OpenBazaar - Ratings, reviews and reputation

download OpenBazaar - Ratings, reviews and reputation

of 74

  • date post

    13-Aug-2015
  • Category

    Software

  • view

    750
  • download

    0

Embed Size (px)

Transcript of OpenBazaar - Ratings, reviews and reputation

  1. 1. OpenBazaar Ratings, Reviews, and Reputation Austin Williams Dr Washington Sanchez (drwasho) 1
  2. 2. Overview 1. What is identity on OpenBazaar? 2. What are Ricardian Contracts? 3. What is reputation on OpenBazaar? 4. What is a valid rating? 5. Where is the rating stored? 6. What about privacy? 2 The above picture isnt relevant to anything, the slides just felt awkward with all this white space.
  3. 3. Before we talk about ratings, reviews and reputation Lets talk about identity 3 What is identity on OpenBazaar?
  4. 4. What is identity on OpenBazaar? 4 What is identity on OpenBazaar? BITCOINNETWORK PASSCARD
  5. 5. NETWORK ECC key that generates a global unique identifier (GUID) that is your OpenBazaar ID GUID IP Address Port 34e57db64ce7435ab0f759cca81 386527c670bd1 215.1.22.125 45785 Distributed Hash Table 5 What is identity on OpenBazaar?
  6. 6. No one can spoof your GUID unless they compromise your private key Can someone spoof my GUID? 6 What is identity on OpenBazaar? Elliptic Curve Cryptography (ECC) Private key (2128) Public key GUID RIPEMD160(sha256[self_signed pubkey]) This is how babies are made Some modifications are being made to the GUID to make it non-trivial to generate, in order to create a mild proof of work
  7. 7. Network communications on OpenBazaar Hi, my name is GUIDAlice and this is my public key! Hi GUIDAlice , yep that checks out. Im GUIDBob and this is my public key! Yep that checks out! Step 1: Say Hello; verify GUIDs match the public key. 7 What is identity on OpenBazaar?
  8. 8. Network communications on OpenBazaar Want to buy some My Little Pony DVDs? Yeah sure Step 2: Encrypt messages with a peers public key so only they can read it. 8 What is identity on OpenBazaar?
  9. 9. Network communications on OpenBazaar { item: My Little Pony volume 1 } { shipping_address: 1060 West Addison St, Chicago, IL } These messages will also carry the terms and conditions of the Ricardian contracts 9 What is identity on OpenBazaar?
  10. 10. Network communications on OpenBazaar Some nuance 1. ECC key that generates GUID will be used for session authentication 2. Ephemeral ECC keys will be used for to encrypt messages between peers after authentication (Forward secrecy) 10 What is identity on OpenBazaar?
  11. 11. GUID keys are used to sign the Ricardian Contracts 11 What is identity on OpenBazaar?
  12. 12. What is identity on OpenBazaar? 12 What is identity on OpenBazaar? BitcoinNetwork Passcard
  13. 13. BITCOIN Bitcoin keys used for controlling the multisignature escrow address This is your financial identity, indicating you have the contributing power to release funds according to the terms and conditions of the contract 13 What is identity on OpenBazaar?
  14. 14. Bitcoin keys used for controlling the multisignature escrow address BIP32 hierarchical deterministic keys to create 1 key per contract GUID + Bitcoin keys are the only things you need to make a trade over OpenBazaar 14 What is identity on OpenBazaar?
  15. 15. Bitcoin keys are used to sign the Ricardian Contracts The identity with financial power agrees to the terms and conditions of a trade with another identity. 15 What is identity on OpenBazaar?
  16. 16. What is identity on OpenBazaar? 16 What is identity on OpenBazaar? BITCOINNETWORK PASSCARD
  17. 17. A Passcard is a portable identity that can be used to: 1. Register a storefront handle 2. Cryptographically link: Multiple nodes on the network Identities outside of OpenBazaar PASSCARD 17 What is identity on OpenBazaar? Passcard operates according to the Bitcoin Naming System protocol, designed by Onename
  18. 18. 18 Passcard allows users to associate as much or as little personally identifiable information (PII) as they desire with a GUID GUID: 34e57db64ce7435ab0f759cca81386527c670bd1 Passcard: +gillian_a_thompson Cryptographically link identities Register handle for the node + Certificate authority style ID verification + Business address + Phone number Optional What is identity on OpenBazaar?
  19. 19. 19 A Passcard can be associated with multiple nodes that the user controls; registering a handle for each node @gthompson_US @MyLittlePony_shoes @BronyFeet GUID: 34e57db64ce7435ab0f759cca81386527c670bd1 What is identity on OpenBazaar? @gthompson_China @ @Brony GUID: 287bf38cf4aa9dfa0c1fe409d7bd0563b3691c90 Passcard: +gillian_a_thompson
