Putting Identities On-Chain (Passport ZKP) by Lasha | Devcon SEA

[Music] hi everyone I'm really into graphs in terms of identity but what I'm not into I'm going to talk about that so I work on rimo and we focus on this kind of ZK permissionless identities if you're trying to use your identity on chain it does doesn't matter now you tap it you scan it you push your fingerprint to it you kind of rely on a service or a company that acts as a kind of an attester to your identity this dependency is kind of problematic because like forget like this kind of risk of like collusion or like a certain company going mad trying to take over the world the problem that we already see is that such systems don't scale especially under the regulatory pressure so if somebody wants to just impose a ban on the system they know exactly which Hardware operator to go after and we've seen it already in multiple cases across the world to kind of solve this challenge we had to go to the fundamentals of building the permissionless systems and during the research we found out that mostly these dependencies apart from like being this kind of a business issuer business on its own is based on the so-called kind of trilemma so in a fully decentralized environment such as like blockchains you couldn't have have two properties such as uniqueness and privacy at the same time because if you want to generate a nullifier and to make it verifiable you need to push it on chain you're losing the Privacy if you enable the client side blinding of it then the user is able to generate as many nullifiers and unique numbers as possible and that means that you won't have a uniqueness for certain cases so our solution to solve that was to kind of zoom out and create a shared ZK registry on chain and on an example of like biometric passports that we already already have and the fact is that like passports contain the chip and all the information and signature to verify certain attributes about ourselves so with the passports we can enable the client side issuance using your phone then forming a list of uniqueness hashes directly on chain but as a concept introduces kind of a shared permissionless registry of unique identifiers the more apps you have it's super hard to deduce for exactly what activities those identities have been used so more passports more identities more stuff you put within this registry the Privacy strengthens so even if somebody has a copy like a government has a copy of your passport somebody gets on hold of it all they can understand is that you registered in this vast decentralized permissionless registry but never understand you came there to get your meme coins or like vote against the regime we actually battle tested this permissionless registry with Russian elections where just Russian citizens could tap their passports and vote against the regimes the next day after the app was released Kremlin just like had no idea where to Target and what to take down so all they did they filed a complain to an Apple store that a certain app was violating like the counterfeiting Nation IDs which is kind of yeah so the advantage of such systems is that as there not nor Hardware nor the client side software dependent the next day the new apps would pop up and people would continue to vote and that's basically the true power of decentralization a so even when building this this identity systems we should focus on this new way of full decentralization and empowering users because that's the systems that scale those Registries could have passports as a single instance and they could extend to much wider things like you can build different commitment trees ZK reputation systems or just like put even the sanctions or like some kind of band list and make it like publicly verifiable and the cool part about is like that anyone can do it and use it so as the next step this idea of permissionless onchain Registries we want to propose it as an ERC and our happy to like get the community feedback engagement from all these people working in the identities but the existing implementation of registry that is lived and used by different countries different applications we will be bringing on ethereum as a rollup because I believe this is the biggest alignment from a vision perspective because at a near future everyone just like using your phone should run a node and secure a network and the very same phone simultaneously should be managing your entire identity thank [Applause] you thank you so much lasasha