What is idOS?
Introducing the Identity Operating System
Last updated
Introducing the Identity Operating System
Last updated
idOS (Identity Operating System) is the identity layer of web3. We are building an open-source, composable and chain-agnostic solution to enable true decentralized identity across the web3 space. idOS is made up of two key elements:
A compliant dStorage Network of Nodes, managed by Node operators that host user-encrypted data, usually in the form of W3C Verifiable Credentials
An Access Management Protocol, allowing users to manage their own data and grant/revoke access to third parties like dApps
In the idOS...
Users own, edit, grant/revoke access to their identity data to interact with dApps
Node operators safely store encrypted user data
dApps (and other third parties) request read or write access to user data/credentials
Identity verification providers check user data, issue credentials and may add them to their idOS profile
idOS is a joint effort by the idOS Consortium designed to spark the widespread implementation of decentralized identity across web3.
In the last decade, we have seen many projects launch decentralized identity systems with great technical frameworks that failed to gain substantial user adoption. As active builders in web3, we owe to our users the ability to adopt decentralized and self-sovereign identity systems as a way to process user information. idOS is different in a few, but crucial guiding principles, that unlock user adoption:
idOS is chain-agnostic. We are building the identity layer of web3 collaboratively with great building partners and ecosystems that are leveraging the infrastructure from day one. Additionally, idOS is open-source and composable, aiming to attract existing and new identity solution providers. Identity rails need to be available on-chain and cross-chain. Building local ecosystem solutions doesn't scale and disregards that users are active across multiple chains across web3. With idOS, users can access their data wherever they are, and dApps can easily integrate using native private/public key pair access mechanisms across multiple ecosystems
idOS is built to be compliant with the main user data protection regulations. P2P storage systems clash with the user's right to be forgotten. idOS uses a state consensus to enforce deletion requests. It also allows for regulated entities to ask the user for a temporarily unrevocable access grant to comply with financial regulations. Identity is much more than compliance, but we need to build solutions that are aligned with today's laws if we want to break into mainstream, real-world adoption. Let's tackle the sticky challenges head-on!
idOS allows user to manage their data in a self-sovereign way. Empowering users to fully control their data without the intermediation of third parties, like they control their tokens, is one of the main promises of web3. Unfortunately, self-sovereign identity management is not yet a widespread practice in the digital world. Users should decide who has access to their information, and be able to revoke access if they wish. User data belongs with users and it's time we request a change
idOS is a decentralized storage network. Unlike identity wallets, decentralized storage solutions allow dApps to process users' information even if users are offline. With idOS, dApps don't need to store a copy of user data on their server anymore, since they can rely on access grants. Decentralized storage allows users to only selectively disclose parts of their profile, and keep the underlying data on file, something that is not possible with other identity solutions like soul-bound tokens (SBTs). All in all, relying on a dStorage network of multiple nodes increases flexibility for users and reduces platform risk for dApps and other data consumers
Web3 requires an identity layer. It's time we adopt decentralized identity for good!
The identity value chain is complex and has multiple interconnected steps. We are referring to the process of verifying a user's identity, issuing identifiers, and allowing them to use these identifiers for authentication.
Onboarding and issuance: verifying a human being and/or their attributes, and creating a proof (credential) of it. Think your government, KYC providers (e.g. Fractal ID), biometric AI scanners (e.g. Facetec) or trust-based social networks (e.g. BrightID)
Data storage & availability: securely and privately saving information or credentials, and limiting its availability to approved parties. As far as we know, and outside of idOS, an identity-focused, regulation-compliant sufficiently-decentralized solution doesn't exist today
Access management: checking that a credential is valid and belongs to a specific human (authentication) and granting access or not based on pre-defined criteria (authorization). Some identity-focused examples are Polygon ID (mobile app) and Sign-in with Ethereum
idOS is not the single magic solution to all decentralized identity problems, but a composable, open-source layer for storing identity data. We can't and won't re-invent the identity stack. We acknowledge that there are many great identity solutions out there we want and need to collaborate with. If you are one of them, come build with us!
The table below shows idOS focus and where there is room to develop composable solutions:
| Step | idOS MVP focus | Potential built-on use cases |
|---|---|---|
Onboarding & issuance |
|
|
Data storage & availability |
|
|
Access management |
|
|