Terminology and Concepts

Self‑Sovereign Identity (SSI) User‑centric identity where control of identifiers and credentials belongs to the subject.

Decentralized Identifier (DID) A globally unique identifier. Wallet Server supports:

• did:empe (mainnet)

• did:empe:testnet (testnet)

• did:web (hosted over HTTPS)

DID Document The document resolved from a DID containing verification methods, services, and controller info.

Verifiable Credential (VC) A cryptographically signed credential asserting claims about a subject.

Claim Flow The process a holder uses to claim a credential from an issuer, typically initiated by scanning an issuer QR.

Presentation Flow The process a holder uses to present one or more credentials to a verifier, typically initiated by scanning a verifier QR.

did:web A DID method where the DID document is hosted at a well‑known HTTPS path on a domain you control.

Tenant Scoping Wallet data is partitioned by the JWT sub. Each request is evaluated in the context of the authenticated user.