Hyperledger Identus Feature Development

[GENERAL] Name and surname of main applicant

David Harding(IOG)

[GENERAL] Are you delivering this project as an individual or as an entity (whether formally incorporated or not)

Entity (Incorporated)

[GENERAL] Co-proposers and additional applicants

John Mattson(IOG)

[GENERAL] Please specify how many months you expect your project to last (from 2-12 months)

12

[GENERAL] Please indicate if your proposal has been auto-translated into English from another language

No

[GENERAL] Summarize your solution to the problem (200-character limit including spaces)

Atala PRISM must rename and transition the core SSI codebase to Hyperledger Identus, adding additional features (like OIDC4VC).

[GENERAL] Does your project have any dependencies on other organizations, technical or otherwise?

No

[GENERAL] If YES, please describe what the dependency is and why you believe it is essential for your project’s delivery. If NO, please write “No dependencies.”

No dependencies

[GENERAL] Will your project’s output/s be fully open source?

Yes

[GENERAL] Please provide here more information on the open source status of your project outputs

Hyperledger Identus as a SSI (Self Sovereign Identity) platform is being open sourced.

In 2023, the Atala team at IOG contributed their Open Enterprise Agent(OEA) software to Hyperledger Labs. Following this, the open source community renamed it Hyperledger Identus and promoted it to a Hyperledger Project status in April 2024. We will transition open source repositories from IO and OEA to Hyperledger Identus and contribute additional features developed for the core SSI platform.

[METADATA] SDG rating

SDG9 Increase Industry, Innovation, and Infrastructure

• The Hyperledger Identus Project offers components to build decentralized identity solutions that align with widely recognized W3C standards.

[SOLUTION] Please describe your proposed solution

The rapid growth of Web3, decentralized currencies (i.e. cryptocurrencies), applications, and services has led to calls for privacy preservation and zero-knowledge proofs. While these are noble goals, widespread adoption and success are only achievable if there is a better way to represent identity in a universal, secure, and trusted way.

In July 2022, the World Wide Web Consortium (W3C) solidified the identity efforts when they approved the Decentralized Identifier Specification. It hardened the concept of a Decentralized Identifier, or DID, to represent a digital identity as a person, place, or thing by associating cryptography and keys as a unique, secure, and trusted way to present an identity. From this specification came the concept of Self-Sovereign Identity, or SSI. SSI represents a revolutionary new way to present and disclose identity information, authenticate an identity, and engage in trusted transactions in a decentralized internet, all while putting control back in the hands of the individual.

Atala has contributed the most comprehensive open source SSI platform for the Cardano blockchain: Hyperledger Identus. It will be at the center of all IOG products and services and branch out to support all members of the Cardano community. We will provide the platform services for SSI features and capabilities for application and service developers, providers, and customers. In the future, we will enhance the platform to support multiple persistent data stores, blockchains (sidechains, Midnight, etc.), custodial wallets, and even integrate with existing Identity Access Management (IAM) and Customer Identity Access Management (CIAM) platforms to achieve a broader customer base and increase our revenue opportunities. As we grow to support other chains, we will expand our reach and mediate identity between them to provide users with a seamless experience and more value to our customers.

At Atala, we understand how complex identity can be. Atala will continue contributing to Hyperledger Identus, making it the easiest to develop and quickest to deploy - SSI platform in the industry. Atala is committed to completing the Hyperledger Identus feature set that we have laid out in the roadmap.

This proposal will partially fund the delivery of:

• A feature-complete SSI Enterprise Agent SDK to the Hyperledger Identus project as a platform for building Web3 SSI solutions in the Cardano ecosystem and ultimately throughout the digital identity space
• Sustaining support for open source developers in the Hyperledger Identus environment
• Community outreach, engagement, and support for the extended Hyperledger Identus and Atala PRISM user and developer community
• Provide feature extensions, training, and support Hyperledger Identus and Atala users to implement the PRISM platform in DevNET, TestNET, and Production service environments
• Provide feature extensions, training, and support for developers and providers of applications and services built on Cardano

[IMPACT] Please define the positive impact your project will have on the wider Cardano community

Context:

Regular contributions to the Hyperledger Identus code base:

On an ongoing basis, IOG’s Atala team will contribute new features, code hardening, and bug fixes to the Hyperledger Identus open source project. For detailed features, see the roadmap.

Bi-weekly Community Outreach calls:

The Hyperledger community is vast, comprising 14 Projects, 50+ Labs, and a staggering 289K Contributions & 169M Lines of Code. This scale underscores the importance of our collective efforts.

The Atala Team hosts bi-weekly Community Outreach calls on Tuesdays at 3 PM UTC and publishes on Zoom for on-demand availability.

