Are you an early GTM expert who is passionate about the intersection of technology and policy? Do you believe in a world where users should be able to control their data online? SpruceID is looking for an early-stage Business Development wizard to join our team and work with Wayne Chang and Elissa Maercklein to build & scale our GTM. We’d love to hear from you! Apply now: https://lnkd.in/g-tfFKpC #Hiring #BusinessDevelopment #TechJobs #RemoteWork
About us
Spruce is building a future where users own their identity and data across all digital interactions. Our open-source credentialing infrastructure is standards-compliant, production-ready, and extensible into typical enterprise and government IT systems.
- Website
-
https://www.spruceid.com
External link for SpruceID
- Industry
- Software Development
- Company size
- 11-50 employees
- Headquarters
- New York
- Type
- Privately Held
Locations
-
Primary
Get directions
New York, US
Employees at SpruceID
Updates
-
Yesterday, we shared a new approach for how verifiable digital credential systems, like mobile driver's licenses, can be upgraded to mitigate the privacy risk of linkability - through Provably Forgotten Signatures. We hope to collaborate with the broader community of cryptographers, public sector technologists, and developers of secure systems who are excited to jam on this further. Please reach out to us or comment below if you’re interested in collaborating on any of the following: 💭 Enumerated requirements for TEEs around scalability, costs, and complexity to implement this approach, so that commercial products such as Intel SGX, AMD TrustZone, AWS Nitro Enclaves, Azure Confidential Computing, IBM Secure Execution, or Google Cloud Confidential Computing can be considered against those requirements. 💭 A formal paper with rigorous evaluation of the security model using data flows, correctness proofs, protocol fuzzers, and formal analysis. 💭 Prototyping using real-world credential formats, such as ISO/IEC 18013-5/23220-* mdocs, W3C Verifiable Credentials, IMS OpenBadges, or SD-JWTs. 💭 Evaluation of how this approach meets requirements for post-quantum cryptography. 💭 Drafting concise policy language that can be incorporated into model legislation or agency rulemaking to create the requirement for unlinkability where deemed appropriate.
One of the risks that privacy researchers have identified with Verifiable Digital Credentials (VDCs) is “linkability”--the possibility of profiling people by collating data from their use of digital credentials. We are proposing a way to address this in systems today while also paving the way for future privacy-enhancing technologies. This risk commonly arises when traceable digital signatures are used repeatedly, allowing different parties to correlate many interactions back to the same individual. This can create surveillance potential across societies, whether conducted by the private sector, state actors, or even foreign adversaries. Given the challenges in deploying zero-knowledge proof systems in today’s production environments, we are proposing a simpler approach using TEEs that, when combined with key and signature cycling, can provide protection from both verifier-verifier collusion and issuer-verifier collusion by using confidential computing environments: the issuer can forget the unique values that create the risk in the first place, and provide proof of this deletion to the user. However, we must also acknowledge the limitations of TEEs and the necessary precautions to layer additional security around them. This is implementable today and would be supported by existing hardware security mechanisms suitable for high-assurance environments. In this piece, we explore the collusion problems and detail an approach that adds privacy by upgrading existing systems to prevent linkability while aiming to be compatible with already-deployed implementations of digital credential standards, such as ISO/IEC 18013-5 mDL, SD-JWT, and W3C Verifiable Credentials, and aligning with cryptographic security standards such as FIPS 140-2/-3. It is compatible with and can even pave the way for future privacy technologies such as post-quantum cryptography (PQC) or zero-knowledge proofs (ZKPs) while unlocking beneficial use cases today. A big thank you to Ryan Hurst (SpruceID Advisor, former Google/Microsoft), Dan Boneh (Stanford), Abhi Shelat (Google/Northeastern), Foteini Baldimtsi (GMU), and Dick Hardt (Hellō) for reviewing the technical approach in this article, and providing several suggestions which improved the work. https://lnkd.in/g52xi3ci
Provably Forgotten Signatures: Adding Privacy to Digital Identity
blog.spruceid.com
-
🎨 Meet Scotty Matthewman, Senior Designer at SpruceID: With a background in industrial design and experience in startups and corporate innovation, Scotty found his passion in design for digital identity. He joined SpruceID to build solutions that enhance accessibility and inclusion by optimizing the digital user experiences. 🌲 Tree fact: If he could be any tree, he would be a maple tree. Scotty used to make furniture, and he always loves using maple in his furniture creations. Learn more about Scotty: https://lnkd.in/efmRsa94
-
-
In May, we presented at the Department of Homeland Security’s SVIP (Silicon Valley Innovation Program) Demo Week. In this clip, hear CEO Wayne Chang describe our Credible Platform and the open-source SpruceKit components that underpin our product offerings: 🪪 The Credible platform powers the secure issuance and lifecycle management of digital licenses, permits, and passes, enhancing convenience and cross-agency efficiency. 🛠️ The SpruceKit open-source components are used to tailor Credible deployments for end-to-end use cases, including functionality like constructing wallets and verifiers, or implementing specific protocols.
-
🔊 Hear Ajay Gupta, Chief Digital Transformation Officer of the State of California DMV, discuss how working with SpruceID has allowed California to be more flexible and agile when it comes to expanding the use cases where citizens can leverage their Mobile Driver’s License.
-
We're excited to have been selected to work with the U.S. Department of Homeland Security on their initiative to bring digital wallets and credentials to immigrants and travelers.
We're excited to announce that S&T has awarded contracts to six innovative startups—Credence ID, Hushmesh Inc., Netis - Web3 Consulting & Development, Procivis AG, SpruceID, and ubiqu. These companies will develop privacy-enhancing digital wallets to secure and verify digital credentials for immigrants and travelers. This initiative will significantly enhance privacy and security for individuals across the nation. Learn more: https://bit.ly/4dch13d
-
-
Digital identity is evolving, and its future hinges on key issues such as: - Privacy protection - Constituent control over data - Enhanced anti-fraud measures This recent article by Government Technology highlights emerging trends including the shift from physical to digital identity systems, the importance of centralized, flexible frameworks, and the critical role of privacy in building trust. Read the full article here: https://lnkd.in/ghHBJ7-9
8 Fundamental Issues That Will Shape the Future of Digital Identity
govtech.com
-
We’re thrilled to announce that SpruceID has been selected to work with the U.S. Department of Homeland Security on their initiative to bring convenience, security, and privacy to individuals using digital versions of credentials issued for immigration and travel. Our open-source libraries will be used to build digital credential wallets and verifier capabilities to support standards while ensuring safe usage and interoperability across sectors like finance, healthcare, and various cross-border applications. We look forward to collaborating with DHS to help maintain secure digital interactions that enhance our resident experience with digital credentials across the United States. Read the full announcement: https://lnkd.in/gb_WvjYT
-
-
SpruceID reposted this
🔍 #Digitalidentity solutions offer huge benefits for banks! 📱💳 They provide faster, more secure verification, help prevent fraud, & ensure better data governance. Learn more from Wayne Chang, CEO of SpruceID. Read more: https://buff.ly/3VOEksM
-
-
Verifiable digital credentials, such as mobile driver’s licenses, are provably authentic and can be shared in just a few taps, which means you can onboard good customers through KYC checks faster. Discover how SpruceID can enhance your financial services with digital identity solutions: https://lnkd.in/gTx5KQiX
For Financial Services
spruceid.com