kskb.dev/data · documents with their text · this document in the catalog

control-authority [ relation ]

glossary term · license Apache-2.0 · 1082 characters · the original · source wot-terms

control-authority [ relation ]

Definition

In identity systems Control Authority is who controls what and that is the primary factor in determining the basis for trust in them. The entity with control authority takes action through operations that affect the

  • creation (inception)

  • updating

  • rotation

  • revocation

  • deletion

  • and delegation of the authentication factors and their relation to the identifier.

Source of truth

How these events are ordered and their dependence on previous operations is important. The record of these operations is the source of truth for the identity system.

Change control authority

In the 2022 implementation of KeriPy+ two rotations+ were required to change control authority. In new rotation rules, you can rotate to new keys that aren't in the prior next key digests+. You just need to reach the appropriate thresholds of prior-next-threshold and current-signing-threshold. So you now only need one rotation to change control authority. Note: This change was the forcing function to require dual indexed codes+ in CESR.

KERI Suite Glossary, https://weboftrust.github.io/WOT-terms/docs/glossary/control-authority. Licensed under the Apache License 2.0; the license and any notices are in the repository. Found through KERISSE. The abstract, the level and the labels on the catalog entry are the KERISuite Knowledge Base's own, CC BY 4.0.