1

我正在尝试更深入地了解超级账本 indy,因此我尝试了https://try.connect.me/提供的教程。

第一个环节是拿到Faber学院的成绩单。我从未注册或提供过爱丽丝的个人信息,但费伯学院返回了准确的爱丽丝转录,其中已经包括爱丽丝的名字。

现在,我的问题是,如果我使用 indy 构建一个新的移动应用程序,我应该什么时候从应用程序用户那里获取用户名等个人信息?

4

1 回答 1

0

I think the name is just hardcoded or automatically assigned to the connection just for simplicity of the tutorial.

There should be a middle step where Faber asks for proof who has sent the request for connection. You can check the video with demonstration which shows Faber asks for proof of user's name via proof request after connection has been established between two identities.

Up until requesting a connection, the connection is just pairwise of DIDs for creating secure communication and the Faber doesn't know or more precisely cannot be sure if the requester is Alice who graduated at Faber University.

So in reality before Faber requests for proof that Alice is actually Alice (any personal information Alice owns), she should have already received a digital credential of her personal ID provided and issued by eg. Government (as it is in the demo video mentioned above). Once she owns the credential she can create proof of her name (and another personal data she is requested to prove) requested by Faber so Faber will know Alice is Alice.

I think this step is missing in the example just for simplicity.

于 2020-01-09T13:55:55.760 回答