Trust Spanning Protocol

Protocolo de Identidade

Specification for the protocol at the center of the ToIP hourglass model — the "trust spanning" layer (Layer 2) intended to be "to digital trust what IP is to digital data." Facilitates secure, message-based communication between endpoints with potentially different identifier types (W3C DIDs, KERI AIDs, URNs, etc.), as long as those identifiers are based on public-key cryptography with a verifiable trust root. Provides three core properties: authenticity (mandatory), confidentiality (optional), and metadata privacy (optional, against correlation attacks). Verifiable identifiers (VIDs) form authentic relationships via TSP messages serving as virtual trust channels

Comunidade
Links
Visitar Website Ver esta ferramenta no grafo Sugerir uma correção

Detalhes

Licença Spec: open under ToIP IPR framework; Rust open-source reference implementation hosted at OpenWallet Foundation (sponsored by Futurewei, Gen, Accenture); Python implementation by Sam Smith / Web of Trust community
Status de Dev 📝 Rascunho
Detalhe do Status de Dev Implementers Draft — vs1.0 Experimental Rev 2; first official version target 1.0.0 upon spec release
Proprietário Trust Over IP Foundation (project of Linux Foundation Decentralized Trust); developed by the Trust Spanning Protocol Task Force (TSPTF) within the Technology Stack Working Group
Órgão de Governança ToIP / LF Decentralized Trust (Trust Spanning Protocol Task Force, within the Technology Stack Working Group)
Órgão de Governança - Lista
  • Trust Over IP Foundation
País International (Linux Foundation; global membership)
Ano de Início 2023
Stack Specification only; reference implementations in Rust (Futurewei/Gen/Accenture-sponsored implementation at OpenWallet Foundation) and Python (Web of Trust GitHub community); CESR (Composable Event Streaming Representation) proposed as encoding format
Financiamento Trust Over IP Foundation member contributions; reference implementation funded by OpenWallet Foundation Premier members (Futurewei, Gen, Accenture)
Última Investigação 1 de jul. de 2026

Visão de topologia

Esta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.

Visão de topologia: Trust Spanning ProtocolEsta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.TrustSpanning Pr…DIDComm (Baseado em, Fala o protocolo)DIDCommFirst Person Project / Network (Base de, Implementações em conformidade, Protocolo falado por)First PersonProject / Ne…KERI (Baseado em, Está em conformidade com)KERIACDC (Authentic Chained Data Containers) (Compõe-se com)ACDC(Authentic C…DIDs (Está em conformidade com)DIDsOpenID for Verifiable Credentials (OpenID4VC) (Está em conformidade com, Fala o protocolo)OpenID forVerifiable C…Keyring (Protocolo falado por)Keyringp2p-trust-stack (Protocolo falado por)p2p-trust-st…Real Life Trust Protocol (RLTP) (Protocolo falado por)Real LifeTrust Protoc…Trust Over IP Foundation (Administrado por)Trust OverIP Foundation

