Meet Eliza & Marvin

We hereby confirm that:

pi-lar GmbH is not under liquidation or is not an enterprise under difficulty according to the Commission Regulation No 651/2014, art. 2.18
The project neuropil is based on the original works and going forward any foreseen developments are free from third party rights, or they are clearly stated
It is not excluded from the possibility of obtaining EU funding under the provisions of both national and EU law, or by a decision of both national or EU authority,
All statements embodied in the Declaration of honour have been understood and accepted.

Cologne, 27.12.2020

We hereby confirm that:

pi-lar GmbH and its team member are willing to interact with other participants in eSSIF-Lab to further concretize a common SSI vision.

Cologne, 27.12.2020

Security of the Past: Limitations

only protection of bilateral IP connections

not protecting different data objects, but apis

unsuited for rapid change of data owners or data channels

static design: build once, run forever

new requirements vs. security design

introduce security exceptions on change

Security of the Future: ZeroTrust

trust perimeter has changed

fragmented information (flows) need protection

authn/authz must be possible everywhere

data objects governed by attribute-based access policies (ABAC)

define trust levels for data objects / entities

fine grained access to objects possible

more insights means minimizing risk

Never trust, always verify

Security for Ecosystems:

Zero Trust / Access Policies

data object interactions main driver for future IT architecture

devices produce and consume data at the same time

respect different data owners per device

if one fails, all suffer!

business agility: enables companies to adapt & survive

switch to a different service provider is easy

change policies in days (rather than months)

enables data reduction and data economy

Legal Dimension

Economic Dimension

Social Dimension

Environment Dimension

Security for Ecosystems:

Realibilty in four dimensions

connects everything:

devices, edge, applications,

users, processes, enterprises

neuropil

Security First

SSI / digital identities (OIDC)
dual encryption layer (transport and end-to-end)
attribute based access control
decentralized access delegation
object level permissions via security token
limit packet size / throughput
standardized security measures (OSI Layers 1-7)
... and more

(see also: OWASP API Security)

Privacy First

stacked/pseudonymized identities
transport layer privacy
addressing and discovery is hash based (Blabe2b)
DHT to protect from metadata discovery
"blind" broker nodes
stay secure behind closed firewalls
packet segmentation
... and more

(see also: OWASP Privacy risks)

neuropil.org

protocol development & standardization

technical security stack definition

responsible disclosure handling

neuropil.io

base service layer

organizational security definition / enforcement

compliance & reviews

neuropil.com

Add-On business services

Consulting & Development

where are we going?

extend our own protocol (with VC attributes)
a hardware wallet for IIoT devices and the edge
enable multiple identities on one neuropil node
two more FFI (javascript/dart) language bindings