UCAN Decentralize Auth

A presentation at IPFS þing ‘23 in April 2023 in Brussels, Belgium by Brooklyn Zelenka

Slide 1

Slide 1

UCAN Decentralize Auth 🚀 Authorise Everything, Everywhere, All At Once ✊ github.com/ucan-wg

Slide 2

Slide 2

UCAN Decentralize Auth

Slide 3

Slide 3

UCAN Decentralize Auth When speaking of computation, all too much emphasis is often placed on the [services] themselves. The fabric of a system is the dynamic reference graph. Mark Miller, An Ode to the Granovetter Diagram

Slide 4

Slide 4

UCAN Decentralize Auth Brooklyn Zelenka @expede github.com/expede

Slide 5

Slide 5

UCAN Decentralize Auth Brooklyn Zelenka @expede Cofounder & CTO at Fission discord.gg/fissioncodes @fission@plnetwork.xyz Might know a thing or two about UCAN github.com/ucan-wg PLT and distributed systems are my jam github.com/expede

Slide 6

Slide 6

UCAN Decentralize Auth Everywhere

Slide 7

Slide 7

UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge

Slide 8

Slide 8

UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge

Slide 9

Slide 9

UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge

Slide 10

Slide 10

UCAN Decentralize Auth Open Protocols Everywhere

Slide 11

Slide 11

UCAN Decentralize Auth Open Protocols Everywhere Compute ⚙ Data 💾 Auth 🎟

Slide 12

Slide 12

UCAN Decentralize Auth Open Protocols Everywhere Compute ⚙ Data 💾 Auth 🎟

Slide 13

Slide 13

UCAN Decentralize Auth How to Power a New Internet 🔌

Slide 14

Slide 14

How to Power a New Internet 🔌 Adoption & Audience

Slide 15

Slide 15

How to Power a New Internet 🔌 Adoption & Audience

Slide 16

Slide 16

How to Power a New Internet 🔌 Adoption & Audience

Slide 17

Slide 17

How to Power a New Internet 🔌 Adoption & Audience

Slide 18

Slide 18

How to Power a New Internet 🔌 Adoption & Audience

Slide 19

Slide 19

How to Power a New Internet 🔌 Adoption & Audience

Slide 20

Slide 20

How to Power a New Internet 🔌 DX & UX

Slide 21

Slide 21

How to Power a New Internet 🔌 DX & UX Web3 UX is too hard for many users

Slide 22

Slide 22

How to Power a New Internet 🔌 DX & UX P O Web3 UX is too hard for many users T S L L U F

Slide 23

Slide 23

How to Power a New Internet 🔌 Move the Needle

Slide 24

Slide 24

How to Power a New Internet 🔌 Move the Needle Realpolitik Easier, as secure, & more open than: OAuth, X.509, SAML, Macaroons, MetaMask, WalletConnect, etc

Slide 25

Slide 25

How to Power a New Internet 🔌 OAuth Sequence

Slide 26

Slide 26

How to Power a New Internet 🔌 OAuth Sequence

Slide 27

Slide 27

How to Power a New Internet 🔌 OAuth Sequence

Slide 28

Slide 28

How to Power a New Internet 🔌 OAuth Sequence

Slide 29

Slide 29

How to Power a New Internet 🔌 UCAN Sequence 🕙

Slide 30

Slide 30

How to Power a New Internet 🔌 UCAN Sequence 🕙

Slide 31

Slide 31

How to Power a New Internet 🔌 UCAN Sequence 🕙

Slide 32

Slide 32

How to Power a New Internet 🔌 UCAN Sequence 🕙

Slide 33

Slide 33

How to Power a New Internet 🔌 Project Approach

Slide 34

Slide 34

How to Power a New Internet 🔌 Project Approach Be a Trojan Horse Build on widely supported, familiar, well-understood standards & tools

Slide 35

Slide 35

How to Power a New Internet 🔌 Tools For Mere Mortals

Slide 36

Slide 36

UCAN Decentralize Auth Case Study: IPNS

Slide 37

Slide 37

UCAN Decentralize Auth Case Study: IPNS

Slide 38

Slide 38

UCAN Decentralize Auth Case Study: IPNS

Slide 39

Slide 39

UCAN Decentralize Auth Case Study: IPNS 🧑💻

Slide 40

Slide 40

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻

Slide 41

Slide 41

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

Slide 42

Slide 42

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

Slide 43

Slide 43

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

Slide 44

Slide 44

UCAN Decentralize Auth Case Study: Apps 🤵 🧕 👨🌾

Slide 45

Slide 45

UCAN Decentralize Auth Case Study: Apps 🤵 🧕 👨🌾

Slide 46

Slide 46

UCAN Decentralize Auth Capabilities 101 🎟

Slide 47

Slide 47

Capabilities 101 🎟 Auth Models

Slide 48

Slide 48

Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙

Slide 49

Slide 49

Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙ Caps 👩🎤 🎟 ⚙ Designed for networking (many)