Measures of Success

• Number of projects consuming Identus
• Number of projects live on Mainnet
• Hyperledger Identus contributions will be publicly available in the Hyperledger Identus GitHub repository. New feature contributions will be announced via Hyperledger and Atala Discord channels.

[CAPABILITY & FEASIBILITY] What is your capability to deliver your project with high levels of trust and accountability? How do you intend to validate if your approach is feasible?

The project will engage a group of researchers from the IOG and Cardano community including digital identity experts, cryptography experts, research engineers and others.

IOG has proven many times its capabilities to perform high quality research, having already published almost two hundred peer-reviewed papers including those at top conferences and journals. IOG designed and implemented most of the elements of the Cardano network, accumulating a lot of knowledge and experience.

Moreover, the involved researchers and developers participated in the design and development of Atala PRISM, the Open Enterprise Agent and now Hyperledger Identus since its early days, including designing of the fully featured Self Sovereign Identity capability, community review mechanism and many other developments. They possess significant expertise in this domain.

Having delivered Atala PRISM 1.4, 2 Beta Programs for Atala PRISM v2 and the Open Enterprise Agent as a Hyperledger lab (now Hyperledger Identus project), we believe that we have the capability to complete the core SSI features for Atala v2 that is being transferred to the Hyperledger Identus Project.

[PROJECT MILESTONES] What are the key milestones you need to achieve in order to complete your project successfully?

M1: Delivery of Documentation & Associated Code to Hyperledger Identus

Deliverables:

1. Documentation: Complete developer documentation including setup, configuration, and usage guidelines.
2. Code: All documentation source code, including dependencies and modules, committed to the Hyperledger Identus repositories with appropriate annotations.

Acceptance Criteria:

• Documentation is available as Hyperledger Identus not Atala PRISM as it is today.

Evidence of milestone completion

• Documentation is available as Hyperledger Identus not Atala PRISM as it is today.

Duration of milestone: 3 months

M2: Delivery of SSI Platform “Core Components” to Hyperledger Identus code base  

Output: Fully functional and tested Identus SSI platform: A comprehensive SSI software platform that enables the creation and management of decentralized digital identities, compatible with the Hyperledger Identus framework. 

 

Deliverables: 

1. Testing Suite: A robust suite of automated tests (unit, integration, and stress tests) ensuring functionality and performance.
2. Deployment Scripts: Scripts for deploying Identus in various environments (e.g., development, testing, production).
3. Identus Platform Core Components:

• Identus Cloud Agent
• Identus Mobile SDKs for KMM (Android) and Swift (iOS)
• Identus Mediator
• Identus Node: Layer 2 Cardano interfaces to manage SSI aspects on the Cardano blockchain
• Identus Cryptographic Library: Cryptographic interfaces used by all Identus components

     4.  Reference Applications: Reference applications demonstrating the Identus capabilities.

Acceptance Criteria: 

1. Functionality: The platform must provide all advertised features as per the project documentation.
2. Performance: The platform should meet predefined performance benchmarks, including response times and resource utilization under typical load conditions.
3. Compatibility: The platform must be fully compatible with the existing components of the Hyperledger Identus ecosystem.
4. Documentation Quality: Documentation should be clear, comprehensive, and enable a new user to successfully implement the platform without prior knowledge of the system.
5. User Acceptance Testing: The platform must pass defined user acceptance testing performed by select end-users from the community.
6. Community Feedback: We will provide consistent and timely feedback of progress to the developer community and solicit feedback from the community.

Evidence of milestone completion

• These core components will be found in the Hyperledger Identus Github Repo (https://github.com/hyperledger/identus): 
• Identus Cloud Agent
• Identus Mobile SDKs for KMM (Android) and Swift (iOS)
• Identus Mediator
• Identus Node: Layer 2 Cardano interfaces to manage SSI aspects on the Cardano blockchain
• Identus Cryptographic Library: Cryptographic interfaces used by all Identus components

Duration of milestone: 3 months

M3 final milestone: Delivery of SSI Platform “Feature Complete” to Hyperledger Identus project

Deliverables:

1. Identus Platform Features:
2. Verifiable Data Registry with Cardano integration
3. DID Methods: did:peer, did:prism
4. Verifiable Credentials: Issuance, Verification, and Revocation capabilities
5. Verifiable Credential Formats: Hyperledger Anoncreds, W3C, JSON, JSON-LD, JWT, SD-JWT
6. Credential Exchange Transport Protocols: DIDComm version 2, OIDC4VC / OIDC4VP

Acceptance Criteria: 

