completed

DLT360: DID/ZKP & GDPR-Data Privacy

$25,000.00 Received
$25,000.00 Requested
Ideascale logo View on ideascale
Community Review Results (1 reviewers)
Addresses Challenge
Feasibility
Auditability
Solution

We are deepening our fund 7-funded project with very specific research regarding latest best implementation practice in this field

Problem:

DLT/Blockchain is apparently in conflict with EU-Personal Data Privacy regulation and with major GDPR PbD (Privacy-by-Design) principles

Yes Votes:
₳ 72,967,316
No Votes:
₳ 6,346,239
Votes Cast:
266

This proposal was approved and funded by the Cardano Community via Project F8: Accelerate Decentralized Identity Catalyst funding round.

  • download
  • download

[IMPACT]

Fund 7 has funded our DLT360 proposal called 'DID Application Blueprint'. When we started to work on this project, we ran into a very hot and emotional discussions between blockchain proponents and EU-data-privacy enthusiasts. While Blockchain proponents tend to downplay the critical conflict between blockchain and GDPR (EU-Personal Data Privacy regulation) and with the major PbD (Privacy-by-Design) principles of the GDPR, we see a big need to outline reliable approaches for public permissionless blockchains (many current compliance approaches are focused on applying private permissioned blockchains).

Our ambition is to summarise solid best practice solution-approaches, which are specifically considering the newly emerging scalability approaches of CARDANO, with HYDRA, Sidechains, ZKP (Zero Knowledge Proof) as well as anonymisation / storage of pseudonymous data. The result will be an add-on to our Fund 7 DID Implementation Blueprint and will be properly captured in our DLT360 Risk & Opportunity Radar. We consider this highly important for all the projects starting to implement DID technology, as wrong approaches are difficult to correct later-on in a development journey.

<u>Please note: This proposal is part of a bigger picture:</u>

The basic setup of the DLT360 Risk & Opportunity Radar was funded in fund 6 and greatly supported by a number of projects in fund 7. Fund 8 will hopefully let us continue and finally get to the status of mature, subscription-based services. Our initial work of fund 6 will be completed by approximately end of Q1/2022 with a first 360-degree roundtrip-video and roundtrip-presentation.

<u>Why are we doing all this?</u>

Cardano - similar to successful professional companies - needs to continuously investigate facts, trends, risks and opportunities. In commercial companies, this is typically done by independent risk-management entities reporting directly to the C-suite. With our services, we want to support Cardano in

  1. Making sure that the millions (billions) are wisely invested
  2. Enabling the future dREPs and Cardano governance-bodies in making data & fact based decisions
  3. Having major trends, risks and opportunities precisely analysed and visualised (collecting from a multitude of sources)
  4. Demonstrating this carefulness to regulatory bodies and professional clients (e.g. governments and corporations who rely on Cardano as public, permissionless blockchain)
  5. Benefitting form continuously updated interdisciplinary perspectives in a PESTELE format (Politics, Environment/Health, Social/Reputation, Technology, Ethics, Legal, Economy/Business/Application Portfolio).

We are currently presenting our activities in form of single projects, hoping to overcome this stage with fund 9. At the end of 2022, we want to be a subscription-based service, also available to outside-Cardano clients worldwide (like commercial companies), becoming economically successful and independent from the initial Catalyst startup funding. Please also check and support our proposal for future subscription-based funding (Proposed F9 Challenge Setting:

<https://cardano.ideascale.com/c/idea/400085>).

We see the following aspects contributing specifically to this challenge setting:

  • This proposal is not an isolated effort, but becomes part of an overall consulting artifact library of DLT360
  • We will actively reach out and integrate similar initiatives inside and outside the Cardano world
  • We will do this in close proximity with industry partners
  • Our work will be done in cooperation with DID/SSID domain experts
  • The result will help to trigger tangible next steps with industry partners and consulting firms

No specific challenges and risks, as we are handling this as part of our ongoing DLT360 journey, as we are already now (starting to work on the projects of fund 7) establishing the close cooperation with the ATALAPrism teams. Main challenge comes form the need to pack our activities into single projects, but we hope to overcome this stage with Fund 9.

