University Issue VCs, Company HR verify VCs

Issue and verify BBS+ verifiable credentials using ASP.NET Core and trinsic.id

History

• 2023-12-02 Updated .NET 8

Use Case

As a university administrator, I want to create BBS+ verifiable credentials templates for university diplomas.

As a student, I want to authenticate using my university account (OpenID Connect Code flow with PKCE), create my verifiable credential and download this credential to my SSI Wallet.

As an HR employee, I want to verify the job candidate has a degree from this university. The HR employee needs verification but does not require to see the data.

• The sample creates university diplomas as verifiable credentials with BBS+ signatures.
• The credentials are issued using OIDC (If possible) to a candidate mobile wallet.
• The Issuer uses a trust registry so that the verifier can validate that the VC is authentic.
• The verifier uses BBS+ selective disclosure to validate a diploma. (ZKP is not possible at present)
• The university application requires an admin zone and a student zone.

PoC

Validate that the flow can be implemented using this trinsic.id ID-Tech platform

Provide a .NET Core example

In a second phase, the trusted registry will be used and implemented with an improved verification process

Debugging and setup

Setup the trinsic.id Ecosystem by creating an account and following the instructions in the documentation.

TrinsicV2WebWallet

"Universities": [
    {
        "Text": "University SSI Schweiz",
        "Value": "peaceful-booth-zrpufxfp6l3c"
    }
],

CompanyXHumanResources

The verifier credentials

"TrinsicCompanyXHumanResourcesOptions": {
    "Ecosystem": "--in-youe-secrets--",
    "ApiKey": "--in-youe-secrets--"
},
"TrustedUniversities": [
    {
        "Text": "University SSI Schweiz SSI",
        "Value": "did:web:peaceful-booth-zrpufxfp6l3c.connect.trinsic.cloud:zV9t25XybyBV7qEB1v6u9Bb"
    }
],
"TrustedCredentials": [
    {
        "Text": "University SSI Schweiz SSI Diploma",
        "Value": "https://schema.trinsic.cloud/peaceful-booth-zrpufxfp6l3c/diploma-credential-for-swiss-self-sovereign-identity-ssi"
    },
    {
        "Text": "FH Basel UX Engineer Diploma",
        "Value": "https://schema.trinsic.cloud/peaceful-booth-zrpufxfp6l3c/fh-basel-ux-engineer"
    }
],

Univeristy

The university application requires the trinsic uni credentials, the data for the issuer wallet and a SQL database to store the data.

An Azure App registration with a web setup is used to setup the application authentication. (OpenID Connect confidential client code flow with PKCE)

"TrinsicOptions": {
    "Ecosystem": "--in-your-user-secrets--",
    "ApiKey": "--in-your-user-secrets--"
    "IssuerAuthToken": "--in-your-user-secrets--",
    "IssuerWalletId": "--in-your-user-secrets--",
},
"AzureAd": {
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "--domain-name-azuread-tenant--",
    "TenantId": "--your-azuread-tenant-id--",
    "ClientId": "--client_id-azure-app-registration--",
    "CallbackPath": "/signin-oidc"
    //"ClientSecret": "--in-your-secrets--"
},

Database

Add-Migration "init"

Update-Database

Links

https://dashboard.trinsic.id/ecosystem

https://github.com/trinsic-id/sdk

https://docs.trinsic.id/dotnet/

https://www.youtube.com/watch?v=yKeIx3iE1WM

https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html

https://openid.net/specs/openid-4-verifiable-presentations-1_0.html

https://openid.net/specs/openid-connect-self-issued-v2-1_0.html

https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/