Slide 50

Slide 50

Capabilities 101 🎟 ACLs: Stateful Auth

Slide 51

Slide 51

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾

Slide 52

Slide 52

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 ⚙

Slide 53

Slide 53

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 💂 ✋ ⚙

Slide 54

Slide 54

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙

Slide 55

Slide 55

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙

Slide 56

Slide 56

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙

Slide 57

Slide 57

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ Not in control ⚙

Slide 58

Slide 58

Capabilities 101 🎟 ACLs: Stateful Auth 📑 In control 🧑🌾 💂 ✋ Not in control ⚙

Slide 59

Slide 59

Capabilities 101 🎟 ACLs: Stateful Auth 📑 In control 🧑🌾 💂 ✋ Not in control ⚙

Slide 60

Slide 60

Capabilities 101 🎟 ACLs: Stateful Auth 📑 💂 ✋ In control 🧑🌾 💂 ✋ Not in control ⚙

Slide 61

Slide 61

Capabilities 101 🎟 ACLs: Stateful Auth 📑 💂 ✋ In control 🧑🌾 💂 ✋ Not in control ⚙

Slide 62

Slide 62

Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well

Slide 63

Slide 63

Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well

Slide 64

Slide 64

Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well 🐉

Slide 65

Slide 65

Capabilities 101 🎟 Caps: Stateless Auth

Slide 66

Slide 66

Capabilities 101 🎟 Caps: Stateless Auth 🕵

Slide 67

Slide 67

Capabilities 101 🎟 Caps: Stateless Auth 🕵 ⚙

Slide 68

Slide 68

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr ⚙

Slide 69

Slide 69

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Slide 70

Slide 70

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙

Slide 71

Slide 71

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙ All req info

Slide 72

Slide 72

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Slide 73

Slide 73

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🎟 🗺 🎟 🎟 Addr ⚙

Slide 74

Slide 74

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Slide 75

Slide 75

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 👨🎨 ⚙

Slide 76

Slide 76

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙

Slide 77

Slide 77

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙ 🎟

Slide 78

Slide 78

Capabilities 101 🎟 Composition — “Amplification”

Slide 79

Slide 79

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✂

Slide 80

Slide 80

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ ✂

Slide 81

Slide 81

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ 🥘 ✂

Slide 82

Slide 82

Capabilities 101 🎟 Auth Should be Boring!

Slide 83

Slide 83

Capabilities 101 🎟 Auth Should be Boring!

Slide 84

Slide 84

UCAN Decentralize Auth Under the Microscope 🔬

Slide 85

Slide 85

Under the Microscope 🔬 “Who” vs “What”

Slide 86

Slide 86

Under the Microscope 🔬 “Who” vs “What” DIDs say who you are

Slide 87

Slide 87

Under the Microscope 🔬 “Who” vs “What” DIDs say who you are UCANs show what you can do

Slide 88

Slide 88

Under the Microscope 🔬 “Who” vs “What” AuthN DIDs say who you are UCANs show what you can do AuthZ

Slide 89

Slide 89

Under the Microscope 🔬 Teaser Token

Slide 90

Slide 90

Under the Microscope 🔬 Teaser Token

Slide 91

Slide 91

Under the Microscope 🔬 Teaser Token

Slide 92

Slide 92

Under the Microscope 🔬 Teaser Token

Slide 93

Slide 93

Under the Microscope 🔬 Teaser Token

Slide 94

Slide 94

Under the Microscope 🔬 JWT → UCAN

Slide 95

Slide 95

Under the Microscope 🔬 JWT → UCAN Header Payload Signature

Slide 96

Slide 96

Under the Microscope 🔬 JWT → UCAN Header Payload ✅ Signature

Slide 97

Slide 97

Under the Microscope 🔬 JWT → UCAN Header Payload ✅ Signature

Slide 98

Slide 98

Under the Microscope 🔬 Anatomy of a Capability

Slide 99

Slide 99

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun”

Slide 100

Slide 100

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb”

