notes: research/papers/kerione-universal-identifier-theory

This data as json

path title type status classification words body
research/papers/kerione-universal-identifier-theory Universal Identifier Theory summary v0.1 — 2026-10-14: drafted by Claude from the PDF (v1.40); unread by Mark; marked partner on Mark's word 2026-10-21, paraphrase only partner 501 # Universal Identifier Theory **Abstract.** A 40-page white paper presenting a unified model of identifiers in which cryptographic autonomic identifiers (AIDs) provide trust domains that legitimize human-meaningful identifiers (LIDs), expressed as the aid|lid couplet. It covers trust bases, separable roots of trust, key rotation versus statement revocation, multi-valent key management, promulgation, verifiable credential issuance and verifiable algorithms for LID issuance, for identifier system designers. ## Summary The paper proposes a theory for designing identifier systems that are secure, trustable and universal. It uses "identifier system" rather than "identity system" and defines a digital identity as an identifier plus attributes. Starting from Zooko's trilemma (human-meaningful, secure, decentralized: any two but not all three), it argues that solutions which register insecure human-meaningful names on a ledger show that a single-identifier model is incomplete. The unified model joins two kinds of identifier. Autonomic identifiers (AIDs), provided by KERI (Key Event Receipt Infrastructure), are based on a self-certifying identifier (SCID) prefix: not human-meaningful, but cryptographically strong, with their own trust basis and trust domain. Any other identifier, including a human-meaningful one, can be secured in that trust domain through an end-verifiable authorization that makes it a legitimized identifier (LID). The result is the couplet aid|lid. Section 1 also covers identifier control and trust bases, reputational trust and examples of LIDs. Section 2 treats separable roots of trust, roots of trust for validators, separated control, assumptions about verifiers and zero-trust computing. Section 3 summarizes security as a function of each participant's own infrastructure. Section 4 distinguishes key rotation from statement revocation and covers authorization models. Sections 5 to 8 apply the model: multi-valent key management with a root AID and delegations, promulgation infrastructure, a verifiable credential issuance architecture for an ecosystem, and verifiable algorithms for LID issuance. The conclusion presents the model as mitigating the security weaknesses of administrative roots of trust and the portability limits of algorithmic (shared ledger) ones, letting each ecosystem control its own trust domain while interacting with others. ## Key terms autonomic identifier (AID), legitimized identifier (LID), aid|lid couplet, self-certifying identifier (SCID), trust basis, trust domain, Zooko's trilemma, separable roots of trust, key rotation versus statement revocation, multi-valent key management ## Claims and their evidence - A human-meaningful identifier can be secured within an AID's trust domain through end-verifiable authorization (abstract). [informative] - Key rotation in KERI is equivalent to revocation followed by replacement, and revocation of a key is rotation to a null key (section 4). [informative] - It is much easier to secure one's own keys than everyone else's internet infrastructure (section 3). [informative] - The model mitigates the security weaknesses of administrative roots of trust and the portability limits of shared-ledger roots of trust (conclusion). [informative] ## Related KERI White Paper; KERI White Paper Slide Deck (unified identifier model, AID|LID couplet); Manning SSI Book (Chapter 10). ## Provenance Drafted by Claude on 2026-10-14 from the PDF (v1.40, 2025-09-14), read through the abstract, introduction, heading list, sections 3 and 4 opening, and the conclusion. Not yet read by Mark.

Links from other tables