did:itn

The Integrated Trust Network (ITN) DID Method (did:itn) is a permissioned decentralized identity solution that operates on a hybrid blockchain architecture. It combines both private (Hyperledger Fabric) and public blockchain networks (Arbitrum One) to provide decentralized identity services for secure digital commerce.

The method utilizes a federated network of nodes operated by authorized parties, with each node containing core components like a DID Resolver, Content Addressable Storage, and DLT Gateway. A key feature is its implementation of the DIDComm messaging protocol and integration with the W3C Universal Wallet standard.

ITN Agents serve as the primary interface for external applications, providing:

• Authentication via OAuth2 and DID AuthN
• Verifiable Credential issuance and verification
• Encrypted Data Storage using W3C Encrypted Data Vault
• Key Management capabilities
• Data Sharing functionality

The system employs a unique dual-ledger anchoring approach where DID operations are recorded on both private and public networks for enhanced security and transparency. All communications are protected through asymmetric encryption, and the network can remain operational as long as one honest node exists.

Technical Implementation:

1. DID Generation and Structure

• Format: did:itn:<base58-encoded-key>
• Generation process:
  1. Creates random 32-byte string
  2. Applies SHA-512 hashing
  3. Generates Ed25519 key pair
  4. Takes first 16 bytes of public key
  5. Encodes in Base58 format

2. Resolution Process

• Direct resolution through dedicated DID Resolver
• Utilizes Decentralized Identity Foundation resolver implementation
• Verifies DID document hashes on both ledgers
• Retrieves documents from Content Addressable Storage

3. Key Management and Security

• Supports multiple cryptographic key types:
  • Ed25519VerificationKey2020
  • X25519KeyAgreementKey2020
  • Multiple ECDSA curves
• Implements AEAD algorithms for content encryption:
  • A256CBC-HS512
  • A256GCM
  • XC20P

4. Unique Characteristics

• Dual-ledger anchoring system
• Federated node architecture
• Recovery key mechanism for DID operations
• Integration with W3C Universal Wallet
• Support for multiple key agreement protocols

5. Technology Stack

• Hyperledger Fabric for private ledger
• Arbitrum One for public ledger
• DIDComm messaging protocol
• OAuth2 authentication
• Content Addressable Storage for document storage
• W3C Encrypted Data Vault implementation