-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
GITBOOK-322: Update Trust Registries
- Loading branch information
1 parent
33546e6
commit a4ab874
Showing
7 changed files
with
218 additions
and
7 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
64 changes: 64 additions & 0 deletions
64
...-registries/verifiable-accreditation-trust-chain-model/rtao-greater-than-tao.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,64 @@ | ||
| # RTAO -> TAO | ||
|
|
||
| As a Root of Trust (RTAO) entity, it is possible to accredit Trusted Accreditation Organisations to issue Verifiable Accreditations or Verifiable Attestations. | ||
|
|
||
| The Verifiable Accreditation should include: | ||
|
|
||
| | Field | Description | Example | | ||
| | ------------------ | ------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------ | | ||
| | Issuer | DID of the Root of Trust (RTAO) | did:cheqd:testnet:8ea036da-f340-480d-8952-f5561ea1763c | | ||
| | Subject | DID of the TAO that is being accredited | did:cheqd:testnet:a2b675de-33d0-4044-8183-0d74f210cceb | | ||
| | Credential Subject | A set of structured permissions around what credentials the TAO is accredited to issue, and in which jurisdiction. | See below | | ||
| | Terms of use | A set of policies setting out the Governance Framework for the ecosystem | See below | | ||
|
|
||
| ## Permissions | ||
|
|
||
| Root TAOs can set permissions under which TAOs must abide. This creates a level of codified governance for the trust ecosystem. | ||
|
|
||
| ```json | ||
| "credentialSubject": { | ||
| "id": "did:cheqd:testnet:a2b675de-33d0-4044-8183-0d74f210cceb", | ||
| "accreditedFor": [ | ||
| { | ||
| "schemaId": "did:cheqd:testnet:8ea036da-f340-480d-8952-f5561ea1763c/resources/b10146d7-0d0f-41e0-8ee3-c76db64890be", | ||
| "types": [ | ||
| "VerifiableCredential", | ||
| "VerifiableAccreditation", | ||
| "VerifiableAttestation", | ||
| "VerifiableAccreditationToAccredit" | ||
| ], | ||
| "limitJurisdiction": "https://publications.europa.eu/resource/authority/atu/FIN" | ||
| } | ||
| ] | ||
| }, | ||
|
|
||
| ``` | ||
|
|
||
| Whereby: | ||
|
|
||
| | Field | Description | | ||
| | ----------------- | ------------------------------------------------------------------------------------------------------------- | | ||
| | schemaId | Schema of the Verifiable Accreditation that the TAO is accredited to issue themselves | | ||
| | types | Types of Credential that the TAO is accredited to issue | | ||
| | limitJurisdiction | Permission that the RTAO can set to limit the jurisdictional scope of the credentials issued in the ecosystem | | ||
|
|
||
| ## Policies | ||
|
|
||
| The Root TAO can also set polices known as the `TrustFrameworkPolicy` within the `termsOfUse` section of the Verifiable Accreditation. | ||
|
|
||
| ```json | ||
| "termsOfUse": { | ||
| "type": "TrustFrameworkPolicy", | ||
| "trustFramework": "Name of the Ecosystem Governance Framework (GF)", | ||
| "trustFrameworkId": "https://example.com/governance-framework/125" | ||
| }, | ||
|
|
||
| ``` | ||
|
|
||
| Whereby: | ||
|
|
||
| | Field | Description | | ||
| | ---------------- | --------------------------------------------------------------- | | ||
| | type | Must be `TrustFrameworkPolicy` | | ||
| | trustFramework | Name of Governance Framework set by the Governance Authority | | ||
| | trustFrameworkId | URL linking to where the written Governance Framework is stored | |
69 changes: 69 additions & 0 deletions
69
...egistries/verifiable-accreditation-trust-chain-model/tao-greater-than-subtao.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,69 @@ | ||
