This vocabulary is used to express privacy-protecting tokens that are designed to be recognized by only the issuing authority, used once, circulate in an ecosystem, and not be trackable (except for by the issuing authority). These sorts of tokens are useful when the issuing authority needs to identify an entity that is interacting in an ecosystem without enabling the other actors in the ecosystem to track the entity. Use cases where this is useful include: limiting the use of restricted materials and medicines by companies and individuals, acquisition of hazardous materials, privacy-protecting loyalty programs, and offline scenarios that need to use these types of tokens.

This is an experimental vocabulary and is not intended for use in production systems by non-experts.

Introduction

This vocabulary is used to express privacy-protecting tokens that are designed to be recognized by only the issuing authority, used once, circulate in an ecosystem, and not be trackable (except for by the issuing authority). These sorts of tokens are useful when the issuing authority needs to identify an entity that is interacting in an ecosystem without enabling the other actors in the ecosystem to track the entity. Use cases where this is useful include: limiting the use of restricted materials and medicines by companies and individuals, acquisition of hazardous materials, privacy-protecting loyalty programs, and offline scenarios that need to use these types of tokens.

This entire document is a work in progress and should be considered in beta until it is ratified as an official document via the World Wide Web Consortium.

Classes

ConcealedIdTokenCredential

Status
unstable
Parent Class
owl:Thing
Expected properties
concealedIdToken
{
  "@context": "https://www.w3.org/2018/credentials/v1",
  "type": "VerifiablePresentation",
  "verifiableCredential": {
    "@context": [
      "https://www.w3.org/2018/credentials/v1",
      "https://w3id.org/security/suites/ed25519-2020/v1",
      "https://w3id.org/cit/v1"
    ],
    "type": ["VerifiableCredential", "ConcealedIdTokenCredential"],
    "issuer": "did:key:z6MkhNZxXHvf4YMbtZkEkgA9QAz6gN8f9ZtP47EdCEJMF5Hh",
    "issuanceDate": "2020-07-14T19:23:24Z",
    "expirationDate": "2020-08-14T19:23:24Z",
    "credentialSubject": {
      "concealedIdToken": "z2BJYfNtmWRiouWhDrbDQmC2zicUkN66gCMqtFaW5ioLB4CrdZM1dwFfb8tJaZTYnE2XWez3PQbW3PgdP6y8JueQUk6vSqV71wfyMAGmGqFvwC1VxoN4Bt"
    },
    "proof": {
      "type": "Ed25519Signature2020",
      "created": "2020-02-03T17:23:49Z",
      "proofValue": "z4peo48uwK2EF4Fta8PbpFnqsq5ehpVhx2P9bXixhHGWjZccPRWHYpyZF4vzZGD9r8zeSovgkhgKHzQMDYJ34r9gL",
      "proofPurpose": "assertionMethod",
      "verificationMethod": "did:key:z6MkhNZxXHvf4YMbtZkEkgA9QAz6gN8f9ZtP47EdCEJMF5Hh#z6MkexTPNH9NFaSogyN17dQhm1X5e9ZTgmChE2enWG8r1Tep"
    }
  }
}

ConcealedIdToken

Status
unstable
Parent Class
owl:Thing
Expected properties
id, type, controller, publicKeyJwk
{
  "type": "ConcealedIdToken",
  "payload": "z2w9rxNXLjDkusy3ruzBvzhfPGC1p7djGyHtip4DQNe92PBZdsEZ6CWoZi9CWzbbndoSrtqMLtLqZW4x93Q24fKMSpMFmtB8d4JrMeUQRoDNp3sxENNr",
  "meta": "zBc4MZmSm9XBmngk"
}

Properties

payload

Status
stable
Range
sec:multibase

{
  "type": "ConcealedIdToken",
  "payload": "z2w9rxNXLjDkusy3ruzBvzhfPGC1p7djGyHtip4DQNe92PBZdsEZ6CWoZi9CWzbbndoSrtqMLtLqZW4x93Q24fKMSpMFmtB8d4JrMeUQRoDNp3sxENNr",
  "meta": "zBc4MZmSm9XBmngk"
}

meta

Status
stable
Range
sec:multibase

{
  "type": "ConcealedIdToken",
  "payload": "z2w9rxNXLjDkusy3ruzBvzhfPGC1p7djGyHtip4DQNe92PBZdsEZ6CWoZi9CWzbbndoSrtqMLtLqZW4x93Q24fKMSpMFmtB8d4JrMeUQRoDNp3sxENNr",
  "meta": "zBc4MZmSm9XBmngk"
}