The following sections are an engineering focused API guide to Indicio Proven.

The Indicio proven API is secured using an API key, which must be included in the request header as x-api-key.

To add the API key, click the "Authorize" button and enter your API key.

Indicio Proven can be deployed on premise, in cloud, or as SaaS. Server APIs to control the agent to connect, issue credentials, verify credentials, or securely message.

Indicio Proven eliminates the need for direct integrations or third-party data management, streamlining data sharing, and ensuring compliance with data protection regulations. Credential schemas are fully configurable, supporting the issuance of a wide range of data types. The software can be deployed on-premises, in a private cloud, or with any major cloud provider.

Hosting options

Proven is offered as either a fully-hosted solution for quick setup, eliminating the need for complex configuration and maintenance or can be self-hosted.

• Proven Enterprise (SaaS): Indicio Proven Enterprise offers efficient integration of scalable and secure decentralized identity management into existing systems and workflows. It allows organizations to easily issue, verify, and manage verifiable credentials while maintaining privacy and compliance with global standards. With multi-tenant support and flexible configuration options, it provides a comprehensive platform for businesses to adopt and extend decentralized identity solutions.

• Proven Core (API): Indicio Proven Core delivers organizations the ability to self-host and manage decentralized identity solutions on their own infrastructure. It offers a set of robust APIs that allow businesses to issue, verify, and manage verifiable credentials while maintaining control over security, data, and compliance. This version is ideal for organizations that require customization, on-premise deployment, or integration with existing internal systems without relying on a cloud-based service.

Endpoints for sending and retrieving basic messages

Endpoints for managing contexts

Endpoints for email verification

Authenticate with base API key

Endpoints for managing Decentralized Identifiers (DIDs)

Endpoints for fetching governance files

Endpoints for creating and managing invitations

Indicio Proven is the world’s most advanced platform for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement — a platform that can work with your existing systems, and it is configurable in days rather than months.

And it’s easy to scale from simple use cases to managing national and global identity verification.

Verifiable credentials are a powerful new way to authenticate identity and data. As Gartner Research notes in its 2024 Market Report for Decentralized Identity, they represent “magnitudes of improvement in terms of efficiency, cost and assurance.”

Indicio Proven allows you to build in a way that works best for you, with flexible deployment options, including on premises, in Amazon Web Services, Azure, Google Marketplace, Oracle, or a provider of your choice.

Our customers are using Indicio Proven to create simple solutions to complex information problems, replacing manual processes, reducing error and friction, and developing markets through portable trust.

The Indicio DemoNet uses the open-source technology of Hyperledger Indy, Aries and Ursa to provide a stable network platform for demonstrating your decentralized identity solution.

Combined with access to our team of experienced engineers, you’ll have the hands-on support you need to showcase your innovation.

It’s easy to start using the Indicio DemoNet, just follow these steps:

Create a public DID (decentralized identifier). This can be done with the , with the , or by .

After you create your public DID complete this form. Select “DemoNet” from the dropdown to get your DID written to the Network.

Digital identity for citizen services, reducing fraud.

• Replace your passwords with credentials Unlike passwords, credentials cannot be lost, stolen, or copied, and don’t require your employees to remember them.

• Access management Both physical and digital access management can be done through credentials for enhanced security — and unlike access cards, credentials cannot be lost, stolen, or copied.

• Manage social and welfare programs By issuing each citizen a credential you can reduce fraud in aid / benefits applications.

By using verifiable credentials, Indicio is able to issue credentials to employee mobile devices that allow them to cryptographically prove their identity for access management to both physical buildings and the digital files and programs employees need to work.

• Increase efficiency, eliminate the need for password resets, and prevent employees from being locked out due to user error.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Easily revocable – No requirement to change access rights, passwords, or collect keys when an employee leaves.

Please complete the form below and within 24 hours you will be provided a unique link to gain access to Indicio's API documentation and guided tutorials.

In the context of decentralized identity and verifiable credentials, an "agent" refers to the software that acts on behalf of a person or organization or device to manage the issuance, holding, and verifying of digital verifiable credentials in secure and trusted interactions.

By using verifiable credentials, Indicio is able to issue secure decentralized digital identities to your users that allow them to cryptographically prove their identity for more streamlined border crossing.

• Bring more efficiency to border crossing with cryptographically verified credentials that can be shared with one tap — instead of paper documents that are more easily lost.

• Fight fraud with tamper-proof credentials that are biometrically tied to an individual and, unlike paper documents, cannot be lost, copied, or stolen.

• Remove your reliance on centralized databases for personal information and reduce liability and storage costs.

The Indicio TestNet is a free to use community resource built on the open-source technology of Hyperledger , and . It provides a neutral, independent, and reliable decentralized network for the exchange of verifiable credentials.

