A Hands-On Threat Modeling Exercise: a LEGO® SERIOUS PLAY® Workshop on Digital Credentials API and Age Verification

Talks

Interactive LEGO® SERIOUS PLAY® session on digital identity, with focus on the W3C Digital Credentials API and Age Verification use case.

Add to calendar

Event details

Date:
– Central European Summer Time
– UTC
Location:
Berlin, Germany
Speakers:
Simone Onofri, W3C Senior Principal Security Specialist
Category:
Security
Website:
European Identity and Cloud Conference 2026

Simone Onofri, W3C Senior Principal Security Specialist, and a certified LEGO® SERIOUS PLAY® facilitator, will facilitate a workshop designed to surface security threats, harms, and socio-technical impacts that can emerge when credentials are requested, mediated, and presented. 

Participants will analyze a concrete interaction flow involving relying parties, wallets, users, and browsers, and will collaboratively build and discuss threats to digital credential presentation. The method can support early-stage threat and harms modeling by helping participants externalize assumptions, construct shared understanding, and explore possible mitigations and trade-offs in a collaborative way.