NGI Navigator (Prototype)

Enabling Zero Trust Architectures w/ OAuth20 & VC

Enabling Zero Trust Architectures using OAuth20 and Verifiable Credentials implements Authentication and Authorization for HTTP-based resources using JWT-encoded Verifiable Credentials

Additional Information

ZeroTrustVC facilitates capabilities-based access control supports efficient VC revocation and enables 'authentication and authorization of every access request' enabling resource access over public untrusted networks aka Zero -Trust Architectures (ZTAs)

ZeroTrustVC also enables authorization servers to provide an efficient and privacy preserving revocation mechanism This revocation mechanism includes a compact list of revoked VCs At any point any entity can verify the status of a VC

End-User Relevance

The proposed solution offers a more secure way for accessing protected resources--no matter where those resources are located Our solution facilitates security management integration of new applications and interoperability with existing systems

Community Discussion 3 comments

MK
Maria Kowalski 2 days ago

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation.

JD
Jean Dupont 1 week ago

Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident.

AS
Anna Schmidt 2 weeks ago

Sunt in culpa qui officia deserunt mollit anim id est laborum. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium.

Disclaimer: Our solution is meant for the use case of Capabilities-Based Access Control in a Zero-Trust architecture and is not meant to create a full SSI ecosystem Read full project summary at https://gitlabgrnetgr/essif-lab/infrastructure_3/aue-brc/ZeroTrustVC_p