Re:Irma: Open-source, attribute based credentials
by formerly_proven on Saturday January 23, 2021 @11:46AM
(#25883727)
Attribute-based credentials refers to cryptographic systems where someone can produce a proof that they fulfill a certain attribute. Canonical examples are things like an employee ID card, where the ID card can produce a proof that they're an employee, have clearance level X or are part of group Y without the proof containing any information beyond that. Another example would be things like national ID cards, where you could make a check for "is older than 18 years" and the system only receives a cryptographically-verifiable answer to that question, without being able to infer anything else.
[ Parent
| on HN ]
Re:Irma: Open-source, attribute based credentials
by coldcog on Saturday January 23, 2021 @12:11PM
(#25884059)
Indeed the attribute-based nature of IRMA makes it more general than OpenID Connect. Users can collect all sorts of attributes in their IRMA app, and then selectively disclose any subset of those attributes, as appropriate to the use case. This includes authentication like OpenID Connect (e.g. the user could disclose a username attribute), but also other use cases such as indeed proving that you are older than 18, or anonymously proving membership of a group (using unlinkability, see below), or providing authenticated personal data such as your address or date of birth.