At the end of 2022, we want to be a subscription-based service, also available to outside-Cardano clients worldwide (like commercial companies), becoming an economically successful service-provider, independent from the initial Catalyst startup funding.

[FEASIBILITY]

The DLT360 team is applying a Business Model Canvas (in MIRO) for continuously optimising the overall business model approach. As most of our activities are highly interlinked, we see overlapping as well as specific elements when looking at the business model canvas project-by-project. Therefore, this part contains both: Generic and specific elements:

<u>1) Customer Segments / Target Groups (generic for DLT360)</u>

  • Selected industry-clients, major consulting firms, universities, regulatory bodies, DLT-relevant public, selected high-quality YouTube channels and more.
  • CARDANO-related projects in the need to perform ongoing risk & opportunity management
  • CARDANO Community

<u>2) Value Proposition (generic for DLT360)</u>

Dependent of the above listed customer-segments, we see our value proposition as following (more details in MIRO):

  • Inter-disciplinary & contextualised inputs as basis for improvement proposals and for effective and efficient lobbying
  • Enabling professional risk-management frameworks (e.g. ISO 31000 compliant)
  • Creating value-adding Implementation Whitepapers, Yellowpapers, Blueprints and Consulting Artifacts

<u>3) Distribution Channels (generic for DLT360)</u>

Depending on customer-segment and corresponding value-proposition, the following delivery channels will be used:

  • DLT360 WEB-site with a public and a subscription-based area
  • Quarterly online-live and video-recorded reporting based on the DLT360 Risk & Opportunity Radar
  • Based on case-by-case agreement: In-person presentations e.g. on selected community events or summits
  • Integration into various Implementation Whitepapers, Yellowpapers, Blueprints and Consulting Artifacts
  • Academic papers and submission of commentaries

<u>4) Customer Relationship (generic for DLT360)</u>

After handling our startup-activities based on fund 6 and on investments from Heinz Gassner, the fund 7 and fund 8 funding allows us to deepen our content-creation and to grow our team. Based on demonstrating the value we create, we are aiming for subscription-based service agreements in the future. The relationship with outside-Catalyst clients will be based on such subscription-based services and on specific project-based agreements.

<u>5) Revenue Streams (generic for DLT360)</u>

During this early stage of our startup, we are fully focusing on servicing the Cardano Community. The fund 6 and fund 7 funding of our basic DLT360 Risk & Opportunity Radar will lead to delivering 2 quarterly reporting events (end of Q1 and end of Q2 2022). This specific fund 8 project will not be separately considered in terms of a revenue stream. We are applying a careful 'Lean Startup' approach during our journey for planning, checking and iteratively adjusting our Business Model according to our learnings, all documented in our MIRO environment.

For the time after Q3 2022, we see the following approaches regarding securing sufficient revenue streams for maintaining and growing our services as well as the required expert team and network:

  • We have posted a specific Fund 9 Challenge Setting Proposal for simplified and more reliable subscription-based funding (Please check and support our proposed F9 Challenge Setting: <https://cardano.ideascale.com/c/idea/400085>).

  • For outside-Catalyst-clients we plan to implement a revenue-ladder-model with basic content free of charge (as appetiser) and stepping-up subscription models for additional access

  • Specific Consulting Artifacts and specific in-depth research for e.g. industry-clients will be charged separately

<u>6) Key Activities, Roadmap and Deliverables (now specific to this project)</u>

This proposal is driven by the Economy/Business Team of DLT360. This project requires the following specific key-activities - all during Q3 / 2022:

  • Participation in the 2-weekly meetings of DLT360 Economy/Business Team
  • Active efforts to integrate other projects and cooperation-partners
  • Active cooperation with ATALA Prism team
  • Synchronizing with our Fund 7 proposal (DID Application Blueprint)
  • Basic research and summarizing findings in add-on document to Fund 7 Blueprint
  • Supporting DLT360 RADAR and WEB-site integration
  • Active role in sharing/discussing the content during the current quarter

