A WebID is a URI that uniquely identifies an agent (person, organisation, or software) on the web and dereferences to an RDF profile document containing structured data about that agent. It underpins decentralised identity and access control across the Solid ecosystem and linked-data applications, allowing any service to authenticate and authorise users without a central identity provider.
Semantic Classification
Content
-
Identification: A WebID points to a document (usually an RDF document) that describes the WebID owner. This document is called a WebID Profile, and it contains structured data (in formats like Turtle, RDF/XML, or JSON-LD) about the user. This data can include names, social links, contact information, and more.
-
Dereferencing a WebID: When a WebID is accessed (dereferenced), it returns the WebID Profile document. This process allows applications and services to fetch and understand the public information that the user has chosen to share.
-
Authentication and Authorization:
- Authentication: WebID can be used as part of a secure authentication process, where a user proves ownership of a WebID by responding to a challenge. This can be done through various mechanisms, such as TLS (Transport Layer Security) certificates, OAuth, or other token-based methods.
- Authorization: After authentication, applications can use the information in a WebID Profile to determine what resources or data the user can access. This makes it possible to implement fine-grained access control policies that respect the user’s privacy and data sharing preferences.
-
Decentralized Identity: Unlike centralized identity providers (e.g., social media logins), WebID promotes a decentralized approach to identity management. Users are not tied to a single service provider, reducing the risk of censorship, outages, or privacy breaches.
-
Interoperability: WebID and its reliance on standard web protocols and data formats ensure that it can be used across different platforms and services without vendor lock-in.
-
Privacy and Control: Users have greater control over their personal information, including who has access to what data. This aligns with global privacy standards and regulations.
-
Solid Project: WebID is a cornerstone of the Solid project, which aims to reshape the web into a user-centric space where individuals control their own data.
-
Access Control: WebID can be used to manage access to resources, documents, and data across the web, enabling more secure and personalized web experiences.
-
Social Networking and Collaboration: By linking data across platforms without centralizing control, WebID facilitates new models for social networking, collaboration, and data sharing.
How Does a WebID Work?