DIDbased

DIDbased is an adjective used to describe systems, services, or architectures that are based on Decentralized Identifiers (DIDs). The term emphasizes user control over identifiers and related data, with authentication and attribute verification often enabled by verifiable credentials.

Core concepts in a DIDbased approach include DIDs themselves, which are globally unique strings that resolve to DID Documents containing public keys, authentication methods, and service endpoints. DID methods govern the creation, update, and resolution of DIDs, with examples spanning various implementations. The related standards include the DID Core data model and Verifiable Credentials (VCs) with Verifiable Presentations (VPs), which enable cryptographically verifiable statements about a subject.

In typical implementations, a DIDbased system separates the roles of the subject, the issuer of credentials, and the relying party. A user proves attributes by presenting VCs or VPs issued by trusted authorities, with control over the cryptographic keys and recovery options retained by the subject. This model supports portable, platform-agnostic identity that can be used across applications and borders.

Benefits of a DIDbased approach include increased portability of credentials, reduced reliance on centralized identity providers, enhanced user privacy through selective disclosure, and the potential for recoverable, self-owned identities. It also enables cross-organization and cross-application interoperability when standards are followed.

challenges include ensuring interoperability across different DID methods and ecosystems, managing cryptographic keys and recovery procedures, simplifying user experience, and addressing regulatory and auditing requirements. Adoption varies by domain, including enterprise identity, government programs, education credentials, and digital wallet ecosystems.