Re: Modeling credentials issued by a proxy issuer

This sounds less like a modeling problem and more like a trust framework
problem.

It seems like you're looking for some way to convey in the credential that
the 3rd party is authorized by the original issuer to continue issuing
credentials.
Such a thing could be done using the evidence property. The reason others
are bringing up delegation and credential chaining is because those
mechanisms may allow for the delegated authority to be revoked, while
simply providing evidence may be a vector for compromise.

This is why I say it is a trust framework problem. What it comes down to is
the verifier's trust model.

On Mon, Mar 23, 2020, 10:12 Anil Lewis <anillewi@ca.ibm.com> wrote:

> Hi Dmitri,
> This use case is more for the clearing house of the worlds who issue
> credentials on behalf of other universities and employers trusts these 3rd
> parties. However, these 3rd parties when they issue the credential, want to
> make sure that when they issue these credentials, the holder understands
> that the 3rd party is doing it on behalf of the university and want that
> information conveyed in the verifiable credential. How can this be modeled
> in the current version of Verifiable credential. Note that this 3rd party
> has no access to any of the keys of the original issuers so the signature
> in the proof will belong to the 3rd party
>
>
>
> ------------------------------
>
> *Anil Lewis *
> Senior Managing Consultant
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

Received on Monday, 23 March 2020 16:27:40 UTC