The Verifiable Economy: Architecture Reference Model (VE-ARM) 0.1: Original Concepts [OLD]

Michael Herman
Hyperonomy Digital Identity Lab
Trusted Digital Web Project
Parallelspace Corporation

NOTE: This article has been superseded by a newer article:

• The Verifiable Economy: Architecture Reference Model (VE-ARM) 0.2: Step-by-Step.

Introduction

This visualization represents the first complete iteration of The Verifiable Economy Architecture Reference Model (VE-ARM). It is the first complete example of a Fully-Decentralized Object Model (FDOM) that unites the following into a single integrated model:

• Verifiable Identifiers, Decentralized Identifiers (DIDs), and DID Documents;
• Verifiable Claims, Relationships, and Verifiable Credentials (VCs); and
• Verifiable Capability Proclamations, Verifiable Capability Invocations, and Verifiable Capability Authorizations (VCAs).

Background

The scenario used to model the VE-ARM is an example of a citizen (Erin) of a fictional Canadian province called Sovronia holding a valid physical Sovronia Driver’s License (Erin RW SDL) as well as a digital, verifiable Sovronia Driver’s License (Erin SDL).

Creation of the Verifiable Economy Architecture Reference Model (VE-ARM)

The underlying model was built automatically using a series of Neo4j Cypher queries running against a collection of actual DID Document, Verifiable Credential, and Verifiable Capability Authorization JSON files. The visualization was laid out using the Neo4j Browser. The resulting layout was manually optimized to produce the final version of the visualization that appears below. The numbered markers were added using Microsoft PowerPoint.

The Legends and Narration sections that follow further describe the VE-ARM in more detail. A whitepaper will be available shortly. The whitepaper will contain copies of the underlying DID Document, Verifiable Credential, and Verifiable Capability Authorization JSON files.

Click the image to enlarge it.

Legend

Narrative

The numbered bullets in the following narrative refer to the corresponding numbered markers in Figure 2.

SOVRONA, a DID Provider (sovrona.com)

1. SOVRONA Organization. SOVRONA is an Organization and the primary Real-World DID Provider (RW_DIDPROVIDER) for the citizens and government of Sovronia, a fictitious province in Canada. SOVRONA controls a Digital Wallet (PDR (Personal Data Registry)), SOVRONA D Wallet, as well as the SOVRONA Verifiable Data Registry (VDR).

2. SOVRONA D Wallet. SOVRONA D Wallet is a Digital Wallet (PDR (Private Data Registry)) that is controlled by SOVRONA, an Organization.

3. SOVRONA DD. SOVRONA DD is the primary DIDDOC (DID Document) for SOVRONA, an Organization.

4. DID:SVRN:ORG:01E9CFEA-E36D-4111-AB68-D99AE9D86D51#fdom1. DID:SVRN:ORG:01E9CFEA-E36D-4111-AB68-D99AE9D86D51#fdom1 is the identifier for the primary AGENT for SOVRONA, an Organization.

5. http://services.sovrona.com/agent. http://services.sovrona.com/agent is the primary SEP (Service Endpoint) for accessing the AGENT(s) associated with the DID(s) and DID Document(s) issued by SOVRONA, an Organization.

6. SOVRONA VDR. SOVRONA VDR is the primary VDR (Verifiable Data Registry) controlled by SOVRONA, an Organization. The SOVRONA VDR is used to host the SVRN DID Method.

Province of Sovronia, an Organization and Nation State (sovronia.ca)

7. PoS Nation State. The Province of Sovronia is a (fictitious) Province (RW_NATIONSTATE (Real-World Nation State)) in Canada and the legal government jurisdiction for the citizens of the province. The Province of Sovronia is an Organization. The Province of Sovronia issues Real-World Sovronia Driver’s Licenses (SDLs) but relies on SOVRONA to issue digital, verifiable SDLs.

8. PoS D Wallet. PoS D Wallet is a Digital Wallet (PDR (Private Data Registry)) controlled by the Province of Sovronia, an Organization.

9. PoS DD. PoS DD is the primary DIDDOC (DID Document) for the Province of Sovronia, an Organization.

10. DID:SVRN:ORG:0E51593F-99F7-4722-9139-3E564B7B8D2B#fdom1. DID:SVRN:ORG:0E51593F-99F7-4722-9139-3E564B7B8D2B#fdom1 is the identifier for the primary AGENT for the Province of Sovronia, an Organization.

Erin Amanda Lee Anderson, a Person and Citizen of Sovronia (and Sovronia Driver’s License Holder)

11. Erin. Erin is a RW_PERSON (Real-World Person) and a citizen of the Province of Sovronia. Erin also holds a (valid) Sovronia Driver’s License (SDL) and controls a Real-World Wallet (RW_WALLET) as well as a Digital Wallet (PDR).

12. Erin D Wallet. Erin D Wallet is a Digital Wallet (PDR (Private Data Registry)) controlled by Erin, a Person.

13. Erin DD. Erin DD is the primary DIDDOC (DID Document) for Erin, a Person.

14. Erin RW Wallet. Erin RW Wallet is a RW_WALLET (Real-World (Leather) Wallet) and it is used to hold Erin’s Real-World Sovronia Driver’s License (Erin RW SDL). Erin RW Wallet is owned and controlled by Erin.

