How DIDs and Verifiable Credentials Are Used in ObjectID

Knowledge Base

How DIDs and Verifiable Credentials Are Used in ObjectID

ObjectID uses Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) as the foundation of its trust, authenticity, and interoperability model. These technologies make it possible to identify entities, prove ownership, and verify authenticity—all without relying on centralized authorities.

This article explains how ObjectID implements DIDs and VCs to secure digital objects and link them to verified issuers.


What Is a DID in ObjectID?

In ObjectID, a DID uniquely identifies the entity that creates or owns a digital object. This can be:

  • A company (e.g., manufacturer, brand owner)
  • A person (e.g., artist, author)
  • A system (e.g., IoT device or certification engine)

When an object is published on the platform, the issuer signs it using their DID’s private key. This cryptographic proof ensures the object’s origin is authentic and traceable.


DID Types Supported

ObjectID currently supports:

  • did:iota – Native DID method for use within the IOTA ecosystem

Each DID is associated with a DID Document that contains:

  • Public keys
  • Service endpoints (optional)
  • Verification methods

What Is a Verifiable Credential in ObjectID?

A Verifiable Credential in ObjectID is used to represent structured claims about digital objects. For example:

  • “This product was manufactured by Company X”
  • “This work is an original piece by Artist Y”
  • “This document has been certified by Authority Z”

VCs are signed using the issuer’s DID, and they are:

  • Tamper-proof
  • Verifiable by third parties
  • Publicly accessible, if desired

How They’re Used Together

Here’s a simplified flow of how ObjectID uses DIDs and VCs:

  1. Issuer Setup: An entity create a DID providing a seed to ObjectID.
  2. A DID Document is created and published on IOTA distributed ledger.
  3. A service endpoint is added to the DID Document, linking the DID to a user provided domain name.
  4. a did-configuration.json file inclusing the signed Verifiable Credential is provided to the user. This file must be accessible by the domain provided.
  5. Verification: Anyone can query the object and verify the VC:
    • Is the signature valid?
    • Is the issuer’s DID linked to a domain (via DLVC)?
    • Is the object data unchanged?

Domain Verification (DLVC)

To reinforce trust, ObjectID supports Domain Linked Verifiable Credentials (DLVC). This means:

  • A domain (e.g., brand.com) publishes a signed credential proving ownership of the DID
  • Users and applications can verify that did:web:brand.com is really controlled by the website https://brand.com

Why This Matters

By using DIDs and VCs, ObjectID ensures that:

  • Identities cannot be forged or impersonated
  • Every digital object has a traceable, verifiable history
  • Trust is based on open cryptographic standards—not centralized platforms

This makes ObjectID ideal for anti-counterfeiting, supply chain traceability, authenticity verification, and certification systems.

Terms & Conditions Privacy - ObjectID is a service provided by SDV Consulting SRLS, VAT: IT 13168650961
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

 

Privacy Policy

Effective Date: 1/6/2025

This Privacy Policy describes how personal data is collected, used, and protected when you visit and interact with https://objectid.io (the “Website”), in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).


1. Data Controller

The Data Controller is:

SDV Consulting srls
Via della Conciliazione 13, Arcore, 2082, Italy
VAT: IT13168650961
Email: info@objectid.io


2. Legal Basis for Processing

Personal data is processed based on one or more of the following legal bases under Article 6 of the GDPR:

  • The data subject has given consent (Art. 6(1)(a))

  • Processing is necessary for the performance of a contract (Art. 6(1)(b))

  • Processing is necessary for compliance with a legal obligation (Art. 6(1)(c))

  • Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1)(f))


3. Comments

When visitors leave comments on the site, we collect the data entered in the comments form, along with the visitor’s IP address and browser user agent string to help detect and prevent spam.

An anonymized hash of your email address may be sent to the Gravatar service to check if you are using it. The Gravatar privacy policy is available at: https://automattic.com/privacy. After approval, your profile picture may be visible publicly alongside your comment.


4. Media

If you upload images to the site, please ensure they do not contain embedded location data (EXIF GPS). Other visitors may download and extract location data from images.


5. Cookies

We use cookies to enhance your user experience. You may opt to save your name, email, and website when posting comments to simplify future interactions. Login-related and preference cookies are also used. You can manage cookies via your browser settings.

Cookies used by this site do not contain personally identifiable information unless you voluntarily provide it.


6. Embedded Content

Articles on this site may include embedded content (e.g., videos, articles, etc.) from third-party platforms. Such embedded content behaves exactly as if you had visited the originating site. These sites may collect data about you, use cookies, and monitor your interaction, especially if you are logged in to those platforms.


7. Marketing Campaigns

ObjectID may run digital marketing campaigns via platforms such as LinkedIn or similar providers. If you respond to these campaigns by filling out a form (e.g., requesting a demo or information), your personal data may be processed solely for the stated purposes and only by SDV Consulting srls.

  • No unsolicited marketing will be sent without your prior consent.

  • You may withdraw your consent at any time.

  • Marketing platforms used may process data under their own privacy policies.

We do not sell or disclose your data to third parties for commercial purposes.


8. Data Sharing

We do not share your personal data with third parties unless:

  • Required by law or legal process

  • Necessary for the provision of specific services you request

  • You have given explicit consent

If you request a password reset, your IP address may be included in the reset email for security verification.


9. Data Retention

  • Comments and associated metadata are retained indefinitely.

  • For registered users (if any), we retain user profile data until the account is deleted or the user requests erasure.

  • Data collected through contact forms or marketing campaigns is retained for a limited period and only for the intended purpose.


10. Your Rights Under GDPR

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability (where applicable)

  • Withdraw consent at any time, where processing is based on consent

  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at info@objectid.io.


11. International Data Transfers

We do not transfer your data outside the European Economic Area unless adequate safeguards are in place in compliance with Chapter V of the GDPR.


12. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration.


13. Automated Decision-Making

We do not use your data for automated decision-making or profiling without your explicit consent.


14. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will always be available on this page with the “Effective Date” above.

 

Save settings
Cookies settings