Committee Grant #011 - Tuum Technologies Authsnap

Full Grant Size $150,000

Project Name Tuum Technologies Authsnap: Universal Login Service

Champion Christian Montoya

Project Description

Every application presents a different identity experience and is largely independent of every other app. Interoperability is important for more than identity, but the fundamental nature of identity means the lack of interoperability is painfully felt. These silos force people to face inconsistent user experiences and restrict them from carrying information system to system.

With 5+ billion people online, each with many relationships, a general-purpose identity system needs to account for many trillions of relationships between people, organizations, and things that make up the online world - No single centralized system can do this.

For these reasons, we propose a Snap that acts as a universal login service for all applications, both traditional and decentralized, allowing developers to select which method to integrate. Functioning similar to Sign-in with Ethereum (SIWE), but overcoming some of the challenges faced by SIWE, we’re introducing a decentralized option using Verifiable Credentials that allows scale to become easier to manage.

The purpose of the Snap is to offer developers an easy-to-use authorization system for integrating a decentralized login mechanism with the use of Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs). Interacting directly with other existing Snaps, we’re showcasing an early use case of Snap-to-Snap connectivity, and offering unique capabilities utilizing the power of DIDs that was not previously possible.

With prior experience developing Snaps, Tuum Technologies built an Identity Snap that unlocks the offerings of Decentralized Identifiers (DIDs), and we’re looking to further boost complimentary services with the support of the MetaMask Grants DAO.

Project Goals

PHASE 1 (Included in this proposal)

Traditional Basic Auth

• Username and passwords are saved in MetaMask accounts in Snap state
• Use the Snap to automatically authenticate a user to a website Decentralized Auth using

Decentralized Identifiers (DIDs)

• Offer a new way to log-in to websites with Verifiable Credentials (VCs) using the Identity and SSI Snaps.
• Make it possible for users to save VCs on their personal cloud storage (Google Drive, Dropbox, etc.)

PHASE 2 (Future development to be proposed after completion of PHASE 1)

Smart Contract Auth

• Developer dApp registration via smart contract with user permissions set and recorded onchain
• Register users, login users, and retrieve various offchain information about users that’s recorded within the MetaMask Snap state (Examples include name, age, email, to anything).
• Only registrations cost ETH fees while login and retrieving user info will not.

Zero Knowledge Auth

• Utilize Secure Remote Password Protocol (SRP) with a login mechanism whereby users demonstrate that they know a password without sending, including additional information from which the password can be derived, ensuring the password never leaves the client and is unknown to the server.
• Allow users to authenticate themselves to a server as it is resistant to dictionary attacks mounted by an eavesdropper and not requiring a trusted third party.

[This proposal includes PHASE 2 for informational purposes only to highlight the possible roadmap and future opportunities following R&D, user feedback, and completion of PHASE 1]

Target Milestones

Milestone 1: Complete Identity Snap MVP (Done) ✔️Core Functionality: Create DID ✔️Core Functionality: Resolve DID ✔️Core Functionality: Issue Verifiable Credential ✔️Core Functionality: Save Verifiable Credential ✔️Core Functionality: Generate Verifiable Presentation from VC ✔️Core Functionality: Verify Verifiable Credential ✔️Core Functionality: Verify Verifiable Presentation

Demo Video: https://www.youtube.com/watch?v=HIS3hkKpiv0&feature=youtu.be

Wiki: https://github.com/tuum-tech/identity-snap/wiki

Milestone 2: Complete Authsnap: Universal Login Service MVP

• Core Functionality - Traditional Basic Auth
• Core Functionality - Decentralized Auth using Decentralized Identifiers (DIDs)

Timeline / Path to Production

With the team established and actively developing MetaMask Snaps there will be no additional upstart time required to begin development. It will require 3 months to kickoff, build, test, optimize and refactor code, demo, and release the Snap.

About Team

Team Members on this project:

Donald Bullers: Founder, CEO LinkedIn: https://www.linkedin.com/in/donaldbullers/ Twitter: https://twitter.com/DonaldBullers

Kiran Pachhai: Co-Founder, Technical Lead LinkedIn: https://www.linkedin.com/in/kiranpachhai/ GitHub: https://github.com/kpachhai

Diego Chagastelles: Lead Developer LinkedIn: https://www.linkedin.com/in/dchagastelles/ GitHub: https://github.com/dchagastelles

Jason Ming: Engineer GitHub: https://github.com/luckdev01

Our company is actively building open source software and operating through grant funding.

Funding Request

$150,000.00

Distribution #1: Upon approval ($75,000 USD)

Distribution #2: Upon completion ($75,000 USD)

$130k USD will be used for project development, $20k USD for security audit.

What specific software license does the grantee intend to publish under?

Everything will be licensed under MIT-licensing

Other Information / Relevant Links / Supporting Documents

Demo Video: https://www.youtube.com/watch?v=HIS3hkKpiv0&feature=youtu.be

Wiki: https://github.com/tuum-tech/identity-snap/wiki