| # TAO -> SubTAO | ||
|
|
||
| As a Trusted Accreditation Organisation (TAO), it is possible to accredit Sub-Trusted Accreditation Organisations (SubTAOs) to issue Verifiable Accreditations or Verifiable Attestations. | ||
|
|
||
| The Verifiable Accreditation should include: | ||
|
|
||
| | Field | Description | Example | | ||
| | ------------------ | ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------ | | ||
| | Issuer | DID of the TAO | did:cheqd:testnet:a2b675de-33d0-4044-8183-0d74f210cceb | | ||
| | Subject | DID of the SubTAO that is being accredited | did:cheqd:testnet:e66a9416-d03e-4ced-95e3-07af16e25bc5 | | ||
| | Credential Subject | A set of structured permissions around what credentials the SubTAO is accredited to issue, and in which jurisdiction. | See below | | ||
| | Terms of use | A set of policies setting out the scope of Trust Chain for Relying parties to validate against. | See below | | ||
|
|
||
| ## Permissions | ||
|
|
||
| Root TAOs can set permissions under which TAOs must abide. This creates a level of codified governance for the trust ecosystem. | ||
|
|
||
| ```json | ||
| "credentialSubject": { | ||
| "id": "did:cheqd:testnet:e66a9416-d03e-4ced-95e3-07af16e25bc5", | ||
| "accreditedFor": [ | ||
| { | ||
| "schemaId": "did:cheqd:testnet:8ea036da-f340-480d-8952-f5561ea1763c/resources/b10146d7-0d0f-41e0-8ee3-c76db64890be", | ||
| "types": [ | ||
| "VerifiableCredential", | ||
| "VerifiableAccreditation", | ||
| "VerifiableAttestation", | ||
| "VerifiableAccreditationToAccredit" | ||
| ], | ||
| "limitJurisdiction": "https://publications.europa.eu/resource/authority/atu/FIN" | ||
| } | ||
| ] | ||
| }, | ||
|
|
||
| ``` | ||
|
|
||
| Whereby: | ||
|
|
||
| | Field | Description | | ||
| | ----------------- | ------------------------------------------------------------------------------------------------------------ | | ||
| | schemaId | Schema of the Verifiable Accreditation that the SubTAO is accredited to issue themselves | | ||
| | types | Types of Credential that the SubTAO is accredited to issue | | ||
| | limitJurisdiction | Permission that the TAO can set to limit the jurisdictional scope of the credentials issued in the ecosystem | | ||
|
|
||
| ## Policies | ||
|
|
||
| The Root TAO can also set polices known as the `AccreditationPolicy` within the `termsOfUse` section of the Verifiable Accreditation. | ||
|
|
||
| ```json | ||
| "termsOfUse": { | ||
| "type": "AccreditationPolicy", | ||
| "parentAccreditation": "did:cheqd:testnet:8ea036da-f340-480d-8952-f5561ea1763c/resources/18de60ec-bed1-42e5-980c-601c432bc60b", | ||
| "rootAuthorisation": "did:cheqd:testnet:8ea036da-f340-480d-8952-f5561ea1763c/resources/18de60ec-bed1-42e5-980c-601c432bc60b", | ||
| "trustFramework": "Name of the Governance Framework (GF)", | ||
| "trustFrameworkId": "https://example.com/governance-framework/124" | ||
| } | ||
|
|
||
| ``` | ||
|
|
||
| Whereby: | ||
|
|
||
| | Field | Description | | ||
| | ------------------- | --------------------------------------------------------------------------------- | | ||
| | type | Must be `AccreditationPolicy` | | ||
| | parentAccreditation | The DID URL of the Accreditation issued by another TAO or the Root TAO to the TAO | | ||
| | rootAuthoroisation | The DID URL of the Root of Trust Verifiable Authorsation | | ||
| | trustFramework | Name of Governance Framework set by the Governance Authority | | ||
| | trustFrameworkId | URL linking to where the written Governance Framework is stored | | ||
|
|
Oops, something went wrong.