Hyperledger Membership Service Provider (MSP) Implementation with Identity Mixer Identity Mixer Overview IBM Identity Mixer is a cryptographic protocol suite for strong privacy- preserving authentication features, such as unlinkability and minimal attribute disclosure, efficiently. Briefly, the Identity Mixer protocols work as follows: Setup. The Issuer (Certificate Authority) signing key pair is generated credential issuing authority(ies) (CA). More details on the concepts and features of the Identity Mixer technology are described in the paper Concepts and Languages for Privacy-Preserving Attribute- Based

hyperledger.org/community/project-lifecycle]. Index MSP Implementation with Identity Mixer What is Identity Mixer? In some use cases it will be important to have cryptographic protocols that protect authenticating, and during the transfer of certified attributes. In Fabric this is achieved through Identity Mixer, which has a trust model and security guarantees similar to what is ensured by standard X.509 certificates privacy features such as “unlinkability” and minimal attribute disclosure. Briefly, the Identity Mixer protocols work as follows: Setup. The Issuer (Certificate Authority) signing key pair is generated

Implementation with Identity Mixer: A way to keep identities anonymous and unlinkable through the use of zero-knowledge proofs. There is a tool that can generate Identity Mixer credentials in test environments environments known as idexmigen, the documentation for which can be found in Identity Mixer MSP configuration generator (idemixgen). • Setting key-level endorsement policies: Allows the default chaincode-level There are two new capabilities for v1.3: 1. A top-level channel capability that allows Identity Mixer to work. 2. A channel\application capability that enables state-based endorsement. For more information

Implementation with Identity Mixer: A way to keep identities anonymous and unlinkable through the use of zero-knowledge proofs. There is a tool that can generate Identity Mixer credentials in test environments environments known as idexmigen, the documentation for which can be found in Identity Mixer MSP configuration generator (idemixgen). Setting key-level endorsement policies: Allows the default chaincode-level There are two new capabilities for v1.3: 1. A top-level channel capability that allows Identity Mixer to work. 2. A channel\application capability that enables state-based endorsement. For more information

new channel configuration and enforce the ACLs as desired. 8.11 MSP Implementation with Identity Mixer 8.11.1 What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication actors involved in an Idemix flow: user, issuer, and verifier. 8.11. MSP Implementation with Identity Mixer 327 hyperledger-fabricdocs Documentation, Release master • An issuer certifies a set of user’s attributes excerpt from configtx.yaml in the Hyperledger Java SDK sample: 8.11. MSP Implementation with Identity Mixer 329 hyperledger-fabricdocs Documentation, Release master - &Org1Idemix # defaultorg defines the

new channel configuration and enforce the ACLs as desired. 8.11 MSP Implementation with Identity Mixer 8.11.1 What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication actors involved in an Idemix flow: user, issuer, and verifier. 8.11. MSP Implementation with Identity Mixer 327 hyperledger-fabricdocs Documentation, Release master • An issuer certifies a set of user’s attributes excerpt from configtx.yaml in the Hyperledger Java SDK sample: 8.11. MSP Implementation with Identity Mixer 329 hyperledger-fabricdocs Documentation, Release master - &Org1Idemix # defaultorg defines the

new channel configuration and enforce the ACLs as desired. 8.11 MSP Implementation with Identity Mixer 8.11.1 What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication actors involved in an Idemix flow: user, issuer, and verifier. 8.11. MSP Implementation with Identity Mixer 327 hyperledger-fabricdocs Documentation, Release master • An issuer certifies a set of user’s attributes excerpt from configtx.yaml in the Hyperledger Java SDK sample: 8.11. MSP Implementation with Identity Mixer 329 hyperledger-fabricdocs Documentation, Release master - &Org1Idemix # defaultorg defines the

new channel configuration and enforce the ACLs as desired. 8.9 MSP Implementation with Identity Mixer 8.9.1 What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication actors involved in an Idemix flow: user, issuer, and verifier. 8.9. MSP Implementation with Identity Mixer 303 hyperledger-fabricdocs Documentation, Release master • An issuer certifies a set of user’s attributes excerpt from configtx.yaml in the Hyperledger Java SDK sample: 8.9. MSP Implementation with Identity Mixer 305 hyperledger-fabricdocs Documentation, Release master - &Org1Idemix # defaultorg defines the

are not impossible to satisfy (unless that is the intention). 8.8 MSP Implementation with Identity Mixer 8.8.1 What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication valid driver’s license and nothing else. So from the proof: 8.8. MSP Implementation with Identity Mixer 355 hyperledger-fabricdocs Documentation, Release master • Bob does not learn any additional information case: ou and role. If Fabric CA is the credential issuer: 8.8. MSP Implementation with Identity Mixer 357 hyperledger-fabricdocs Documentation, Release master • the value of the ou attribute is the

transaction endorsement and validation Access Control Lists (ACL) MSP Implementation with Identity Mixer Identity Mixer MSP configuration generator (idemixgen) The Operations Service Metrics Reference Error handling the new channel configuration and enforce the ACLs as desired. MSP Implementation with Identity Mixer What is Idemix? Idemix is a cryptographic protocol suite, which provides strong authentication as standard X.509 certificate and an Identity Mixer credential is the signature scheme that is used to certify the attributes. The signatures underlying the Identity Mixer system allow for efficient proofs of the