What if Web3 was more about transferring secrets than value?

ETHCC 6 · July 2023 · 20:30

Gilles Fedak presents the iExec Secret Management Service, which uses trusted execution environments to store, manage and transfer offchain secrets. The speaker considers privacy and ownership for digital assets beyond financial transfers.

Speakers

Topics

From ETHCC 6, hosted by Ethereum France.

Transcript

foreign and today I'm going to present you a talk about it's a very strong claim actually it's what is web free was more about sharing secret than transferring value so we try to defend that claim during this talk uh I hope I will convince you and if I don't convince you maybe it's because we are not doing web free but we are already into web form so the schedule for the talk is the following first I will very briefly

introduce you Isaac for those of you who don't know us already will give our vision of web free and why it might be a little bit different than the others then I will introduce you what we call privacy enhancing marketing It's A New Concept for doing marketing while respecting the the privacy and then I will introduce a series of new products that we call devtools to enable developers to very easily build their own privacy and sync marketing product and then I will present a marketing campaign that we are launching to

promote the spam tools so a lot of very interesting uh news today so let's start so the story of I exec very briefly it started in 2015 with a high one meter original ideas in 2017 we did the Ico we released the RLC token it's not listed on coinbase and binance and media orders and some Milestones I want really to give you that are relevant for this talk in 2019 we did the version 4 of I exec and that was the very first Marketplace for monetizing both CPU and data so a place where people can run CPU and data

in 2020 we introduced confidential Computing and we were probably one of the very first project in web free to combine to mix blockchain and confidential Computing in 2021 we basically developed everything that was promised in the white paper and we did that in four years instead of five and we did well beyond what was provided the white paper in the sense that confidential Computing was not there and we introduced confidential competing and nowadays in 2023 we have released the 8th version 8 of ixx dark and we are also releasing new products based on

this stack that make the usage of Isaac extremely simple so the team has worked very hard to get that ready for HTC they really deserve a big Bravo and congratulations guys that was really amazing to have that ready so I exit what are we doing we are first a platform to build web free application that are decentralized privacy preserving and ownership preserving next we are Marketplace protocol that allows people to monetize easily their application their data set or their computing power

and what make us unique is the fact we that we are combining in one single technology confidential Computing blockchain and monetization so our approach to web free so all claim is that web free its transferring value and sharing Secret and that's really important that's the two sharing secret and transferring value and why is that it's because if you are only transferring value you are only addressing what's on chain when you do both you are really targeting the whole digital

World okay meaning that a file can treat a file exactly as if it was a crypto so transferring value well you already know that of course I won't elaborate that much the problem you have to solve is double spending right so before we knew how to copy information we didn't know how to move information and that's basically a problem that has been solved by Bitcoin during the white paper and the proposition the technology proposition was a blockchain which is a decentralized isolator that store the values sharing secret what what does it mean sharing a secret if Alice has a secret

and sends that secrets to verb then it's no longer a secret because the secret is reviewed to Bob right so sharing a secret it means that Alice has a secret verb can use that secret but that secret is never revealed to Bob okay and here the key notion is usage usage in digital world there's basically a computation okay and the key enabler technology for that is what we call confidential Computing confidential Computing it's a technology that allows to compute and and during the computation the secret is never revealed so before confidential

Computing we knew how to store secret how to transfer secret now with confidential Computing we know how to compute on secrets okay so all particular technology that we are using for that is called is called Intel agents Enclave that's basically Hardware cryptography it's a segment of memory in your microprocessor that is never decrypted and so everything you ship that segment in that computer The Enclave will always be protected so in terms of data management when you have blockchain and when you have confidential Computing it opens a lot of

New Horizon so and you can do a lot of things that were just never you know that couldn't do before uh so for instance you can do end-to-end privacy where you can transfer data over a network and there will never be revealed when you're doing competition you can have two ownership which means that if for instance you run the data then you are sure that nobody can steal the data nobody can copy the data you can have governance it's stored on chain so because it's done on chain on chain sorry you know that people cannot modify the governance rule or cannot delete your your governance rules and then you have monetization very easily either it

can be either very simple token transfer or it can be way more complex integrated with D5 course etc etc so of course you read breakfast and because very new it happens a lot of different use cases you know you can Target personal data you can Target digital art you can any uh a lot of different use cases today I'm going to present one particular use case that is around marketing so Marketing in web free is very challenging and why is that they are good and bad the good is what you know

the good is that you know what you know about your your users is their wallet and so if you go on the blockchain you can learn a lot about your users by looking at their wallet you can see the web you can see the tokens they have you can see the nfts the product they are using or the project they have used etc etc the bad is or you know about your users is the wallet address so that's very hard to reach them how do you contact them okay and who do you target an audience how do you engage people and there's one specific thing which is really specific to web free is that what you really don't want to have is to be

