decentralized-identity / confidential-storage

Confidential Storage Specification and Implementation
https://identity.foundation/confidential-storage/
Apache License 2.0
80 stars 23 forks source link

IIW31 DIDs, GNAP, ZCaps and HTTP Signatures #123

Open OR13 opened 3 years ago

OR13 commented 3 years ago

We had a productive session at IIW, I wanted to leave here a story which we didn't seem to hear a lot of objection too and some key takeaways on GNAP.

GNAP structured scopes are compatible with ZCaps as long as the ZCap object has a type

So its possible to do the following:

Alice and Bob are dating and Alice wants to know that Bob has gotten an STD test.

Alice and Bob have DIDs, and they have a service in their DID Document which is a GNAP server.

Alice requests access to an STD test report from Bobs GNAP server.

Bobs GNAP server responds with a ZCap JSON object for accessing an encrypted data vault document.

Alice invokes that capability against a 3rd party encrypted data vault to access the test result.