/vaa-method

test

VAA DID Method Specification

Version 1.0.0

About

This DID method specification conforms to the requirements in the DID specification currently published by the W3C Credentials Community Group. For more information about DIDs and DID method specifications, please see the DID Primer and DID Spec.

The following DID Method will be registered in the DID Specification Registries.

Abstract

Blockchain Identifier Infrastructure (BIF) is a permissioned public blockchain aiming for creating a distributed trust management framework typical for internet ID service, and the BIF blockchain (http://bidspace.cn/) is governed by China Academy of Information and Communications Technology (CAICT). CAICT is also the official issuing agency with Issuing Agency Code (IAC)——"VAA", given by ISO/IEC 15459. The IAC indicates an authorized qualification of distributing identifiers with own allocation rules.

As the "VAA" means a self-defined rule for internet identifiers, these letters could be literal used as a DID method name conformant with W3C DID specification. The VAA method is created not only to define a random identifier generation rules, but ultimately to create smart contracts, which support different identifiers format.

Status of This Document

This document was published as an Editor's Draft.

Publication as an Editor's Draft does not imply endorsement by the W3C Membership. This is a draft document and may be updated, replaced or obsoleted by other documents at any time. It is inappropriate to cite this document as other than a work in progress.

VAA DID Method

  • The namestring that shall identify this DID method is : vaa
  • A DID that uses this method MUST begin with the following prefix: did:vaa. Per the DID specification, this string MUST be in lowercase. The remainder of the DID, after the prefix, is the NSI specified below.

Namespace Specific Identifier (NSI)

Set random generation identifiers as a default contract , method-specific-id should be encoded as follow:

  1. Generate random public key through Elliptic-curve cryptography (ECC) algorithm

  2. Hash the public key and take the first 20 digits

  3. Use base58 encode the first 20 digits to obtain the method-specific-id

    vaa-did = did:vaa:method-specific-id
    
    vaa-specific-id = 27*31(base58char)
    
    base58char = "1" / "2" / "3" / "4" / "5" / "6" / "7" / "8" / "9" / "A" / "B" / "C"
                 / "D" / "E" / "F" / "G" / "H" / "J" / "K" / "L" / "M" / "N" / "P" / "Q"
                 / "R" / "S" / "T" / "U" / "V" / "W" / "X" / "Y" / "Z" / "a" / "b" / "c"
                 / "d" / "e" / "f" / "g" / "h" / "i" / "j" / "k" / "m" / "n" / "o" / "p"
                 / "q" / "r" / "s" / "t" / "u" / "v" / "w" / "x" / "y" / "z"

Examples:

did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB

Set smart contracts for different usecases:

  1. Name the encoding rule as IDcontract1

  2. Reserve an identifier allocation list for IDcontract1 in each of the BIF Blockchain nodes

  3. Generate an identifier compliance with the encoding rule for new identifier application, not conflict with existed numbers in the identifier allocation list

Examples:

did:vaa:IDcontract1:86.100.1234/abcdfe.123

DID Document

{
	"@context": "https://www.w3.org/2019/did/v1",
	"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"controllor": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"verificationMethod": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#key1",
		"type": "RsaVerificationKey2018",
		"controller": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"publicKeyPem": "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6WDUa6hcC5069KtQ2g\r\nYEAWLn+poDbE5kF4kRzrLL7pUSma8rKacxxqKEow1+meW5wbM8nSc5mCjBdLfl5R\r\nFYnaCePOk8taVxclLum7E7WnY2BHbvL+LA5A2T8Ih52qOmKc5Pajsp7Ac38Eu5VJ\r\nrQu4RBMu0xkn6fEUFpajJkkfPTdWc5fDtVwgnYVWGnGB9VIAxIlkCbFQQc4g3sEP\r\nw/Iy1l3Cnedu63HBC1w/dDealLG5gGoVyBmY68er8yaezLNps381BvJJJNic4CRX\r\nhmULgiRAEJGQGPUhNStduWRAy5yELkLvAN2ZpRE8s8j5tMM4zwc+WcBlDjrnnp2y\r\nJwIDAQAB\r\n-----END PUBLIC KEY-----"
	}],
	"service": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#resolver",
		"type": "DIDResolve",
		"serviceEndpoint": "http://bidspace.cn/"
	}],
	"created": "2020-01-01T23:59:00Z",
	"updated": "2020-01-01T23:59:00Z",
	"proof": {
		"type": "RsaSignature2018",
		"created": "2020-01-01T23:59:00Z",
		"verificationMethod": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"jws": "eyJhbGciOiJQUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..C4caLqq0IOWqb9Pz_IoEYJ18bwLTE4RgNaY4GdCd5u5nN9Yo_rTIcSsZYHpPF0PkdYK7yemUO7BrNnlyjyxBQLhyVdZC65eKf7ZL2aBzryFF6rqpA7EhXOGm6d9TcZwPXHUkpU5ivONJjH4w8P1GMkULLyODooR9fPzAmxcAob1gzKiOpN8Istlx1qE96s18lg2kMJtRwz3ALv5JIB2Dc8_9uOCtWyAi1hHSHWxBiyEYjQYbfYzk1_hu9lT6BiExyhqJdP6ldxig89ofMBhpigceKS625wNRwIR1LIB8-9tXKESW2Fy8JYRqrH_7oeKPh-qb8ZnKOJL_KbPWv7JLeg"
	}
}

VAA DID Method Specification

Create

For default contract rule, a DID document is created by performing an HTTP POST containing following elements.

