Zero Trust at the Edge: Bridging Industrial Systems With Verifiable Credentials and OpenZiti
summary
A concrete prototype combines OpenZiti edge routers, a ZT controller and an MQTT bridge with W3C verifiable credentials so external technicians present cryptographic proofs from wallets while internal staff use corporate OIDC. The system enforces application‑level Zero Trust without changing legacy PLC/MQTT devices, supports revocation and selective disclosure, and uses DID documents and OIDC for VP to validate claims. The claim: this composition prevents social‑engineering bypasses and scales across multiple suppliers.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 3:33Industrial zero trust challenge
- 7:12Social engineering risks
- 9:24Self-sovereign identity with verifiable credentials
- 13:49Verifiable credentials and DIDs breakdown
- 18:47SSI for industrial external authentication
- 21:18OIDC for verifiable presentations
- 23:49Security benefits and takeaways
- 26:30Q&A implementation and wallet storage
- 28:42Q&A internal versus external auth
- 29:32Q&A open-source tools and EU identity
- 31:18Q&A cross-border credential verification
- 33:04Q&A decentralized SSI networks and barriers
- 34:30Q&A SSI networks future and adoption
related talks
39mProtect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...
23mEstablishing trust with verifiable creds and zero trust
01h 02mIntroduction to Zero Trust Security
49mZero Trust Security
25mRisk-based authentication and zero trust architecture ZTA
39mOn Establish a Production Zero Trust Architecture
18mImplementing Zero Trust at Enterprise Scale
29mZero Trust for APIs: From Edge to Mesh with Istio