IDsto

IDsto is a modular platform and specification for storing and managing digital identities and related attestations. It emphasizes user control, data portability, and interoperability across identity providers and service ecosystems. The project aims to enable verifiable, privacy-preserving identity workflows without reliance on a single centralized authority.

IDsto's architecture centers on three core elements: an Identity Ledger (an append-only log of identity events), a Credential Registry (storing verifiable credentials and revocation data), and Verifiable Data Objects that encode attestations about individuals or entities. The framework supports Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) and is designed to be blockchain-agnostic, usable with blockchains, distributed ledgers, or centralized stores when cryptographic proofs are preserved.

Security relies on public-key cryptography, digital signatures, and optional zero-knowledge proofs for privacy-preserving disclosures. IDsto emphasizes data minimization, selective disclosure, and user consent management, enabling subjects to control which attributes are shared with relying parties and when credentials are revoked.

Open governance underpins IDsto, with a focus on interoperability and open standards. The specification provides reference schemas, APIs, and conformance tests, along with registries of trusted issuers and governance bodies. The ecosystem encourages interoperability testing across implementations to reduce fragmentation.

Potential applications span government services, financial services, healthcare, and e-commerce, supporting streamlined verification, fraud reduction, and improved user experiences. Adoption faces challenges such as inter-system interoperability, regulatory compliance, performance constraints, and the need for broad participation from issuers, verifiers, and subjects.

See also: Decentralized identifiers, Verifiable credentials, Self-sovereign identity, W3C DID and VC standards.