OOBI (Out-of-Band Introduction) Protocol

Protocolo de Identidad

A formal protocol specification (IETF Internet-Draft) defining a mechanism for introducing KERI Autonomic Identifiers (AIDs) to witness, watcher, and service endpoints via URL-based out-of-band exchanges. An OOBI is a URL pairing an AID with a network endpoint (IP address or URL) that can provide or cache the associated KERI Key Event Log (KEL). OOBIs enable KERI participants to bootstrap identifier discovery without a centralized directory, allowing any party with the OOBI URL to locate and verify another party's key state.

Comunidad
Enlaces
Visitar Comunidad

Detalles

Licencia Open specification (IETF I-D); reference implementations in KERI Python (keripy) and Rust (keri-core) under Apache-2.0
Estado de Desarrollo 🟢 Activo
Detalle del Estado de Desarrollo Released (implemented in production KERI tooling including KERIA, keripy, and the WebOfTrust reference implementations; IETF Internet-Draft active)
Propietario Samuel M. Smith (spec author); IETF Internet-Draft (draft-ssmith-oobi); KERI community
Órgano de Gobierno IETF (Internet-Draft draft-ssmith-oobi) | None (single specification author; KERI community)
País USA (Samuel M. Smith)
Año de Inicio 2021
Stack Language-agnostic (IETF specification); implemented in Python (keripy / KERIA), TypeScript (signify-ts), Rust; HTTP URLs as the OOBI format
Financiamiento Community / DARPA (KERI ecosystem funded partly by DARPA and DIF grants; OOBI spec funded as part of KERI development)
Última Investigación 1 jul 2026

Dominios de Caso de Uso

Identidad y Confianza

Protocolo de Identidad Atributos

Orígenes KERI ecosystem bootstrap (designed to solve KERI's identifier discovery problem — KERI AIDs are self-certifying but need a mechanism for parties to locate each other's key event logs without a central directory)
Base de Datos N/A (OOBIs point to endpoints that serve KELs; no database defined by the OOBI spec itself)
Lenguaje de Consulta HTTP URL resolution (OOBI is a URL; resolution fetches KEL from specified endpoint via HTTP GET)
Formatos de Datos OOBI URL (format: scheme://host:port/oobi/{AID}/{role}/{eid}); KERI CESR (Composable Event Streaming Representation) for KEL data returned by endpoints
Soporte Móvil Library-level (any HTTP client; QR code OOBI sharing common in mobile KERI wallet implementations)
Soporte Web Yes (OOBI URLs are HTTP/HTTPS; web-based KERI wallets resolve OOBIs via standard HTTP)
Aplicaciones Nativas Library-level (embedded in KERI wallet applications; QR code OOBI sharing in mobile wallet UIs)
Términos Free / Open standard (IETF Internet-Draft; Apache-2.0 reference implementations)
Fondos Unknown (part of broader KERI ecosystem funding; not separately itemized)
Basado En KERI (Key Event Receipt Infrastructure) — OOBI is the bootstrap/discovery mechanism for KERI identifiers; HTTP URL format; CESR (Composable Event Streaming Representation) for KEL data
Permisos Key-based (OOBI is an open URL; AID key control governs what can be done with the discovered identity)
Autenticación e Identidad KERI AID-based (OOBI introduces a KERI AID to its endpoint; authentication is via KERI key event log verification, not OOBI itself)
Modelo de Almacenamiento N/A (OOBI points to endpoints; storage is at the KERI witness/watcher infrastructure level)
Interoperabilidad KERI ecosystem (OOBI is specific to KERI AID discovery; compatible with any KERI-conformant implementation)
Portabilidad de Datos Full portability (OOBIs can be exchanged out-of-band via any channel — QR code, email, chat, NFC — enabling key state discovery independently of platform)
Gobernanza y Toma de Decisiones Community / IETF process (IETF Internet-Draft; community-governed; Sam Smith as spec author)
Madurez del Protocolo / Estandarización IETF Draft (active IETF Internet-Draft draft-ssmith-oobi; implemented in production KERI tooling; not yet published as RFC)
Estándares de Identidad KERI (Key Event Receipt Infrastructure); W3C DID (KERI AIDs can be expressed as DIDs); CESR (Composable Event Streaming Representation)
Métodos DID Soportados did:keri (KERI AIDs as DIDs; OOBI is the discovery mechanism for did:keri resolution)
Gestión de Claves Delegated to KERI (OOBI locates the key event log; KERI manages key rotation, pre-rotation, and recovery via the KEL)
Tipos de Credenciales N/A (OOBI is a discovery/bootstrap protocol; credential types defined at KERI/ACDC layer)
Método de Verificación Key event log verification (OOBI URL leads to KEL; cryptographic verification of key binding performed by KERI resolver, not OOBI itself)
Funciones de Privacidad Minimal (OOBI URLs may expose AID and endpoint; out-of-band exchange (QR code, direct link) limits exposure; no ZKP features)
Métodos de Autenticación QR code scanning (common OOBI exchange mechanism in wallets); Deep linking (OOBI URL passed via any channel); HTTP GET resolution
Mecanismo de Revocación N/A (OOBI is a discovery URL; revocation handled at KERI key event log level)
Tipos de Agentes Soportados Any KERI-identified entity: Humans (individuals), Organizations, Services/APIs, Devices/IoT
Tipos de Billetera/Cliente SDK/Library integration (keripy, signify-ts, KERIA server); QR code exchange in mobile wallets
Mecanismos de Recuperación N/A (recovery handled at KERI level via key event history and pre-rotation)
Cumplimiento / Regulaciones Unknown (IETF Internet-Draft; no specific regulatory compliance addressed)
Protocolos de Intercambio de Credenciales KERI/ACDC (Authentic Chained Data Containers); compatible with DIDComm via KERI DID method
Marco de Confianza Cryptographic verification only (OOBI points to KEL; trust established through KERI key event log cryptographic verification; no external trust anchor)
Modelo de Costos Free (open IETF Internet-Draft; open source implementations)
Resistencia a la Censura Hybrid (OOBI URLs depend on endpoint availability; multiple OOBIs can be provided for same AID via different witnesses/watchers; resilient via multi-witness architecture)