Onchain identities

ONCHAINID is providing a robust system for managing identities on the blockchain. This system ensures compliance with regulatory requirements and offers flexibility and reusability of claims issued by trusted entities.

What is ONCHAINID?

ONCHAINID is a blockchain-based identity management system that creates a unique, globally accessible identity for each participant. These identities are stored on the public blockchain, making them decentralized, immutable, and beyond the control of any single organization.

Key Features of ONCHAINID

1. Decentralized and Immutable:

   • ONCHAINIDs are stored on the public blockchain, ensuring that they cannot be hidden or deleted. This guarantees that no service or organization can remove access rights to an ONCHAINID.

2. Standards-Based:

   • ONCHAINID complies with the ERC-734 and ERC-735 standards, ensuring compatibility with any service that supports these standards. Identities are smart contracts deployed on the Polygon Network, supporting implementations that adhere to these ERC proposals.

3. Claims and Verifiable Credentials:

   • The value of an ONCHAINID comes from the information (claims) attached to it. These claims can be self-attested or issued by trusted entities known as Claim Issuers. Claims are essential for verifying that an identity has passed specific checks, such as KYC.

How ONCHAINID Works

Identity and Claims

• Unique Identifier: Each ONCHAINID has a unique address on the blockchain.

• Claim Issuers: Trusted entities, approved by the Identity Owner, can issue claims about the identity. These claims are digital attestations that verify specific attributes or statuses of the identity.

• Private Data: Sensitive information, such as ID card details or photos, is stored off-chain by the Claim Issuer. Only a signature of this data is stored on-chain, ensuring privacy while allowing verification.

Flexibility and Reusability

• Self-Attested Information: Some claims can be self-attested, useful for non-regulated contexts like usernames on websites.

• Regulated Exchanges: For security tokens and other regulated assets, claims need to be issued by trusted entities, ensuring that the identity is linked to a real person or organization.

Practical Applications

1. Authentication:

   • ONCHAINID enables password-less authentication with compatible websites using hardware security keys or plugins like MetaMask.

2. Regulated Asset Participation:

   • Participants can use their ONCHAINID to engage in compliant, regulated tokenized asset offerings and exchanges.

3. Information Management:

   • Identities can store and manage various types of information, including names, email addresses, and more. Information Providers can securely store this data off-chain and control access based on the Identity Owner's permissions.

4. Claim Management:

   • Claims can be managed by the Identity Owner, who can add or remove claims and control who is allowed to issue claims about their identity.

Identity Claims and Compliance

• Generic and Specific Claims:

  • Claims can be generic, applicable across multiple tokens and issuers, or specific to particular tokens or issuers. For example, an accreditation status might be a generic claim, while eligibility for a specific token offering might be a specific claim.

• Privacy and Security:

  • To comply with privacy regulations, sensitive data is stored off-chain. The on-chain component includes a hash of this data to ensure integrity without exposing the data itself.

Deployment and Cross-Chain Compatibility

1. Upgradeable Proxies and IdFactory:

   • All ONCHAINIDs are deployed as upgradeable proxies (beacon proxy) through an IdFactory contract. This factory ensures that the same user (same deployer wallet address) can deploy the same ONCHAINID on different EVM chains. This is possible because the factory is deployed at the same address on every chain and uses the CREATE2 opcode, enabling the deployment of ONCHAINID at a deterministic address. This cross-chain compatibility allows claims signed on one chain to be valid across multiple chains without requiring new signatures from claim issuers.

2. Multi-Chain Claims:

   • Most claim signatures are based on the content of the claim and the address of the ONCHAINID. By having the same ONCHAINID address across multiple chains, claims can be utilized on different chains without the need for re-signature by the claim issuer. This significantly enhances the efficiency and usability of the ONCHAINID system.

Enhanced Functionality

1. Direct Wallet Use:

   • ONCHAINIDs can function directly as wallets, holding tokens and interacting with smart contracts through the execute and approve functions inherited from ERC-734. This capability allows ONCHAINIDs to perform transactions and manage assets natively on the blockchain.

2. Compatibility with ERC-4337:

   • The ONCHAINID standard can be compatible with ERC-4337 (account abstraction) by implementing a userOperation function that triggers an execute call following ERC-734. This implementation would make ONCHAINID an abstract account, further enhancing its functionality and integration within the blockchain ecosystem.