  20. 20. What is identity on OpenBazaar? Summary There are 3 types of identity: 1. OpenBazaar identity (network GUID keys) 1. ECC keys 2. One GUID per node on the network 3. No one can spoof the GUID 4. Messages between nodes are authenticated with the recipients public key 5. Contracts are signed with the GUID keys (Vendor only) 2. Bitcoin identity 1. Bitcoin multisignature escrow signing keys 2. 1 keypair per contract, generated from BIP32 seed 3. Ricardian contracts are signed with Bitcoin keys 3. Passcard identity 1. Passcard is used to register a handle for the node (1 handle per node) 2. Passcard is used to link multiple nodes the user may control 3. Passcard can also associate a node with other identities (e.g. Facebook, Twitter) 20
  21. 21. Ricardian Contracts & the Trade Flow 21 Ricardian Contracts and the Trade Flow
  22. 22. 22 Ricardian Contracts and the Trade Flow A digital contract that defines the terms and conditions of an interaction, between two or more peers, that is cryptographically signed and verified Results in a tamper-proof contract that is formatted in XML or JSON to be both human and machine readable What are Ricardian Contracts?
  23. 23. 23 Ricardian Contracts and the Trade Flow Cryptographic keys to establish identity Semantic data to establish the terms and conditions of an interaction (e.g. money exchanged for a good/service) Digital signatures to create fraud-proof evidence that an identity agreed to these terms and conditions Cryptographic hash of the contract to create a tamper- proof record of the contract Major components
  24. 24. 24 Ricardian Contracts and the Trade Flow Application populates listing data into JSON This data is saved locally and becomes the Ricardian Contract There is a template attribute schema for physical goods, digital goods, and services Peers will request the values corresponding to the attribute schema when downloading a contract Ricardian Contracts in OpenBazaar
  25. 25. 25 Ricardian Contracts and the Trade Flow Contract schema divided into four stages, as per the trade flow 1. Stage 1: Vendor makes a listing 2. Stage 2: Buyer places an order 3. Stage 3: Vendor {ships the item; discloses link to digital content; places an invoice for services rendered} 4. Stage 4: Buyer releases funds and makes rating Ricardian Contracts in OpenBazaar Some areas are expanded in more detail later
  26. 26. 26 Ricardian Contracts and the Trade Flow
  27. 27. What is reputation on OpenBazaar? 27 What is reputation on OpenBazaar?
  28. 28. Context is king (aggregation is the enemy) Not a vouching system (web-of-trust is another layer, not an alternative) 28 What is reputation on OpenBazaar?
  29. 29. 29 What is reputation on OpenBazaar? Reputation is comprised of individual transaction ratings
  30. 30. Transaction Ratings 6 Rating Parameters 30 What is reputation on OpenBazaar? 1. Overall Transaction Rating 2. Item, Content, or Service Quality 3. Item, Content, or Service Description 4. Item, Content, or Service Delivery 5. Vendor Customer Service 6. Review Tx Rating Item: X Buyer: Jim
  31. 31. 1. Overall Transaction Rating 31 What is reputation on OpenBazaar? There are two approaches: 1. Rate the transaction out of 5 stars (indirect) 2. Rate the transaction: positive, neutral or negative (direct) I dont mind very much which approach we take. But when it comes to calculating the overall reputation of the vendor, the 5 star approach is typically reduced to positive, neutral or negative anyway so it may be easier to just go with that upfront What was the overall transaction experience when purchasing this product from the vendor?
  32. 32. Transaction Ratings 6 Rating Parameters 32 What is reputation on OpenBazaar? 1. Overall Transaction Rating 2. Item, Content, or Service Quality 3. Item, Content, or Service Description 4. Item, Content, or Service Delivery 5. Vendor Customer Service 6. Review Tx Rating Item: X Buyer: Jim
  33. 33. What was the quality of the item, content, or service from the vendor? 2. Item, Content, or Service Quality Excellent: Good: Neutral: Poor: Terrible: 33 What is reputation on OpenBazaar?
  34. 34. Transaction Ratings 6 Rating Parameters 34 What is reputation on OpenBazaar? 1. Overall Transaction Rating 2. Item, Content, or Service Quality 3. Item, Content, or Service Description 4. Item, Content, or Service Delivery 5. Vendor Customer Service 6. Review Tx Rating Item: X Buyer: Jim
  35. 35. How accurate was the listing description of the item, content or service? 3. Item, Content, or Service Description Excellent: Good: Neutral: Poor: Terrible: 35 What is reputation on OpenBazaar?
  36. 36. Transaction Ratings 6 Rating Parameters 36 What is reputation on OpenBazaar? 1. Overall Transaction Rating 2. Item, Content, or Service Quality 3. Item, Content, or Service Description 4. Item, Content, or Service Delivery 5. Vendor Customer Service 6. Review Tx Rating Item: X Buyer: Jim
  37. 37. How quickly was the item sent, content accessible, or service performed after ordering? 4. Item, Content, or Service Delivery Excellent: Good: Neutral: Poor: Terrible: 37 What is reputation on OpenBazaar?
  38. 38. Transaction Ratings 6 Rating Parameters 38 What is reputation on OpenBazaar? 1. Overall Transaction Rating 2. Item, Content, or Service Quality 3. Item, Content, or Service Description 4. Item,