Hyperledger Indy

Hyperledger Indy
Name	Hyperledger Indy
Developer	Linux Foundation / Hyperledger Project
Released	2017
Programming language	Python (programming language), Rust (programming language)
License	Apache License

Hyperledger Indy Hyperledger Indy is a distributed ledger framework designed for decentralized digital identity and verifiable credentials, originating within the Linux Foundation's Hyperledger Project. It focuses on interoperable identity primitives for self-sovereign identity use cases involving actors such as governments, corporations, and non-governmental organizations like United Nations agencies and financial institutions including JPMorgan Chase or Deutsche Bank. Indy intersects with standards bodies such as the World Wide Web Consortium and initiatives like the Decentralized Identity Foundation and has been used in pilots alongside platforms from Microsoft and IBM.

Overview

Indy emerged to provide privacy-preserving identity infrastructure enabling interactions among parties comparable to models from DIF and standards set by the Internet Engineering Task Force. It emphasizes cryptographic primitives including pairwise-pseudonymous keys, zero-knowledge proofs influenced by work from Zcash researchers and privacy designs related to Tor (anonymity network). Projects and consortia such as Sovrin Foundation, Evernym, Bloom (company), uPort and Civic (company) have intersected with Indy in deployment or research contexts. Academic groups at MIT, Stanford University, University of Cambridge and University of Washington examined Indy in studies alongside protocols like OAuth and OpenID Connect.

Architecture and Components

The architecture separates on-ledger and off-ledger components similar to architectures used by Hyperledger Fabric and Sawtooth. Core components include a distributed consensus layer implemented in Plenum (protocol) and node software often written in Python (programming language) and Rust (programming language), and SDKs for platforms such as Android (operating system), iOS, Node.js and Java (programming language). Indy uses schemas and credential definitions registered on-ledger analogous to registries managed by entities like Deloitte, Accenture, and PwC in enterprise pilots. The ledger holds public DIDs and revocation registries while wallets and agents run off-ledger similar to designs from Mozilla's identity work and projects at W3C.

Identity and Credential Model

Indy implements a decentralized identifier model with DIDs akin to specifications from the World Wide Web Consortium. It supports verifiable credentials using cryptographic accumulators and zero-knowledge proof constructions inspired by protocols from Camenisch–Lysyanskaya research and implementations by teams at Zcash and Iden3. Issuers, holders, and verifiers in Indy deployments mirror roles in pilot programs by European Commission initiatives and identity systems proposed in reports by McKinsey & Company and Gartner. Use cases explored include digital driver’s licenses with National Highway Traffic Safety Administration interfaces, healthcare credentials interoperable with HL7 standards, and academic diplomas linked to registries like National Student Clearinghouse.

Consensus and Security

Consensus in Indy typically uses Byzantine fault tolerant algorithms related to protocols studied by researchers at Princeton University and ETH Zurich; implementations draw on lessons from Practical Byzantine Fault Tolerance literature and systems such as Tendermint. Security design considers threat models examined by teams at Carnegie Mellon University and Oxford University and threat mitigation strategies similar to those advocated by ENISA and NIST. Revocation mechanisms leverage cryptographic accumulators and revocation registries similar to designs in Verifiable Credentials Working Group outputs and auditing approaches used in SOX compliance programs for enterprise identity management.

Governance and Networks

Indy networks have been operated by organizations including the Sovrin Foundation, consortia of banks like R3, educational consortia such as Erasmus+ projects, and government pilots in jurisdictions like Estonia and Singapore. Governance models examined draw on multistakeholder frameworks used by ICANN and policy guidance from OECD on digital identity. Network governance covers permissioning, trust anchors, and steward roles, reflecting governance patterns seen in projects run by Linux Foundation and industry groups such as GSMA and IEEE.

Implementations and Use Cases

Implementations of Indy technology have been undertaken by companies including Evernym, Sovrin Foundation, Trinsic, Digital Bazaar, and research labs at MIT Media Lab. Use cases span healthcare credentialing with partners like Centers for Disease Control and Prevention, supply chain attestations involving Maersk, university credential verification with institutions like Harvard University and University of Melbourne, and employee identity programs in enterprises such as Siemens and Unilever. Interoperability pilots paired Indy-based agents with wallets and frameworks from Microsoft's Ion project, Google identity research, and Apple-related enterprise identity initiatives.

Development and Community

Development occurs within repositories overseen by the Hyperledger Project under the Linux Foundation umbrella, with contributors from firms like Evernym, IBM, Accenture and academic contributors from University of Toronto and University of Edinburgh. The community engages at conferences such as Consensus (conference), RSA Conference, Identity Week, and workshops hosted by W3C. Funding and support have involved grants and partnerships with organizations including the Knight Foundation and Bill & Melinda Gates Foundation.

Category:Distributed ledger technologies