3.
What’s self-sovereign identification?
Self-sovereign identification is an idea that refers to using distributed databases to handle PII.
The notion of self-sovereign identification (SSI) is core to the thought of decentralized identification. As an alternative of getting a set of identities throughout a number of platforms or a single identification managed by a 3rd occasion, SII customers have digital wallets wherein varied credentials are saved and accessible by dependable purposes.
Consultants distinguish three most important parts often known as the three pillars of SSI: blockchain, verifiable credentials (VCs) and decentralized identifiers (DIDs).
Blockchain is a decentralized digital database, a ledger of transactions duplicated and distributed amongst community computer systems that document info in a approach that makes it tough or not possible to alter, hack or cheat.
Second, there are VCs known as tamper-proof cryptographically-secured and verified credentials that implement SSI and shield customers’ information. They will symbolize info present in paper credentials, reminiscent of a passport or license and digital credentials with no bodily equal, reminiscent of, for example, possession of a checking account.
And final however not least, SSI consists of DIDs, a brand new kind of identifier that permits customers to have a cryptographically verifiable, decentralized digital identification. A DID refers to any topic like an individual, group, information mannequin, summary entity, et cetera, as decided by the controller of the DID. They’re created by the person, owned by the person and impartial of any group. Designed to be decoupled from centralized registries, identification suppliers and certificates authorities, DIDs allow customers to show management over their digital identification with out requiring permission from any third occasion.
Alongside SII, which is rooted in blockchain, DIDs and VCs, decentralized identification structure additionally embraces 4 extra parts. They’re a holder who creates a DID and receives the verifiable credential, an issuer that indicators a verifiable credential with their non-public key and points it to the holder, and a verifier that checks the credentials and may learn the issuer’s public DID on the blockchain. Furthermore, a decentralized identification structure encompasses particular decentralized identification wallets that gasoline the entire system.
How decentralized identification works
The idea for decentralized identification administration is using decentralized encrypted blockchain-based wallets.
In a decentralized identification framework, customers make the most of decentralized identification wallets — particular apps that permit them to create their decentralized identifiers, retailer their PII and handle their VCs —as an alternative of maintaining identification info on quite a few web sites managed by intermediaries.
In addition to distributed structure, these decentralized identification wallets are encrypted. Passwords to entry them are changed by non-phishable cryptographic keys that don’t symbolize a single weak spot within the case of a breach. A decentralized pockets generates a pair of cryptographic keys: private and non-private. The general public key distinguishes a concrete pockets, whereas the non-public one, which is saved within the pockets, is required through the authentication course of.
Whereas decentralized identification wallets transparently authenticate customers, additionally they shield customers’ communications and information. Decentralized apps (DApps) retailer PII, verified identification particulars and the data wanted to determine belief, show eligibility or simply full a transaction. These wallets assist customers give and revoke entry to identification info from a single supply, making it quicker and simpler.
On prime of that, this info within the pockets is signed by a number of trusted events to show its accuracy. For instance, digital identities can get approval from issuers reminiscent of universities, employers, or authorities buildings. Utilizing a decentralized identification pockets, customers can current proof of their identification to any third occasion.
