Sovrin DID Method Specification

The Sovrin DID Method is a decentralized identifier specification designed specifically for privacy-preserving self-sovereign identity on the Sovrin Foundation's public ledger. The method uses the prefix did:sov and implements a unique approach to managing digital identities through a purpose-built distributed ledger.

The specification defines how DIDs are created, read, updated, and deleted on the Sovrin network, with special attention to privacy and security considerations. A key differentiating feature is its optimization for DIDs and DID Documents, along with integration with verifiable claims.

Key Features:

• Base58-encoded 16-byte identifiers
• Support for multiple sub-namespaces
• Built-in endpoint management
• Comprehensive key authorization system
• Integration with DIDComm messaging

Technical Specifications:

1. Purpose and Scope:

• Provides decentralized identity management on Sovrin network
• Enables privacy-preserving self-sovereign identity
• Supports verifiable claims integration
• Manages DID Document lifecycle

2. Key Technical Specifications:

• Namestring Format: did:sov:[21-22 characters]
• Identifier Generation:
  • Uses base58 encoding
  • Based on 16-byte UUID or Ed25519 verification key
  • Case-sensitive implementation

3. Implementation Requirements:

• Support for NYM and ATTRIB transactions
• Implementation of CurveZMQ for secure communication
• Compliance with Plenum consensus protocol
• Support for multiple key authorization levels:
  • ADD_KEY
  • REM_KEY
  • ALL

4. Security Considerations:

• Uses CurveZMQ for secure communication
• Implements modified Byzantine Fault Tolerance
• Stores only public data on-ledger:
  • Public DIDs/DID Documents
  • Credential Schemas
  • Credential Definitions
  • Revocation Registries

5. Interoperability Features:

• Compatible with W3C DID specification
• Supports multiple service endpoint types
• Integrates with DIDComm messaging protocols
• Supports standard cryptographic suites:
  • Ed25519 for signatures
  • X25519 for key agreement

6. Current Adoption:

• Implemented in Hyperledger Indy
• Used by Sovrin Foundation network
• Reference implementation available through Hyperledger repositories