AgeVerificationCredential

An age verification credential

A Verifiable Credential that contains an individual's age category, typically issued by an age verification system (such as TruAge). The AgeVerificationCredential is bound to the Personal Photo Verifiable Credential in a privacy-preserving manner (via a cryptographic hash). This Verifiable Credential contains a `refreshService` API endpoint and is used by software to request additional `OverAgeTokenCredential`s, when they are consumed.

{
  "@context": [
    "https://www.w3.org/2018/credentials/v1",
    "https://w3id.org/age/v1",
    "https://w3id.org/security/suites/ed25519-2020/v1"
  ],
  "id": "urn:uuid:fae50b6a-7685-11ed-b003-9be244b48366",
  "type": ["VerifiableCredential", "AgeVerificationCredential"],
  "issuer": {
    // A DID representing an age verification provider
    "id": "did:key:z6MksFxi8wnHkNq4zgEskSZF45SuWQ4HndWSAVYRRGe9qDks",
    "image": "data:image/png;base64,iVBORw0KGgoAAAA...",
    "name": "TruAge"
  },
  "issuanceDate": "2022-04-03T00:00:00.000Z",
  "expirationDate": "2022-12-15T00:00:00.000Z",
  "name": "Age Verification Credential",
  "anchoredResource": {
      "id": "urn:uuid:a1486392-763d-11ed-8281-6be4ae1436ac",
      "digestMultibase": "zQmdfTbBqBPQ7VNxZEYEj14VmRuZBkqFbiwReogJgS1zR1n"
  },
  "credentialSubject": {
    "overAge": 21
  },
  "refreshService": {
    "id": "urn:uuid:3e25303a-7686-11ed-84fb-c37973e63ee0",
    "type": "VerifiableCredentialRefreshService2021",
    "url": "https://registration.provider.example/flows/reissue-age-token",
    "refreshToken":
      // This is a ConcealedIdToken, used by wallet for 'reissue'
      // operation, to get more tokens
      "z2BJYfNtmWRiouWhDrbDQmC2zicU...PBxsPg"
  },
  "proof": {
    // signed by the age verification provider
      "type": "Ed25519Signature2020",
      "created": '2022-06-13T14:02:44Z',
      "verificationMethod": 'did:key:z6MkpH7YDw3LBmqTmUzifCBe999t8DatvWnpxSgYQn9UEeyc
        #z6MkpH7YDw3LBmqTmUzifCBe999t8DatvWnpxSgYQn9UEeyc',
      "proofPurpose": 'assertionMethod',
      "proofValue": 'zw9xkGemVTwuf...FBJcpKzzf9kNeCvhkSt1dsD'
  }
}

AgeVerificationContainerCredential

A container for age verification credentials

The age verification container credential cryptographically binds an `AgeVerificationCredential` to one or more `OverAgeTokenCredential`s.

{
  "@context": [
    "https://www.w3.org/2018/credentials/v1",
    "https://w3id.org/age/v1",
    "https://w3id.org/security/suites/ed25519-2020/v1"
  ],
  "id": "urn:uuid:bea33996-7686-11ed-9aee-ef312e702bc1",
  "type": ["VerifiableCredential", "AgeVerificationContainerCredential"],
  "issuer": {
    // A DID representing an age verification provider
    "id": "did:key:z6MksFxi8wnHkNq4zgEskSZF45SuWQ4HndWSAVYRRGe9qDks",
    "image": "data:image/png;base64,iVBORw0KGgoAAAA...",
    "name": "TruAge"
  },
  "issuanceDate": "2022-04-03T00:00:00.000Z",
  "expirationDate": "2022-12-15T00:00:00.000Z",
  "name": "Age Verification Container Credential",
  "description": 'Age Verification Credential bundle container.',
  "credentialSubject": {
    "id": "urn:uuid:e47c7f06-7686-11ed-a293-ef81d2fb6c3f",
    "digestMultibase": "zQmdEj14VmRuZBkqFbiwReogJgS1zRfTbBqBPQ7VNxZEY1n"
    "anchoredResource": [{
      // concealed ID token VC #1
      "id": "urn:uuid:b190bbf6-7687-11ed-adec-336f3e464a20",
      "digestMultibase": "zQmBPQ7VNxZEY1ndEj14VmRuZBkqFbiwReogJgS1zRfTbBq"
    }, {
      // concealed ID token VC #2
      "id": "urn:uuid:b1cfd214-7687-11ed-8191-1fce82363661",
      "digestMultibase": "zQm7VNxZEY1ndEj14VmRuZBkqFbiwReogJgS1zRfTbBqBPQ"
    }]
  },
  "proof": { ...}
}

OverAgeTokenCredential

Privacy-preserving single-use tokenized age credential

A privacy-preserving single-use tokenized age credential that can be used during an age-gated transaction. The receiver of this credential can verify both the age category of the holder that delivered this credential and know that the credential has been digitally signed by an age verification authority without being able to track the individual using the token. The age verification authority is the only entity that can map the single-use token back to an individual. This process is manual, and only occurs if a legal subpoena for information is filed in a court of law during a legal proceeding. An individual that uses these tokens will utilize a different token per transaction, which protects their privacy among anyone engaging in an age-gated transaction with the individual while meeting regulatory burden for age-gated transactions that require that a proof of age was checked. This credential is either presented electronically over the Internet, or displayed as a single-use QR Code at a point of sale.

{
  "@context": [
    "https://www.w3.org/2018/credentials/v1",
    "https://w3id.org/age/v1",
    "https://w3id.org/security/suites/ed25519-2020/v1"
  ],
  "id": "urn:uuid:188e8450-269e-11eb-b545-d3692cf35398",
  "type": ["VerifiableCredential", "OverAgeTokenCredential"],
  "issuer": "did:key:z6MkkUbCFazdoducKf8SUye7cAxuicMdDBhXKWuTEuGA3jQF",
  "issuanceDate": "2022-03-24T20:03:03Z",
  "expirationDate": "2022-06-24T20:03:03Z",
  "credentialSubject": {
    "overAge": 21,
    "concealedIdToken": "zo58FV8vqzY2Z...rX8o46SF"
  },
  "proof": {
    "type": "Ed25519Signature2020",
    "created": "2022-08-07T21:36:26Z",
    "verificationMethod": "did:key:z6MkkUbCFazdoducKf8SUye7cAxuicMdDBhXKWuTEuGA3jQF
      #z6MkkUbCFazdoducKf8SUye7cAxuicMdDBhXKWuTEuGA3jQF",
    "proofPurpose": "assertionMethod",
    "proofValue": "z4mAs9uHU16jR4x...RSu9jSxPCF"
  }
}

overAge

Specifies that the subject is at least equal to or above the provided age.

This property is not intended to establish the exact age of the subject. Many overAge use cases require that the subject is viewed by an individual, given some discrection, to be a certain age based on the local laws. For example, imagine an individual is celebrating their birthday on which they become eligible to purchase and consume alcohol. If they were born at 11pm on their birthday, but the dinner is occuring at a restaurant at 6pm, a waiter is highly likely to determine them to be of age and allow them to purchase alcohol. It is with this imprecision noted that this property should be used. Effectively, the subject will be at least this age, give or take a day.

Range:

xsd:positiveInteger

Domain:

age:OverAgeTokenCredential