China RealDID: Verifiable Credentials Anchored in Legal Identity

Research from arXiv introduces China RealDID, a three-layer architecture designed to address the challenges of legally anchoring verifiable credentials (VCs) and decentralized identifiers (DIDs). The system combines a centralized legal identity (CTID) with a decentralized anchor on an open permissioned blockchain (RealDID) and VCs using SD-JWT for selective disclosure. This approach aims to provide trusted identity roots for VCs while mitigating the privacy and centralization concerns associated with traditional state identity systems.

Why it matters

This development is strategically important as it addresses a fundamental challenge in digital identity: reconciling the need for robust legal identity verification with principles of decentralization and privacy. Successfully implementing such a system could significantly impact the reliability and trustworthiness of online interactions, financial transactions, and access to services, fostering greater adoption of verifiable credential technologies.

Key insights

• Verifiable Credentials (VCs) and Decentralized Identifiers (DIDs) currently lack robust legal anchoring, leading to difficulties in distinguishing genuine identities from fabricated ones.
• Existing state identity systems, while providing biometric-grounded verification, present three primary issues: verifiers collecting excessive Personally Identifiable Information (PII), concentration of infrastructure on a single API, and state observation of all transactions.
• China RealDID proposes a three-layer architecture: CTID (centralized legal identity), RealDID (decentralized anchor on an open permissioned blockchain), and VCs with SD-JWT-based selective disclosure.
• The proposed architecture aims to overcome the limitations of both pure VC/DID systems and traditional state identity systems by offering a verifiable yet privacy-preserving identity solution.
• The system's design has been evaluated against five adversary classes and six security goals, indicating a focus on security and resilience.
• The core problem addressed is the need for trusted identity roots for VCs without imposing the full privacy and centralization costs of current state identity systems.

Source

arXiv — Computers and Society — https://arxiv.org/abs/2608.07846