Aries Verifiable Credentials Registry (VCR), part of the Hyperledger Aries family of Digital Trust technologies, provides a searchable public directory based on Verifiable Credentials (VCs). It was historically known as both OrgBook (which is actually a deployment of Aries VCR) and Indy Catalyst.
Aries VCR is actively developed by the British Columbia Government’s Digital Trust Team in Canada, and the most well-known live example is OrgBook BC.
In an instance of Aries VCR, credentials can be issued from a variety of authorities about subjects in the instance. A core set of credentials are issued by an authority responsible for “creating” the subject. Other credentials can then be issued against the subject of these core credentials. All credentials are stored in a secure digital wallet and accessed via its website or the public API. This means an instance of Aries VCR can be an authoritative public registry of any referenceable information.
An instance of Aries VCR also differs from a traditional database in several additional ways, including:
Aries VCR is built using open source technologies, and is based on Aries Cloud Agent Python (ACA-Py), a flexible, open-source Aries framework for Digital Trust that’s under continuous and active development. In the four-layer Trust Over IP framework (PDF) Aries VCR sits in the third layer, Trusted Exchanges.
For practical usage, issuers issue their credentials to an instance of Aries VCR using a standard web controller with business logic, such as with the template Aries VCR Issuer Controller.
Users can access data in an instance of Aries VCR through:
A well-known live Aries VCR instance is OrgBook BC, a directory containing organizations registered in British Columbia, Canada, as well as licenses and permits issued to those organizations.
OrgBook BC is a business registration application of Aries VCR. Information about government-registered corporations (name, registration ID, address, directors, and so forth) is the root of trust in an instance of Aries VCR, and then business permits, liquor licenses, and so forth are issued against those corporations. Citizens, organizations and others could then look up a corporation and see up-to-date, proven information and any associated licenses and permits.
In this application, the root of trust would be government information on approved labs and health sites in a region or across the country. Then, a government regulatory agency would issue credentials against specific locations that are authorized to deliver particular vaccinations and tests.
A national or international registry of educational institutions is a third example. The root of trust might be a regional government (or whoever has oversight of educational institutions) issuing credentials about all diploma-granting institutions. Those credentials could include details about the specific diplomas they’re authorized to grant and the identifier (DID) each institution uses in issuing diploma credentials to individuals.
The model could be extended with another layer or two. For example, it could extend to a national entity issuing credentials about the authority of the regional oversight bodies. And to make it international in scope, a global authority could issue credentials about the national authority.
Aries VCR uses standard technologies and common integration patterns. If you’re a developer it should be a relatively minimal effort to get up and running.
If you simply want to see an Aries VCR instance in action, you can try out the OrgBook BC search interface.
Alternatively, if you are just wanting to issue credentials to an existing Aries VCR installation then you need the Aries VCR Issuer Controller repo.
If you wish to create your own instance of Aries VCR, read on.
You will need:
This repo has setup instructions for these three steps (using some old terminology in places).
If you wish to explore the API, a great starting place is the API web interface for OrgBook BC, presented using Swagger. Also, this API repo has a demo of how you can use the REST API to access Aries VCR credentials.
Aries VCR also provides a web hook facility so parties can subscribe to notifications for credential updates. It is possible to subscribe to all new credentials, any updates to existing credentials, or updates to specific credentials.
Aries VCR was developed by the Government of British Columbia’s Digital Trust Team.
We also welcome issues submitted about problems you encounter in using Aries VCR.