{"guid":"61ab92a1-92e5-56ff-9fa8-bb1156c73988","title":"re:claimID - Self-sovereign, Decentralised Identity Management and Personal Data Sharing [YBTI/wefixthenet session]","subtitle":null,"slug":"36c3-oio-161-re-claimid-self-sovereign-decentralised-identity-management-and-personal-data-sharing-ybti-wefixthenet-session-","link":"https://talks.oio.social/36c3-oio/talk/XHLTUD/","description":"In this talk we present re:claimID, a decentralized, self-sovereign identity\nmanagement system. re:claimID allows users to reclaim authority over their\nidentities and personal data. The system is built on top if a\nstate-of-the-art, decentralized directory service: The GNU Name System.\nBuilt-in cryptographic mechanisms allow users to selectively disclose\npersonal data and the directory service ensures that this data is accessible\nto authorized parties even if the user is offline. Through OpenID Connect,\nintegration and use of re:claimID is straight-forward and authorization\nflows are familiar. In this talk, we present the current state of re:claimID\nas well as a future roadmap.\n\nToday, users are often required to share personal data, like email\naddresses, to use services on the web. As part of normal service operation,\nsuch as notifications or billing, services require access to -- ideally\nfresh and correct -- user data. Sharing attributes in the Web today is often\ndone via centralized service providers to reduce data redundancy and to give\nservices access to current, up-to-date information even if the user is\ncurrently offline. Abuse of this power is theoretically limited by local\nlaws and regulations. But, the past has shown that even well-meaning\nidentity providers struggle to keep user data safe as they become major\ntargets for hackers and nation state actors while striving for monetizing\nanonymized statistics from these data. We advocate for a new, decentralized\nway for users to manage their identities for the following reasons:\n\n*       The current state of omniscient identity providers is a significant\nthreat to the users' privacy.\n\n*       Users must completely trust the service provider with respect to\nprotecting the integrity and confidentiality of their identity in their\ninterest.\n\n*       The service provider itself is facing substantial liability risks\ngiven the responsibility of securely managing potentially sensitive personal\ndata of millions of users.\n\n \n\nWe present re:claimID, a decentralized identity service with the following\nproperties:\n\n*       Self-sovereign: You manage your identities and attributes locally on\nyour computer. No need to trust a third party service with your data.\n\n*       Decentralized: You can share your identity attributes securely over\na decentralized name system. This allows your friends to access your shared\ndata without the need of a trusted third party. \n\n*       Standard-compliant: You can use OpenID Connect to integrate reclaim\nin your web sites.","original_language":"eng","persons":["dvn"],"tags":["36c3-oio","161","2019","Ethics, Society \u0026 Politics","OpenInfrastructureOrbit"],"view_count":611,"promoted":false,"date":"2019-12-27T18:30:00.000+01:00","release_date":"2019-12-29T01:00:00.000+01:00","updated_at":"2026-01-17T16:00:11.916+01:00","length":2681,"duration":2681,"thumb_url":"https://static.media.ccc.de/media/congress/2019/oio/161-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2019/oio/161-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2019/oio/161-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2019/oio/161-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/36c3-oio-161-re-claimid-self-sovereign-decentralised-identity-management-and-personal-data-sharing-ybti-wefixthenet-session-","url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_title":"36C3: Resource Exhaustion","conference_url":"https://api.media.ccc.de/public/conferences/36c3","related":[],"recordings":[{"size":385,"length":2681,"mime_type":"video/webm","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-12-30T13:37:58.083+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/webm-hd/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/43655","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"},{"size":24,"length":2681,"mime_type":"audio/opus","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2019-12-29T21:04:24.981+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/opus/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_opus.opus","url":"https://api.media.ccc.de/public/recordings/43344","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"},{"size":71,"length":2681,"mime_type":"video/mp4","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-12-29T21:04:13.254+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/h264-sd/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_sd.mp4","url":"https://api.media.ccc.de/public/recordings/43343","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"},{"size":40,"length":2681,"mime_type":"audio/mpeg","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2019-12-29T21:03:52.713+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/mp3/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/43342","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"},{"size":101,"length":2681,"mime_type":"video/webm","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-12-29T20:34:22.649+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/webm-sd/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/43301","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"},{"size":435,"length":2681,"mime_type":"video/mp4","language":"eng","filename":"36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-12-29T20:16:22.031+01:00","recording_url":"https://cdn.media.ccc.de/congress/2019/h264-hd/36c3-oio-161-eng-reclaimID_-_Self-sovereign_Decentralised_Identity_Management_and_Personal_Data_Sharing_YBTI_wefixthenet_session_hd.mp4","url":"https://api.media.ccc.de/public/recordings/43246","event_url":"https://api.media.ccc.de/public/events/61ab92a1-92e5-56ff-9fa8-bb1156c73988","conference_url":"https://api.media.ccc.de/public/conferences/36c3"}]}