Attribute Management

# Example computed attributes
computed_attributes = {
    "is_adult": date_of_birth <= (today - 18_years),
    "is_senior": date_of_birth <= (today - 65_years),
    "loyalty_tier": calculate_tier(transaction_history),
    "risk_score": calculate_risk(auth_history)
}

# Zero-knowledge age verification
def verify_age_over_21(encrypted_dob, proof):
    """
    Verify user is over 21 without decrypting date of birth
    """
    # Verify proof that encrypted_dob represents age > 21
    return zkp_verify(
        statement="age >= 21",
        commitment=encrypted_dob,
        proof=proof
    )

{
  "consent_id": "con_abc123",
  "user_id": "usr_def456",
  "vendor_id": "ven_ghi789",
  "attributes": [
    {
      "name": "email",
      "purpose": "transaction_receipts",
      "retention_days": 30
    },
    {
      "name": "age_verified",
      "purpose": "compliance",
      "retention_days": 0  // Not stored by vendor
    }
  ],
  "granted_at": "2024-01-01T00:00:00Z",
  "expires_at": "2025-01-01T00:00:00Z",
  "revocable": true,
  "audit_log": true
}

{
  "auth_context": {
    "type": "payment",
    "amount": 2500,
    "attributes_required": [
      "email"  // Must have for receipt
    ],
    "attributes_optional": [
      "loyalty_status",  // For discounts
      "phone"  // For SMS notification
    ]
  }
}

{
  "auth_result": {
    "success": true,
    "user_id": "usr_abc123",
    "attributes": {
      "email": "[email protected]",
      "loyalty_status": "gold"
      // phone not included - no consent
    },
    "timestamp": "2024-01-15T10:30:00Z"
  }
}

def generate_vendor_specific_id(user_id, vendor_id):
    """
    Generate consistent but unique ID per vendor
    """
    return hmac_sha256(
        key=user_id,
        message=vendor_id
    )

{
  "temporal_attributes": [
    {
      "name": "event_ticket",
      "value": "VIP_PASS_2024",
      "valid_from": "2024-06-01T00:00:00Z",
      "valid_until": "2024-06-03T23:59:59Z"
    },
    {
      "name": "promotion_eligible",
      "value": true,
      "valid_until": "2024-12-31T23:59:59Z"
    }
  ]
}

CREATE TABLE attribute_audit (
    id UUID PRIMARY KEY,
    timestamp TIMESTAMP NOT NULL,
    user_id UUID NOT NULL,
    vendor_id UUID,
    attribute_name VARCHAR(50),
    operation VARCHAR(20), -- READ, UPDATE, DELETE
    ip_address INET,
    user_agent TEXT,
    result VARCHAR(20), -- SUCCESS, DENIED, ERROR
    INDEX idx_user_time (user_id, timestamp),
    INDEX idx_vendor_time (vendor_id, timestamp)
);

class FederatedAttributeProvider:
    def import_from_oauth(self, provider, token):
        """
        Import attributes from OAuth provider
        """
        if provider == "google":
            profile = google_api.get_profile(token)
            return {
                "email": profile.email,
                "email_verified": profile.verified,
                "name": profile.name
            }
        elif provider == "government_id":
            identity = gov_api.verify_identity(token)
            return {
                "legal_name": identity.full_name,
                "date_of_birth": identity.dob,
                "identity_verified": True
            }

-- Aggregate analytics without individual tracking
SELECT 
    attribute_name,
    COUNT(DISTINCT vendor_id) as vendors_requesting,
    COUNT(*) as total_requests,
    AVG(CASE WHEN shared THEN 1 ELSE 0 END) as consent_rate
FROM attribute_requests
WHERE request_date >= CURRENT_DATE - INTERVAL '30 days'
GROUP BY attribute_name
ORDER BY total_requests DESC;