Re: Protocol for requesting private data?

If I understand correctly, this is a case where the DID has a “controller”
service endpoint that is an Authorization Server. (The AS standard is now
being improved as “transactional authorization” in IETF.)

The “private” shoe size itself might be held in a secure data store such as
is operated by my hospital because they have a really good foot x-ray lab.

In this architecture, the hospital is a processor (of foot x-rays) and the
authorization server, like the rest of the DID, is my controller.

- Adrian

On Wed, Apr 29, 2020 at 5:11 AM Ivan Herman <ivan@w3.org> wrote:

> Forwarding this to the DID WG list
>
> Ivan
>
> Begin forwarded message:
>
> *From: *Dan Bolser <dan@geromics.co.uk>
> *Subject: **Protocol for requesting private data?*
> *Date: *29 April 2020 at 10:56:17 GMT+2
> *To: *public-vc-wg@w3.org
> *Resent-From: *public-vc-wg@w3.org
> *Archived-At: *<
> https://www.w3.org/mid/CANQ+bf7YPx8L-0PE2ddswGeB=EuNKLsuT2oj4Kt6x+g2rQwbiQ@mail.gmail.com
> >
> *List-Id: *<public-vc-wg.w3.org>
> *Message-Id: *<
> CANQ+bf7YPx8L-0PE2ddswGeB=EuNKLsuT2oj4Kt6x+g2rQwbiQ@mail.gmail.com>
>
> Sorry if this is the wrong place to ask...
>
> I'm looking for details on how to use SSI to request access to 'private'
> data from a controller. Specifically, I'm thinking about nuggets of data
> that I don't want to put in plain text in a DID document.
>
> My example is shoe size. An online shoe shop wants to know my shoe size to
> taylor my browsing experience.
>
> Are there specific / concrete proposals on how to negotiate this data?
>
>
> Many thanks,
> Dan.
>
>
>
>
>
> ----
> Ivan Herman, W3C
> Home: http://www.w3.org/People/Ivan/
> mobile: +31-641044153
> ORCID ID: https://orcid.org/0000-0003-0782-2704
>
>