CX-0049 DID Document

The DID Document standard (CX-0049) defines the structure and requirements for decentralized identifier documents used in Self-Sovereign Identity (SSI) systems. Based on the W3C Decentralized Identifiers (DID) specification, this standard outlines how digital identity documents should be formatted, stored, and accessed within decentralized identity systems.

A DID Document contains essential identity information including public keys for verification and service endpoints. The standard specifically supports the did:web method, which enables DIDs to be resolved over standard web protocols. This approach makes identity information accessible while maintaining security and decentralization principles.

Key features include:

• JsonWebKey2020 verification method support
• Secp256k1 cryptographic curve implementation
• Standardized document structure with mandatory components
• HTTP/HTTPS accessibility requirements
• Decentralized resolution mechanisms

Purpose and Scope:

• Defines the structure of DID documents for dataspace participants
• Specifies requirements for document storage and accessibility
• Establishes standards for identity verification methods
• Applies to both new and existing DIDs in the system

Technical Specifications:

• Document structure must include:
  • @context for W3C DID namespace
  • id field containing the DID
  • verificationMethod array for public key information
  • authentication array for verification references
  • service array for endpoint definitions

Implementation Requirements:

1. Core Service Providers must:

   • Ensure participant DID documents follow specified structure
   • Maintain document accessibility via HTTP/HTTPS
   • Implement proper resolution mechanisms

2. Enablement Service Providers must:

   • Support compliant DID document management
   • Ensure proper document resolution
   • Maintain accessibility standards

Security Considerations:

• Documents must be protected against unauthorized modifications
• Public key integrity must be maintained
• Secure storage and access controls required
• Cryptographic verification using secp256k1 curve

Interoperability Features:

• Compliance with W3C DID standards
• Support for cross-network identity verification
• Standardized service endpoint definitions
• Common verification method support

Current Adoption:

Implemented in Release 24.05 with did:web method support
Future releases will support additional DID methods and existing participant DIDs