Why Project Indy is Using Hybrid DLT to Rethink Digital Identity

A new Hyperledger digital ID project opens up about its design and the desire to create better alternatives to systems in use today.

AccessTimeIconMay 10, 2017 at 12:15 p.m. UTC
Updated Dec 12, 2022 at 1:53 p.m. UTC

The single biggest challenge for digital identity systems has been to create counterparts to the secure physical identifiers we use today.

For instance, there has yet been no effective online equivalent to producing your driver's license at the drug store. And while there are traditional identifiers most people are familiar with online (like the Facebook login), these systems raise key questions about the centralized registries trusted by consumers and the control they have on the systems that secure them.

Now, Project Indy, a blockchain initiative developed by the Sovrin Foundation, is trying to fix this problem using a hybrid distributed ledger platform. As described, the ledger would be public, but in order to interact with it, an invite would be required.

According to Phil Windley, chair of the Sovrin Foundation, the idea is to "strike a middle ground" between permissionless ledgers like bitcoin and permissioned options like R3's Corda.

"One of the key philosophies of Project Indy is that private information is never written to the ledger, even in encrypted form," said Windley. "It gets anchored on the ledger so there's proof that it existed on a certain day."

Elements of identity are then updated on the distributed ledger to be verified by an agent. In the example of a digital driver's license, an agent could be the Department of Motor Vehicles (in the US). However, the idea is that the system is used by third-party operators, but not owned or controlled by them.

Project Indy subscribes to the concept of 'verifiable claims' – a method of cryptographically authenticated online identification, where no private data is written to ledger, returning some ownership to the user.

Windley explained:

"With a verifiable claim, this is now a cryptographically signed self-contained set of data that I can hold. Now when I come to the pharmacy and need to prove I'm over 18, my system can prove that to the pharmacy in a way they can trust, they can verify, they can validate that it was the DMV that issued that."

It's worth noting that the World Wide Web Consortium has set up a verifiable claims working group to encourage interoperability among different players building decentralized ID solutions.

Dawn of decentralized identity

But why is centralized identity a problem? And what does blockchain do to provide a solution?

Online identity has been a "disastrous situation" for some time according to Brian Behlendorf, executive director of Hyperledger, the blockchain group overseen by the Linux Foundation.

Project Indy recently joined Hyperledger, and now hopes to get the ball rolling on this new form of identity with some practical use cases. A prominent use case would be in the financial services sector, replacing fractured systems that are prone to privacy breaches and leave the user with little or no control over their identity data.

The mission statement of Project Indy is restoring control to people's online identity by moving away from centralized services.

Windley told CoinDesk:

"By putting this on a ledger that's operated by a number of different players under governance rules, nobody owns its, everybody can use it, anyone can improve it."

Kicking the tires

In partnering with Hyperledger, the Sovrin Foundation is contributing Project Indy's code to the non-profit consortium – a move Windley believes will hasten development of the project's proofs of concept (PoCs).

"We have running code that can serve as the basis for prototyping, experimenting, hacking, certainly for finding holes, both security holes or conceptual holes," said Hyperledger's Behlendorf.

Like many distributed ledger technology efforts, the financial services sector is showing the most interest in Project Indy so far. And, according to Windley, there are six financial services PoCs already underway.

"Probably the first one that's going to be launched is one that identifies people in call centers, which isn't the sexiest application you can imagine, but it’s a real problem that financial institutions have," he said.

Another banking use case is compliance with know-your-customer (KYC) regulations. Identity ledgers would reduce the regulatory costs felt by financial institutions in this regard, claimed Windley.

Healthcare is also a potential beneficiary of the tech. The project envisages a system where doctors who move between different hospitals could hold their own identifiers to verify their credentials.

Still, Behlendorf is more open-minded about where the project might lead, saying:

"Right now we are very eager for people to come in and kick the tires."
Egg in flourhttps://www.shutterstock.com/image-photo/eggs-flour-baking-599300471?src=ez4UwqsZW-MKhs-OTwlAfg-1-81 image via Shutterstock


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.