To create a DID document, you must submit a transaction that looks like this:

POST /vaa  HTTP/1.1
Content-Type: application/ld+json
application/json, text/plain, */*
Accept-Encoding: gzip, deflate
{
"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
"opration":"create",
"document":  {
	"@context": "https://www.w3.org/2019/did/v1",
	"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"controllor": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"verificationMethod": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#key1",
		"type": "RsaVerificationKey2018",
		"controller": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"publicKeyPem": "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6WDUa6hcC5069KtQ2g\r\nYEAWLn+poDbE5kF4kRzrLL7pUSma8rKacxxqKEow1+meW5wbM8nSc5mCjBdLfl5R\r\nFYnaCePOk8taVxclLum7E7WnY2BHbvL+LA5A2T8Ih52qOmKc5Pajsp7Ac38Eu5VJ\r\nrQu4RBMu0xkn6fEUFpajJkkfPTdWc5fDtVwgnYVWGnGB9VIAxIlkCbFQQc4g3sEP\r\nw/Iy1l3Cnedu63HBC1w/dDealLG5gGoVyBmY68er8yaezLNps381BvJJJNic4CRX\r\nhmULgiRAEJGQGPUhNStduWRAy5yELkLvAN2ZpRE8s8j5tMM4zwc+WcBlDjrnnp2y\r\nJwIDAQAB\r\n-----END PUBLIC KEY-----"
	}],
	"service": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#resolver",
		"type": "DIDResolve",
		"serviceEndpoint": "http://bidspace.cn/"
	}],
	"created": "2020-01-01T23:59:00Z",
	"updated": "2020-01-01T23:59:00Z",
	"proof": {
		"type": "RsaSignature2018",
		"created": "2020-01-01T23:59:00Z",
		"verificationMethod": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"jws": "eyJhbGciOiJQUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..C4caLqq0IOWqb9Pz_IoEYJ18bwLTE4RgNaY4GdCd5u5nN9Yo_rTIcSsZYHpPF0PkdYK7yemUO7BrNnlyjyxBQLhyVdZC65eKf7ZL2aBzryFF6rqpA7EhXOGm6d9TcZwPXHUkpU5ivONJjH4w8P1GMkULLyODooR9fPzAmxcAob1gzKiOpN8Istlx1qE96s18lg2kMJtRwz3ALv5JIB2Dc8_9uOCtWyAi1hHSHWxBiyEYjQYbfYzk1_hu9lT6BiExyhqJdP6ldxig89ofMBhpigceKS625wNRwIR1LIB8-9tXKESW2Fy8JYRqrH_7oeKPh-qb8ZnKOJL_KbPWv7JLeg"
	}
}
}

Read

A DID Document can be read by performing an HTTP GET containing following elements.

To query a DID document, you must submit a transaction that looks like this:

GET /did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB HTTP/1.1 Content-Type: application/ld+json Accept: application/ld+json, application/json, text/plain, / Accept-Encoding: gzip, deflate

To read an identifier, look it up from the blockchain, and then directly obtain the DID document, for example:

