NFC + DIDs

Transmute
Transmute
Published in
4 min readJul 8, 2020

Transmute solves for offline traceability with Tangem.

Photo Credit: Tangem

Supply chains are complicated. While over 80% of logistics companies are investing in digitization to bring their supply chains into the 21st century, at the end of the day, not every step along the way can be web-enabled. Provable identification is equally as important in these offline gaps, but far harder to achieve; part of the problem is ensuring seamless traceability across events like shipment handoffs [and associated documentation exchange] that happen offline versus the ones that occur online.

Transmute has been working on a solution: tying DIDs to Tangem NFC Cards, which carry a passport-grade secure chip, which implements public key cryptography. Near Field Communication (NFC) is the technology that enables things like contactless payments (e.g. Apple or Android pay), but it’s also being more increasingly used in supply chains for things like inventory and warehouse management [via contactless counting of products on shelves]. Much like DIDs, they provide unique identification for the objects they represent (like your cell phone), but they’re notoriously limited when it comes to data storage and as such have long been outpaced by other web-enabled identification technologies like the QR code.

However, in our implementation of did:key on Tangem’s NFC cards, we’ve demonstrated that linking DIDs to NFC Smart Cards solves the usability problem. Now, users have a single device that solves offline authentication, while unlocking secure access to secure storage [ad infinitum/in an infinite amount] — for instance the same user can use their single NFC-based DID to authorize a shipment release at a port as to access full shipment reports stored in their cloud-based EDV — both actions that would be captured in an immutable audit log. This also ensures that actions conducted offline are still accounted for since the DID is a url-based unique identifier.

In order to try and explain better how Smart Cards, DIDs and VCs can be used, we’ve developed a set of small user stories. These are in no way exhaustive, but hopefully they help paint a picture of both the B2B and B2C opportunities in this space.

“As an inspector, I scan a QR Code on a crate with my phone, loading product information into a credential representing inventory review, and then tap my NFC card to create an inventory reviewed credential, which will automatically be persisted to my encrypted data vault and anchored on a blockchain when I regain internet access.”

“As a COVID-19 testing facility operator, I verify permanent resident card associated with a patient, after challenging them to authenticate with their NFC Card. I then complete their rapid response test, and issue a test results credential to their NFC Card. When they travel, they can use their NFC card to present their test results credential to transport authorization personnel.”

“ As an undercover operative, I register my did with my handler, and they watch a public blockchain for transactions associated with my NFC Card. When they see a transaction, they check IPFS for the encrypted message, and decrypt it to see the update regarding the ongoing investigation.”

“As a quality assurance officer for steel inc, I use my NFC card, issued by my employer to create digital certificates for my mill test reports. I use my NFC card to encrypt those certificates and submit them to an encrypted data vault. I use my NFC card to anchor those certificates to a blockchain. I use my NFC card to authorize Customs Brokers / Import Specialists to access my certified mill test report.”

Bar staff is required to perform age verification before serving alcoholic drinks. Today, they need to see a government issued ID and inherently, involuntarily, unnecessarily view all the PII displayed on that ID. With an NFC card, they will only be privy to the enabled credentials, limited to the public data therein. They will be able to trust the age verification process, without the need to see user data. This is accomplished by leveraging the smart card’s ability to provide a cryptographically secured response to a specific question (is over 21). The rest of the credential details need not be presented.

Check out our demo here: https://nfc.did.ai/tangem

Want to stay informed on relevant standards and working groups? Here are some related links:

--

--

Transmute
Transmute

The trusted data exchange platform for global trade.