Sovereign Digital Identity (SSI & PIDs)
Relevant source files
The following files were used as context for generating this wiki page:
- src/pages/wiki/ssi-did/IntroduccionSSI.tsx
- src/pages/wiki/ssi-did/PrincipiosSovrin.tsx
- federation/tamv-digital-nexus/apps/web/src/lib/sovereign-identity.ts
- src/pages/wiki/fundamentos-isni/MarcoTeorico.tsx
- src/pages/wiki/fundamentos-isni/ResumenAcademico.tsx
- src/pages/wiki/identidad/DidsSsi.tsx
- federation/tamv-digital-nexus/packages/contracts/openapi/tamv.v1.yaml
- src/pages/wiki/implementacion/ApiIsni.tsx
Sovereign Digital Identity within the TAMV project is a paradigm shift where users maintain full control over their digital credentials without relying on centralized platforms. This model is built upon the Infraestructura Soberana de Nombres e Identidades (ISNI), which integrates Decentralized Identifiers (DIDs), Verifiable Credentials (VCs), and Persistent Identifiers (PIDs) such as ORCID and DOI into a unified, federated civilizatory ecosystem.
The system is designed to provide digital sovereignty specifically tailored for the LATAM region, ensuring that identity is treated as critical infrastructure rather than a simple login service. It anchors identity to a semantic knowledge graph that tracks what an entity is, what it produces, and how it relates to its community and territory.
Sources: src/pages/wiki/ssi-did/IntroduccionSSI.tsx, src/pages/wiki/fundamentos-isni/ResumenAcademico.tsx, src/pages/wiki/fundamentos-isni/MarcoTeorico.tsx
Architecture and the ISNI Layer Model
The TAMV identity system is organized into a four-layer architecture that progressively moves from raw documentation to automated sovereign control.
| Layer | Function | Technologies |
|---|---|---|
| Layer 4: Automation & SSI | User control and verifiable credentials | did:tamv, VCs, Ed25519 |
| Layer 3: Interoperability | Connection with global PIDs and external APIs | ORCID, ROR, DOI, Zenodo |
| Layer 2: ISNI Semantics | Meaning and relationships between entities | JSON-LD, Schema.org, TAMV Graph |
| Layer 1: Documental | Publication and versioning | Markdown, Wiki TAMV, GitHub |
Sources: src/pages/wiki/fundamentos-isni/ResumenAcademico.tsx:32-37
Logical Flow of Identity Interaction
The following diagram illustrates the relationship between the three primary roles in the SSI model: the Holder (user), the Issuer (institution), and the Verifier (third party).
The flow ensures that the Holder controls their data, sharing only what is necessary, while the Verifier confirms authenticity via the decentralized ledger.
Sources: src/pages/wiki/fundamentos-isni/MarcoTeorico.tsx:16-24, src/pages/wiki/ssi-did/IntroduccionSSI.tsx:23-28
Core Components: DIDs and PIDs
Decentralized Identifiers (DIDs)
The project utilizes the did:tamv method, a W3C-compliant standard that allows for the unique identification of persons, organizations, territories, and devices. Unlike traditional identifiers, DIDs are verifiable, portable, and reside with the owner rather than a platform.
Identifier Examples:
did:tamv:person:edwin-castillo-trejodid:tamv:org:tamv-online-networkdid:tamv:territory:rdm-real-del-monte
Sources: src/pages/wiki/identidad/DidsSsi.tsx:12-21
Persistent Identifiers (PIDs)
TAMV integrates global academic and organizational PIDs to bridge the local sovereign graph with international systems. These serve as "semantic anchors" for interoperability.
- ORCID: Persistent identifier for researchers and contributors.
- DOI: Persistent identifier for digital objects (datasets, papers).
- ROR: Identifier for research organizations.
- ISNI: International standard name identifier.
Sources: src/pages/wiki/fundamentos-isni/MarcoTeorico.tsx:32-42, src/pages/wiki/fundamentos-isni/ResumenAcademico.tsx:16-20
Implementation: The Sovereign Identity Engine
The project implements identity logic through the SovereignIdentityEngine, which handles the generation of DIDs and the calculation of "Dignity Scores"—a metric-based reputation system.
Dignity and Sovereignty Levels
The system maps user behavior and metrics to specific sovereignty levels, which in turn grant "Creator Powers" within the federated system.
| Level | Requirement | Granted Powers (Examples) |
|---|---|---|
| Genesis | Admin role | GENESIS_AUTHORITY, AI_ORCHESTRATE, SECURITY_SENTINEL |
| Guardian | Moderator role + 80+ Dignity | MODERATOR, SECURITY_SENTINEL, GOVERNANCE_VOTE |
| Creator | Creator role + 60+ Dignity | XR_ARCHITECT, CONTENT_CREATE, GOVERNANCE_VOTE |
| Citizen | 40+ Dignity | GOVERNANCE_VOTE, LOGICAL, OBSERVER |
Sources: federation/tamv-digital-nexus/apps/web/src/lib/sovereign-identity.ts:98-124
Data Structure: Sovereign DID
The following structure defines the core schema for a sovereign identity token in the application:
export interface SovereignDID {
did: string;
method: 'tamv' | 'key' | 'web';
publicKey: string;
createdAt: string;
status: 'active' | 'revoked' | 'suspended';
}
Sources: federation/tamv-digital-nexus/apps/web/src/lib/sovereign-identity.ts:11-17
API and Integration Services
The identity system is exposed via the TAMV Unified API, specifically through services focusing on Auth and Security.
Key Identity Endpoints
The API manages the lifecycle of identities and security keys using both standard and post-quantum cryptography.
| Endpoint | Method | Description |
|---|---|---|
/auth/register | POST | Registers a new user and generates initial identity tokens. |
/security/hybrid-key | POST | Generates a key pair using standard and Post-Quantum Cryptography (Dilithium/Kyber). |
/v1/identity/did/:suffix | GET | Resolves a specific TAMV DID. |
/v1/signature/verify | POST | Verifies a cryptographic signature against a public key. |
Sources: federation/tamv-digital-nexus/packages/contracts/openapi/tamv.v1.yaml:457-550, src/pages/wiki/implementacion/ApiIsni.tsx:28-33
Post-Quantum Security
Identity in TAMV is protected by a QuantumSecurityLayer™, utilizing hybrid signatures (RSA + PQC) and standard W3C JSON-PQC signatures. This ensures that the sovereign identity remains secure against future computational threats.
Sources: federation/tamv-digital-nexus/packages/contracts/openapi/tamv.v1.yaml:13-35
Guiding Principles (Sovrin & TAMV)
TAMV applies the 10 principles of the Sovrin Foundation to its ISNI architecture to ensure true digital sovereignty:
- Existence: Users exist independently in the ecosystem.
- Control: Users control their DIDs.
- Access: Users have access to their own readable data profiles.
- Transparency: Systems are open and publish ontologies in JSON-LD.
- Persistence: PIDs and DIDs guarantee long-term identity durability.
- Portability: Identity works across any federated node.
- Interoperability: Integration with ORCID, ROR, and DOI.
- Consent: Use of identity requires the holder's permission.
- Minimalism: Implementation of zero-knowledge proofs for attribute disclosure.
- Protection: "Dignity-by-Design" ensures user rights prevail.
Sources: src/pages/wiki/ssi-did/PrincipiosSovrin.tsx:10-21
The Sovereign Digital Identity system serves as the foundational "Level 0" of the TAMV ecosystem. By combining decentralized identifiers with international academic standards and a localized dignity-based reputation system, the project establishes a robust framework for digital autonomy in the LATAM region.