Please describe your proposed solution.
<u>Introduction</u>
GLEIF, Global Legal Entity Identifier Foundation, was created in the wake of the 2007/08 economic crisis by the G20 countries to help improve financial stability worldwide and make sure counterparties to transactions could be readily revealed. GLEIF issues Legal Entity Identifiers (LEI) that provides key information about businesses, funds and governmental organizations participating in business transactions, including their name, when they were formed and, crucially, their ownership structure. More than 2.3 millions of Legal Identifiers were issued so far to companies around the world, a number that is rapidly increasing over time as the regulation enforces their use.
Recently, the GLEIF began to issue a verifiable credential called vLEI (verifiable LEI) that allows the assertion of delegation chains and the digital proof of correctness of things like signatures in financial reports. The vLEI allows those Legal Entities to participate in the verifiable credential ecosystem.
Those verifiable credentials are based on a fully Decentralized Identity technology called KERI/ACDC that requires supporting witnesses to provide a second source of trust. On Fund 9, rootsID got funded to develop the first Proof of Concept for a KERI witness on a blockchain, a project that was delivered successfully on time.
<u>Our Goal</u>
Our goal is to make Cardano the best alternative as a witness for legal entities that participate in the vLEI GLEIF ecosystem. Those credentials, also called as Organizational Identities, provide a person or thing to prove their authority to represent an organization outside the boundaries of that organization. As this medium article explains, “when the authority of a person or thing claiming it can be instantly verified, the world will be different…
- The authenticity of any digital document, agreement, purchase order, filing, or other piece of data will be instantly verifiable;
- Phone calls, texts, email, and other digital communications originating from authorized representatives (or devices) of an organization — or any delegate from that organization — will be instantly verifiable;
- Some documents will prevent signing and some systems won’t be accessible without the expected authority (a parallel to access control lists);
- The authority of every approval, signature, or other digital action in a supply chain will be instantly verifiable by downstream actors, and irrefutably auditable in real-time;
- Authority will be verified before identity in most interactions, and identity not at all in many;”
All those use cases and any other that you can imagine need to be backed by a network of digital trusted witnesses or notaries. Cardano blockchain, with its extensive decentralization and scalability properties, is an unbeatable option to be selected by those Organization.
<u>Our Solution</u>
We propose to create a KERI Super Watcher to monitor Key Event Logs (KEL) captured by witnesses and analyzes for suspicious activity that need to be reported to verifiers.
In order to understand what a Super Watcher does, we will explain briefly the following concepts:
- The key events are produced por Organizational Identifiers when keys are rotated, verifiable credentials are issued or revoked or when other information needs to be anchored in the identifier.
- All those events are notarized by a set of witnesses selected by the Organization. An example of a witness is our PoC KERI backer developed as a funded proposal on Fund 9, that we are also proposing to improve in Fund 10.
- A verifier is someone that need to verify a signature as in a verifiable credential or a document for example, and decide if it's authentic, valid and if belongs to the Organizational Identity in question.
A Super Watcher is a service that can be used by verifiers to protect against duplicity events and malicious activity. It's under the verifier control instead of the Organizational Identifier control. It's an observer that acts as a Jury when divergence, inconsistent or suspicious activity is detected. Hence, the goal of the Super Watcher is to detect dishonest identity controllers or malicious third party may have exploited vulnerabilities on the controller of the identifier.
This proposal is to develop and host the first Super Watcher for the vLEI GLEIF ecosystem. It will be designed to provide the following funcitonalities:
- watch and analyze Key Event submitted to the Cardano Blockchain by witnesses
- watch and analyze Key Events available by public witnesses (such as GLEIF witnesses)
- Report suspicious activity
- Discovery of Identifiers participating in GLEIF ecosystem
- Verify signatures
The service will be hosted in RootsID AWS cloud instance and will be available for queries from verifiers.
How does your proposed solution address the challenge and what benefits will this bring to the Cardano ecosystem?
GLEIF vLEI ecosystem is being adopted globally and as the number of participating companies grows, it will increase the use of verifiable credentials that enables a smarter, less costly and more reliable way to make decisions about who to do business with.
We believe that if we can position Cardano as a first option for a witness to their Legal Identifiers, the adoption and usage of vLEIs will directly impact in the adoption and promotion of Cardano. That is the business value that we are envision to generate to Cardano with this project.
In regards to the Challenge P&I, we'll be providing a product in the Decentralized Identity space designed for the vLEI GLEIF ecosystem cited before. This products is also part, but independent, of this proposal in Fund 10 towards the same goal. We strongly believe the the integration of Cardano with the GLEIF ecosystem is of mutual benefit.
How do you intend to measure the success of your project?
The immediate direct measurement of success of this project is to have a Super Watcher instance deployed in mainnet with real Legal Entities Identifiers using it as their witness.
In the long run expect to see increasing use Cardano by inspecting:
- numbers of identifiers witnesses by Cardano
- number of transaction events submitted by those identifiers
The immediate direct measurement of success of this project is to have our own Super Watcher instance deployed in mainnet with real Organizational Identifiers using it as their witness.
In the long run expect to see increasing use Cardano by inspecting:
- numbers of organizations witnesses by Cardano
- number of transaction events submitted by those organization
- number of credentials issued by those organizations
- number of witness instances deployed in Cardano mainnet
- number of suspicious events detected
- number of queries received
- number of signatures verified
There’s also a less quantifiable measurement of success that corresponds to the growth of visibility of Cardano blockchain and the benefits and assurance it can provide for the organizations that participate in the vLEI GLEIF ecosystem.
Please describe your plans to share the outputs and results of your project?
We are engaged actively in the KERI community attending weekly meetings where we have the opportunity to show and demo our contributions. Additionally, as we also provide technical services to GLEIF and have a direct relationship with them, we will promote the Super Watcher to became part of the recommendations in GLEIF Governance Framework.
Additionally, we are in conversations with the Cardano Foundation to deploy its own instance of the Super Watcher and help promote the adoption.