Me, myself and my Car Dossier

Transcription

1 Me, myself and my Car Dossier Data protection and identities in the age of blockchains Matthias Loepfe Head of AdNovum Incubator 1

2 What is Blockchain? Blockchain Cryptocurrency Blockchain = Technology 2

3 The Chain of Blocks 3

4 Blockchain Distribution and Consensus 4

5 Blockchain-Types Anybody can participate anonymously Global Scope Transactions are public und transparent Like the "Internet" Examples: Bitcoin, Ethereum PRIVATE CONSORTIUM BLOCKCHAINS Only authenticated participants Enterprise or Consortium Scope Data Privacy, Transactions are private Like the "Intranet" Examples: Hyperledger Fabric, R3 Corda 5

6 What Is A Smart Contract? It depends Smart Contract was coined in 1994 by Nick Szabo Today mostly used in the sense of a general purpose programming language executed on a blockchain Hyperledger Fabric uses Golang (named chain Code, to implement biz logic) Code deployment done as source code with blockchain transaction Executed on blockchain nodes result underlies consensus 6

7 Car Dossier Project

8 Is this a good deal or not? Felix wants to sell his car EUR Regula is interested to buy it Audi A3 Sportback 1.4 TFSI, 2015 Timely serviced? Correct mileage? Accident-free? 8

9 Imagine it would be like this TRY IT! Please with mobile phone: ios, Photo and Link? Click (Link to adnovum.ch) 9

10 10

11 Motivation new registrations per year 4,5 Mio. registered passenger cars in Switzerland vehicles change their owners every year 9,2 years is the average life cycle of a vehicle 11

12 Today s Situation Car Owner Manufacturer Car Dealer Scrap Merchant Insurance Company Car Sharing Company Garage Regulator 12

13 Scrap Car Dossier Approach merchant Car Owner Scrap Merchant Car Sharing Company Car sharing company Garage Figure 2. High-level architecture of the proposed solution Scrap merchant Regulator Manufacturer Car Dossier Shared Ledger Shared Ledger Smart Contracts Records of asset transfer Scrap merchant Car sharing company Scrap merchant Smart Contracts Regulator Scrap Garage merchant Regulator Figure 2. High-level architecture of the proposed solution Car sharing Records of asset Scrap company transfer merchant Garage Regulator Car Dealer Conditions for asset transfer Insurance Company Regulator Regulator Regulator Garage Figure 2. High-level architecture of the proposed solution Shared Ledger Records of asset transfer Shared Ledger Shared Ledger Shared Ledger Manufacturer Dealer Insurance company Smart Contra Conditions f asset transf Smart Contra Conditions asset trans Smart Contract Manu Smart Con 13

14 Project Setup Consortium of partners from universities and industry University of Zurich, Lucerne School of Information Technology AdNovum, AMAG, AXA, Mobility, Aargau Road Traffic Authority Co-financed by the Swiss Innovation Agency (Innosuisse) Enabling 4 positions for PhD students Main goals Development of a minimal viable product Implement and validate use case selling/buying a used car Implementation of the necessary governance on the system, including privacy topics 14

15 Data Privacy Data privacy is a MUST compliant with current regulations But a blockchain is not always your friend! It first has to be proven how: data can be made available in a distributed and secure way. fine-granular data access rights can be issued and removed. the right to be forgotten can be implemented. 15

16 Identities know your ecosystem Objects (Cars) Corporates Independent, trust anchors (root certs) in blockchain (federation) Regulated roles (StVA, Importer, Insurer, Leasing provider) Privates (car owner, holder, driver, buyer) Self-Sovereign Identity PhD Thesis: Assuring self-sovereignty in consortium blockchain applications Decentralized identifiers (W3C DID spec) Decentralized Identity Management Systems (DIMS) 16

17 Ten Principles of Self-Sovereignty Users must have an independent existence. Users must control their identities. Users must have access to their own data. Systems and algorithms must be transparent. Identities must be long-lived. Information and services concerning identity must be portable. Identities should be as widely usable as possible. Users must agree to the use of their identity. Disclosure of claims must be minimized. The rights of users must be protected. 17

18 Promising Approaches uport Sovrin -> Hyperledger Indy KYC-Chain Blockstack Enigma Civic BlockCerts 18

19 Matthias Loepfe, Head of AdNovum Incubator è Thank you! 19