The creation of an ObjectID involves submitting a transaction to the IOTA blockchain, which is signed by the user using their private key.

This transaction triggers a function within the ObjectID smart contract, which requires the following data:

• The decentralized identity (DID) of the ObjectID creator
• The ObjectID ControllerCap, which certifies which identity and which internet domain are controlled by the signer
• A web page URL that describes the characteristics of the physical object identified by the ObjectID
• Additional metadata depending on the type of the object

The smart contract will only generate the ObjectID if the following conditions are met:

• The transaction is valid, meaning the signature matches the public key derived from the sender’s blockchain identity (the private key, derived by the seed).
• The transaction includes a valid ObjectID ControllerCap object
• The domain specified in the ObjectID ControllerCap matches the domain of the descriptive product web page

It is important to note that the ObjectID ControllerCap can only be submitted to the smart contract if it is stored at an address controlled by the user—that is, an address derived from the same key pair used to sign the transaction.

In short, only users who control a Distributed Identity linked to a specific internet domain can create an ObjectID that references a web page hosted on that domain.