A presentation at IPFS þing ‘23 in in Brussels, Belgium by Brooklyn Zelenka
UCAN Decentralize Auth 🚀 Authorise Everything, Everywhere, All At Once ✊ github.com/ucan-wg
UCAN Decentralize Auth
UCAN Decentralize Auth When speaking of computation, all too much emphasis is often placed on the [services] themselves. The fabric of a system is the dynamic reference graph. Mark Miller, An Ode to the Granovetter Diagram
UCAN Decentralize Auth Brooklyn Zelenka @expede github.com/expede
UCAN Decentralize Auth Brooklyn Zelenka @expede Cofounder & CTO at Fission discord.gg/fissioncodes @fission@plnetwork.xyz Might know a thing or two about UCAN github.com/ucan-wg PLT and distributed systems are my jam github.com/expede
UCAN Decentralize Auth Everywhere
UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge
UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge
UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge
UCAN Decentralize Auth Open Protocols Everywhere
UCAN Decentralize Auth Open Protocols Everywhere Compute ⚙ Data 💾 Auth 🎟
UCAN Decentralize Auth Open Protocols Everywhere Compute ⚙ Data 💾 Auth 🎟
UCAN Decentralize Auth How to Power a New Internet 🔌
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 Adoption & Audience
How to Power a New Internet 🔌 DX & UX
How to Power a New Internet 🔌 DX & UX Web3 UX is too hard for many users
How to Power a New Internet 🔌 DX & UX P O Web3 UX is too hard for many users T S L L U F
How to Power a New Internet 🔌 Move the Needle
How to Power a New Internet 🔌 Move the Needle Realpolitik Easier, as secure, & more open than: OAuth, X.509, SAML, Macaroons, MetaMask, WalletConnect, etc
How to Power a New Internet 🔌 OAuth Sequence
How to Power a New Internet 🔌 OAuth Sequence
How to Power a New Internet 🔌 OAuth Sequence
How to Power a New Internet 🔌 OAuth Sequence
How to Power a New Internet 🔌 UCAN Sequence 🕙
How to Power a New Internet 🔌 UCAN Sequence 🕙
How to Power a New Internet 🔌 UCAN Sequence 🕙
How to Power a New Internet 🔌 UCAN Sequence 🕙
How to Power a New Internet 🔌 Project Approach
How to Power a New Internet 🔌 Project Approach Be a Trojan Horse Build on widely supported, familiar, well-understood standards & tools
How to Power a New Internet 🔌 Tools For Mere Mortals
UCAN Decentralize Auth Case Study: IPNS
UCAN Decentralize Auth Case Study: IPNS
UCAN Decentralize Auth Case Study: IPNS
UCAN Decentralize Auth Case Study: IPNS 🧑💻
UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻
UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾
UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾
UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾
UCAN Decentralize Auth Case Study: Apps 🤵 🧕 👨🌾
UCAN Decentralize Auth Case Study: Apps 🤵 🧕 👨🌾
UCAN Decentralize Auth Capabilities 101 🎟
Capabilities 101 🎟 Auth Models
Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙
Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙ Caps 👩🎤 🎟 ⚙ Designed for networking (many)
Capabilities 101 🎟 ACLs: Stateful Auth
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 💂 ✋ ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ Not in control ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 📑 In control 🧑🌾 💂 ✋ Not in control ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 📑 In control 🧑🌾 💂 ✋ Not in control ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 📑 💂 ✋ In control 🧑🌾 💂 ✋ Not in control ⚙
Capabilities 101 🎟 ACLs: Stateful Auth 📑 💂 ✋ In control 🧑🌾 💂 ✋ Not in control ⚙
Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well
Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well
Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well 🐉
Capabilities 101 🎟 Caps: Stateless Auth
Capabilities 101 🎟 Caps: Stateless Auth 🕵
Capabilities 101 🎟 Caps: Stateless Auth 🕵 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙ All req info
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🎟 🗺 🎟 🎟 Addr ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 👨🎨 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙
Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙ 🎟
Capabilities 101 🎟 Composition — “Amplification”
Capabilities 101 🎟 Composition — “Amplification” 🥫 ✂
Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ ✂
Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ 🥘 ✂
Capabilities 101 🎟 Auth Should be Boring!
Capabilities 101 🎟 Auth Should be Boring!
