Callback pattern for DID attestations
Embodiments disclosed herein are related to computing systems, computer program products, and methods for providing a callback pattern for DID attestations or claims. An attestation is provided from a first entity of a decentralized network to a second entity of the decentralized network. The attestation defines information about an owner of the attestation that has been generated by the first entity and that is to be used by the second entity. The attestation includes contact metadata that defines how to contact the first entity. In response to the attestation being provided to the second entity, the first entity is contacted using the contact metadata.
1. A computing system that is implemented in a decentralized network that implements a distributed ledger, the distributed ledger being configured to back one or more decentralized identities (DID) for one or more users of the computing system, the computing system comprising:
one or more processors; and
one or more computer-readable hardware storage devices having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to:
issue an attestation by a first entity, the attestation defining information about an owner of a decentralized identifier in the decentralized network and including contact metadata, that defines how the first entity can be contacted;
provide the attestation from the owner of the decentralized identifier to a second entity; and
in response to receiving the attestation by the second entity, cause a notification to be sent to the first entity using the contact metadata, such that the first entity, who has issued the attestation, is notified each time the attestation is presented to another entity by the owner of the decentralized identifier.
2. The computing system of claim 1 , wherein contacting the first entity comprises:
receiving an indication that the attestation has been presented by the owner of the attestation to the second entity; and
notifying the first entity that the attestation has been presented by the owner of the attestation to the second entity.
3. The computing system of claim 2 , further comprising:
recording a number of times that the owner of the attestation presents the attestation to another entity.
4. The computing system of claim 1 , wherein contacting the first entity comprises:
receiving a request from the second entity to determine if the attestation is still valid, the request including the DID of the owner of the attestation;
providing the request to the first entity using the contact metadata; and
providing verification information from the first entity to the second entity that specifies whether the attestation included in the attestation is still valid or not.
5. The computing system of claim 1 , wherein the attestation includes a DID of the owner of the attestation.
6. The computing system of claim 1 , wherein the attestation includes a pseudonymous identification of the owner of the attestation.
7. The computing system of claim 1 , wherein the attestation includes no identifier related to the owner of the attestation.
8. A method for providing a callback pattern for decentralized identifier (DID) attestations or claims, the method comprising:
issuing an attestation by a first entity, the attestation defining information about an owner of a decentralized identifier in a decentralized network and including contact metadata that defines how the first entity can be contacted;
providing the attestation from the owner of the DID to a second entity; and
in response to receiving the attestation by the second entity, causing a notification to be sent to the first entity using the contact metadata, such that the first entity, who has issued the attestation, is notified each time the attestation is presented to another entity by the owner of the decentralized identifier.
9. The method of claim 8 , wherein contacting the first entity comprises:
receiving an indication that the attestation has been presented by the owner of the attestation to the second entity; and
notifying the first entity that the attestation has been presented by the owner of the attestation to the second entity.
10. The method of claim 9 , further comprising:
recording a number of times that the owner of the attestation presents the attestation to another entity.
11. The method of claim 8 , wherein contacting the first entity comprises:
receiving a request from the second entity to determine if the attestation is still valid, the request including the DID of the owner of the attestation;
providing the request to the first entity using the contact metadata; and
providing verification information from the first entity to the second entity that specifies whether the information about the owner of the attestation included in the attestation is still valid or not.
12. The method of claim 8 , wherein the attestation includes a DID of the owner of the attestation.
13. The method of claim 8 , wherein the attestation includes a pseudonymous identification of the owner of the attestation.
14. The method of claim 8 , wherein the attestation includes no identifier related to the owner of the attestation.
15. A computer program product comprising one or more computer-readable storage media having thereon computer-executable instructions that are structured such that, when executed by one or more processors of a computing system, cause the computing system to perform at least:
issue an attestation by a first entity, the attestation defining information about an owner of a decentralized identifier in a decentralized network and including contact metadata that defines how the first entity can be contacted;
providing the attestation from the owner of the decentralized identifier (DID) a second entity; and
in response to receiving the attestation by the second entity, cause a notification to be sent to the first entity using the contact metadata, such that the first entity, who has issued the attestation, is notified each time the attestation is presented to another entity by the owner of the decentralized identifier.
16. The computer program product of claim 15 , wherein contacting the first entity comprises:
receiving an indication that the attestation has been presented by the owner of the attestation to the second entity; and
notifying the first entity that the attestation has been presented by the owner of the attestation to the second entity.
17. The computer program product of claim 15 , wherein contacting the first entity comprises:
receiving a request from the second entity to determine if the attestation is still valid, the request including the DID of the owner of the attestation;
providing the request to the first entity using the contact metadata; and
providing verification information from the first entity to the second entity that specifies whether the information about the owner of the attestation included in the attestation is still valid or not.
18. The computer program product of claim 15 , wherein the attestation includes a DID of the owner of the attestation.
19. The computer program product of claim 15 , wherein the attestation includes a pseudonymous identification of the owner of the attestation.
20. The computer program product of claim 15 , wherein the attestation includes no identifier related to the owner of the attestation.