Community OSDocs

DocsTrust network

What is a DID

A DID is the permanent digital address of a person, an organization, or a service in Community OS.

ConceptTrust networkAdminBeneficiaryCoordinatorFamilySupport workerTrustee

A DID is a Decentralized Identifier. It is the permanent digital address of a person, an organization, or a service in Community OS. Every record that names someone uses a DID.

Definition

A DID is a string of characters that starts with did:. Community OS uses three kinds:

  • did:plc: for people.
  • did:web: for organizations.
  • did:key: for services.

A DID is permanent. It does not change when a person changes name, email, or provider. Community OS creates the DID for you. You do not build it yourself.

A DID is verifiable. Because the address is bound to the person, records and permissions stay attached to the correct person. When a record names a person, it stores that person's DID, not a name that could be confused with someone else.

When you use it

You use your DID every time you grant access or receive it. To make someone a trustee, you give the beneficiary your DID. To grant consent, the grantee is named by their DID. To set up a support arrangement, the subject, worker, coordinator, and organization are all named by DIDs.

You share your DID with people you trust. It is not a secret like a password. It is a public address, like your postal address. The trust network uses it so that every record points to the exact correct person, organization, or service.

Example

Wiremu is a beneficiary. His DID is did:plc:wiremu.test. Hana, his trustee, has the DID did:plc:hana.test. Provider A, the organization that employs James, has the DID did:web:provider-a.test. When Wiremu delegates authority, the delegation names Hana by her DID. When Aroha sets up the arrangement, it names Wiremu, James, and Provider A by their DIDs. There is no confusion about who is who.