The Sovrin Foundation and Engage Identity are proud to announce a new partnership. Security experts from Engage Identity will be completing an in-depth technical review of the Sovrin Foundation’s entire security architecture.
The Sovrin Foundation is a private-sector, international non-profit that was established to govern the world’s first self-sovereign identity (SSI) network. It exists to provide the human governance and trust frameworks to ensure the integrity of a distributed permissioned network. The Sovrin Foundation is designed to establish trust through transparency, diffusion, and neutrality.
It is essential that the advanced technology utilized by everyone depending on the Sovrin Foundation’s framework is secure. That technology protects many valuable assets including private personal information and essential business data. As a result, it is critical that the Foundation is fully aware of risks and vulnerabilities in the framework. In addition, The Sovrin Foundation would benefit from having a roadmap for future security investment opportunities.
Engage Identity is a leader in the security and identity industry. Established and emerging cryptographic identity protocols are one of our many areas of expertise. We have extensive experience providing security analysis and recommendations for identity frameworks.
The Engage Identity team is lead by Sarah Squire, who has worked on user-centric open standards for many organizations including NIST, Yubico, and the OpenID Foundation. Sarah will be joined by Adam Migus and Alan Viars, both experienced authorities in the fields of identity and security.
The final report will be released this summer, and will include a review of the current security architecture, as well as opportunities for future investment. Anticipated subjects of in-depth research are:
- Resilience to denial of service attacks
- Key management
- Potential impacts of a Sovrin-governed namespace
- Minimum technical requirements for framework participants
- Ongoing risk management processes
Both The Sovrin Foundation and Engage Identity are excited to take this new step forward together to ensure that the future of self-sovereign identity management can thrive and grow.