kych

OAuth 2.0 API for Swiyu to enable Taler integration of Swiyu for KYC (experimental)
Log | Files | Refs | README

commit 4ae2542b78d477f9f837962eb4fd6437e2a51e45
parent 9b899ac7af5c9db4ccf6b3b1be7fe6788a2b36f9
Author: fsb2 <benjamin.fehrensen@bfh.ch>
Date:   Fri, 23 Jan 2026 16:08:11 +0100

Updated

Diffstat:
Mdocumentation/HaRNInger.md | 45+++++++++++++++++++++++++++++++++++++++------
1 file changed, 39 insertions(+), 6 deletions(-)

diff --git a/documentation/HaRNInger.md b/documentation/HaRNInger.md @@ -1,18 +1,51 @@ * Brief description of the product or solution -We will deploy a solution for KYC for free that is privacy aware. This solution is based on Aadhar. We offer an application for people to get credentials from the Aadhar database (obtained using biometrics) to be sent to their partners. +We leverage the Swiss electronic ID (eID) to enable tokenized Know-Your-Customer (KYC) verification. This is combined with a tokenized payment solution to create a secure, privacy-preserving peer-to-peer payment system. * Innovation or novelty involved -The system is based on blind signatures, that offer the possiblity to store credentials to be provided later on. The system allows users not to reveal the central system where they are and who need to access their data. +By combining tokenized KYC with tokenized peer-to-peer payments, we enable highly efficient decentralized payment systems with strong Verification of Payee (VoP). The system exhibits the same fundamental properties and risk characteristics as physical cash—properties that are well understood by customers, banks, and regulators. * How is it different from existing product/ solutions available in the market -Privacy is central in our infrastructure. Whereas in the standard solutions, KYC requires the verifyer to access the central data base, leading the the central database to know every KYC process being done in the country, this is not needed. Moreover, if the central database with all those accesses is corrupted, this could be devastating for the privacy of Indian citizens. +The proposed solution introduces peer-to-peer transactions with strong VoP, a capability not currently available in the financial industry. It enables payments between individuals who do not share the same bank or payment network. The system supports partial offline transactions via NFC or QR codes and offers asymmetric privacy—protecting the payer’s privacy while still ensuring regulatory compliance. In most aspects, the system mirrors the functional properties of physical cash. + * Technology or platform being used Our solution is based on two free and open source projects, GNU Taler and the Swiss eID solution. + * Brief process flow (if possible) -Citizens are registered in the Aadhaar system. They install the Self Sovereign Identity app. They get anonymous KYC credentials using biometry. -If they need to show their identity, or just show some attributes of it (age condition, city, ...) they present those credentials to the verifyer that can easily verify their validity agains the central system. By doing this the verifyer does not reveal the identity of the citizen that is being verified. + 1.) Citizens obtain a Swiss electronic ID. + 2.) For a payment, the payer generates a virtual check containing: + - An expiry date + - Required payee attributes for verification (e.g., full name, address, date of birth). + 3.) The virtual check is transferred to the payee via NFC, QR code, or messaging channels. + 4.) The payee redeems the check at their bank (or the issuing bank) after successful identity verification through selective disclosure of the requested attributes. * Proposed benefits and potential use cases -Main benefit is the privacy of the users, nobody knows for which services, the users used their KYC. The side advantage is to lower quantity of sensitive data, hence reducing the risks of an attack on the servers. +The following unique features of Taler have tremendous potential: + - Micro-transactions: Taler enables transactions as small as +fractions of a cent, allowing for seamless handling of +micro-transactions. + - Cash-like bearer instrument: Unlike traditional payment methods +tied to accounts or blockchain ledgers, Taler's digital wallet +securely holds the actual money, akin to physical cash in a wallet. + - Programmable money: Taler offers the capability of programmable +money, allowing for customized functionalities and enhanced +flexibility in transactions. + - One-sided anonymity for spenders: Taler guarantees +cryptographic one-sided anonymity for spenders, providing an +irreversible layer of privacy protection. + - Linear scalability: Taler has demonstrated its ability to +handle substantial transaction volumes, achieving a real-life test of +about 30,000 transactions per second using a single server on Grid5000. + - No dependency on bank account or blockchain: Taler eliminates +the need for a bank account or reliance on blockchain technology, +streamlining the payment process. + - Seamless instant 1-click payments: Taler provides users with a +smooth and effortless payment experience, enabling secure one-click +payments without the hassle of registration, log-in, or multi- factor +authentication. + - Tokenization of diverse assets: Taler goes beyond currencies +and offers the tokenization of various other assets. This innovative +feature allows for the representation and secure transfer of a wide +range of digital and physical assets on the Taler platform. + * Any other details you may wish to highlight