20. DID:SVRN:PERSON:04900EEF-38E7-487E-8D6F-09D6C95D9D3E#fdom1. DID:SVRN:PERSON:04900EEF-38E7-487E-8D6F-09D6C95D9D3E#fdom1 is the identifier for the primary AGENT for Erin, a Person.

Erin’s Sovronia Driver’s License

• Verifiable Identifiers, Decentralized Identifiers (DIDs), and DID Documents;
• Verifiable Claims, Relationships, and Verifiable Credentials (VCs); and
• Verifiable Capability Proclamations, Verifiable Capability Invocations, and Verifiable Capability Authorizations (VCAs).

15. Erin RW SDL. Erin RW SDL is Erin’s RW_SDL (Real-World Sovronia Driver’s License) and it is held by Erin in Erin’s RW Wallet.

16. Erin SDL DD. Erin SDL DD is the primary DIDDOC (DID Document) for Erin’s digital, verifiable SDL.

17. Erin SDL Prop VC DD. Erin SDL Prop VC DD is the primary DIDDOC (DID Document) for the Verified Credential (VC) that is used to represent the properties of Erin’s digital, verifiable SDL (and their values). The properties (and their values) are represented in Erin SDL Prop VC, a Verifiable Credential associated with the DID in Erin SDL Prop VC DD.

18. Erin SDL Prop VC. Erin SDL Prop VC is the Verified Credential (VC) that is used to represent the properties of Erin’s digital, verifiable SDL (and their values). The properties (and their values) are represented in Erin SDL Prop VC, a Verifiable Credential associated with the DID in Erin SDL Prop VC DD.

19. LicenseBackgroundImage. LicenseBackgroundImage is an IPFSIMAGE (IPFS Image Resource) used to store the Background License Image to be used in Erin’s digital and verifiable SDL. The URL of this resources is one of the property values represented in the Erin SDL Prop VC.

19. PhotoImage. PhotoImage is an IPFSIMAGE (IPFS Image Resource) used to store the Erin’s official photo. The URL of this resources is one of the property values represented in the Erin SDL Prop VC.

19. ProvinceStateLogoImage. ProvinceStateLogoImage is an IPFSIMAGE (IPFS Image Resource) used to store the office Provincial (or State) Logo Image to be used in Erin’s digital and verifiable SDL. The URL of this resources is one of the property values represented in the Erin SDL Prop VC.

19. SignatureImage. SignatureImage is an IPFSIMAGE (IPFS Image Resource) used to store the image of Erin’s official signature. The URL of this resources is one of the property values represented in the Erin SDL Prop VC.

21. DID:SVRN:LICENSE:999902-638#fdom1. DID:SVRN:LICENSE:999902-638#fdom1 is the identifier for the primary AGENT for Erin SDL DD, the DID Document for the “root” of Erin’s digital, verifiable Sovronia Driver’s License.

22. DID:SVRN:VC:0B114A04-2559-4C68-AE43-B7004646BD76#fdom1. DID:SVRN:VC:0B114A04-2559-4C68-AE43-B7004646BD76#fdom1 is the identifier for the primary AGENT for Erin SDL Prop VC DD, the DID Document for the Verified Credential used to represent the properties (and values) of Erin’s digital, verifiable Sovronia Driver’s License.

23. http://services.sovronia.ca/agent. http://services.sovronia.ca/agent is the primary SEP (Service Endpoint) for accessing the AGENT(s) associated with the DID(s) and DID Document(s) issued by the Province of Sovronia, an Organization. This includes all of the DID(s) and DID Document(s) associated with Erin and Erin’s SDL.

Erin’s Sovronia Driver’s License Verifiable Capability Authorizations (VCAs)

26. Erin SDL MVCA. Erin SDL MVCA is the Master Verifiable Capability Authorization (MVCA) created for Erin’s SDL (DD) at the time that the DID and DID Document were first issued by SOVRONA on behalf of the Province of Sovronia for Erin’s SDL. (A new MVCA is created whenever a new DID and DID Document are issued by a DID Provider. The MVCA grants authorization for any and all methods defined for the subject to the effective issuer. In this case, the effective issuer is the Province of Sovronia.)

25. Erin SDL VCA. Erin SDL VCA is the Verifiable Capability Authorization (VCA) created for Erin’s SDL Prop VC DD. The VCA was issued by the Province of Sovronia authorizing Erin to be able to present the properties (and their values) of Erin’s SDL to a third party using the Present method associated with Erin’s SDL Prop VC and supported (implemented) by Erin’s AGENT. The parent of Erin’s SDL VCA is the Erin SDL MVCA. (This is not illustrated correctly in the current version of Figure 2.)

24. Erin SDL VCA MI. Erin SDL VCA MI is an example of a MVCA Method Invocation (VCA MI) that uses the Erin SCL VCA which authorizes the potential execution of the Present method by Erin against Erin’s SDL Prop VC. (This is not illustrated correctly in the current version of Figure 2.)

NOTE: The domains sovrona.com and sovronia.ca are owned by the author.