Skip to content
This repository has been archived by the owner on Oct 29, 2019. It is now read-only.

Add controller pattern example (also replaces Guardianship). #242

Merged
merged 1 commit into from
Aug 2, 2019
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 23 additions & 5 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1366,22 +1366,40 @@ <h2>

<p>
There are at least two suggested methods for implementing
Authorization, Delegation, and the concept of Guardianship:
Authorization and Delegation, which may be layered:
</p>

<ol>
<li>
A <a>Decentralized Identifier Registry</a> could implement a coarse
grained <code>guardian</code> pattern by reusing the same proof purpose
pattern used by the <code>authentication</code> property, or more preferably
grained <code>controller</code> pattern by enabling DID documents to
express the DID of another DID controller that controls it, or
additionally,
</li>

<li>
A <a>Decentralized Identifier Registry</a> could implement a
Capabilities-based approach and provide more fine-grained control of
authorization, delegation, and guardianship.
Capabilities-based approach that enables further fine-grained control
of authorization and delegation.
</li>
</ol>

<p>
Example:
</p>

<pre class="example nohighlight" title="DID Document with a controller property">
{
"@context": "https://w3id.org/did/v1",
"id": "did:example:123456789abcdefghi",
"controller": "did:example:bcehfew7h32f32h7af3",
"service": [{
<span class="comment">// used to retrieve Verifiable Credentials associated with the DID</span>
"type": "VerifiableCredentialService",
"serviceEndpoint": "https://example.com/vc/"
}]
}
</pre>
</section>

<section>
Expand Down