This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 52 lines
!!! Overview
[{$pagename}] ([DID Auth]) is the mechanism by which an [entity] can cryptographically prove that they are associated with a [DID] and DID Description.
%%warning
[Authentication] is separate from [Authorization] because an [entity] may wish to enable other entities to update the [DID Document], for [example], to assist with [key recovery] without enabling them to prove [ownership] (and thus be able to [impersonate|Impersonation] the [entity].
%%
The rules for Authentication are:
** [MAY] include an [authentication] property.
** The value of the [authentication] property should be an array of proof mechanisms ([{$applicationname}] assumes these are [Authentication Factors]).
** Each proof mechanism [MUST] include the type property.
** Each proof mechanism [MAY] embed or reference a [Public Key]
!! [{$pagename}] [Example]
{{{{
"@context": "https://w3id.org/did/v1",
"id": "did:example:123456789abcdefghi",
...
"authentication": [{
// this key can be used to authenticate as DID ...fghi
"type": "RsaSignatureAuthentication2018",
"publicKey": "did:example:123456789abcdefghi#keys-1"
}, {
// this key can be used to authenticate as DID ...fghi
"type": "PseudonymousBiometricAuthentication2018",
"biometricTemplate": "did:example:123456789abcdefghi#bio-1"
}],
...
}
}}}
!! [{$pagename}] and [Self-Issued OpenID Provider]
The current [{$pagename}] [Working Group] working in coordination with editors of the [OpenID Connect] [specification] to combine the knowledge from the [DIF] community and the [OpenID Foundation] and are using [Self-Issued OpenID Provider] for [{$pagename}] within the [Verifiable Credentials].
[{Image src='https://miro.medium.com/max/1079/1*GoeFcYzRBavzan21-XonYA.png' caption='SIOP in the Context of W3C Verifiable Credentials' align ='left' style='font-size: 120%;'}]\\
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [W3C Decentralized Identifiers (DIDs)|https://w3c-ccg.github.io/did-spec/|target='_blank'] - based on information obtained 2018-11-29
* [#2] - [Using OpenID Connect with Decentralized Identifiers|https://medium.com/decentralized-identity/using-openid-connect-with-decentralized-identifiers-24733f6fa636|target='_blank'] - based on information obtained 2019-10-14
* [#3] - [Using OpenID Connect Self-Issued to achieve DID Auth|https://github.com/WebOfTrustInfo/rwot8-barcelona/blob/master/draft-documents/did-auth-oidc.md|target='_blank'] - based on information obtained 2019-10-14