did:infra

The Infra DID Method is a decentralized identifier implementation built on the InfraBlockchain platform, a blockchain solution designed specifically for public sector and enterprise use without cryptocurrency. This method offers two distinct types of DIDs:

1. PubKey DIDs - Lightweight identifiers based on public/private key pairs that don't require blockchain transactions for basic creation
2. Account DIDs - Identifiers tied to blockchain accounts with built-in key management and multi-signature capabilities

A key innovation of the Infra DID Method is its efficient approach to DID creation - PubKey DIDs are considered valid simply by generating a key pair off-chain, with blockchain transactions only required for additional operations like revocation or service endpoint registration. This design significantly reduces blockchain storage requirements and transaction costs.

The method operates on the InfraBlockchain network, which uses dedicated DID Registry smart contracts for managing DID documents. Each network instance (like sentinel, yos, or vapptest1) maintains its own registry at known contract addresses.

Technical Implementation:

1. DID Generation and Structure:

• Format: did:infra:<network-id>:<identifier>
• Two identifier types:
  • PubKey: Uses secp256k1 or secp256r1 public keys
  • Account: Uses blockchain account names
• Example: did:infra:sentinel:PUB_K1_7nxEa8qHEiy34d...

2. Resolution Process:

• Implements the DIF-javascript-universal-resolver standard
• Resolution steps:
  • Extract network ID and select blockchain node
  • Verify identifier format
  • Query DID Registry contract
  • Construct DID Document with verification methods and services

3. Key Management Features:

• Supports both secp256k1 and secp256r1 curves
• PubKey DIDs:
  • Self-contained public key verification
  • Optional controller key updates
• Account DIDs:
  • Leverages blockchain account permission system
  • Native multi-signature support

4. Security Architecture:

• Replay Attack Prevention:
  • Uses blockchain ID and nonce values
  • Transaction-specific signatures required
• Non-repudiation through cryptographic proofs
• DOS Protection via distributed node network

5. Technology Stack:

• Built on InfraBlockchain (EOSIO-based)
• Uses smart contracts for DID registry
• Implements W3C DID Core specification
• Provides JavaScript libraries:
  • infra-did-resolver
  • infra-did-js