Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update of PADI, includes suggestions of issue #96 #104

Closed
wants to merge 2 commits into from
Closed

update of PADI, includes suggestions of issue #96 #104

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1dc5a55
Progress on #96.
Jul 1, 2019
fbf8b30
Added parking permit use-case.
Jul 1, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
69 changes: 64 additions & 5 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -374,7 +374,7 @@ <h3>Healthcare</h3>
through her health care network and goes in for treatment. She is a new patient, so the
clinic needs to know who she is and how she will be paying. When checking in, she
presents her verifiable claim that demonstrates her identity and her proof of
insurance. When the clinc submits this to the insurance company, they can automatically
insurance. When the clinic submits this to the insurance company, they can automatically
ascertain that she submitted her proof of identity and insurance to the provider and
granted the physician the ability to submit the claim for payment.</dd>
<dt>
Expand Down Expand Up @@ -438,7 +438,7 @@ <h3>Professional Credentials</h3>
<udef>C.2 Busy doctor</udef>
</dt>
<dd>Barney was a board-certified physician, but he ran out of
time to complete his contuning education requirements and his
time to complete his continuing education requirements and his
certification lapsed. Since the board can revoke his
certification, <a>credential inspectors</a> will automatically be
aware that he can no longer issue prescriptions or perform medical
Expand All @@ -450,9 +450,13 @@ <h3>Professional Credentials</h3>
that she was a trained Project Manager. It was later discovered
that BigTraining Co. was not actually training anyone, and their
organization's certificate was revoked via the US Department of
Education's Accreditation Database. Jane's credential is
therefore invalid, and prospective employers will be aware of
this when they check her certifications.</dd>
Education's Accreditation Database, invalidating Jane's credential.
Jane's current employer performs a monthly check on the validity of
the credentials that its employees provided at the time they were hired.
So, within a month, he will find out that Jane has not been trained
appropriately, and can take corresponding action.
Also, any prospective employers will become aware of
this when they check Jane's certifications.</dd>
<dt>
<udef>C.4 New employer</udef>
</dt>
Expand Down Expand Up @@ -491,6 +495,13 @@ <h3>Professional Credentials</h3>
only verifying that she is the <a>holder</a> of the certificate, that she is the <a>subject</a> of it, and that she is an aid worker. In this
way she maintains her anonymity in this controversial forum while
still being able to assist her fellow countrymen.</dd>
<dd>Social healthcare platforms, such as those on which Josie and Paula post their profiles and messages,
enhance the trustworthiness of such posts by publishing (possibly anonymized) claims and credentials
that the platform itself has verified at the time they were posted.
However, as time elapses, so does the likelihood that such claims are no longer valid,
e.g. because they have expired, or they have been revoked.
To ensure the trustworthiness of its content, the platform decides to check the validity of all claims
that have been posted on a daily basis, and to (temporarily) remove any invalid claims, or posts that have such claims.</dd>
<dt>
<udef>C.6 Job applicant</udef>
</dt>
Expand Down Expand Up @@ -553,6 +564,24 @@ <h3>Legal Identity</h3>
this because it is available from many places often the Internet. Since it is
verifiable, the IFRC is comfortable vouching for them and resettling them in a safer
area for the duration of the conflict.</dd>
<dt>
<udef>L.5 Parking permit</udef>
</dt>
<dd>The city of Groningen issues at most one parking permit to any family\
whose members live at the same city address. Also, a parking permit is only issued
if the applicant owns or leases the vehicle. In order to automatically issue and
enforce the parking permit, the city of Groningen requests every applicant
to provide two credentials: one that is issued by the municipality itself that
states that the applicant resides at some address in the city,
and another one that is issued by the car registration agency of the Netherlands
that states the licence plate of the vehicle that the applicant owns or leases.
Several months after Michiel has successfully applied for a parking permit in Groningen,
he decides to sell his car, which implies a de-registration of him as owner,
and the ownership credential to be revoked. When the city checks its parking permits
(e.g. every week/month/year), it will detect that Michiel is no longer eligable
for a parking permit, which it can subsequently revoke.
Note that if Michiel did not decide to sell the car (and supposing that the credentials have not expired),
he would not need to re-apply for such a permit every year, which saves on agony.</dd>
</dl>
</section>
</section>
Expand Down Expand Up @@ -708,6 +737,36 @@ <h3>Revoke Claim</h3>
</dd>
</dl>
</section>
<section>
<h3>Check Revocation</h3>
<dl class="dl-horizontal">
<dt>Requirement</dt>
<dd>It MUST be possible for the <a>verifier</a> that has been presented with a revocable claim,
to check whether or not that claim has been revoked, not only when it received that claim, but also at later times.
Such checking MUST NOT require the <a>verifier</a> to contact the <a>holder</a> from which the claim was received.
Also, it MUST NOT require the <a>verifier</a> to contact the <a>issuer</a> of that claim.
<dt>Motivation</dt>
<dd>Claims that are valid at the time a <a>verifier</a> receives them (and checks their validity),
may no longer be valid at the time that they are actually used, e.g. for making decisions.
This may be caused e.g. by expiration of (the credential that contains) the claim,
or by that credential having been revoked by its <a>issuer</a>.
Using claims whose validity no longer is verifiable, to make decisions, comes with a risk
that increases as the period between the validity-check and the use of such claims gets longer.
In order to thwart this risk, the <a>verifier</a> must be able to check the validity of such claims
immediately prior to using them.
Note that since the <a>verifier</a>, at this point in time, may not be able to connect to the <a>holder</a>,
it must be able to check the validity on its own.
Also note that for reasons of privacy, the <a>verifier</a> should not connect to the <a>issuer</a>
at the time it checks the validity of the claim, since the <a>issuer</a> could then learn which of its credentials
are being used by which <a>verifier</a>s.</dd>
<dt>Needs</dt>
<dd><uref>F.1</uref>, <uref>F.5</uref>, <uref>E.2</uref>, <uref>E.4</uref>, <uref>H.2</uref>, <uref>H.4</uref>
, <uref>C.2</uref>, <uref>C.3</uref>, <uref>C.5</uref>, <uref>L.5</uref>.
Also, the need for this is illustrated in section 5.2,
where the NOAA needs to check the current status of all of Pat's certifications.</dd>
<div class="note">The above paragraph on Needs needs to be revised.</div>
</dl>
</section>
</section>
<section>
<h2>Focal Use Cases</h2>
Expand Down