Overview#Rich Credential is a credential provides multi-Factor Authentication of a Digital Subject to a verifier by demonstrating
- possession of a Private Key (Something You Have)
- knowledge of a password (Something You Know)
- possession of one or more biometric features (Something You Are)
To enable this, the issuer embeds biometric Token into the credential and uses a salted hash of a password chosen by the Digital Subject as input to the computation of the credential Digital Signature.
Rich Credential provides selective disclosure of attributes, a privacy feature that allows the subject and the verifier to negotiate the set of attributes to be disclosed in a particular presentation.
More Information#There might be more information for this subject on one of the following:
- [#1] - Remote Identity Proofing Discussed at the Internet Identity Workshop - based on information obtained 2016-10-28