Bringing real-world identity on-chain by Yanis | Devcon SEA

[Music] hi everybody I hope that you're super excited I have H five minutes to um convince you that we can we can turn this uh into this so basically uh what I'm going to introduce is um the concept of like signed digital identities um so in the world you can find a lot of digital identities programs and usually like um you will find them in the form of like a signed um identity document um usually it looks like something like that so you have like the government uh here it's Alice and the identity Al of Alice is like represented as a concatenation of some attributes her name her date of birth her address uh then we Ash this all these attributes and we sign them so the government use his own private key to sign them um then he puts it into a passport into like a card um or in the form of like an NFC chip or a QR code and so basically Bob the verifier needs the signature the message and uh the public key that is publicly published on the government website to verify the signature so that's great that's uh I that's what uh how things are processed like at the border uh basically but the thing is that if Bob want to know more about Alis like if he wants to like know if she is more more than 18 years old for example then Alice would have like to disclose her wall identity um so how can we solve that um we can solve that actually uh using znar so um I'm not going to introduce znar but basically like you can set some input of a function as a private and in that case we are using znar to like in our same verification process we are now hiding the signature and the message so now we have like a way to verify the signature that is inside your identity document in a privacy anding way and we are now able like to access some data inside of snackland and extract it and then selectively disclose so I can um set aover and say hey um I want to like extract the date of birth in compute like uh something such as like is the date is the age um super uh to 21 and then Bob the verifier now just only need like a snar proof and to get the public key of the government to verify this proof so now let's talk to ananad the project working we are working on um so anadar is applied to Adar Adar is the biggest identity program in the world with like 1.2 billion people having an Adar identity and basically so we developed exactly what I showed um and in a um you can uh you can integrate it like in a very um fast way under five minutes we build a world as a whole experience about how we can use this znar to authenticate people instead of using Google Google authentication for example so now the user has to like um input his QR code add our secure QR code as in the form of a PNG um and then can connect and then you have like a comprehensive interface um saying what's the prover like is going to reveal to the verifier and so now you can see like in that example there is no selective disclosure but um the user is going to sign his proof with like his own ethereum address for example so what are the use cases so um as I said um I wanted to convince you like that it's a good authentication mechanism um so you can Target specific countries uh specific ages um it's also like a way to have like antici mechanisms on chain because now you can securely bring bring your um personal identity on chain securely through znar um you can do kyc U so you can um verify that a certain person for example comes from a certain region or a certain country and uh you can also like bind it with some account obstruction to have like a wallet wallet recovery mechanism based on like your identity and um we uh also did like a program before Defcon to incentivize like Indian hackers to come to um to Defcon and so you were able to redeem like a discounted voucher if you are able to prove that you were from India using anadar what's next um next we are tackling digil Locker so basically digil Locker in India is the application where you can store all your official documents your driving license your degrees uh your bank statements and it this is this is actually signed data so we know how to snacky it and we know how to generate proofs about it so now you can imagine like authentication mechanisms that are like very deep but still have like a very strong PR privacy layer and this is um so I'm working on anadar but here is like a a sample of all the other digital identity programs that could be also snack ified thank you thank you Janis so we have three minutes to take questions uh anyone from the audience any burning question for yanis I have one gentleman over there and then one over here hello um so I wanted to ask uh by proving the ZK identities and only exposing data that is needed for that is needed for an application uh would you say that uh digital identity systems like this can be used in applications where government compliance is required for kyc purposes is that something that this project aims to solve yes I think that's a discussion that needs to happen uh but basically what you're doing is that you have like the insurance which is the government and then you'll do like some kind of import you're importing this data through a Zs verification then the question is like how you export it then like because as a government like you generated a signature and then you receive this weth format like saying grow 16 whatever they don't know how to handle that so yeah of course like there is a lot of discussions uh about like what should be like the way to standardize this type of proof how can be can it be consumed by a government or like another third party so that's actually like something we are working on and uh yeah that's a good question then the gentleman a purple shirt hey um firstly thank you for creating an on another I think it helps a lot of people including myself and so many other Indian developers to come here um the question I have is I think Adar is a great example um and I think the infrastructure for Adar is set up for something like this what about other places where digital identity platforms have not been set up generally how would you see something like this coming up in those kind of countries yes that's a good question so I think there like the design landscape now that Z has is way more advanced like um the design lcap is like quite broad I would say that if you have like any form of like digital identities like a signature inside of a document that should be like the main way to go but if you don't have that you you have other ways like for example in Nigeria they have like a a sec endpoint IPI endpoint that you can Target and they will give you like a assigned response um not assigned response sorry but you can like use for example something like TLS notary um which is like wrongly called ZK TLs but you can generate a TLS TS proof that you have like some identity from this API you can also use maybe ZK email to um prove that you have an email that state that you have you you pass through um a k process from another provider uh yeah and in that case if you don't have all of that I guess that other teams are like exploring like Biometrics and this type of infrastructure uh to prove uh uh the fact that you're human yeah thanks okay then that's it for our question I'm sorry our we're really short on time thank you again Yannis let's give Yannis a another round of applause