did:tys

Trust Your Supplier (TYS) is a decentralized identity method built on Hyperledger Fabric, designed specifically for managing supplier identities and credentials in supply chain environments. The did:tys method enables verifiable claims between suppliers, buyers, verifiers, banks, and other organizations within a permissioned blockchain network.

The method operates within a permissioned network where organizations must receive root certificates to participate. It supports multiple roles including suppliers (credential holders), buyers (relying parties), and verifiers who can create DIDs after claim verification. A key feature is that any authorized client can submit verifiable claims, but only verified entities can create TYS DIDs.

The system leverages Hyperledger Fabric's infrastructure with:

• Smart contracts written in Golang
• REST APIs implemented in NodeJS
• Multi-factor authentication
• Cloud-based HSM key management
• Kafka-based ordering service (transitioning to RAFT consensus)

Core technical features:

• DID Generation: Uses ECDSA key pairs and SHA-256 hashing
• Base58 Encoding: For human-readable identifiers
• Credential Management: Supports both organizational and claim-specific DIDs
• Security: Certificate-based authentication and authorization

Technical Implementation:

1. DID Structure:

did:tys:<base58-encoded-20-byte-value>

2. Key Components:

• Authentication Layer: Certificate-based with MFA support
• Smart Contract Layer: Business rule enforcement
• Storage Layer: Permissioned blockchain ledger
• Service Endpoints: Document and metadata access

3. Security Features:

• Multi-factor Authentication
• Single Session Enforcement
• Audit Logging
• HSM-based Key Management

4. Core Functions:

• Create: Register new DIDs with verifiable claims
• Read: Query DID documents
• Update: Modify existing DID documents
• Deactivate: Revoke DIDs
• GetAllCredentialsForEntity: Retrieve associated credentials

The method's underlying technology stack includes:

• Blockchain: Hyperledger Fabric
• Smart Contracts: Golang
• APIs: NodeJS/REST
• Consensus: Kafka/RAFT
• Key Management: Cloud HSM
• Authentication: Certificate-based