4 ms·
This could be possible if the data is stored encrypted in a public ledger (blockchain), which has time-locked script functions that permit another key to decryp
by thinkmassive 7y ago
This could be possible if the data is stored encrypted in a public ledger (blockchain), which has time-locked script functions that permit another key to decrypt certain pieces of data for a limited duration. I think something like this is a primary goal of most decentralized identity projects, some of which have been underway for around a decade.
Of course none of this stops the person with temporary access from making a copy to save forever. I doubt that problem has a technical solution but would love to be proved wrong.
- blocko 7y agoI think the solution would be sending as little data as possible to answer the query, and choosing which/how many queries to respond to. Any large scale requests for data would have to be designed in a way that minimizes intrusiveness or risks being largely ignored. I don't think there's a great way to counter spoofing or sending garbage results without sacrificing user control, but the onus to de-noise should be on whatever institution is attempting to collate data. Additionally, if it's an opt-in system focused on public good there would generally not be much incentive to mess with it as long as users are somehow verified as being in the community (cert generated/granted once after initial identity check, etc). Sadly this is all very pie in the sky at the moment, the amount of cultural change + added infrastructure required for any system like this at the scale of a country would be insane
- thinkmassive 7y agoThat's a good point. A common example is how a bar doesn't need to know your birthday, let alone your home address or driver license number, but right now it's common to hand over your entire id. All they need is a yes/no answer to "is this person 21+ today?"