• Worldcoin adopts Personal Custody, enhancing data security and user control.
• The shift to Personal Custody represents a move towards user-centric technology and an open, permissionless protocol.

A recent update on Worldcoin, as reported by CNF, highlights a significant development: the thorough audit of its Orb software by Trail of Bits, a top cybersecurity firm. The audit’s conclusion affirmed the Orb software’s robustness, ensuring that user data, specifically iris codes, remain secure against unauthorized access. This audit comes at a crucial time, especially considering the concerns raised about user data management.

In March, South Korea’s legal authorities initiated an investigation into Worldcoin after queries surfaced regarding the handling of user data. Further, Worldcoin, under the leadership of Sam Altman, clarified its legal standing following the temporary prohibition of its activities in Spain by the National Securities Market Commission (CNMV).

Understanding Personal Custody in Worldcoin’s Ecosystem

Personal Custody in Worldcoin allows users to store their personal data, like images and metadata used for World ID iris code generation, directly on their devices. This empowers users with full control over their data, marking a significant shift from automatic erasure policies.

The introduction of Personal Custody paves the way for advanced features such as Face Authentication. This local, on-device process provides users with a secure method to verify their identity, reinforcing the security of the World ID network.

Figure: Visualization of the Flow of Keys and Data Throughout Personal Custody Process

This visual representation aids in understanding the intricate process and security layers involved in Personal Custody. It outlines the journey of data from the user’s interaction with the orb to the final stage of data residing securely on their device.

A Closer Look at the Personal Custody Process

Personal Custody involves several key components and processes:

1. Encryption Key Creation: Users’ devices generate a unique public-private key pair for data encryption, sharing the public key with the backend.
2. Backend and Orb Coordination: The backend creates additional encryption keys, which are used by the orb for further data security.
3. Image Processing and Encryption: The orb captures necessary images for World ID verification, encrypts them, and prepares them for secure transfer.
4. Data Transfer and Deletion: Encrypted data packages are sent to the backend for temporary storage, then deleted from the orb after being downloaded to the user’s device.
5. Enhanced Security Measures: Utilizing public key encryption and double encryption techniques, Worldcoin ensures that all user data remains secure and private.

Worldcoin’s Personal Custody feature is more than a security protocol; it embodies a user-centric approach integral to the project’s philosophy. This approach leads to a modular, flexible system design, instrumental in developing an open, permissionless protocol. With the introduction of Personal Custody, Worldcoin has also ceased offering optional Data Custody at orb visits, emphasizing informed consent in data sharing.

As of the latest update, Worldcoin is trading at $8.43, marking a 2.16% increase in the past day.