Based on our listed key-activities and key-resources, we plan with the following costs (please note that we are in progress of setting up a formal company body and need to calculate with taxation according to applicable law):

  • Overall project management, updates on MIRO (10 hours for USD 50/h) = USD 500,00
  • Communication, social media and back-office support (20 hours for USD 25/h) = USD 500,00
  • Various expert meetings & discussions & travel (100 hours for average USD 80/h plus travel) = USD 10.000
  • Basic research and summarising findings in add-on document to Fund 7 Blueprint (100 hours for average USD 80/h) = USD 8.000
  • Supporting DLT360 RADAR and WEBsite integration (20 hours for USD 50/h) = USD 1.000,00
  • Supporting the integration into the DLT360 quarterly reporting (10 hours for USD 50/h) = USD 500,00
  • Active role in DLT360 quarterly roundtrip-reporting video (10 hours for USD 50/h) = USD 500,00
  • Active role in sharing/discussing the content during the current quarter (50 hours for USD 80/h) = USD 4.000,00

DLT360 is operated by a core-team and by a flexible team of renowned domain experts as well as a scalable network of contributors from the Cardano community, from academia and from industry. For this specific project we plan with the following key resources:

  • Overall guidance: Heinz Gassner, Malta, with more than 30 years of industry-leadership experience: <http://linkedin.com/in/heinz-gassner-9540a241>

  • Senior domain expert: Maury Shenk, Lawyer, London: linkedin.com/in/mauryshenk

  • Senior domain expert: Michiel Van Roey, Lawyer, Brussels: linkedin.com/in/michielvanroey

  • Senior domain expert: Thorsten Pottebaum, UK, many years of experience, <https://www.linkedin.com/in/thorstenpottebaum>

  • Content & Project Management: Guilherme Peirera, Sao Paulo, <http://linkedin.com/in/guilherme-pereira-da-silva-977a361a3>

  • Selected University Assistants & Students in Malta, Berlin and Sao Paulo

  • Contributing partners from industry and from ATALAPrism team.

  • Radar Tool Implementation: Elias Nassall, Student in Security Management, Berlin, <https://www.linkedin.com/in/elias-nassall-227858231/>

  • Communication, social media and Back-office: Eduardo Nunes, Sao Paulo

    [AUDITABILITY]

Most of our DLT360 projects are highly interlinked and we handle the overall planning and tracking in our DLT360 - MIRO environment. Due to already running our fund 6 and fund 7 funded projects that way, we are well familiar with Catalyst Coordinator and acquainted with the relevant reporting processes. We are tracking our progress as following:

KPI Progress and Success Measurement (for our activities during Q3 of 2022)

  • KPI 1: Progress of activities as outlined above (0-100%)
  • KPI 2: Number of partners and interacting projects / initiatives (number).
  • KPI 3: Number of regulatory partners/organizations interacting with us (number)
  • KPI 4: Ratings (NPS)

Our Definition of Done and our success criteria by end of Q3 of 2022 are derived from the above listed KPI measurement:

  • We have achieved all our activities & deliverables as listed above (100%)
  • We have established active (<u>major</u> industry, consulting and other) partnerships (>5)
  • Number of regulatory partners interacting with us (>5)
  • Ratings (NPS > 8)

This is a new proposal, but is building upon our Fund 7 proposal (see DID Application Blueprint).

SDG Rating

To be completed.

Community Reviews (1)

Comments

Monthly Reports

Project PAUSED for June (see reasoning provided above)

Disbursed to Date
$25,000
Status
Still in progress
Completion Target
9/30/2022
Attachment(s)
Comments 0

Login or Register to leave a comment!

  1. Reviewing of the result of phase 1 before June 2022 (where we did the pre-work in MIRO and in our original SaaS-Tool licensed from ITONICS). This projects builds upon and deepens our related fund 7 project.

