RE: Modeling credentials issued by a proxy issuer

Brent, can you elaborate on what you mean by verifier’s trust model? The verifier should be able to trust the system to provide accurate origin and transit assurances. The verifier needs to evaluate the reputation and therefore the trustworthiness of the information conveyed, but not the conveyance of said information. Right?

 

-S

 

From: Brent Zundel <brent.zundel@evernym.com> 
Sent: Monday, March 23, 2020 9:27 AM
To: Anil Lewis <anillewi@ca.ibm.com>
Cc: W3C Credentials CG (Public List) <public-credentials@w3.org>
Subject: Re: Modeling credentials issued by a proxy issuer

 

This sounds less like a modeling problem and more like a trust framework problem.

 

It seems like you're looking for some way to convey in the credential that the 3rd party is authorized by the original issuer to continue issuing credentials.

Such a thing could be done using the evidence property. The reason others are bringing up delegation and credential chaining is because those mechanisms may allow for the delegated authority to be revoked, while simply providing evidence may be a vector for compromise.

 

This is why I say it is a trust framework problem. What it comes down to is the verifier's trust model.

 

On Mon, Mar 23, 2020, 10:12 Anil Lewis <anillewi@ca.ibm.com <mailto:anillewi@ca.ibm.com> > wrote:

Hi Dmitri,

This use case is more for the clearing house of the worlds who issue credentials on behalf of other universities and employers trusts these 3rd parties. However, these 3rd parties when they issue the credential, want to make sure that when they issue these credentials, the holder understands that the 3rd party is doing it on behalf of the university and want that information conveyed in the verifiable credential. How can this be modeled in the current version of Verifiable credential. Note that this 3rd party has no access to any of the keys of the original issuers so the signature in the proof will belong to the 3rd party 

 

 

 


  _____  


Anil Lewis 
Senior Managing Consultant