A Self-orchestration Model for Business Collaborations with Verifiable Process History Credentials
摘要
In our increasingly digitalized business ecosystems, ensuring the integrity, traceability, and nonrepudiability of digital interactions in multiparty collaborations is becoming ever more critical, and Verifiable Credentials (VCs) are becoming an important element in the host of emerging cryptographic and socio-technical solutions to this challenge. The existing and envisioned applications of VCs dominantly employ them to support comparatively simple, challenge-response style claim verification scenarios. In contrast, in this paper, we propose a new usage modality: employing VCs as a vehicle for securing complex multiparty interactions. Specifically, we propose a peer-to-peer protocol model for the process “self-orchestration” of BPMN collaborations, as a novel alternative to centralized workflow engines as well as smart contract based decentralized orchestration approaches. We utilize revocable, blockchain-secured VCs to produce cryptographically verifiable proofs for the authorization of cross-organizational collaboration interactions, enabling their execution without a central authority, while maintaining trust in the shared state and the model-compliant and model-carrying, VC-based process traces, which we call “Verifiable process history Credentials” – or VphCs. Our approach prevents malicious participants from “double spending” a state by distributing divergent, contradictory state updates to different parties. Similar to stateless blockchain approaches, and in contrast with smart contract-based decentralized orchestration, our protocol model maintains a constant-sized state on-chain, with minimal data exposure to collaboration-external parties.