Scenario 1: Establishing organisational identity
Van Moer Logistics and CertiWeight issue affiliation credentials to their employees Alice and Bob. An employee proves the affiliation by presenting the credential in a Verifiable Presentation (VP) signed with the key of their own DID. The verifier checks both signatures, that the credential subject signed the VP, and that the issuer is the organisation claimed. No central identity provider is needed.
Scenario 2: Establishing the role within a process
A governance authority (the observer) defines which organisations may assign which process roles:
Van Moer Logistics may assign dpv:ServiceConsumer, CertiWeight may assign
dpv:ServiceProvider. An employee presents a role credential in a VP. On top of the
signature checks, the verifier checks that the governance framework authorises the issuer to assign
that role.
Scenario 3: Evaluating an access request with input validation
Alice requests the certificate of a container's weight. The ODRL Evaluator combines an
Evaluation Request (who asks what, including her role), a
State of the World (the purchaseCertificate process event and payment)
and an ODRL Policy. The policy requires the dpv:ServiceConsumer role
and requires the event to conform to a SHACL shape from the policy store. The result is an
ODRL Compliance Report.