Slide 101

Slide 101

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb” Extensible fields

Slide 102

Slide 102

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 103

Slide 103

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 104

Slide 104

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 105

Slide 105

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 106

Slide 106

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 107

Slide 107

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Slide 108

Slide 108

Under the Microscope 🔬 Attenuation

Slide 109

Slide 109

Under the Microscope 🔬 Attenuation 👩💻

Slide 110

Slide 110

Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸

Slide 111

Slide 111

Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸 👨🦳🖥

Slide 112

Slide 112

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸

Slide 113

Slide 113

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸

Slide 114

Slide 114

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸

Slide 115

Slide 115

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸 👩🚀 🐶

Slide 116

Slide 116

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🍾 🧸 👨🎨 🧸 👩🚀 🐶

Slide 117

Slide 117

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 🧸 🍾 🧸 👨🎨 ☁⚙ 👩🚀 🐶

Slide 118

Slide 118

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Slide 119

Slide 119

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 Zero Coordination ✅ 📊 👩🚀 🐶 🧸 🌈 🐶 🔬 🍾 🧸 👨🎨 🐦 ☁⚙ 💃

Slide 120

Slide 120

Under the Microscope 🔬 Revocation Cascade 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Slide 121

Slide 121

Under the Microscope 🔬 Revocation Cascade UCAN Hash 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Slide 122

Slide 122

Under the Microscope 🔬 Composable Standard Library

Slide 123

Slide 123

Under the Microscope 🔬 Composable Standard Library Resource (URI) https: mailto: file: wnfs: dns: news: Ability (Cap) crud/create crud/read crud/update crud/destroy msg/send msg/receive group/ban group/join

Slide 124

Slide 124

Under the Microscope 🔬 ucan-ipld & CACAO

Slide 125

Slide 125

Under the Microscope 🔬 ucan-ipld & CACAO github.com/ucan-wg/ucan-ipld

Slide 126

Slide 126

UCAN Decentralize Auth Solving the Case Study 🕵

Slide 127

Slide 127

Solving the Case Study 🕵 Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

Slide 128

Slide 128

Solving the Case Study 🕵 Case Study: NNS 🧑💻 🤵 🧕 👨🌾

Slide 129

Slide 129

Solving the Case Study 🕵 Case Study: NNS 🧑💻 🧾 🤵 🧕 👨🌾

Slide 130

Slide 130

Solving the Case Study 🕵 Case Study: NNS 🧑💻 @alice set: foo 🤵 🧾 🧕 👨🌾

Slide 131

Slide 131

Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo 👨🌾 @alice set: foo

Slide 132

Slide 132

Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo 👨🌾 @alice set: foo

Slide 133

Slide 133

Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo Delegate 👨🌾 @alice set: foo

Slide 134

Slide 134

Solving the Case Study 🕵 Authorised Data Retrieval 💂 👨🌾

Slide 135

Slide 135

Solving the Case Study 🕵 Authorised Data Retrieval 💂 @bob get: @alice/photos 👨🌾

Slide 136

Slide 136

Solving the Case Study 🕵 User Controlled Apps: IPFS ❤ UCAN

Slide 137

Slide 137

Solving the Case Study 🕵 User Controlled Apps: IPFS ❤ UCAN

Slide 138

Slide 138

Solving the Case Study 🕵 AWAKE: Authorised Channels

Slide 139

Slide 139

Solving the Case Study 🕵 AWAKE: Authorised Channels

Slide 140

Slide 140

Solving the Case Study 🕵 Distributed Invocation Receipt Invocation f ff Arguments Results Scheduling Con ig, etc E ects

Slide 141

Slide 141

Solving the Case Study 🕵 Distributed Invocation Receipt Invocation f ff Arguments Results Scheduling Con ig, etc E ects

Slide 142

Slide 142

UCAN Decentralize Auth Resources 📚

Slide 143

Slide 143

Resources 📚 Further Reading

Slide 144

Slide 144

Resources 📚 Further Reading Community: https://github.com/ucan-wg

Slide 145

Slide 145

Resources 📚 Further Reading Community: https://github.com/ucan-wg

Slide 146

Slide 146

Resources 📚 Further Reading Community: https://github.com/ucan-wg

Slide 147

Slide 147

Resources 📚 Further Reading Community: https://github.com/ucan-wg

Slide 148

Slide 148

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf

Slide 149

Slide 149

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf

Slide 150

Slide 150

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org

Slide 151

Slide 151

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org SPKI: https://theworld.com/~cme/html/spki.html

Slide 152

Slide 152

Resources 📚 UCAN Adventure

Slide 153

Slide 153

Resources 📚 ucan.xyz — Online Explorer / Validator

Slide 154

Slide 154

Resources 📚 ucan.xyz — Online Explorer / Validator

Slide 155

Slide 155

Resources 📚 ucan.xyz — Online Explorer / Validator

Slide 156

Slide 156

Resources 📚 ucan.xyz — Online Explorer / Validator

Slide 157

Slide 157

ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede

Slide 158

Slide 158

ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede

Slide 159

Slide 159

a h I i t s e v ! s r e ck ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede