mirror of
https://github.com/Decentralized-ID/decentralized-id.github.io.git
synced 2025-02-28 19:11:26 -05:00
879 lines
33 KiB
HTML
879 lines
33 KiB
HTML
<!doctype html>
|
||
<!--
|
||
Minimal Mistakes Jekyll Theme 4.24.0 by Michael Rose
|
||
Copyright 2013-2020 Michael Rose - mademistakes.com | @mmistakes
|
||
Free for personal and commercial use under the MIT license
|
||
https://github.com/mmistakes/minimal-mistakes/blob/master/LICENSE
|
||
-->
|
||
<html lang="en" class="no-js">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
|
||
<!-- begin _includes/seo.html --><title>System Architecture and Self Sovereign Identity | Verifiable Credentials and Self Sovereign Identity Web Directory</title>
|
||
<meta name="description" content="Authentication and authorization both fall under identity and access management (IAM) but serve different purposes.">
|
||
|
||
|
||
<meta name="author" content="DIDecentral">
|
||
|
||
<meta property="article:author" content="DIDecentral">
|
||
|
||
|
||
|
||
<meta property="og:type" content="article">
|
||
<meta property="og:locale" content="en_US">
|
||
<meta property="og:site_name" content="Verifiable Credentials and Self Sovereign Identity Web Directory">
|
||
<meta property="og:title" content="System Architecture and Self Sovereign Identity">
|
||
<meta property="og:url" content="https://decentralized-id.com/development/architecture/">
|
||
|
||
|
||
<meta property="og:description" content="Authentication and authorization both fall under identity and access management (IAM) but serve different purposes.">
|
||
|
||
|
||
|
||
<meta property="og:image" content="https://decentralized-id.com/images/DID_og.webp">
|
||
|
||
|
||
|
||
<meta name="twitter:site" content="@infominer33">
|
||
<meta name="twitter:title" content="System Architecture and Self Sovereign Identity">
|
||
<meta name="twitter:description" content="Authentication and authorization both fall under identity and access management (IAM) but serve different purposes.">
|
||
<meta name="twitter:url" content="https://decentralized-id.com/development/architecture/">
|
||
|
||
|
||
<meta name="twitter:card" content="summary_large_image">
|
||
<meta name="twitter:image" content="https://decentralized-id.com/images/DID_og.webp">
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<meta property="article:published_time" content="2023-06-23T00:00:00+13:00">
|
||
|
||
|
||
|
||
<meta property="article:modified_time" content="2023-06-23T00:00:00+13:00">
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<link rel="canonical" href="https://decentralized-id.com/development/architecture/">
|
||
|
||
|
||
|
||
|
||
<script type="application/ld+json">
|
||
{
|
||
"@context": "https://schema.org",
|
||
|
||
"@type": "Person",
|
||
"name": "Infominer",
|
||
"url": "https://decentralized-id.com/"
|
||
|
||
}
|
||
</script>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<!-- end _includes/seo.html -->
|
||
|
||
|
||
|
||
<link href="/feed.xml" type="application/atom+xml" rel="alternate" title="Verifiable Credentials and Self Sovereign Identity Web Directory Feed">
|
||
|
||
|
||
<!-- https://t.co/dKP3o1e -->
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
|
||
<script>
|
||
document.documentElement.className = document.documentElement.className.replace(/\bno-js\b/g, '') + ' js ';
|
||
</script>
|
||
|
||
<!-- For all browsers -->
|
||
<link rel="stylesheet" href="/assets/css/main.css">
|
||
<link rel="preload" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5/css/all.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
|
||
<noscript><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5/css/all.min.css"></noscript>
|
||
|
||
|
||
|
||
|
||
<meta name="yandex-verification" content="876ea269be433d62" />
|
||
<!-- Favicons -->
|
||
<link rel="apple-touch-icon" sizes="180x180" href="https://decentralized-id.com/assets/icons/apple-touch-icon.png">
|
||
<link rel="icon" type="image/png" sizes="32x32" href="https://decentralized-id.com/assets/icons/favicon-32x32.png">
|
||
<link rel="icon" type="image/png" sizes="16x16" href="https://decentralized-id.com/assets/icons/favicon-16x16.png">
|
||
<link rel="manifest" href="https://decentralized-id.com/assets/icons/site.webmanifest">
|
||
<link rel="mask-icon" href="https://decentralized-id.com/assets/icons/safari-pinned-tab.svg" color="#eeeeef">
|
||
<link rel="shortcut icon" href="https://decentralized-id.com/assets/icons/favicon.ico">
|
||
<meta name="msapplication-TileColor" content="#eeeeef">
|
||
<meta name="msapplication-config" content="https://decentralized-id.com/assets/icons/browserconfig.xml">
|
||
<meta name="theme-color" content="#eeeeef">
|
||
|
||
<!-- start custom head snippets -->
|
||
|
||
<!-- insert favicons. use https://realfavicongenerator.net/ -->
|
||
|
||
<!-- end custom head snippets -->
|
||
|
||
</head>
|
||
|
||
<body class="layout--single wide">
|
||
<nav class="skip-links">
|
||
<ul>
|
||
<li><a href="#site-nav" class="screen-reader-shortcut">Skip to primary navigation</a></li>
|
||
<li><a href="#main" class="screen-reader-shortcut">Skip to content</a></li>
|
||
<li><a href="#footer" class="screen-reader-shortcut">Skip to footer</a></li>
|
||
</ul>
|
||
</nav>
|
||
|
||
|
||
|
||
<div class="masthead">
|
||
<div class="masthead__inner-wrap">
|
||
<div class="masthead__menu">
|
||
<nav id="site-nav" class="greedy-nav">
|
||
|
||
<a class="site-logo" href="/"><img src="/images/DID.webp" alt="Decentralized Identity"></a>
|
||
|
||
<a class="site-title" href="/">
|
||
Decentralized Identity
|
||
|
||
</a>
|
||
<ul class="visible-links"><li class="masthead__menu-item">
|
||
<a href="/introduction/">Introduction</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/ecosystem/">Ecosystem</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/posts/">New</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/recent/">Updated</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/categories/">Categories</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/about/">Welcome</a>
|
||
</li><li class="masthead__menu-item">
|
||
<a href="/aim/">Aim</a>
|
||
</li></ul>
|
||
|
||
<button class="greedy-nav__toggle hidden" type="button">
|
||
<span class="visually-hidden">Toggle menu</span>
|
||
<div class="navicon"></div>
|
||
</button>
|
||
<ul class="hidden-links hidden"></ul>
|
||
</nav>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
<div class="initial-content">
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<div id="main" role="main">
|
||
|
||
<div class="sidebar sticky">
|
||
|
||
|
||
|
||
|
||
<img src="/images/the-world-map-from-a-binary-code.webp"
|
||
alt="Binary Globe by GDj">
|
||
|
||
<h3>Identity Decentralized</h3>
|
||
|
||
|
||
|
||
<nav class="nav__list">
|
||
|
||
<input id="ac-toc" name="accordion-toc" type="checkbox" />
|
||
<label for="ac-toc">Toggle menu</label>
|
||
<ul class="nav__items">
|
||
|
||
<li>
|
||
|
||
<a href="/"><span class="nav__sub-title">Home</span></a>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="/history/">• Resources & Pre-History</a></li>
|
||
|
||
<li><a href="/history/2000-2009/">• 2000-2009</a></li>
|
||
|
||
<li><a href="/history/2010-2014/">• 2010-2014</a></li>
|
||
|
||
<li><a href="/history/2015-2019/">• 2015-2019</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<a href="/categories/#companies"><span class="nav__sub-title">New Pages New Structure</span></a>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="/companies/ValidatedID/">• ValidatedID</a></li>
|
||
|
||
<li><a href="/companies/ValidatedID/">• SpruceID</a></li>
|
||
|
||
<li><a href="/companies/Spherity/">• Spherity</a></li>
|
||
|
||
<li><a href="/companies/MyDEX/">• MyDEX</a></li>
|
||
|
||
<li><a href="/companies/Mattereum/">• Mattereum</a></li>
|
||
|
||
<li><a href="/companies/MagicLabs/">• Magic Labs</a></li>
|
||
|
||
<li><a href="/companies/Lissi/">• Lissi</a></li>
|
||
|
||
<li><a href="/companies/Indicio/">• Indicio</a></li>
|
||
|
||
<li><a href="/companies/IDramp/">• IDRamp</a></li>
|
||
|
||
<li><a href="/companies/GlobalID/">• GlobalID</a></li>
|
||
|
||
<li><a href="/companies/Gataca/">• Gataca</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<span class="nav__sub-title">Literature</span>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="https://identosphere.net/">• Identosphere Blog Catcher</a></li>
|
||
|
||
<li><a href="https://newsletter.identosphere.net/">• Identosphere Newsletter</a></li>
|
||
|
||
<li><a href="/literature/self-sovereign-identity/">• SSI Literature</a></li>
|
||
|
||
<li><a href="/workshops/internet-identity-workshop/">• IIW Session Topics</a></li>
|
||
|
||
<li><a href="/workshops/rebooting-web-of-trust/">• RWoT Papers Index</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<a href="/web-standards/"><span class="nav__sub-title">Web Standards</span></a>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="/web-standards/w3c/">• W3C</a></li>
|
||
|
||
<li><a href="/web-standards/w3c/wg/vc/verifiable-credentials/">• Verifiable Credentials</a></li>
|
||
|
||
<li><a href="/web-standards/linked-data/JSON-LD/">• JSON-LD</a></li>
|
||
|
||
<li><a href="/web-standards/gs1/">• GS1</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<span class="nav__sub-title">Regulation</span>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="/government/europe/regulation/eidas/">• eIDAS</a></li>
|
||
|
||
<li><a href="/government/europe/regulation/gdpr/">• GDPR</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<a href="/organizations/"><span class="nav__sub-title">Organizations</span></a>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="/organizations/decentralized-identity-foundation/">• Identity Foundation</a></li>
|
||
|
||
<li><a href="/organizations/mydata/">• My Data</a></li>
|
||
|
||
<li><a href="/blockchain/hyperledger/">• Hyperledger Foundation</a></li>
|
||
|
||
<li><a href="/organizations/sovrin-foundation/">• Sovrin Foundation</a></li>
|
||
|
||
<li><a href="/organizations/ssi-meetup/">• SSI Meetup</a></li>
|
||
|
||
<li><a href="/organizations/women-in-identity/">• Women in Identity</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
<li>
|
||
|
||
<span class="nav__sub-title">Infominer</span>
|
||
|
||
|
||
|
||
<ul>
|
||
|
||
<li><a href="https://infominer.xyz/">• InfoHub</a></li>
|
||
|
||
<li><a href="https://identosphere.net/">• Identosphere Newsletter</a></li>
|
||
|
||
<li><a href="https://identosphere.net/">• Identosphere BlogCatcher</a></li>
|
||
|
||
<li><a href="https://bitcoinfo.github.io/history/">• Bitcoin Histories</a></li>
|
||
|
||
<li><a href="https://sourcecrypto.github.io/decentralized-web/">• Decentralized Web Histories</a></li>
|
||
|
||
<li><a href="https://sourcecrypto.github.io">• Source⧉Crypto</a></li>
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
</ul>
|
||
</nav>
|
||
|
||
|
||
|
||
|
||
</div>
|
||
|
||
|
||
|
||
<article class="page h-entry" itemscope itemtype="https://schema.org/CreativeWork">
|
||
<meta itemprop="headline" content="System Architecture and Self Sovereign Identity">
|
||
<meta itemprop="description" content="In chaotic systems such as those that the discipline of physics seeks to describe, there is also the concept of the “self-organizing principle,” which dictates a tendency for chaotic systems to organize themselves. While this might be a tendency in physics, organization usually needs a nudge in the right direction in the identity world.">
|
||
<meta itemprop="datePublished" content="2023-06-23T00:00:00+13:00">
|
||
<meta itemprop="dateModified" content="2023-06-23T00:00:00+13:00">
|
||
|
||
<div class="page__inner-wrap">
|
||
|
||
<header>
|
||
<h1 id="page-title" class="page__title p-name" itemprop="headline">
|
||
<a href="https://decentralized-id.com/development/architecture/" class="u-url" itemprop="url">System Architecture and Self Sovereign Identity
|
||
</a>
|
||
</h1>
|
||
|
||
|
||
<p class="page__meta">
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<span class="page__meta-readtime">
|
||
<i class="far fa-clock" aria-hidden="true"></i>
|
||
|
||
5 minute read
|
||
|
||
</span>
|
||
|
||
</p>
|
||
|
||
|
||
</header>
|
||
|
||
|
||
<section class="page__content e-content" itemprop="text">
|
||
|
||
<aside class="sidebar__right ">
|
||
<nav class="toc">
|
||
<header><h4 class="nav__title"><i class="fas fa-link"></i> Contents</h4></header>
|
||
<ul class="toc__menu"><li><a href="#general">General</a></li><li><a href="#decentralized-public-key-infrastructure-dpki">Decentralized Public Key Infrastructure DPKI</a><ul><li><a href="#related">Related</a></li></ul></li></ul>
|
||
|
||
</nav>
|
||
</aside>
|
||
|
||
<h2 id="general">General</h2>
|
||
<ul>
|
||
<li><a href="https://twitter.com/dominiumssi/status/1564188374529081345">Centralized\Federated vs Self Sovereign</a> 2022-08-29 dominiumssi
|
||
<blockquote>
|
||
<p>Anyone who wants to understand DID and Self Sovereign Identity should begin by understanding the graph below. We are shifting the power from the companies to the users. That’s it in a nutshell.
|
||
<img src="https://pbs.twimg.com/media/FbUcnNNacAAUnAs?format=png&name=small" alt="" /></p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://points.datasociety.net/good-welfare-bad-platforms-d65b412d962e">Good Welfare, Bad Platforms?: The Risks of Centralized Digital Identity Systems</a> 2022-02-02 OpenID
|
||
<blockquote>
|
||
<p>As S. Shakthi and I noted in a recent <a href="https://journals.openedition.org/samaj/6279">research paper</a>, digital identity systems are widely seen as datafiers by virtue of their core property of reducing the person to machine-readable data. A datafier is a system that performs the crucial operation of converting the physical into digital. A different, contrasting view is also emerging in research: digital identity systems are increasingly seen as platforms, i.e. “technological building blocks” on which different types of complements can be constructed.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.windley.com/archives/2021/12/leveraging_the_identity_metasystem.shtml">Leveraging the Identity Metasystem</a> 2021-12 Phil Windley
|
||
<blockquote>
|
||
<p>the <a href="https://www.windley.com/archives/2021/06/ssi_interaction_patterns.shtml">metasystem guarantees the fidelity of the credential exchange</a>. Credential fidelity comprises four important attributes. Credential exchange on the identity metasystem:</p>
|
||
|
||
<ol>
|
||
<li>Reveals the identifier of the issuer</li>
|
||
<li>Ensures the credential was issued to the party presenting it</li>
|
||
<li>Ensures the credential has not been tampered with</li>
|
||
<li>Reveals whether or not the credential has been revoked</li>
|
||
</ol>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.windley.com/archives/2021/10/token-based_identity.shtml">Token-Based Identity</a> 2021-10 Phil Windley
|
||
<blockquote>
|
||
<p>Token-based identity systems move us from talking about who, to thinking about what, so that people can operationalize their digital lives. Token-based identity systems support complex online interactions that are flexible, ad hoc, and cross-domain.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://freecontent.manning.com/the-basic-building-blocks-of-ssi/">The Basic Building Blocks of SSI</a> 2020-07-29 Drummond Reed, Alex Preukschat Manning
|
||
<blockquote>
|
||
<p>In many cases these core concepts have been established for decades. What’s new is how they’re put together to create a new model for digital identity management. The purpose of this article is to quickly familiarize you with these seven basic building blocks from a conceptual and technical point-of-view.</p>
|
||
<ul>
|
||
<li>Verifiable credentials (aka digital credentials)</li>
|
||
<li>Issuers, holders, and verifiers</li>
|
||
<li>Digital wallets</li>
|
||
<li>Digital agents and hubs</li>
|
||
<li>Decentralized identifiers (DIDs)</li>
|
||
<li>Blockchains</li>
|
||
<li>Governance frameworks (aka trust frameworks)</li>
|
||
</ul>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.evernym.com/blog/your-user-is-your-api/">Your User is Your API</a> 2021-05-17 Evernym
|
||
<blockquote>
|
||
<p>The customer becomes the integration point. The customer is the API. Rather than having one huge, expensive, and probably illegal data hub, every customer becomes a data hub in their own right. They provide the data needed, just-in-time, under their control.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.pingidentity.com/en/company/blog/posts/2021/authentication-vs-authorization.html">The Unbundling of Authentication vs Authorization - What You Need to Know</a> 2021-09-08 Ping Identity
|
||
<blockquote>
|
||
<p>Authentication and authorization are both processes that fall under the category of <a href="https://www.pingidentity.com/en/company/blog/posts/2017/what-is-identity-and-access-management-iam.html">identity and access management (IAM)</a>, but they serve different purposes.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://stateofidentity.libsyn.com/zero-trust-architecture">The Buzz Behind Zero Trust</a> 2021-10-21 State of Identity
|
||
<blockquote>
|
||
<p>The Zero Trust model is the belief that no one should be trusted from inside or outside your network, until their identity has been verified. Zero trust refers to the alignment of maturing identity practices, an established understanding of user behaviors, and the application of least-privilege access security policy decisions to trust boundOaries</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.pingidentity.com/en/company/blog/posts/2021/what-is-zero-trust.html">What Is Zero Trust?</a> 2021 Ping
|
||
<blockquote>
|
||
<ol>
|
||
<li>The network is always assumed to be hostile.</li>
|
||
<li>External and internal threats exist on the network at all times.</li>
|
||
<li>Network locality is not sufficient for deciding trust in a network.</li>
|
||
<li>Every device, user and network flow is authenticated and authorized.</li>
|
||
<li>Policies must be dynamic and calculated from as many sources of data as possible.</li>
|
||
</ol>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://academy.affinidi.com/compare-and-contrast-federated-identity-vs-self-sovereign-identity-227a85cbab18">Compare and Contrast — Federated Identity vs Self-sovereign Identity</a> 2021-04-26 Affinidi
|
||
<blockquote>
|
||
<p>The next step was a federated form of identity where third parties issued digital identity credentials using which users could log into other websites or services. Typically, these were your Google and Facebook logins. In the process, these third parties that issued federated identities became the middlemen.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.pingidentity.com/en/resources/blog/post/sso-practitioners-introduction-decentralized-identity.html">The SSO Practitioner’s Introduction to Decentralized Identity</a> 2020-10-13
|
||
<em>Written for IAM professionals familiar with federations.</em>
|
||
<blockquote>
|
||
<p>In most self-sovereign and decentralized identity systems the trust model is fundamentally unidirectional, where a verifier will trust the issuer, but the issuer may have no knowledge of the verifier.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.windley.com/archives/2020/09/the_architecture_of_identity_systems.shtml">The Architecture of Identity Systems</a> 2020-09 Phil Windley
|
||
<blockquote>
|
||
<p>We can broadly classify identity systems into one of three types based on their architectures and primary root of trust:</p>
|
||
<ul>
|
||
<li>Administrative</li>
|
||
<li>Algorithmic</li>
|
||
<li>Autonomic</li>
|
||
</ul>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://www.linkedin.com/pulse/never-mind-who-i-am-ask-me-my-credentials-john-phillips/">Never mind who I am, ask me about my credentials</a> 2020-02-09 John Phillips
|
||
<blockquote>
|
||
<p>Many (most) identity systems make a fundamental assumption that is built into their very architecture. This assumption creates three significant problems: privacy erosion; toxic data stores; and poor security.</p>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="https://maciek.blog/p/dit">Decentralized Identity Trilemma</a> 2018-08-13 Maciek Laskus
|
||
<blockquote>
|
||
<ol>
|
||
<li>Self-sovereignty — anybody can create and control as many identities1 as they wish without 3rd party involvement.</li>
|
||
<li>Privacy-preserving — one can acquire and utilize an identifier without revealing their ‘real name’ or other personality identifying information.</li>
|
||
<li>Sybil-resistant — identity is subject to scarcity; i.e., creating more identifiers cannot be used to manipulate a system2.</li>
|
||
</ol>
|
||
</blockquote>
|
||
</li>
|
||
<li><a href="http://blogs.harvard.edu/vrm/2012/03/25/ssi/">Self-Sovereign vs Administrative Identity</a> 2012-03-25 Doc Searls
|
||
<blockquote>
|
||
<p>The problem I’m trying to surface here is that we need full respect for self-sovereign identities, and identifiers, before we can solve the problem of highly fractured and incompatible administrative identifiers — a problem that has only become worse with the growth of the Web, where by design we are always the submissive and dependent party: calves to administrative cows.</p>
|
||
</blockquote>
|
||
</li>
|
||
</ul>
|
||
|
||
<h2 id="decentralized-public-key-infrastructure-dpki">Decentralized Public Key Infrastructure DPKI</h2>
|
||
<ul>
|
||
<li><a href="https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust/blob/master/final-documents/dpki.pdf">Decentralized Public Key Infrastructure</a> 2015-12-24 rwot1
|
||
<blockquote>
|
||
<p>Today’s Internet places control of online identities into the hands of third-parties. Email addresses, usernames, and website domains are borrowed or “rented” through DNS, X.509, and social networks. This results in severe usability and security challenges Internet-wide. This paper describes a possible alternate approach called decentralized public key infrastructure (DPKI), which returns control of online identities to the entities they belong to. By doing so, DPKI addresses many usability and security challenges that plague traditional public key infrastructure (PKI). DPKI has advantages at each stage of the PKI life cycle. It makes permissionless bootstrapping of online identities possible and provides for the simple creation of stronger SSL certificates. In usage, it can help “Johnny” to finally encrypt thanks to its relegation of public key management to secure decentralized datastores. Finally, it includes mechanisms to recover lost or compromised identifiers.</p>
|
||
</blockquote>
|
||
</li>
|
||
</ul>
|
||
|
||
<h3 id="related">Related</h3>
|
||
<ul>
|
||
<li><a href="http://www0.cs.ucl.ac.uk/staff/M.AlBassam/publications/scpki-bcc17.pdf">SCPKI: A Smart Contract-based PKI and Identity System</a></li>
|
||
<li><a href="https://drum.lib.umd.edu/bitstream/handle/1903/3332/0.pdf?sequence=1&isAllowed=y">KeyChains: A Decentralized Public-Key Infrastructure</a></li>
|
||
<li><a href="https://www.researchgate.net/publication/318584251_ClaimChain_Decentralized_Public_Key_Infrastructure">ClaimChain: Decentralized Public Key Infrastructure</a></li>
|
||
<li><a href="https://eprint.iacr.org/2014/803.pdf">A Decentralized Public Key Infrastructure with Identity Retention</a></li>
|
||
<li><a href="https://isrdc.iitb.ac.in/blockchain/workshops/2017-iitb/papers/paper-11%20-%20Decentralized%20PKI%20in%20blockchain%20and%20Smart%20contract.pdf">Privacy based decentralized Public Key Infrastructure (PKI) implementation using Smart contract in Blockchain</a></li>
|
||
</ul>
|
||
|
||
|
||
</section>
|
||
|
||
<footer class="page__meta">
|
||
|
||
<h4 class="page__meta-title">Meta</h4>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<p class="page__taxonomy">
|
||
<strong><i class="fas fa-fw fa-tags" aria-hidden="true"></i> Tags </strong>
|
||
<span itemprop="keywords">
|
||
|
||
<a href="/tags/#architecture" class="page__taxonomy-item p-category" rel="tag">Architecture</a>
|
||
|
||
</span>
|
||
</p>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<p class="page__taxonomy">
|
||
<strong><i class="fas fa-fw fa-folder-open" aria-hidden="true"></i> Categories: </strong>
|
||
<span itemprop="keywords">
|
||
|
||
<a href="/categories/#technology" class="page__taxonomy-item p-category" rel="tag">Technology</a>
|
||
|
||
</span>
|
||
</p>
|
||
|
||
|
||
|
||
|
||
<p class="page__date"><strong><i class="fas fa-fw fa-calendar-alt" aria-hidden="true"></i> Updated:</strong> <time class="dt-published" datetime="2023-06-23">June 23, 2023</time></p>
|
||
|
||
</footer>
|
||
|
||
<section class="page__share">
|
||
|
||
<h3 class="page__share-title">Share on</h3>
|
||
|
||
|
||
<a href="https://twitter.com/intent/tweet?via=infominer33&text=System+Architecture+and+Self+Sovereign+Identity%20https%3A%2F%2Fdecentralized-id.com%2Fdevelopment%2Farchitecture%2F" class="btn btn--twitter" onclick="window.open(this.href, 'window', 'left=20,top=20,width=500,height=500,toolbar=1,resizable=0'); return false;" title="Share on Twitter"><i class="fab fa-fw fa-twitter" aria-hidden="true"></i><span> Twitter</span></a>
|
||
<a href="https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fdecentralized-id.com%2Fdevelopment%2Farchitecture%2F" class="btn btn--facebook" onclick="window.open(this.href, 'window', 'left=20,top=20,width=500,height=500,toolbar=1,resizable=0'); return false;" title="Share on Facebook"><i class="fab fa-fw fa-facebook" aria-hidden="true"></i><span> Facebook</span></a>
|
||
<a href="https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fdecentralized-id.com%2Fdevelopment%2Farchitecture%2F" class="btn btn--linkedin" onclick="window.open(this.href, 'window', 'left=20,top=20,width=500,height=500,toolbar=1,resizable=0'); return false;" title="Share on LinkedIn"><i class="fab fa-fw fa-linkedin" aria-hidden="true"></i><span> LinkedIn</span></a>
|
||
<a href="https://www.reddit.com/submit?url=https%3A%2F%2Fdecentralized-id.com%2Fdevelopment%2Farchitecture%2F&title=System+Architecture+and+Self+Sovereign+Identity" class="btn btn--reddit" title="Share on Reddit"><i class="fab fa-fw fa-reddit" aria-hidden="true"></i><span> Reddit</span></a>
|
||
</section>
|
||
|
||
|
||
|
||
<nav class="pagination">
|
||
|
||
<a href="/development/user-experience/" class="pagination--pager" title="User Experience and Self Sovereign Identity
|
||
">Previous</a>
|
||
|
||
|
||
<a href="/development/ethics-rights-sovereignty/" class="pagination--pager" title="Ethics, Human Rights, Sovereignty and Self Sovereign Identity
|
||
">Next</a>
|
||
|
||
</nav>
|
||
|
||
</div>
|
||
|
||
|
||
<div class="page__comments">
|
||
|
||
|
||
<section id="static-comments">
|
||
|
||
</section>
|
||
|
||
</div>
|
||
|
||
|
||
</article>
|
||
|
||
|
||
|
||
<div class="page__related">
|
||
<h2 class="page__related-title">See Also</h2>
|
||
<div class="grid__wrapper">
|
||
|
||
|
||
|
||
|
||
|
||
<div class="grid__item">
|
||
<article class="archive__item" itemscope itemtype="https://schema.org/CreativeWork">
|
||
|
||
<div class="archive__item-teaser">
|
||
<img src="/images/did-square.webp" alt="">
|
||
</div>
|
||
|
||
<br><strong><a href="/ecosystem/" rel="permalink">Ecosystem Overview
|
||
</a></strong>
|
||
<p class="archive__item-excerpt" itemprop="description">This page includes a breakdown of the Web Standards, Protocols,Open Source Projects, Organizations, Companies, Regions, Government and Policy surrounding Verifiable Credentials and Self Sovereign Identity.
|
||
</p>
|
||
<p class="page__meta"><strong>Updated:</strong> 2024-02-26 <i class="far fa-clock" aria-hidden="true"></i>
|
||
|
||
|
||
|
||
|
||
4 minute read
|
||
</p>
|
||
|
||
<small><strong>Tags:</strong></small>
|
||
|
||
</article>
|
||
</div>
|
||
|
||
|
||
|
||
|
||
|
||
<div class="grid__item">
|
||
<article class="archive__item" itemscope itemtype="https://schema.org/CreativeWork">
|
||
|
||
<div class="archive__item-teaser">
|
||
<img src="/images/Verifiable-Credentials-Flavors-Explained_jsonld-lds-teaser.webp" alt="">
|
||
</div>
|
||
|
||
<br><strong><a href="/web-standards/w3c/verifiable-credentials/data-integrity-bbs+/" rel="permalink">Verifiable Credentials with JSON-LD and BBS+ Signatures
|
||
</a></strong>
|
||
<p class="archive__item-excerpt" itemprop="description">BBS signatures were implicitly proposed by Boneh, Boyen, and Shacham (CRYPTO ’04) as part of their group signature scheme, and explicitly cast as stand-alone signatures by Camenisch and Lysyanskaya (CRYPTO ’04). A provably secure version, called BBS+, was then devised by Au, Susilo, and Mu (SCN ’...</p>
|
||
<p class="page__meta"><strong>Updated:</strong> 2023-09-29 <i class="far fa-clock" aria-hidden="true"></i>
|
||
|
||
|
||
|
||
|
||
8 minute read
|
||
</p>
|
||
|
||
<small><strong>Tags:</strong></small>
|
||
|
||
<div class="tags">BBS</div>
|
||
|
||
<div class="tags">Data Integrity</div>
|
||
|
||
<div class="tags">JSON-LD</div>
|
||
|
||
<div class="tags">Verifiable Credentials</div>
|
||
|
||
<div class="tags">W3C</div>
|
||
|
||
</article>
|
||
</div>
|
||
|
||
|
||
|
||
|
||
|
||
<div class="grid__item">
|
||
<article class="archive__item" itemscope itemtype="https://schema.org/CreativeWork">
|
||
|
||
<div class="archive__item-teaser">
|
||
<img src="/images/Verifiable-Credentials-Flavors-Explained_jwt-teaser.webp" alt="">
|
||
</div>
|
||
|
||
<br><strong><a href="/web-standards/w3c/verifiable-credentials/jose-jwt+cose-cbor/" rel="permalink">Verifiable Credentials with JOSE (JWT) / COSE (CBOR)
|
||
</a></strong>
|
||
<p class="archive__item-excerpt" itemprop="description">Digital proof mechanisms, a subset of which are digital signatures, are required to ensure the protection of a verifiable credential. Having and validating proofs, which may be dependent on the syntax of the proof (for example, using the JSON Web Signature of a JSON Web Token for proofing a key h...</p>
|
||
<p class="page__meta"><strong>Updated:</strong> 2023-09-09 <i class="far fa-clock" aria-hidden="true"></i>
|
||
|
||
|
||
|
||
|
||
12 minute read
|
||
</p>
|
||
|
||
<small><strong>Tags:</strong></small>
|
||
|
||
<div class="tags">COSE</div>
|
||
|
||
<div class="tags">IANA</div>
|
||
|
||
<div class="tags">JOSE</div>
|
||
|
||
<div class="tags">JWT</div>
|
||
|
||
<div class="tags">Verifiable Credentials</div>
|
||
|
||
<div class="tags">W3C</div>
|
||
|
||
</article>
|
||
</div>
|
||
|
||
|
||
|
||
|
||
|
||
<div class="grid__item">
|
||
<article class="archive__item" itemscope itemtype="https://schema.org/CreativeWork">
|
||
|
||
<div class="archive__item-teaser">
|
||
<img src="/images/Verifiable-Credentials-Flavors-Explained_zkp-cl-teaser.webp" alt="">
|
||
</div>
|
||
|
||
<br><strong><a href="/web-standards/w3c/verifiable-credentials/zkp-cl_anoncreds/" rel="permalink">Verifiable Credentials (ZKP-CL) Anoncreds
|
||
</a></strong>
|
||
<p class="archive__item-excerpt" itemprop="description">This credential format was created specifically to leverage the CL Signatures. JSON-JWT and JSON-LD Signatures each have their own way of representing the meaning of the attributes within a VC. JSON-JWT references an IANA registry and assumes a “closed world” authority model based on that authori...</p>
|
||
<p class="page__meta"><strong>Updated:</strong> 2023-09-29 <i class="far fa-clock" aria-hidden="true"></i>
|
||
|
||
|
||
|
||
|
||
6 minute read
|
||
</p>
|
||
|
||
<small><strong>Tags:</strong></small>
|
||
|
||
<div class="tags">Anoncreds</div>
|
||
|
||
<div class="tags">Evernym</div>
|
||
|
||
<div class="tags">Hyperledger Foundation</div>
|
||
|
||
<div class="tags">IBM</div>
|
||
|
||
<div class="tags">IDEMIX</div>
|
||
|
||
<div class="tags">Sovrin Foundation</div>
|
||
|
||
<div class="tags">Verifiable Credentials</div>
|
||
|
||
<div class="tags">W3C</div>
|
||
|
||
<div class="tags">ZKP-CL</div>
|
||
|
||
</article>
|
||
</div>
|
||
|
||
</div>
|
||
</div>
|
||
|
||
|
||
</div>
|
||
|
||
</div>
|
||
|
||
|
||
|
||
<div id="footer" class="page__footer">
|
||
<footer>
|
||
<!-- start custom footer snippets -->
|
||
|
||
<!-- end custom footer snippets -->
|
||
<div class="page__footer-follow">
|
||
<ul class="social-icons">
|
||
|
||
<li><strong>Follow:</strong></li>
|
||
|
||
|
||
|
||
|
||
|
||
<li><a href="mailto:nfo@infominer.xyz" rel="nofollow noopener noreferrer"><i class="fas fa-fw fa-envelope-square" aria-hidden="true"></i> Email</a></li>
|
||
|
||
|
||
|
||
<li><a href="https://decentralized-id.com" rel="nofollow noopener noreferrer"><i class="fas fa-fw fa-link" aria-hidden="true"></i> Website</a></li>
|
||
|
||
|
||
|
||
<li><a href="https://twitter.com/DecentralizeID" rel="nofollow noopener noreferrer"><i class="fab fa-fw fa-twitter-square" aria-hidden="true"></i> Twitter</a></li>
|
||
|
||
|
||
|
||
<li><a href="https://github.com/Decentralized-ID" rel="nofollow noopener noreferrer"><i class="fab fa-fw fa-github" aria-hidden="true"></i> GitHub</a></li>
|
||
|
||
|
||
|
||
|
||
|
||
<li><a href="/feed.xml"><i class="fas fa-fw fa-rss-square" aria-hidden="true"></i> Feed</a></li>
|
||
|
||
</ul>
|
||
</div>
|
||
|
||
<script data-goatcounter="https://didecentral.goatcounter.com/count" async src="//gc.zgo.at/count.js"></script>
|
||
|
||
|
||
<div class="page__footer-copyright">⧉ <a href="https://infominer.xyz">infominer</a> • <a href="https://creativecommons.org/publicdomain/zero/1.0/">Creative Commons (CC0 1.0) Public Domain</a> • Powered by <a href="https://mademistakes.com/work/minimal-mistakes-jekyll-theme/" rel="nofollow">Minimal Mistakes</a> via <a href="https://web-work.tools/jamstack/github-pages-starter-pack/">Github Pages</a>. ⧉</div>
|
||
|
||
</footer>
|
||
</div>
|
||
|
||
|
||
<script src="/assets/js/main.min.js"></script>
|
||
<script src="https://kit.fontawesome.com/4eee35f757.js"></script>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<!-- start custom analytics snippet -->
|
||
|
||
|
||
|
||
|
||
<!-- end custom analytics snippet -->
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
</body>
|
||
</html>
|