OOBI (Out-of-Band Introduction) Protocol

Protocolo de Identidade

A formal protocol specification (IETF Internet-Draft) defining a mechanism for introducing KERI Autonomic Identifiers (AIDs) to witness, watcher, and service endpoints via URL-based out-of-band exchanges. An OOBI is a URL pairing an AID with a network endpoint (IP address or URL) that can provide or cache the associated KERI Key Event Log (KEL). OOBIs enable KERI participants to bootstrap identifier discovery without a centralized directory, allowing any party with the OOBI URL to locate and verify another party's key state.

Comunidade

Links

Visitar Website Ver esta ferramenta no grafo Sugerir uma correção

Detalhes

Licença

Open specification (IETF I-D); reference implementations in KERI Python (keripy) and Rust (keri-core) under Apache-2.0

Status de Dev 🟢 Ativo

Detalhe do Status de Dev

Released (implemented in production KERI tooling including KERIA, keripy, and the WebOfTrust reference implementations; IETF Internet-Draft active)

Proprietário

Samuel M. Smith (spec author); IETF Internet-Draft (draft-ssmith-oobi); KERI community

Órgão de Governança IETF (Internet-Draft draft-ssmith-oobi) | None (single specification author; KERI community)

Órgão de Governança - Lista

Internet Engineering Task Force

País

USA (Samuel M. Smith)

Ano de Início 2021

Stack

Language-agnostic (IETF specification); implemented in Python (keripy / KERIA), TypeScript (signify-ts), Rust; HTTP URLs as the OOBI format

Financiamento

Community / DARPA (KERI ecosystem funded partly by DARPA and DIF grants; OOBI spec funded as part of KERI development)

Financiamento - Lista

Decentralized Identity Foundation

Última Investigação 1 de jul. de 2026

Visão de topologia

Esta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.

Abrir no Explorador de grafo

Domínios de Caso de Uso

Identidade e Confiança

Capacidades

Portabilidade do grafo de confiança

Identidade soberana

Protocolo de Identidade Atributos

Origens

KERI ecosystem bootstrap (designed to solve KERI's identifier discovery problem — KERI AIDs are self-certifying but need a mechanism for parties to locate each other's key event logs without a central directory)

Banco de Dados

N/A (OOBIs point to endpoints that serve KELs; no database defined by the OOBI spec itself)

Linguagem de Consulta

HTTP URL resolution (OOBI is a URL; resolution fetches KEL from specified endpoint via HTTP GET)

Formatos de Dados

OOBI URL (format: scheme://host:port/oobi/{AID}/{role}/{eid}); KERI CESR (Composable Event Streaming Representation) for KEL data returned by endpoints

Suporte Móvel

Library-level (any HTTP client; QR code OOBI sharing common in mobile KERI wallet implementations)

Suporte Web

Yes (OOBI URLs are HTTP/HTTPS; web-based KERI wallets resolve OOBIs via standard HTTP)

Aplicativos Nativos

Library-level (embedded in KERI wallet applications; QR code OOBI sharing in mobile wallet UIs)

Termos

Free / Open standard (IETF Internet-Draft; Apache-2.0 reference implementations)

Financiamento - Lista

Decentralized Identity Foundation

Fundos

Unknown (part of broader KERI ecosystem funding; not separately itemized)

Baseado Em

KERI (Key Event Receipt Infrastructure) — OOBI is the bootstrap/discovery mechanism for KERI identifiers; HTTP URL format; CESR (Composable Event Streaming Representation) for KEL data

Órgão de Governança - Lista

Internet Engineering Task Force

Permissões

Key-based (OOBI is an open URL; AID key control governs what can be done with the discovered identity)

Autenticação e Identidade

KERI AID-based (OOBI introduces a KERI AID to its endpoint; authentication is via KERI key event log verification, not OOBI itself)

