RE: Verifiable Driver's Licenses and ISO-18013-5 (mDL)

I believe CCG needs a new set of principles and success metrics to truly sustain itself …true operational metrics like:

  1.  The number of developers using our platforms, SDKs, and standards
  2.  The number of apps that have been built using our platforms, SDKs, and standards
  3.  The number of apps that have been deployed into production use using our platforms, SDKs, and standards
  4.  The number of end-users using these production-deployed apps

…real operational metrics.  The same ones the likes of Google, Apple, Mozilla, Microsoft, and other platform competitors use …else I believe we’ll remain somewhat lost in the minds of developers (and end-users) …the only people that matter when it comes to software.

Pop Quiz: Name one decentralization platform that is in broad use today (measured in terms of the number of production-deployed apps running on the platform)?   ..ignoring the blockchain platforms like Ethereum

Michael Herman
Founder
Trusted Digital Web

From: Michael Herman (Trusted Digital Web) <mwherman@parallelspace.net>
Sent: Tuesday, November 30, 2021 7:12 AM
To: Michael Herman (Trusted Digital Web) <mwherman@parallelspace.net>; Manu Sporny <msporny@digitalbazaar.com>; W3C Credentials CG <public-credentials@w3.org>
Subject: RE: Verifiable Driver's Licenses and ISO-18013-5 (mDL)


p.s. A commentary on our different and diverse working group efforts... I believe that our recent challenges with confirming the DID specification and now with the mDL specification not embracing VCs can be greatly improved if we had an overarching vision, a platform vision, ...a software reference architecture, ...for what we think we're all contributing to.

... else what we have is what Microsoft development platform has been highly criticized for in the past: being a "bunch of stuff" ...a great "bucket of bolts" but just a "bucket of bolts".



Here's one solution ...one example of what I'm talking about ...a place to start...

Trusted Digital Web: 8-Layer Architecture Reference Model (TDW-ARM)

https://hyperonomy.com/2021/06/28/trusted-digital-web-8-layer-architecture-reference-model-tdw-arm/




References

- https://wiktionary.en-academic.com/105734/bucket_of_bolts


- https://hyperonomy.com/2016/06/15/ms-azure-is-a-bit-of-a-bucket-of-bolts-very-good-bolts-but-relative-to-the-other-iot-vendors-a-bucket-of-bolts/




Best regards,

Michael Herman

Far Left Self-Sovereignist

First Principles Thinker



Self-Sovereign Blockchain Architect

Trusted Digital Web

Hyperonomy Digital Identity Lab

Parallelspace Corporation



-----Original Message-----
From: Michael Herman (Trusted Digital Web) <mwherman@parallelspace.net<mailto:mwherman@parallelspace.net>>
Sent: Monday, November 29, 2021 1:05 PM
To: Manu Sporny <msporny@digitalbazaar.com<mailto:msporny@digitalbazaar.com>>; W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>
Subject: RE: Verifiable Driver's Licenses and ISO-18013-5 (mDL)



As with all past standards (ad-hoc, defacto, or otherwise), an #EmbraceAndExtend strategy is often the most useful approach.



Reference: https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish




-----Original Message-----

From: Manu Sporny <msporny@digitalbazaar.com<mailto:msporny@digitalbazaar.com>>

Sent: Monday, November 29, 2021 9:55 AM

To: W3C Credentials CG <public-credentials@w3.org<mailto:public-credentials@w3.org>>

Subject: Verifiable Driver's Licenses and ISO-18013-5 (mDL)



Hi all,



As some of you might be aware, ISO-18013-5 (mDL -- Mobile Driver's License[1]) was published as a global ISO standard in September 2021. A number of us in the W3C CCG and W3C VCWG attempted to ensure that W3C Verifiable Credentials were supported by the mDL work, but that effort is not reflected in the finalized ISO mDL standard (and due to the way ISO operates, we are not at liberty to share any details). There have been increasing concerns related to the divergence of mDL with W3C Verifiable Credentials[2][3][4][5][6] and to the market dynamics at play[7][8] around mDL.



In an effort to demonstrate that it is possible to express the entire mDL data model, Spruce, MATTR, and Digital Bazaar have collaborated on creating an interoperability test suite for something we're calling the "Verifiable Driver's License" (temporary name):



http://w3id.org/vdl/interop-reports




The test suite demonstrates that a few things are possible in addition to what mDL provides:



1. The mDL data model can be expressed cleanly using W3C Verifiable Credentials.



2. The Verifiable Driver's License can be issued and verified today using the Verifiable Credentials API (mDL does not provide any details on issuance/verification infrastructure).



3. There is demonstrable interoperability today among at least 3 vendors, and we expect that to be true among all the vendors that comply with the Verifiable Credentials API today (we invite all vendors to add their implementations to the test suite).



4. It is possible to express the vDL as a compact QR Code, thus providing a "path to paper" (mDL has no path to paper).



5. It is possible to utilize the BBS+ selective disclosure mechanism to selectively disclose subsets of the Verifiable Driver's License Credential.



6. It is possible to utilize privacy-preserving revocation mechanisms that don't phone home (utilizing privacy-aware technologies like StatusList2021).



7. The Verifiable Driver's License can be exchanged in online scenarios using some of the emerging open wallet protocols. There is also support for offline exchange (via QR Codes and other optical carriers).



All that said, it is also important to understand that the current W3C Verifiable Credentials ecosystem is not capable of radio transmission of the Verifiable Driver's License (e.g., at airline security checkpoints or police traffic stops), and does not currently have the backing of any known "certified" mDL vendor. This is not a case where there is a clear winner; this is the start to a concrete public engagement about the future of these technologies as applied to driving credentials.



CCG Chairs,



Spruce, MATTR, and Digital Bazaar would like to request some time on an upcoming CCG call to introduce this work item to the group and see if there is interest in picking it up:



https://github.com/w3c-ccg/community/issues/218




-- manu



[1]https://www.iso.org/standard/69084.html (paywalled) [2]https://downloads.regulations.gov/DHS-2020-0028-0032/attachment_1.pdf


[3]https://downloads.regulations.gov/DHS-2020-0028-0048/attachment_1.pdf


[4]https://downloads.regulations.gov/DHS-2020-0028-0055/attachment_1.pdf


[5]https://downloads.regulations.gov/DHS-2020-0028-0045/attachment_1.pdf


[6]https://downloads.regulations.gov/DHS-2020-0028-0062/attachment_1.pdf


[7]https://www.cnbc.com/2021/11/14/apple-sticking-taxpayers-with-part-of-the-bill-for-digital-id-rollout.html




[8]https://www.slashgear.com/apple-delays-controversial-iphone-drivers-license-feature-24700470/




--

Manu Sporny - https://www.linkedin.com/in/manusporny/


Founder/CEO - Digital Bazaar, Inc.

News: Digital Bazaar Announces New Case Studies (2021) https://www.digitalbazaar.com/