diff --git a/studio/trust-registries/README.md b/studio/trust-registries/README.md index 7e39a16..77588b3 100644 --- a/studio/trust-registries/README.md +++ b/studio/trust-registries/README.md @@ -4,7 +4,7 @@ description: Establish end-to-end trust using cheqd's trust registry infrastruct # 🤝 Build Trust Registries -Trust Registries enable a Relying Party to determine the authenticity of a legal entity within a digital credential ecosytem. Trust Registries are crucial to establish for production environments, because they add extra levels of assurance to the authenticity of Decentralized Identifiers (DIDs). +Trust Registries enable a Relying Party to determine the authenticity and authorization of a legal entity within a digital credential ecosystem. Trust Registries are crucial to establish for production environments, because they allow relying parties to make informed decisions on whether to trust the credentials they receive. cheqd has **pioneered a industry-leading trust registry solution**, allowing users to **create hierarchical chains of trust, with each trust registry entry being DID-Resolvable**. diff --git a/studio/trust-registries/verifiable-accreditation-trust-chain-model/README.md b/studio/trust-registries/verifiable-accreditation-trust-chain-model/README.md index feb4fd6..cf2859f 100644 --- a/studio/trust-registries/verifiable-accreditation-trust-chain-model/README.md +++ b/studio/trust-registries/verifiable-accreditation-trust-chain-model/README.md @@ -48,9 +48,31 @@ There are many terms used within this guide, and as such, familiarise yourself o | - | Verifiable Accreditation | Type of on-ledger Verifiable Credential that is specifically used for establishing governance permissions and policies | | - | Verifiable Trust Model | Permissions with policies to either accredit, or to attest | +## Establishing a Trust Hierarchy + +cheqd's Trust Registry model is predicated on the notion of a trust hierarchy, which is conceptually very similar to traditional Public Key Infrastructure (PKI). Specifically, the model relies on a **Root of Trust** from which trusted relationships can be established. + +In our model, each organisation in the trust hierarchy is able to issue Verifiable Accreditations to other entities, conveying a set of permissions or scopes that determine what the recipient entity is permitted to do. + +The following diagram show how a Root TAO accredits two TAOs lower in the hierarchy: + +
+ +where: + +* **Root of Trust (rTAO) DID:** + * Controls Verifiable Accreditations (VAs) issued from rTAO to TAOs. +* **Accredited Org (TAO) DID:** + * Controls Verifiable Accreditations (VAs) issued from TAOs to Trusted Issuers. +* **Trusted Issuer DID:** + * Issues Verifiable Credentials with Issuance Policies +* **Verifiable Credentials** + * Issued including the Issuance Policies in the `TermsOfUse` section of the data model. + * Issued to Digital Identity Wallet of user or organisation, which can be later verified up the entire trust chain. + ## Trust Infrastructure Roles and their Permissions -Depending on their accreditations and authorisations, legal entities can play the following roles: +As shown in the diagram above, legal entities can play the following roles: * **Root Trusted Accreditation Organisation (Root TAO)** * **Trusted Accreditation Organisation (TAO)** @@ -117,21 +139,3 @@ Each Verifiable Accreditation is also associated with an `AccreditationPolicy` i All Verifiable Credentials are attestations of something. Any issuer may issue credentials (default), while accredited Trusted Issuers may issue domain-specific VCs with the accreditation, by attaching the `AttestationPolicy` into `termsOfUse`. End Users (legal entities or natural persons) can accumulate multiple Verifiable Credentials from one or many Trust Models. - -### Hierarchy example - -The following diagram show how a Root TAO accredits two TAOs lower in the hierarchy: - -
- -where: - -* **Root of Trust (rTAO) DID:** - * Controls Verifiable Accreditations (VAs) issued from rTAO to TAOs. -* **Accredited Org (TAO) DID:** - * Controls Verifiable Accreditations (VAs) issued from TAOs to Trusted Issuers. -* **Trusted Issuer DID:** - * Issues Verifiable Credentials with Issuance Policies -* **Verifiable Credentials** - * Issued including the Issuance Policies in the `TermsOfUse` section of the data model. - * Issued to Digital Identity Wallet of user or organisation, which can be later verified up the entire trust chain.