BlockchainIntermediate#Identity#Privacy#Governance
Proof of Personhood
P
Definition
A family of mechanisms that attempts to limit duplicate participation in a defined system. It can provide evidence under stated assumptions; it does not prove unique human identity, eliminate Sybil attacks, or guarantee privacy, inclusion, or fair distribution.
Source reviewed
- NIST SP 800-63-4: Digital Identity Guidelines opens in a new tab
Supports: NIST provides risk- and privacy-aware requirements for identity proofing, authentication, and federation; it does not treat a credential as universal proof of personhood.
- NIST SP 800-63A-4: Identity Proofing and Enrollment opens in a new tab
Supports: NIST requires privacy and fraud controls for identity proofing and, when biometrics are used remotely, presentation-attack detection and demographic performance testing.
- NIST SP 800-63B-4: Authentication and Authenticator Management opens in a new tab
Supports: NIST notes that biometrics are sensitive, create privacy concerns, require additional trust in capture and processing, and should have a non-biometric alternative.
Concept Diagram
Key Takeaways
1
PoP attempts to limit duplicate participation under a documented threat model; it does not prove a unique human or eliminate Sybil attacks.
2
A credential is not automatic entitlement to funds, governance power, or access, and it cannot by itself make a distribution fair.
3
Methods can include biometrics, social attestations, devices, or credentials, each with different fraud, privacy, and exclusion risks.
4
Identity and biometric data need explicit consent, minimisation, retention, deletion, revocation, breach response, and alternative-access controls.
Practical Example
A community considers one-person voting. Before relying on a credential, it publishes what the enrollment check establishes, error rates, operator and retention policy, appeals, non-biometric alternative, and whether a credential can be linked across applications. The vote remains subject to its own eligibility and governance rules.
Finished learning?
Related Terms
AI
TEE (Trusted Execution Environment)A hardware-backed isolated execution environment that can protect specified code and data under an explicit platform threat model. Its assurance depends on the implementation, attestation policy, measured software, key release, configuration, and remaining hardware and software attack surface.
Blockchain
Zero-Knowledge Proofs (ZKP)A cryptographic proof that a defined statement or computation satisfies a protocol without disclosing the witness beyond what that protocol reveals. It is not, by itself, a privacy or performance guarantee for an application.
Blockchain
DAO (Decentralized Autonomous Organization)An organization or governance arrangement that uses blockchain-based rules, proposals, membership, and treasury controls to coordinate decisions or actions. Its voting, execution, transparency, and legal structure vary by design.
Blockchain
Private KeySecret key material used to create signatures that authorize transactions for a particular blockchain account or output. It is not itself a password, a public address, or proof of legal ownership, and wallet recovery depends on the wallet's key-management design.
Related Deep Dives
Master the hub of Blockchain
Explore all our strategic guides about Blockchain to take your operations to the next level.
View all articles