1. Functionality: The platform must provide all advertised features as per the project documentation.
2. Performance: The platform should meet predefined performance benchmarks, including response times and resource utilization under typical load conditions.
3. Compatibility: The platform must be fully compatible with the existing components of the Hyperledger Identus ecosystem.
4. Security: The platform must pass a comprehensive security audit, addressing all known vulnerabilities and complying with current best practices in SSI security.
5. Documentation Quality: Documentation should be clear, comprehensive, and enable a new user to successfully implement the platform without prior knowledge of the system.
6. User Acceptance Testing: The platform must pass defined user acceptance testing performed by select end-users from the community.
7. Community Feedback: We will provide consistent and timely feedback of progress to the developer community and solicit feedback from the community.
8. Present Close out report and video at catalyst town hall

Evidence of milestone completion:

• The following features will be available in the documentation and github repositories
• Verifiable Data Registry with Cardano integration
• DID Methods: did:peer, did:prism
• Verifiable Credentials: Issuance, Verification, and Revocation capabilities
• Verifiable Credential Formats: Hyperledger Anoncreds, W3C, JSON, JSON-LD, JWT, SD-JWT
• Credential Exchange Transport Protocols: DIDComm version 2, OIDC4VC / OIDC4VP
• Project Close Out Report and Video (2-5 mins)

Duration of milestone: 6 months

[RESOURCES] Who is in the project team and what are their roles?

IOG Atala Team Leadership:

David Harding

David is the General Manager of the Atala business unit of IOG. He brings industry recognition as a leading expert in SaaS and scalable cloud computing, digital identity, multi-modal biometrics, FinTech, healthcare, privacy, and enterprise cybersecurity.

Over the years David has held C & SVP level positions in international public and private companies in several different industries including digital media and entertainment, electronic manufacturing and distribution, digital identity, and cyber security. He’s created and managed offices and teams across the globe including the United States, Europe, Canada, Latin America, India, and Asia. He has spent the past 18 years as a leader and executive in SaaS platform, mobile, digital identity, and multi-modal biometrics.

As SVP of Platform Engineering for CLEAR®, he was tasked with refactoring their digital identity and biometrics platforms to scale from a few million users to hundreds of millions in support of their airport security, healthcare, and FinTech business units.

As CTO & SVP of ImageWare Systems Inc.®, David led the delivery of digital identity and biometric authentication solutions for airport security, law enforcement, border control, enterprise, and much more with hundreds of millions of identities under management using multiple types of biometrics including fingerprint, iris, face, DNA, and more. He also successfully delivered several biometric smart card solutions including the HSPD-12/PIV program for the US Veterans Administration, the Canadian TSA (CATSA) biometric security and access card, as well as biometric enabled ID cards for several governments (U.S. Australia, Canada, Mexico) and major corporations (AT&T, IBM, Delta Airlines, UPS, and more).

As an executive and business leader, David has worked with boards and the C-Suite to lead companies, raised millions (USD) in public and private equity, delivered impactful products and services, and increased shareholder value. As an inventor and innovator, David holds multiple patents in digital identity, biometrics, security, and privacy. David joined IOG in 2023 as General Manager of Atala and leads a team of approximately 30 dedicated digital identity developers and product experts.

https://www.linkedin.com/in/daveh003/

Matt Klepp

Matt is the Chief Technical Officer of the Atala business unit of IOG. Matt’s extensive industry and software development experience includes a successful career at ImageWare Systems where he was the Director of Engineering - Applications. Recently, Matt was the Director of Software Development and acting CTO at XWell, a New York based, publicly traded healthcare company where he was responsible for multiple engineering squads and products. Matt has over a decade of experience in digital identity, SSI, and biometrics in markets including healthcare, fintech, airport security, enterprise, and more. He's successfully managed and delivered multiple projects and delivered several products and SaaS-based services. Matt joined IOG in 2024 as Chief Technical Officer of Atala and leads a team of approximately 20 dedicated developers and digital identity experts.

https://www.linkedin.com/in/matt-klepp/

John Mattson

John is the Vice President of Product of the Atala business unit of IOG. John has over 25 years of experience in marketing and product management in the Networking, SaaS, Cloud and Blockchain/Web3 spaces. He has been instrumental in the ideation, development and launch of several successful products at Cisco and Oracle NetSuite, among others. He was part of a small team at Cisco and Broadcom that played a significant role in the creation and mass adoption of the Cable Industry's high-speed broadband service. He formally entered the Web3 space in 2021 with the goal of helping to create a fairer, safer, more transparent and fully decentralized version of the internet that works for the benefit of everyone. John joined IOG in 2022 as Director of Product Management and leader of the Product Management chapter, working across all of IOG’s disparate technologies and business units. He was drawn to and eventually joined the Atala team as Vice President of Product in 2024, and in that capacity he leads a small but powerful team of digital identity product experts and evangelists.

https://www.linkedin.com/in/jomattson/

The Core Development team contributing to Hyperledger Identus is listed here.

