@@ -5300,39 +5300,55 @@ <h3>Personally Identifiable Information</h3>
5300
5300
< section class ="informative ">
5301
5301
< h3 > Identifier-Based Correlation</ h3 >
5302
5302
5303
+ < p >
5304
+ [=Verifiable credentials=] might contain long-lived identifiers that could be
5305
+ used to correlate individuals. These types of identifiers include [=subject=]
5306
+ identifiers, email addresses, government-issued identifiers, organization-issued
5307
+ identifiers, addresses, healthcare vitals, and many other sorts of long-lived
5308
+ identifiers. Implementers of software used by [=holders=] are advised to strive
5309
+ to detect identifiers in [=verifiable credentials=] containing information that
5310
+ could be used to correlate individuals and warn [=holders=] when they are
5311
+ getting ready to share this information. The rest of this section elaborates
5312
+ on guidance related to the use of long-lived identifiers.
5313
+ </ p >
5314
+
5303
5315
< p >
5304
5316
[=Subjects=] of [=verifiable credentials=] are identified using the `id`
5305
5317
property, as defined in Section [[[#identifiers]]], and are used in places such
5306
5318
as the `credentialSubject.id` property. The identifiers used to identify a
5307
5319
[=subject=] create a greater risk of correlation when the identifiers are
5308
- long-lived or used across more than one web domain.
5320
+ long-lived or used across more than one web domain. Other types of identifiers
5321
+ that fall into this category are email addresses, government-issued identifiers,
5322
+ and organization-issued identifiers.
5309
5323
</ p >
5310
5324
5311
5325
< p >
5312
5326
Similarly, disclosing the [=credential=] identifier (such as in
5313
- [[[#example-usage-of-the-id-property]]]) leads to
5314
- situations where multiple [=verifiers=], or an [=issuer=] and a [=verifier=],
5315
- can collude to correlate the [=holder=]. If [=holders=] want to reduce
5316
- correlation, they are advised to use [=verifiable credentials=] from [=issuers=]
5317
- that allow selectively disclosing correlating identifiers in a [=verifiable
5318
- presentation=]. Such approaches expect the [=holder=] to generate the identifier
5319
- and might even allow hiding the identifier from the [=issuer=] through the use
5320
- of techniques like
5327
+ [[[#example-usage-of-the-id-property]]]) leads to situations where multiple
5328
+ [=verifiers=], or an [=issuer=] and a [=verifier=], can collude to correlate the
5329
+ [=holder=].
5330
+ </ p >
5331
+
5332
+ < p >
5333
+ If [=holders=] want to reduce correlation, they are advised to use [=verifiable
5334
+ credentials=] from [=issuers=] that allow selectively disclosing correlating
5335
+ identifiers in a [=verifiable presentation=]. Such approaches expect the
5336
+ [=holder=] to generate the identifier and might even allow hiding the identifier
5337
+ from the [=issuer=] through the use of techniques like
5321
5338
< a href ="https://en.wikipedia.org/wiki/Blind_signature "> blind signatures</ a > ,
5322
5339
while still keeping the identifier embedded and signed in the [=verifiable
5323
5340
credential=].
5324
5341
</ p >
5325
5342
5326
5343
< p >
5327
- Securing mechanism specification authors are advised to avoid enabling
5344
+ [= Securing mechanism=] specification authors are advised to avoid enabling
5328
5345
identifier-based correlation by designing their technologies, when possible,
5329
5346
to avoid the use of correlating identifiers.
5330
5347
</ p >
5331
5348
5332
5349
< p >
5333
- If strong anti-correlation properties are a requirement in a
5334
- [=verifiable credentials=] system, it is strongly advised that identifiers
5335
- are either:
5350
+ If strong anti-correlation properties are a requirement in a [=verifiable
5351
+ credentials=] system, it is strongly advised that identifiers are either:
5336
5352
</ p >
5337
5353
5338
5354
< ul >
@@ -5397,26 +5413,6 @@ <h3>Signature-Based Correlation</h3>
5397
5413
</ p >
5398
5414
</ section >
5399
5415
5400
- < section class ="informative ">
5401
- < h3 > Long-Lived-Identifier-Based Correlation</ h3 >
5402
-
5403
- < p >
5404
- [=Verifiable credentials=] might contain long-lived identifiers that could
5405
- be used to correlate individuals. These types of identifiers include
5406
- [=subject=] identifiers, email addresses, government-issued identifiers,
5407
- organization-issued identifiers, addresses, healthcare vitals,
5408
- [=verifiable credential=]-specific JSON-LD contexts, and many other sorts of
5409
- long-lived identifiers.
5410
- </ p >
5411
-
5412
- < p >
5413
- Organizations providing software to [=holders=] should strive to identify
5414
- fields in [=verifiable credentials=] containing information that could be
5415
- used to correlate individuals and warn [=holders=] when this information is
5416
- shared.
5417
- </ p >
5418
- </ section >
5419
-
5420
5416
< section class ="informative ">
5421
5417
< h3 > Metadata-based Correlation</ h3 >
5422
5418
0 commit comments