kych

OAuth 2.0 API for Swiyu to enable Taler integration of Swiyu for KYC (experimental)
Log | Files | Refs | README

commit b6e6d3fa724c22764c17ed4f14600f1cd7d9efd5
parent 0ddde64f1d10c4b2e7fc02a14f8bc31db97219eb
Author: Henrique Chan Carvalho Machado <henriqueccmachado@tecnico.ulisboa.pt>
Date:   Sat, 24 Jan 2026 20:01:17 +0100

Merge branch 'master' of git+ssh://git.taler.net/kych

Diffstat:
Adocumentation/HaRBInger.md | 69+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 69 insertions(+), 0 deletions(-)

diff --git a/documentation/HaRBInger.md b/documentation/HaRBInger.md @@ -0,0 +1,69 @@ +* Brief description of the product or solution + +We leverage the Swiss electronic ID (eID) to enable tokenized +Know-Your-Customer (KYC) for our rCBDC digital cash payment solution +for privacy-preserving and compliant peer-to-peer payments. + +* Innovation or novelty involved + +By combining self-sovereign identity systems supporting selective +disclosure with digital cash, we enable highly efficient decentralized +payment systems with strong Verification of Payees (VoP) to minimize +fraud. The system exhibits the same fundamental properties and risk +characteristics as physical cash, and its FLOSS-based architecture +enables interoperable global deployments without raising sovereignty +concerns. + +* How is it different from existing product/ solutions available in the market + +The proposed solution introduces peer-to-peer transactions with strong +VoP, a capability not currently available in the financial industry. +In most aspects, the system mirrors the functional properties of +physical cash and physical ID, with the added conveniences of using +digital technology. The wallets truly provide ownership and control +over data and money; they are not based on accounts. There is no +custodian, the citizens are directly in control over their identity +data and money. + +* Technology or platform being used + +Our solution is based on two free and open source projects, GNU Taler +and the SSI-inspired Swiss eID solution. It primarily uses OID4VP, +OID4VCI, SD-JWT, OAUTH2 and blind signatures. For onboarding, Swiyu +relies on biometric facial identification. Wallets are available for +Android, iOS and other platforms. Where supported, hardware security +modules can be used to add an additional layer of protection for +sensitive data. For the (central) bank, a GNU/Linux system with a +Postgresql database is required. + +* Brief process flow (if possible) + +1.) Citizens obtain a Swiss electronic ID online (biometric identification). +2.) For a payment, the payer generates a virtual check containing: + - An expiry date + - Required payee attributes for verification +3.) The virtual check is transferred to the payee via NFC, QR code, or messaging channels; this may even happen offline. +4.) The payee redeems the check after successful identity verification through selective disclosure of the requested attributes. + +* Proposed benefits and potential use cases + +The following unique features have tremendous potential: + +- Scalable onboarding based on national ID at low cost with high security +- Standards-compatible (EU, CH) with next-generation SSI-based e-ID +- Fraud-reduction via selective disclosure of payee identity to payer +- Micro-transactions: Taler enables transactions as small as + fractions of a cent. +- Bearer instruments for identity and digital cash: the + e-ID and payment wallets actually hold the identity data and + the actual money, akin to ID documents and physical cash, + reducing reliance on custodians improving reliability, + usability, privacy and security. +- Asymmetric anonymity was shown to improve welfare over + systems with two-sided anonymity or no privacy (Tinn 2024) +- Tokenization of diverse assets: Taler goes beyond currencies + and enables tokenization of other fungible assets. + +* Any other details you may wish to highlight + +- No dependency on blockchain, scalable low-energy solution.