Uros Mrvic(Scrum Master)

Project manager with a software engineering background. Worked across different sectors and companies from financial, social networks, media, and international design, construction and engineering company.

Degree in Information and Communication Technologies and postgraduate in E-business, Belgrade University.

Based in Belgrade, Serbia and hometown in northern Montenegro.

He likes nature and outdoor sports, in his free time he prefers to go scuba and free diving, speleology and hiking.

https://www.linkedin.com/in/urosmrvic/

Anushka Soma-Patel (Product Manager Customer Development)

Over 20 years in IT and Lean, consolidated with her MBA and experience in various industries, have empowered Anushka to explore blockchain with an open mind and much curiosity since 2018. Her roles as the Co-Chair of the South African Financial Blockchain Consortium Identity Working Group, guest lecturer for blockchain at The University of Stellenbosch Business School, the University of Cape Town Fintech Program, Lead writer for the African Union Blockchain report, and speaker at blockchain conferences as well as being an advisory working group member of the IAMZA project qualify her to collaborate both locally and abroad to move the dial on digital identity in South Africa and the World.

https://www.linkedin.com/in/anushka-soma-patel/

Fayyaadh Adams (Community Manager)

Fayyaadh Adams has been in the Blockchain space since 2018 with a keen interest in Self-Sovereign Identity. Before joining IOG in 2022, Fayyaadh worked in the financial services industry, where he spent time in Business Operations, Cyber Security, and Marketing, building out MVPs for Blockchain based identity solutions. He is passionate about community outreach programs and considers himself a catalyst for change.

https://www.linkedin.com/in/fayyaadh-a-63415b234/

Esteban Garcia (Product Owner)

Esteban is an IT professional with 15+ years of experience as a technical consultant for various corporate clients. He has performed different roles, including solution architect, developer, QA engineer, and PO. Esteban has worked on multiple projects related to search applications, SAP implementation, and, most recently, blockchain and decentralized identity technology. He holds a bachelor's degree in computer science and a specialization in data science from the Costa Rica Institute of Technology. Esteban is also the co-founder of RootsId, an SSI (Self-Sovereign Identity) consultancy group focused on developing the decentralized identity ecosystem for the Cardano community.

https://www.linkedin.com/in/esteban-garcia-cr/

Lohan Spies (Product Manager)

Lohan has deep experience with Decentralized Identity (SSI) and the deployment of this emerging technology in the African context and other low resource environments including implementations using SMS. He was one of the earliest entrepreneurs in Africa building solutions using the Trust over IP stack , on the world's first-ever public utility for SSI, the Sovrin Main Net. As a serial entrepreneur and self-sovereign identity thought leader, he continues to find motivation in building start-ups that leverage exponential technology and decentralized trust networks with the vision of achieving the identity for all. He is an ex-officio Sovrin Foundation Board member and trustee, chair of the Sovrin Steward Council, and actively involved in various initiatives to further the adoption of self-sovereign identity in South Africa and Africa such as South African Financial Blockchain Consortium (SAFBC), South African National Blockchain Alliance (SANBA), World Economic Forum Digital Identity Coalition, Bankserv Digital Identity project, decentralized Identity Foundation, Trust over IP Foundation and a frequent speaker on self-sovereign identity.

https://www.linkedin.com/in/lohanspies/

Mark Griffin (Product Manager)

Mark has worked for two decades across financial, telecoms, and fintech sectors delivering complex systems. Mark's vision is to simplify the complexity of SSI interactions in a connected world. He visualized this to be delivered by creating best in class UX processes that will empower developers to build user-friendly applications in the SSI space. He Joined IOHK in 2019.

https://www.linkedin.com/in/mark-griffin-9842514/

Bernard Sibanda (Community Member & Evangelist + Director of WIMS)

Women In Move Solutions (WIMS) is a world-class women empowerment project. WIMT is an ERC20 Token powering WIMS blockchain ecosystem crafted to eliminate global gender imbalance in ICT

[BUDGET & COSTS] Please provide a cost breakdown of the proposed work and resources

The budget requested will be used primarily to cover the costs of people resources required to deliver the project scope, in conjunction with additional funding from IOG.

M1: Delivery of Documentation & Associated Code to Hyperledger Identus: ₳40,000

M2: Delivery of SSI Platform “Core Components” to Hyperledger Identus code base: ₳60,000

M3 and final milestone: Delivery of SSI Platform “Feature Complete” to Hyperledger Identus code base: ₳100,000

Total ₳200,000

[VALUE FOR MONEY] How does the cost of the project represent value for money for the Cardano ecosystem?

This research brings to Hyperledger Identus, Atala and Cardano ecosystems:

• A fully featured, standards-based, industry leading open source Self Sovereign Identity SDK framework that is ready for development and/or deployment by users and developers