  2. Bi-weekly working-group sessions (in the legal area under the guidance of our domain experts Maury Shenk and Michiel Van Roey and active work by our regulatory workstream team with Jonas Weinberger, Victor Cabral and student contributions. This inter-disciplinary projects overlaps with ESG, technology and politics area and the business impact is overseen by Thorsten Pottebaum and Heinz Gassner

  3. Currently we have focused on elaborating a comprehensive summary of privacy-law related impact on commercial use of SSI/DID (see attached paper).

  4. Based on the legal findings, we examine the technological situation and ESG/Politics-related aspects, which are very essential for business & industry applications. Here we look especially deeper into how SSI/DID approaches can be integrated into existing Digital Transformation strategies and tech-stacks in industry, especially also on how to transform traditional SSO approaches with all related governance & legal issues and how to ensure compliance with emerging standards. We are also observing latest publications and might sponsor a related (ongoing) dissertation at University of Malta.

  5. Working on integration of all content into the DLT360 NAVIGATOR, the DLT360 Risk & Opportunity RADAR (and our future DLT360 WEB3.0 Innovation Accelerator Program).

  6. Project completion targeted for December 2022

Disbursed to Date
$25,000
Status
Still in progress
Completion Target
2. In the next 3 months
Comments 0

Login or Register to leave a comment!

No funding instalment for this specific project requested for this month, as we were mainly working on:

  1. Integrating our various projects (and content) into our overall overall DLT360 NAVIGATOR environment (based on GitHub, OBSIDIAN, ZOTERO and specific applications on our WEB-site)

  2. Refining our overall processes, tools and team-setup for securing longterm success

  3. Focusing on getting the overall DLT360 Whitepaper done and finalise our company foundation (most likely as Hong Kong Limited Company).

Disbursed to Date
$25,000
Status
Still in progress
Completion Target
2. In the next 3 months
Comments 0

Login or Register to leave a comment!

No funding instalment for this specific project requested for this month, as we were mainly working on:

  1. Integrating our various projects (and content) into our overall overall DLT360 NAVIGATOR environment (based on GitHub, OBSIDIAN, ZOTERO and specific applications on our WEB-site)

  2. Refining our overall processes, tools and team-setup for securing longterm success

  3. Focusing on getting the overall DLT360 Whitepaper done and finalise our company foundation (Hong Kong Limited Company).

Disbursed to Date
$25,000
Status
Still in progress
Completion Target
2. In the next 3 months
Comments 0

Login or Register to leave a comment!

During December we focused on the following:

  1. Completing the related PRIMER in our DLT360 NAVIGATOR
  2. Complete the foundational paper (Blockchain, DID and GDPR)
  3. Integrating GDPR/ZKP findings of specific Dissertations
  4. Outlining and writing the resulting Whitepaper (This is Part 2, adding to our Fund 7 Whitepaper which contained Part 1).

Instead of a Blueprint (which - as we found out along the journey - cannot be done in a meaningful way due to substantial requirement-differences in the different industry segments), this project will deliver a largely industry-independent Whitepaper for DID Implementation in Business and Industry. This step is necessary for providing a solid basis for the future industry-specific Blueprints. Due to the complexity of the topic, we were forced to establish a first Whitepaper in our Fund 7 project and add the specific focus on how to cope with GDPR and ZKP with this second generic Whitepaper.

Disbursed to Date
$25,000
Status
Still in progress
Completion Target
2. In the next 3 months
Comments 0

Login or Register to leave a comment!

close

Playlist

  • EP2: epoch_length

    Authored by: Darlington Kofa

    3m 24s
    Darlington Kofa
  • EP1: 'd' parameter

    Authored by: Darlington Kofa

    4m 3s
    Darlington Kofa
  • EP3: key_deposit

    Authored by: Darlington Kofa

    3m 48s
    Darlington Kofa
  • EP4: epoch_no

    Authored by: Darlington Kofa

    2m 16s
    Darlington Kofa
  • EP5: max_block_size

    Authored by: Darlington Kofa

    3m 14s
    Darlington Kofa
  • EP6: pool_deposit

    Authored by: Darlington Kofa

    3m 19s
    Darlington Kofa
  • EP7: max_tx_size

    Authored by: Darlington Kofa

    4m 59s
    Darlington Kofa
0:00
/
~0:00