Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
xChk is a novel reference identity provider designed for Bring Your Own Identity (BYOI), allowing users to enroll using a variety of heterogeneous proofs such as government KYC and corporate SSO. This system enables users to disclose their identity as portfolio claims within standard OAuth 2.0 / OpenID Connect tokens, while each relying party can implement its own sufficiency policy without the IdP adjudicating access. A production deployment demonstrates the practical application of xChk, showcasing its capability to support both human and AI-driven attestations for high-risk actions through a shared verification graph.
Users can now leverage diverse identity proofs in a flexible BYOI framework, enabling tailored access control without centralized adjudication.
We present xChk, a reference identity provider for Bring Your Own Identity (BYOI): users enroll via heterogeneous proofs (government KYC, corporate SSO, WebAuthn/FIDO2, professional networks, live verification, longitudinal activity, behavioral signals) and disclose them as portfolio claims in standard OAuth 2.0 / OpenID Connect (OIDC) tokens, while each relying party applies its own sufficiency policy - the IdP transports claims and may evaluate an RP-supplied evidence policy for consent, but does not adjudicate access. Enrollment depth varies by modality (some paths are user-initiated; org KYB and officer binding are operator-assisted). xChk also supports human-in-the-loop attestation for high-risk actions: humans can initiate attestations directly (browser UI / POST /api/attestations), and AI agents acting under those principals can trigger the same gateway via scope-gated authorize/attest - hash-chained human approvals on a shared verification graph (humans via OIDC; agents via API keys). A production deployment at https://in.xchk.io ships both initiation paths with bilateral RP evaluation at consent; one documented relying party (https://crabbyed.com, Appendix B) exercises Login with xChk.