able to reconciliate to link actual user identity with their wallet because they aren't really you know it's it's a nightmare in terms of privacy so our solution to to this this challenge is what we call privacy enhancing marketing it relies on four principles that are very simple and that can be implemented with the project I'm going I'm gonna show you first personal data should remain private and only owned by the users second we need privacy preserving Communication channel that allow Pro

projects to communicate with their users without knowing nothing about their personal identity we need user explicit user content each time a personal data is shared with someone and finally people when they are engaged in marketing activity they should be rewarded for doing so so when we wanted to address this problem of how to build you know Pim private scientific marketing we came up to see that with this idea of um how to say providing some building some tools for the developers so that

they can easily Implement their own PM PM Solutions and so we designed a couple of developer tools that I'm going to present you now the first one is data protector it makes very simple the management for privacy governance and ownership for data so it gets you an idea of how it works the the example is very simple and basically Alice has a personal data this is her email address and Bob wants to send her an email and what we want to do is to use data protector to protect Alice email address so basically verb will be able to send

Alice an email but all he knows about Alice is her if you're more at the address and he knows nothing about the actual email address so data protector will create a protected data based on a Json file this Json file only contains a key and value so the key is email which is public and the value is the actual email address which is private the application is a confidential Computing application which is an email I mean an application that sends an email very easy and and of course the the the

email itself said by verb is also a secret and so the idea is that we put all that together within an enclave and that's the technology in order the Ajax Enclave that makes that private and that provide the um the the privacy so the governance before um before Bob can send an email to to Alice Alice first has to explicitly give the content to do so so it means that first she should authorize the application to use her

email address and next she must authorized Bob to use also her email address and once the consent is done it is granted then the image can be can be sent and ownership so remember you have this Json file which represents the the actual private data this is the ownership of this file is represented by nnft and so Alice is the owner of the data as long as she owns the nft meaning that she'll transfer the nfts will lose the ability to use her email address

in the background so this is what we do for you not have to manage that when you're using data protector there's an encrypted file which is stored on a PFS the key to encrypt and decrypt the files are stored in what we call the is execute Management Service the responsibility of the SMS is to deliver the keys to the one that uh to do to the enclaves that are authorized to use so to compute nodes according to the governor's rule so of course and plus we publish the schema of the Json file on chain and you know using ethereum evm events and this is indexed by the graph which allows to be the sort of ontology so that you can look for all the data

that have some specific properties so any Builders there so we have you covered everything is so simple to use it's just a regular npm package JavaScript type script data protector it's only six methods to create protected data manage your Grant access revoke access doing permission all this thing very easy to use you won't manage any confidential Computing stuff no remote attestation no smart contract Diplomat nothing you can embed that in your react you know application your web app etc etc

we also propose you web free mail which is another package to build PM application based on on the you know the regular email if you don't like that good old email no problem you take that code you Fork it you implement it for telegram Twitter whatever you want we have the developer reward program to help you we have volunteers we have grants and we will help you doing so I will we will be really happy to do so we have our first Builders who have already integrated PM in their product Talent layer it's an open protocol and

developer toolkit for building hiring platforms and they are actually using pm to establish privacy preservy secure Communication channel with their users ziplo is using data protector to you know give proof of existence for writings article papers code to protect their intellectual property we are also launching a huge marketing campaign to promote pm and that's also our first use case of PM the very own that we are building and and releasing it's called the Privacy path it's very

simple you earn RC token for receiving email okay so it's very simple you claim your privacy pass you enter your email address connect metamask you have a couple of transactions to sign obviously then you will be given a list of Partners you will accept receiving email from and if you subscribe to those news later you set your own price for receiving email of course they have access to your wallet so they can you know access if it's worthy or not and and and then again you you earn those LLC tokens we have actually I think uh more than 8 000 subscribers and we

launched that about 10 10 days ago something like that 10 or 15 days ago so it's quite successful I think okay thank you I hope that next time you will be asked what is web free you will answer it's two things you know transferring value and sharing secrets you can try that this evening at parties and see if it works uh if you like that talk if you want to know more about what we're doing uh please visit our booth we are the third floor [Music] um also try to get your privacy path to to receive a RSC token and Android Paris and happy hiking [Applause] thank you

so we have a we have time for for a couple questions hi um you mentioned Keys being stored um in the SMS are they public keys or private keys so the no in the SMS you can store any kind of secret so you can store private Keys you can store apis um you know apis credentials and this kind of thing dsms itself run within and enclaves it means that we have no access

to what's in the SMS okay um hi so and you're using ipfs for data store um I'm not particularly clued up on ipfs but I thought there was a pruning Behavior so do would that data be pruned in the long term yeah so we don't ensure any you know data available on top of ipfs absolutely

yeah it's we rely on ipfs or if ipfs has its own um you know policy for evicting old files or this kind of things manage like a cache for instance we can go against ipf head but I think that we have Solutions so that you know we can kind of pin some um some some fights and make sure they are available uh I don't know all the Gory details about ipfs but I graduate to talk with the team about that but yes I agree with you I know that I with such kind of distributed storage you are no guarantee of you know durability for your file definitely thank you

foreign