Abrir no Explorador de grafo

Domínios de Caso de Uso

Identidade e Confiança

Capacidades

Portabilidade do grafo de confiança Identidade soberana

Protocolo de Identidade Atributos

Origens ToIP TSPTF — design synthesized from four overall proposals submitted by Sam Smith, Daniel Hardman, Wenjing Chu, Michael Herman (early 2023)
Banco de Dados N/A — TSP is a transport-layer trust spanning protocol; persistence is implementation/application concern
Linguagem de Consulta N/A — TSP is message-oriented (Direct Mode endpoint-to-endpoint, Routed Mode via intermediaries); query patterns belong at higher ToIP layers
Formatos de Dados TSP messages with VID_String length-prefixed identifiers; supports DID and URN syntaxes (extensible)
Suporte Móvel Designed to be lightweight enough for mobile and constrained devices; transport-agnostic so messages can run over Bluetooth, HTTP, or other transports suitable for mobile
Suporte Web Transport-agnostic — designed to be carried over any transport (HTTPS, DIDComm, raw sockets)
Aplicativos Nativos Implementation-dependent; reference Rust and Python libraries are embeddable in native apps; expected wallet integrations via OpenWallet Foundation reference implementation
Termos Open standard, free to implement (under ToIP IPR framework requiring contributor membership)
Fundos Unknown — ToIP/LF Decentralized Trust funded by member dues; specific TSPTF budget not separately published; four years of cumulative person-hours invested by ToIP members and sponsoring organizations (Futurewei, Gen, Accenture)
Baseado Em W3C DIDs (DID method-agnostic); KERI Autonomic Identifiers (AIDs); IETF URN spec (RFC 8141); public-key cryptography
Órgão de Governança - Lista
  • Trust Over IP Foundation
Permissões Out of scope for TSP itself — permission and authorization semantics belong at higher ToIP layers
Autenticação e Identidade VID-rooted — endpoints identified by Verifiable Identifiers (DIDs, AIDs, or URN-based PKC identifiers)
Modelo de Armazenamento N/A — transport protocol; storage of messages, keys, and credentials is implementation concern at higher layers
Interoperabilidade Designed as a "spanning layer" for maximum interoperability across decentralized digital trust infrastructure; can bridge centralized, federated, and decentralized identifier architectures
Portabilidade de Dados High — VIDs and TSP-channel relationships are portable across transports and ecosystems; any VID type can communicate with any other VID type through the spanning protocol
Governança e Tomada de Decisão ToIP TSWG governance — open weekly meetings, consensus-driven, IPR-protected under LF Decentralized Trust; cross-organization collaboration with DIF, Hyperledger, OpenWallet Foundation, W3C Credentials Community Group; Implementers Drafts iterated through public review
Maturidade / Padronização do Protocolo Implementers Draft (current); pre-1.0; Rust and Python reference implementations in development
Padrões de Identidade W3C DIDs, KERI AIDs, ToIP Technology Architecture Specification
Padrões de Identidade - Lista
Métodos DID Suportados Any (method-agnostic by design)
Gestão de Chaves Per VID system (DID method or KERI key event log)
Tipos de Credenciais N/A at the spanning protocol layer — credentials are exchanged at higher ToIP Layer 3 Trust Tasks (DIDComm-style credential exchange, OpenID4VC, etc.)
Tipos de Credenciais - Lista
Método de Verificação Cryptographic verification using keys associated with senders VID
Recursos de Privacidade Optional confidentiality (encryption); optional metadata privacy (anti-correlation measures)
Métodos de Autenticação Mandatory authenticity via cryptographic signatures rooted in VID
Mecanismo de Revogação Underlying VID system's revocation — KERI key rotation events, DID document update, X.509 CRL/OCSP — TSP itself does not define revocation, deferring to the VID's trust root
Tipos de Agentes Suportados Humans, institutions, devices, AI agents — TSP April 2025 white paper explicitly extends to AI and human trust interactions
Tipos de Carteira/Cliente Implementation-dependent — expected wallet integrations via OpenWallet Foundation reference implementation; KERI-style agent infrastructure compatible
Mecanismos de Recuperação Underlying VID system's recovery — KERI rotation events, DID rotation, X.509 reissuance — TSP itself does not define recovery
Conformidade / Regulamentações Designed to support eIDAS, EUDI Wallet, and GLEIF (Global Legal Entity Identifier Foundation) use cases; GLEIF actively participating in TSPTF
Protocolos de Troca de Credenciais TSP is not a credential exchange protocol itself; credential exchange protocols including DIDComm subprotocols and OpenID4VC can run over TSP
Protocolos de Troca de Credenciais - Lista
Estrutura de Confiança Layer 2 of ToIP four-layer stack; complemented by TRQP (Layer 1) for trust registry queries; supports any governance framework above it
Modelo de Custo Free — open standard, royalty-free implementation under ToIP/LF Decentralized Trust IPR
Resistência à Censura Strong — transport-agnostic, messages can traverse any underlying transport without prior assumption of trust; Routed Mode supports intermediary-mediated circumvention

Relacionamentos

Como esta ferramenta se conecta a outras ferramentas e organizações, a partir de relacionamentos revisados pelo responsável pelos dados do OpenHaven. Descrevem como os projetos se conectam, não a qualidade deles.

Administrado por
  • Trust Over IP Foundation
Baseado em
Está em conformidade com
Fala o protocolo
Compõe-se com
Base de
Implementações em conformidade
Protocolo falado por