to be synergy with 'derived predicate' concept <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.w3.org%2FTR%2Fvc-data-model%2F%23dfn-predicates&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=nZVai%2Fi6Wuo4HGs16Tkd3kCWds%2BEKk0ABUS5WXahJoo%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.w3.org%2FTR%2Fvc-data-model%2F%23dfn-predicates&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255063349&sdata=mmYGnk4LCQM3IEzT7%2BPcVso7JTKtfCf%2Frqotbm90bE4%3D&reserved=0>> of W3C VC spec and  expression language <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-expression-language&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=Yvp6zn%2BmURxHU7V%2FHn8zWf9kubReS16kCbnAu9MjMok%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-expression-language&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255063349&sdata=ZjIPC1TJmE5rJUyGyLTtsfGKjbp8SR3mM5FDGLNJj2E%3D&reserved=0>> concept being discussed in OpenID Foundation(OIDF)'s  ekyc-ida (identity assurance) WG <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fwg%2Fekyc-ida%2F&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=FVBjsdspaVTfHfecJXDvTlsE%2FVFKESQpC4VYM1I4wcQ%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fwg%2Fekyc-ida%2F&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255073346&sdata=veQ5wnvTBe8naqmaqqEdlI6UwqTC7R8Ly13%2B9XWGHL0%3D&reserved=0>>  in the context of selective disclosure.
>
> >>
>
> >> This part
> >> <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fw3

<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fw3%0b>> >> c.github.io%2Fvc-imp-guide%2F%23predicates&amp;data=02%7C01%7CDaniel.
> >> Buchner%40microsoft.com%7C8856a60f31f142f0399508d8292c9f9c%7C72f988bf
> >> 86f141af91ab2d7cd011db47%7C1%7C0%7C637304618921848592&amp;sdata=Qtt8u
> >> tmjeG2PJgr8VVjhU094KQppi7eS7ZgvgcgIHQ8%3D&amp;reserved=0> in the
> >> vc-imp-guide is the most detailed implementation of derived predicate
> >> that I have seen. Do you know if
>
> >>  * there is more specific proposal for how to express the derived
> >> predicates
> >>  * there is anyone actually implementing this feature OIDF is
> >> discussing the concept of  expression language <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-expression-language&amp;data=02%7C01%7CKristina.Yasuda%40microsoft.com%7Cf4fcb1e315dc442a258808d8293a6aeb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637304678180868210&amp;sdata=Yvp6zn%2BmURxHU7V%2FHn8zWf9kubReS16kCbnAu9MjMok%3D&amp;reserved=0<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgruposantander.github.io%2Fdigital-trust-docs%2Fassertions%2Fclaim-assertions-00.html%23name-expression-language&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255083339&sdata=WJ6CvFqpJJJUzTkxd%2FUoRTJ%2FkxKhnQjLi4XI%2BUsDX5M%3D&reserved=0>> which could be more generic than "ageOver18" property in VC imp-guide and ekyc-ida wg has been wondering if we could work together on this important topic.
>
> >> OIDF's current proposal is outlined here <https://gruposantander.github..io/digital-trust-docs/assertions/claim-assertions-00.html>. For example for the alcohol purchase age, in the US it is ageOver18, but in Japan it is ageOver20. The concept of expression language would allow to express this as {"age" : { "gt" : "18", "lt" : "20" } } where gt is 'greater than' and 'lt' is less than..
>
> >>
>
> >> Best,
>
> >> Kristina
>
> >> *Identity Standards Team, Microsoft Corp.*
>
> >>
>
> >>
>
> >>
>
> >
>
Emails aren't always secure, and they may be intercepted or changed after they've been sent. Santander doesn't accept liability if this happens. If you think someone may have interfered with this email, please get in touch with the sender another way. This message doesn't create or change any contract. Santander doesn't accept responsibility for damage caused by any viruses contained in this email or its attachments. Emails may be monitored. If you've received this email by mistake, please let the sender know at once that it's gone to the wrong person and then destroy it without copying, using, or telling anyone about its contents.

Santander UK plc. Registered Office: 2 Triton Square, Regent's Place, London, NW1 3AN, United Kingdom. Registered Number 2294747. Registered in England and Wales. https://www.santander.co.uk<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.santander.co.uk%2F&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255083339&sdata=Y9wjn9ZoedhQOveGXBz5uy1%2FK3e481PkztIikyOOrzM%3D&reserved=0>. Telephone 0800 389 7000. Calls may be recorded or monitored. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Our Financial Services Register number is 106054. You can check this on the Financial Services Register by visiting the FCA’s website https://www.fca.org.uk/register<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.fca.org.uk%2Fregister&data=02%7C01%7CDaniel.Buchner%40microsoft.com%7Cb36cd526d91143f7050608d829996d85%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637305086255083339&sdata=4UFrzRz%2FkFdsEdwvdb5j%2FHuGC8xCS3RgkbQX%2FBeg1LA%3D&reserved=0>. Santander and the flame logo are registered trademarks.


Ref:[PDB#1-4B]
Attachments

image/png attachment: image001.png
image/png attachment: image002.png
Received on Thursday, 16 July 2020 15:26:46 UTC