notes: research/papers/kerione-identity-system-essentials

This data as json

path title type status classification words body
research/papers/kerione-identity-system-essentials Identity System Essentials summary v0.1 — 2026-10-14: drafted by Claude from the PDF; unread by Mark; marked partner on Mark's word 2026-10-21, paraphrase only partner 543 # Identity System Essentials **Abstract.** A white paper by Samuel M. Smith and Dmitry Khovratovich of Evernym, dated 29 March 2016, describing the essential characteristics of an identity system that provides sovereignty, security and privacy, and defining identity from what such a system provides. It covers attribute exchange, least disclosure, cryptonymous identifiers, identity graphs, sovereignty, Byzantine fault tolerant (BFT) ledgers and degrees of transaction privacy. It predates the Key Event Receipt Infrastructure (KERI) work and is useful as background on the ideas it grew from. ## Summary The paper does not define identity in advance. It describes an identity system and then defines identity within it, and argues that high degrees of sovereignty, security and privacy together are best obtained through an open platform using distributed consensus protocols and modern cryptography. It names Open Reputation among the proposed systems that influenced it. The identity system is described as transactional: it enables entities (people, groups, organizations or computational agents) to exchange the identifiers and attributes each needs about the other before a social, financial or legal transaction proceeds. The guiding principle is least disclosure, revealing the minimum needed and no more. Identifiers are strings associated with subsets of attributes. An identity is defined as at least one cryptonymous identifier (a cryptonym) plus a subset of attributes, with one primary identifier; a reused cryptonym acts as a pseudonym and a one-time cryptonym gives anonymity. Human-meaningful aliases may be added. An entity's identities and the links between them form an identity graph, and hierarchical deterministic keychains address the resulting number of private keys. Sovereignty means an entity controls its own identity graph, including the creation, modification, storage, disclosure and destruction of its identifiers and attributes. The paper discusses the disadvantages of a personal data store and of identity as a service. The security section covers modern cryptography and key management, notes that centralized identity providers are natural attack targets, and describes diffuse trust through BFT-based blockchains, hybrid ledgers and blockchain-based identity. The privacy section defines three degrees of transaction privacy (full public, semi-private and full private), group privacy, forgetting, and advanced cryptographic tools such as zero-knowledge proofs. The conclusion notes that authentication, authorization, credential management, identity proofing and reputation are left out and can be layered on this foundation. ## Key terms identity system, least disclosure, cryptonym, identity, alias, identity graph, hierarchical deterministic keychain, sovereignty, diffuse trust, Byzantine agreement ## Claims and their evidence - An identity system that provides sovereignty, security and privacy together is best obtained through an open platform with distributed consensus and modern cryptography. [informative] - Centralized identity providers are the most natural attack targets, since one exposure can compromise many accounts. [informative] - A distributed ledger is trustworthy so long as a majority of its consensus pool is not colluding. [informative] - Transactions can be classed as full public, semi-private or full private by whether attributes are encrypted and identifiers anonymous. [informative] ## Related Open Reputation; Open Reputation Framework; Decentralized Autonomic Data (DAD) and the three R's of Key Management. ## Provenance Drafted by Claude on 2026-10-14 from the PDF (16 pages): the contents, overview, the sections on interaction, attribute exchange, least disclosure, identifiers, identities, identity graph, sovereignty, security and privacy (in part) and the conclusion. Not yet read by Mark.

Links from other tables