UCAN Decentralize Auth Under the Microscope 🔬
Under the Microscope 🔬 “Who” vs “What”
Under the Microscope 🔬 “Who” vs “What” DIDs say who you are
Under the Microscope 🔬 “Who” vs “What” DIDs say who you are UCANs show what you can do
Under the Microscope 🔬 “Who” vs “What” AuthN DIDs say who you are UCANs show what you can do AuthZ
Under the Microscope 🔬 Teaser Token
Under the Microscope 🔬 Teaser Token
Under the Microscope 🔬 Teaser Token
Under the Microscope 🔬 Teaser Token
Under the Microscope 🔬 Teaser Token
Under the Microscope 🔬 JWT → UCAN
Under the Microscope 🔬 JWT → UCAN Header Payload Signature
Under the Microscope 🔬 JWT → UCAN Header Payload ✅ Signature
Under the Microscope 🔬 JWT → UCAN Header Payload ✅ Signature
Under the Microscope 🔬 Anatomy of a Capability
Under the Microscope 🔬 Anatomy of a Capability Resource / “noun”
Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb”
Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb” Extensible fields
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏
Under the Microscope 🔬 Attenuation
Under the Microscope 🔬 Attenuation 👩💻
Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸
Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸 👨🦳🖥
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸 👩🚀 🐶
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🍾 🧸 👨🎨 🧸 👩🚀 🐶
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 🧸 🍾 🧸 👨🎨 ☁⚙ 👩🚀 🐶
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃
Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 Zero Coordination ✅ 📊 👩🚀 🐶 🧸 🌈 🐶 🔬 🍾 🧸 👨🎨 🐦 ☁⚙ 💃
Under the Microscope 🔬 Revocation Cascade 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃
Under the Microscope 🔬 Revocation Cascade UCAN Hash 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃
Under the Microscope 🔬 Composable Standard Library
Under the Microscope 🔬 Composable Standard Library Resource (URI) https: mailto: file: wnfs: dns: news: Ability (Cap) crud/create crud/read crud/update crud/destroy msg/send msg/receive group/ban group/join
Under the Microscope 🔬 ucan-ipld & CACAO
Under the Microscope 🔬 ucan-ipld & CACAO github.com/ucan-wg/ucan-ipld
UCAN Decentralize Auth Solving the Case Study 🕵
Solving the Case Study 🕵 Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾
Solving the Case Study 🕵 Case Study: NNS 🧑💻 🤵 🧕 👨🌾
Solving the Case Study 🕵 Case Study: NNS 🧑💻 🧾 🤵 🧕 👨🌾
Solving the Case Study 🕵 Case Study: NNS 🧑💻 @alice set: foo 🤵 🧾 🧕 👨🌾
Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo 👨🌾 @alice set: foo
Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo 👨🌾 @alice set: foo
Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo Delegate 👨🌾 @alice set: foo
Solving the Case Study 🕵 Authorised Data Retrieval 💂 👨🌾
Solving the Case Study 🕵 Authorised Data Retrieval 💂 @bob get: @alice/photos 👨🌾
Solving the Case Study 🕵 User Controlled Apps: IPFS ❤ UCAN
Solving the Case Study 🕵 User Controlled Apps: IPFS ❤ UCAN
Solving the Case Study 🕵 AWAKE: Authorised Channels
Solving the Case Study 🕵 AWAKE: Authorised Channels
Solving the Case Study 🕵 Distributed Invocation Receipt Invocation f ff Arguments Results Scheduling Con ig, etc E ects
Solving the Case Study 🕵 Distributed Invocation Receipt Invocation f ff Arguments Results Scheduling Con ig, etc E ects
UCAN Decentralize Auth Resources 📚
Resources 📚 Further Reading
Resources 📚 Further Reading Community: https://github.com/ucan-wg
Resources 📚 Further Reading Community: https://github.com/ucan-wg
Resources 📚 Further Reading Community: https://github.com/ucan-wg
Resources 📚 Further Reading Community: https://github.com/ucan-wg
Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf
Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf
Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org
Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org SPKI: https://theworld.com/~cme/html/spki.html
Resources 📚 UCAN Adventure
Resources 📚 ucan.xyz — Online Explorer / Validator
Resources 📚 ucan.xyz — Online Explorer / Validator
Resources 📚 ucan.xyz — Online Explorer / Validator
Resources 📚 ucan.xyz — Online Explorer / Validator
ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede
ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede
a h I i t s e v ! s r e ck ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede
for free. You
can too.