Nuggets Collab.land Integration Proposal

[Alastairij]

Abstract

Nuggets (a system for verified self-sovereign digital identity) will allow collab.land community members to have control and portability of their online reputation via web3 and DAO participation, based on merit. All while advancing privacy, security and preventing fraud and scams.

Motivation

Why

1. Collab.land wants to be fully decentralized but make it effortless for the community members through UX/UI.
2. Prevent fraud and scams in Discord communities.
3. Enable a community member to have better control and portability of their online reputation

What benefit

1. Enable Verified self-sovereign digital identities which benefits:

   1. Community member ownership and control

   2. Privacy and security

   3. Trusted transactions

   4. Verified two way communication

   5. Verified community members (not just emails)

   6. Verified transportable reputation through W3C Verifiable Credentials (VCs)

   7. Prevent fraud and scams in Discord communities.

   8. Community member control and portability of their online reputation in web3 and DAO participation based on merit.

   9. Open standards including:

      1. W3C Verifiable Credentials (VCs)
      2. Decentralized Identifiers (DIDs)
      3. DIDComm Messaging (DIDComm)
      4. Self-Sovereign ID (SSI) Global interoperability

Use Cases

1. Transactions within communities including:

   1. Admin communication
   2. Community member communication and interaction
   3. Establishing reputation, and be able to transfer it between communities
   4. Establish merit and be able to transfer it between communities

Specification

The specification of Nuggets verified self-sovereign digital identities as applied to collab.land communities. Will include:

1. Collab.land Issuance of a QR Code or deeplink to connect and establish a Nuggets verified self-sovereign digital identity

2. Upon establishing a Nuggets verified self-sovereign digital identity:

   1. Collab.land can:

      1. Issue a community member with a VC to say they are SSI verified
      2. Issue a community member with a VC to establish merit
      3. Issue community member with a VC to establish reputation

   2. Collab.land community member can:

      1. Verify communications from Collab.land are genuine through VC verification
      2. Verify communications from other SSI verified community members are genuine through VC verification[a]
      3. Verify community members collab.land merit
      4. Verify community members collab.land reputation

Rationale

Nuggets verified self-sovereign digital identity was used because:

1. Upon onboarding the community member is verified with a photo ID that is biometrically matched
2. All onboarding verifications are deleted with the community members being the only one to keep the data in their own personally encrypted wallet vault
3. Verify without having to actually show the data (through Zero-knowledge proofs)
4. Community members own and control their data
5. Private, secure encrypted to the Community members own private key
6. Decentralized through open standard DIDs
7. Cross-platform

Backwards Compatibility

Any updates to the identity will require the community member to be re-verified.

Test Cases

Collab.land will provide:

1. Will establish a DID with private key(s) and BBS+ Verifiable credentials (potentially components for this can be provided by Nuggets) in their secure environment to enable:

   1. Creation of QR code or Deeplinks for DIDComm communication initialisation

   2. Issuance of Verifiable credentials to community members for:

      1. Initial community member verification
      2. Merit
      3. Reputation

Nuggets will provide:

1. Nuggets verified self-sovereign digital identity platform including:

   1. iOS and Android Digital Wallet App

   2. The ability to issue and verify credentials

   3. Specific Collab.land flows including:

      1. Initial community member verification
      2. Merit
      3. Reputation

Reference Implementation

To be provided upon completion of POC

Security Considerations

Nuggets verified self-sovereign digital identity security includes:

1. All community member data is encrypted with their own private key which only they have access to (Nuggets is a BIP 39 wallet and backup is through a 12 word recovery phrase).
2. W3C Verifiable Credentials (VCs)
3. Decentralized Identifiers (DIDs)
4. DIDComm Messaging (DIDComm)

Nuggets App Security features include:

1. Certificate Pinning
2. Prevention of Jailbroken phone access
3. Prevention of Root take over access
4. Biometric identity verification
5. PIN Secured Phone required
6. Deletion of Keychain on uninstall, removal, reinstall
7. Regular, independent security audits

Similar Reference Implementations

Currently Collab.land community members only verification is through their email with discord.

Rights

Opens standards are covered by:

Copyright © 2021 W3C® (MIT, ERCIM, Keio, Beihang). W3C liability, trademark and permissive document license rules apply.

[a]we can only verify whats been established by the Self-Sovereign Identity (SSI), Name, age etc