TRQP Worksheet

TRQP Workshjeet

The Trust Registry Query Protocol requires a particular set of information for developers that want to consume information from a system that supports TRQP.

The following provides th

• Ecosytem ID (ecosystem_id)

• Trust Registry endpoint

• Authority Assertions

• List of supported DID Methods

• ...

Core information

• ecosystem_id is TODO: generate (and do key management, etc.) did:webvh DID

• trustregistry_id) is TODO: generate (and do key management, etc.) did:webvh DID

  • TODO: how TRQP compliant endpoint at URL __________

• Authorizations: /authorizations - see below

• DID Methods: see below

Trust Registry Endpoint

Authorization Assertions

Ayra Card and the Ayra Trust Network are primarily concerned about governing:

/authorizations - /recognition - which ecosystems are managing the right to issue Ayra Card.

The following authorization assertions are active in the Ayra Cards (protocol):

• Business Card Issuing Rights

  • ayracards:businesscard:ecosystem:issue - The issuer is asserting that they have the authority to issue and that authority was granted at the ecoystem level.

  • ayracards:businesscard:global:issue - The entity (identified in TRQP by entity_id in an /authorization query) has (or does not have) this authority has direct Issue rights, granted by Ayra Association. This should only happen during the early stages of the network as the preferred method is for the issuance to be managed at the ecosystem level.

• Business Card Delegation of Issuing Rights to Ecosystem (ayracards:businesscard:ecosystem:grant-issue) - The ecosystem (identified by entity_id in a /recognition query ) has (or does not have) this authority.

  • This cross-ecosystem authorization allows an ecosystem to be delegated (this is implicit in holding the authorization) the right to issue to members of its own ecosystem.

DID Methods

The following DID Methods are supported:

• did:webvh for public identifiers

• did:key for internal DIDs (e.g. private DID Pairs)

Assurance Levels

In the initial stages of Ayra Cards no Assurance Levels are set by the Ayra Trust Network nor the Ayra Cards Governance Framework.

the /ecosystems/

Verifier Steps

A recipient of an Ayra Card should run a check on the following:

Step 1. Technical Trust Tests

• Test the credential integrity using regular credential and cryptographic steps.

• Confirm that schema requirements are met.

Step 2. Human Trust Test: Confirm Issuer is Authorized for the Ayra Card Type

Trust Registries anchor the governance (human trust) to the system in a technical way.

Confirm Issuer has the asserted authority, presented in claim/attribute issued_under_assertion_id:

• ayracards:businesscard:ecosystem:issue - this assertion needs to be confirmed with the Ecosystem Trust Registry.

  • Subsequently, the Ecosystem's assertion of ayracards:businesscard:ecosystem:grant-issue against the ATN Trust Registry.

• ayracards:businesscard:global:issue - this assertion can be tested directly against the ATN Trust Registry.