did:sov

The Sovrin DID Method (did:sov) is a decentralized identifier system built on the Sovrin Network, a public permissioned ledger specifically designed for Self-Sovereign Identity. This method is governed by the Sovrin Foundation and optimized for managing digital identities and their associated verifiable credentials.

The did:sov method uses a permissioned blockchain architecture where approved Trust Anchors can create and manage DIDs. Each DID is composed of a unique 21-22 character base58-encoded identifier derived from a 16-byte UUID. The system supports comprehensive key management capabilities and includes built-in features for privacy preservation.

Key characteristics include:

• Permissioned validator network for enhanced security and trust
• Built-in support for verifiable credentials
• Privacy-preserving architecture that keeps personal data off-ledger
• Multiple signature support for enhanced security
• Integrated service endpoint management
• Zero-knowledge proof capabilities

Technical Implementation:

1. DID Generation and Structure

• Format: did:sov:<21-22 character base58 string>
• Generated from either:
  • Standard UUID conversion
  • First 16 bytes of Ed25519 verification key
• Uses base58 encoding with Bitcoin/IPFS alphabet
• Supports optional subnamespaces

2. Resolution Process

• Executes through two main transactions:
  • GET_NYM for DID record retrieval
  • GET_ATTRIB for service endpoint information
• Returns standardized DID Document including:
  • Verification methods
  • Authentication credentials
  • Service endpoints
  • Key agreement capabilities

3. Key Management Features

• Supports Ed25519 for signing
• X25519 for key agreement
• Multiple signature thresholds
• Key authorization levels:
  • ADD_KEY
  • REM_KEY
  • ALL

4. Security Architecture

• Uses CurveZMQ for secure communication
• Implements modified Redundant Byzantine Fault Tolerance (Plenum)
• Supports key rotation and revocation
• Multi-signature authentication options
• Zero-knowledge proof capabilities

5. Technology Stack

• Built on Hyperledger Indy
• Uses JSON-LD for DID Documents
• Implements W3C DID specifications
• Leverages Ed25519 and X25519 cryptographic suites
• Plenum consensus protocol
• CurveZMQ secure messaging