{
"responseCode":0,
"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
"document": {
	"@context": "https://www.w3.org/2019/did/v1",
	"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"controllor": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"verificationMethod": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#key1",
		"type": "RsaVerificationKey2018",
		"controller": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"publicKeyPem": "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6WDUa6hcC5069KtQ2g\r\nYEAWLn+poDbE5kF4kRzrLL7pUSma8rKacxxqKEow1+meW5wbM8nSc5mCjBdLfl5R\r\nFYnaCePOk8taVxclLum7E7WnY2BHbvL+LA5A2T8Ih52qOmKc5Pajsp7Ac38Eu5VJ\r\nrQu4RBMu0xkn6fEUFpajJkkfPTdWc5fDtVwgnYVWGnGB9VIAxIlkCbFQQc4g3sEP\r\nw/Iy1l3Cnedu63HBC1w/dDealLG5gGoVyBmY68er8yaezLNps381BvJJJNic4CRX\r\nhmULgiRAEJGQGPUhNStduWRAy5yELkLvAN2ZpRE8s8j5tMM4zwc+WcBlDjrnnp2y\r\nJwIDAQAB\r\n-----END PUBLIC KEY-----"
	}],
	"service": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#resolver",
		"type": "DIDResolve",
		"serviceEndpoint": "http://bidspace.cn/"
	}],
	"created": "2020-01-01T23:59:00Z",
	"updated": "2020-01-01T23:59:00Z",
	"proof": {
		"type": "RsaSignature2018",
		"created": "2020-01-01T23:59:00Z",
		"verificationMethod": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"jws": "eyJhbGciOiJQUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..C4caLqq0IOWqb9Pz_IoEYJ18bwLTE4RgNaY4GdCd5u5nN9Yo_rTIcSsZYHpPF0PkdYK7yemUO7BrNnlyjyxBQLhyVdZC65eKf7ZL2aBzryFF6rqpA7EhXOGm6d9TcZwPXHUkpU5ivONJjH4w8P1GMkULLyODooR9fPzAmxcAob1gzKiOpN8Istlx1qE96s18lg2kMJtRwz3ALv5JIB2Dc8_9uOCtWyAi1hHSHWxBiyEYjQYbfYzk1_hu9lT6BiExyhqJdP6ldxig89ofMBhpigceKS625wNRwIR1LIB8-9tXKESW2Fy8JYRqrH_7oeKPh-qb8ZnKOJL_KbPWv7JLeg"
	}
}
}

Update

A DID document can be replaced by performing an HTTP POST containing following elements.
To update a DID document, you must submit a transaction that looks like this: POST /vaa HTTP/1.1 Content-Type: application/ld+json application/json, text/plain, / Accept-Encoding: gzip, deflate

{
"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
"opration":"update",
"document": {
	"@context": "https://www.w3.org/2019/did/v1",
	"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"controllor": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"verificationMethod": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#key1",
		"type": "RsaVerificationKey2018",
		"controller": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"publicKeyPem": "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6WDUa6hcC5069KtQ2g\r\nYEAWLn+poDbE5kF4kRzrLL7pUSma8rKacxxqKEow1+meW5wbM8nSc5mCjBdLfl5R\r\nFYnaCePOk8taVxclLum7E7WnY2BHbvL+LA5A2T8Ih52qOmKc5Pajsp7Ac38Eu5VJ\r\nrQu4RBMu0xkn6fEUFpajJkkfPTdWc5fDtVwgnYVWGnGB9VIAxIlkCbFQQc4g3sEP\r\nw/Iy1l3Cnedu63HBC1w/dDealLG5gGoVyBmY68er8yaezLNps381BvJJJNic4CRX\r\nhmULgiRAEJGQGPUhNStduWRAy5yELkLvAN2ZpRE8s8j5tMM4zwc+WcBlDjrnnp2y\r\nJwIDAQAB\r\n-----END PUBLIC KEY-----"
	}],
	"service": [{
		"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB#resolver",
		"type": "DIDResolve",
		"serviceEndpoint": "http://bidspace.cn/"
	}],
	"created": "2020-01-01T23:59:00Z",
	"updated": "2020-08-01T23:59:00Z",
	"proof": {
		"type": "RsaSignature2018",
		"created": "2020-08-01T23:59:00Z",
		"verificationMethod": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
		"jws": "eyJhbGciOiJQUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..C4caLqq0IOWqb9Pz_IoEYJ18bwLTE4RgNaY4GdCd5u5nN9Yo_rTIcSsZYHpPF0PkdYK7yemUO7BrNnlyjyxBQLhyVdZC65eKf7ZL2aBzryFF6rqpA7EhXOGm6d9TcZwPXHUkpU5ivONJjH4w8P1GMkULLyODooR9fPzAmxcAob1gzKiOpN8Istlx1qE96s18lg2kMJtRwz3ALv5JIB2Dc8_9uOCtWyAi1hHSHWxBiyEYjQYbfYzk1_hu9lT6BiExyhqJdP6ldxig89ofMBhpigceKS625wNRwIR1LIB8-9tXKESW2Fy8JYRqrH_7oeKPh-qb8ZnKOJL_KbPWv7JLeg"
	}
}
}

Delete（Revoke）

Deletion means invalidation of the existing DID. An invalid DID has its revoked date time set;

"revoked": "2020-01-01T23:59:00Z"

A DID document can be revoked by performing an HTTP POST.
To revoke the document of the DID, the owner of the DID should send a request that looks like this:

POST /vaa HTTP/1.1 Content-Type: application/ld+json application/json, text/plain, / Accept-Encoding: gzip, deflate

 {
	"id": "did:vaa:gxAcE6upFw6DNbG3rfngM3VxCNB",
	"operation": " delete"
}

Security and Privacy Considerations

  • The information related to the user's privacy is not linked, or on the authority side, the statement submitted by the authority is used to prove the user's proprietary attribute, so as to better protect the user's privacy from being replaced.
  • It can be proved that the private key owned by the DID only exists on the user's device and will not be known to any third party.
  • DID documents use signature technology to prevent malicious error correction.