EVDI Architecture
The End-to-End Verifiable Data Infrastructure (EVDI) provides a standards-based platform for managing decentralized digital identities and Verifiable Credentials (VCs). It is composed of multiple subsystems—each focusing on a distinct role within the Self-Sovereign Identity (SSI) lifecycle—and operates seamlessly to deliver trust, interoperability, and flexibility.
Core Components
1. One Click Deployment
One Click Deployment streamlines the setup and configuration of Issuer and Verifier services. By automating the deployment process, it eliminates much of the manual complexity involved in setting up secure, blockchain-integrated SSI environments. Users gain:
Rapid Provisioning: Instantly deploy Issuers and Verifiers, complete with registered DIDs on the EMPE Blockchain.
Centralized Management: Easily access, monitor, and maintain deployed components through a unified dashboard.
2. Issuer Service
The Issuer Service is responsible for creating and delivering Verifiable Credentials. Key features include:
DID Management: Automatically generates and anchors DIDs on the EMPE Blockchain.
Schema Management: Defines the structure of credentials and supports versioning for iterative updates.
Credential Issuance: Issues targeted or open offerings for wallets to claim, ensuring authenticity and trust.
Lifecycle Controls: Revokes, updates, and deletes credentials as needed.
Secure Interactions: Uses OAuth2-like flows for wallets, ensuring the right entities receive the right credentials.
3. Verifier Service
The Verifier ensures that presented credentials meet certain criteria and originate from trusted Issuers. Its responsibilities include:
Credential Verification: Validates cryptographic signatures, DID documents, and compliance with specified schemas.
OIDC4VP Compatibility: Aligns with OpenID Connect flows for standardization and interoperability.
Real-Time Feedback: Uses Server-Sent Events (SSE) to provide immediate verification results to front-end applications.
Flexible Queries: Employs a query language that allows fine-grained requirements, ensuring only credentials that match defined conditions are accepted.
4. Reference Wallet
The Empe DID Wallet is a reference mobile wallet application available for iOS and Android. It allows holders to:
Store Decentralized Identifiers (DIDs): Securely manage their DIDs and verifiable credentials.
Manage Credentials: Receive Verifiable Credentials and store them securely in your wallet.
Sign and Present Credentials: Deliver signed credential presentations to verifiers.
Future developments include a Wallet SDK, enabling developers to integrate DID management and credential exchange logic directly into their applications, providing an out-of-the-box solution for seamless integration.
EMPE Blockchain Integration
All DIDs and associated documents are registered on the EMPE Blockchain, serving as a trust anchor. This decentralized ledger ensures:
Authenticity: DIDs and their public keys are tamper-evident.
Interoperability: Any participant can resolve and verify DIDs using open standards.
No Central Authority: Identities remain in the user’s control, not under a single centralized entity.
Bringing It All Together
One Click Deployment kickstarts your ecosystem by deploying fully configured Issuer and Verifier services. The * Issuer Service* then offers credentials to wallets, while the Verifier Service checks those credentials when presented. Both rely on the EMPE Blockchain to verify DIDs, ensuring trust without central intermediaries.
This architecture forms a complete SSI environment:
Issuer creates and publishes credentials.
Wallets (not described in detail here, but integral to user interactions) allow individuals to store and manage their own credentials.
Verifier validates credentials against established criteria.
EMPE Blockchain underpins trust, enabling secure, self-sovereign identity verification at scale.
By adhering to W3C Verifiable Credentials and DID Core standards, and by integrating OAuth2 and OIDC4VP patterns, the EVDI ecosystem ensures that your SSI solutions remain interoperable, future-proof, and user-centric.
Last updated