Modelo de Armazenamento

N/A (OOBI points to endpoints; storage is at the KERI witness/watcher infrastructure level)

Interoperabilidade

KERI ecosystem (OOBI is specific to KERI AID discovery; compatible with any KERI-conformant implementation)

Portabilidade de Dados

Full portability (OOBIs can be exchanged out-of-band via any channel — QR code, email, chat, NFC — enabling key state discovery independently of platform)

Governança e Tomada de Decisão

Community / IETF process (IETF Internet-Draft; community-governed; Sam Smith as spec author)

Maturidade / Padronização do Protocolo

IETF Draft (active IETF Internet-Draft draft-ssmith-oobi; implemented in production KERI tooling; not yet published as RFC)

Padrões de Identidade

KERI (Key Event Receipt Infrastructure); W3C DID (KERI AIDs can be expressed as DIDs); CESR (Composable Event Streaming Representation)

Padrões de Identidade - Lista

Métodos DID Suportados

did:keri (KERI AIDs as DIDs; OOBI is the discovery mechanism for did:keri resolution)

Métodos DID Suportados - Lista

Gestão de Chaves

Delegated to KERI (OOBI locates the key event log; KERI manages key rotation, pre-rotation, and recovery via the KEL)

Tipos de Credenciais

N/A (OOBI is a discovery/bootstrap protocol; credential types defined at KERI/ACDC layer)

Tipos de Credenciais - Lista

Método de Verificação

Key event log verification (OOBI URL leads to KEL; cryptographic verification of key binding performed by KERI resolver, not OOBI itself)

Recursos de Privacidade

Minimal (OOBI URLs may expose AID and endpoint; out-of-band exchange (QR code, direct link) limits exposure; no ZKP features)

Métodos de Autenticação

QR code scanning (common OOBI exchange mechanism in wallets); Deep linking (OOBI URL passed via any channel); HTTP GET resolution

Mecanismo de Revogação

N/A (OOBI is a discovery URL; revocation handled at KERI key event log level)

Tipos de Agentes Suportados

Any KERI-identified entity: Humans (individuals), Organizations, Services/APIs, Devices/IoT

Tipos de Carteira/Cliente

SDK/Library integration (keripy, signify-ts, KERIA server); QR code exchange in mobile wallets

Mecanismos de Recuperação

N/A (recovery handled at KERI level via key event history and pre-rotation)

Conformidade / Regulamentações

Unknown (IETF Internet-Draft; no specific regulatory compliance addressed)

Protocolos de Troca de Credenciais

KERI/ACDC (Authentic Chained Data Containers); compatible with DIDComm via KERI DID method

Protocolos de Troca de Credenciais - Lista

Estrutura de Confiança

Cryptographic verification only (OOBI points to KEL; trust established through KERI key event log cryptographic verification; no external trust anchor)

Modelo de Custo

Free (open IETF Internet-Draft; open source implementations)

Resistência à Censura

Hybrid (OOBI URLs depend on endpoint availability; multiple OOBIs can be provided for same AID via different witnesses/watchers; resilient via multi-witness architecture)

Relacionamentos

Como esta ferramenta se conecta a outras ferramentas e organizações, a partir de relacionamentos revisados pelo responsável pelos dados do OpenHaven. Descrevem como os projetos se conectam, não a qualidade deles.

Administrado por: Internet Engineering Task Force
Baseado em: ACDC (Authentic Chained Data Containers)
KERI
Está em conformidade com: DIDs
KERI
Fala o protocolo: ACDC (Authentic Chained Data Containers)
DIDComm
KERI
Financiado por: Decentralized Identity Foundation
Identifica-se via: DIDs
KERI
Membro da suíte: KERI Suite
Padronizado em: Internet Engineering Task Force
Interopera com: KERI
Base de: ACDC (Authentic Chained Data Containers)
KERI
Protocolo falado por: ACDC (Authentic Chained Data Containers)
Requerido por: did:scid