OOBI (Out-of-Band Introduction) Protocol

Protocolo de Identidade

A formal protocol specification (IETF Internet-Draft) defining a mechanism for introducing KERI Autonomic Identifiers (AIDs) to witness, watcher, and service endpoints via URL-based out-of-band exchanges. An OOBI is a URL pairing an AID with a network endpoint (IP address or URL) that can provide or cache the associated KERI Key Event Log (KEL). OOBIs enable KERI participants to bootstrap identifier discovery without a centralized directory, allowing any party with the OOBI URL to locate and verify another party's key state.

Comunidade
Links
Visitar Website Sugerir uma correção

Detalhes

Licença Open specification (IETF I-D); reference implementations in KERI Python (keripy) and Rust (keri-core) under Apache-2.0
Status de Dev 🟢 Ativo
Detalhe do Status de Dev Released (implemented in production KERI tooling including KERIA, keripy, and the WebOfTrust reference implementations; IETF Internet-Draft active)
Proprietário Samuel M. Smith (spec author); IETF Internet-Draft (draft-ssmith-oobi); KERI community
Órgão de Governança IETF (Internet-Draft draft-ssmith-oobi) | None (single specification author; KERI community)
País USA (Samuel M. Smith)
Ano de Início 2021
Stack Language-agnostic (IETF specification); implemented in Python (keripy / KERIA), TypeScript (signify-ts), Rust; HTTP URLs as the OOBI format
Financiamento Community / DARPA (KERI ecosystem funded partly by DARPA and DIF grants; OOBI spec funded as part of KERI development)
Última Investigação 1 de jul. de 2026

Domínios de Caso de Uso

Identidade e Confiança

Capacidades

Portabilidade do grafo de confiança Identidade soberana

Protocolo de Identidade Atributos

Origens KERI ecosystem bootstrap (designed to solve KERI's identifier discovery problem — KERI AIDs are self-certifying but need a mechanism for parties to locate each other's key event logs without a central directory)
Banco de Dados N/A (OOBIs point to endpoints that serve KELs; no database defined by the OOBI spec itself)
Linguagem de Consulta HTTP URL resolution (OOBI is a URL; resolution fetches KEL from specified endpoint via HTTP GET)
Formatos de Dados OOBI URL (format: scheme://host:port/oobi/{AID}/{role}/{eid}); KERI CESR (Composable Event Streaming Representation) for KEL data returned by endpoints
Suporte Móvel Library-level (any HTTP client; QR code OOBI sharing common in mobile KERI wallet implementations)
Suporte Web Yes (OOBI URLs are HTTP/HTTPS; web-based KERI wallets resolve OOBIs via standard HTTP)
Aplicativos Nativos Library-level (embedded in KERI wallet applications; QR code OOBI sharing in mobile wallet UIs)
Termos Free / Open standard (IETF Internet-Draft; Apache-2.0 reference implementations)
Fundos Unknown (part of broader KERI ecosystem funding; not separately itemized)
Baseado Em KERI (Key Event Receipt Infrastructure) — OOBI is the bootstrap/discovery mechanism for KERI identifiers; HTTP URL format; CESR (Composable Event Streaming Representation) for KEL data
Permissões Key-based (OOBI is an open URL; AID key control governs what can be done with the discovered identity)
Autenticação e Identidade KERI AID-based (OOBI introduces a KERI AID to its endpoint; authentication is via KERI key event log verification, not OOBI itself)
Modelo de Armazenamento N/A (OOBI points to endpoints; storage is at the KERI witness/watcher infrastructure level)
Interoperabilidade KERI ecosystem (OOBI is specific to KERI AID discovery; compatible with any KERI-conformant implementation)
Portabilidade de Dados Full portability (OOBIs can be exchanged out-of-band via any channel — QR code, email, chat, NFC — enabling key state discovery independently of platform)
Governança e Tomada de Decisão Community / IETF process (IETF Internet-Draft; community-governed; Sam Smith as spec author)
Maturidade / Padronização do Protocolo IETF Draft (active IETF Internet-Draft draft-ssmith-oobi; implemented in production KERI tooling; not yet published as RFC)
Padrões de Identidade KERI (Key Event Receipt Infrastructure); W3C DID (KERI AIDs can be expressed as DIDs); CESR (Composable Event Streaming Representation)
Métodos DID Suportados did:keri (KERI AIDs as DIDs; OOBI is the discovery mechanism for did:keri resolution)
Gestão de Chaves Delegated to KERI (OOBI locates the key event log; KERI manages key rotation, pre-rotation, and recovery via the KEL)
Tipos de Credenciais N/A (OOBI is a discovery/bootstrap protocol; credential types defined at KERI/ACDC layer)
Método de Verificação Key event log verification (OOBI URL leads to KEL; cryptographic verification of key binding performed by KERI resolver, not OOBI itself)
Recursos de Privacidade Minimal (OOBI URLs may expose AID and endpoint; out-of-band exchange (QR code, direct link) limits exposure; no ZKP features)
Métodos de Autenticação QR code scanning (common OOBI exchange mechanism in wallets); Deep linking (OOBI URL passed via any channel); HTTP GET resolution
Mecanismo de Revogação N/A (OOBI is a discovery URL; revocation handled at KERI key event log level)
Tipos de Agentes Suportados Any KERI-identified entity: Humans (individuals), Organizations, Services/APIs, Devices/IoT
Tipos de Carteira/Cliente SDK/Library integration (keripy, signify-ts, KERIA server); QR code exchange in mobile wallets
Mecanismos de Recuperação N/A (recovery handled at KERI level via key event history and pre-rotation)
Conformidade / Regulamentações Unknown (IETF Internet-Draft; no specific regulatory compliance addressed)
Protocolos de Troca de Credenciais KERI/ACDC (Authentic Chained Data Containers); compatible with DIDComm via KERI DID method
Estrutura de Confiança Cryptographic verification only (OOBI points to KEL; trust established through KERI key event log cryptographic verification; no external trust anchor)
Modelo de Custo Free (open IETF Internet-Draft; open source implementations)
Resistência à Censura Hybrid (OOBI URLs depend on endpoint availability; multiple OOBIs can be provided for same AID via different witnesses/watchers; resilient via multi-witness architecture)