Combine the TestNet with optional support from our team of experienced engineers, and you’ll have everything you need to start building on a network you can depend on!

To begin using the TestNet, follow these steps:

1. Create a public DID (decentralized identifier). This can be done with the , with the , an app of your choice, or by .

2. Then, to get the DID written to the TestNet.

Remove reliance on centralized databases

The ability to hold personal identity or other data in this decentralized way removes the need for centralized databases of customer personal data or login information, reducing liability and the risk of data breaches.

• Share data and identity with trusted connections.

• Collect credentials to store locally and share by consent.

• Secure, peer-to-peer messaging.

Please complete the form below and within 24 hours you will be provided a unique link to gain access to Indicio's Guided Tutorials.

Schemas define credential attribute names and attribute types. Indicio Proven uses standards based credential schemas, such as ICAO-DTC, mDL, etc. or custom schemas. This acts as a sort of blueprint of what the verified credential will contain. The scheme outlines the basics of what data is required to truely identify the person being presented via VC.

For example: the scheme will require Name, DOB, Issue date of the ID used to make the credential

Any information that can be conveyed through a credential schema is now verifiable, along with the source of that information. Trust lists for issuers and complex information flows and approvals are managed by machine-readable governance files directly sent to the agent software of each participant in the credential ecosystem.

You can learn more about credential schemes and see examples on the

Indicio Proven is built to make decentralized identity simple, secure, and practical. Whether you're a business leader, developer, or solution architect, our getting started resources give you the tools to move fast and build with confidence.

This software enables mobile devices to securely and reliably connect with credential issuers and verifiers using DIDComm. This component is not required for OID4VC-only interactions. Since mobile devices lack fixed IP addresses, our Cloud Scale Mediator Agent ensures seamless management of tens of thousands of simultaneous active users.

Keys are stored following industry best practices, and all messages are encrypted both in transit and at rest. The mediator cannot access the contents of messages exchanged between clients.

It automatically scales with traffic demand and has been rigorously tested to handle exceptionally high volumes.

Indicio Proven includes a cloud-scale mediator to support customer application at scale.

Indicio takes great pride to ensure that all areas of Proven are up to date with global standards. Here you can see what these standards are that our product includes.

Endpoints for issuing and retrieving credentials

Endpoints for managing connections

Easily control access to important information and areas with verifiable credentials

By using verifiable credentials, Indicio is able to issue credentials to user’s mobile devices that allow them to cryptographically prove their identity for access management to both physical buildings and the digital files and programs, such as those employees require to work.

Indicio Proven Auth Overview

Proven Auth is an OpenID Connect identity provider, similar to Google, Azure Active Directory, Auth0, Keycloak, etc. What makes Proven Auth unique is that rather than relying on a centralized database of users, Proven Auth uses digital credentials to authenticate its users. These credentials are signed by any Issuer that Proven Auth has been configured to trust. In short, Proven Auth is a credential verifier that can speak OpenID Connect to act as an Identity Provider.

What is OpenID Connect?

OpenID Connect (OIDC) is an identity layer built on top of the OAuth 2.0 protocol. It enables authentication in a standardized way and facilitates secure interaction between different systems. OIDC is widely used for Single Sign-On (SSO) solutions, where users can authenticate once and access multiple systems seamlessly.

Chances are you’ve used OpenID Connect before, whether you realized it or not. When you see a button on the login form of a website that says “Login with XYZ,” there’s a good chance that login is accomplished using the OpenID Connect protocol.

How does OIDC Work?

OpenID Connect works by letting one system – called the Identity Provider (IdP) – handle authentication for other systems that trust it. These other systems are referred to as the Relying Party (RP). Here’s what happens in practice: When you try to log into an application, instead of asking for your username and password directly, the app sends you to the Identity Provider. The IdP is responsible for verifying your identity, which might involve entering a password, using a security code, or confirming via an app.

Once the IdP confirms who you are, it sends a token back to the application. This token contains information about you, such as your name or email address, and proves to the application that you’ve been authenticated. The application checks the token, and if it’s valid, it lets you in.

The advantage is that the IdP can handle authentication for multiple applications. After logging in once, you won’t need to log in again as long as all the applications trust the same IdP. This is what makes Single Sign-On possible.

Proven Auth acts as a bridge between “traditional” web services and Digital Credential enabled systems. To traditional web services, Proven Auth is just another OpenID Connect Identity Provider, making it trivial to integrate into an existing website through the plethora of OIDC plugins and libraries available for virtually every web framework.

When the RP asks Proven Auth to authenticate a user through standard OIDC requests, Proven Auth creates a Presentation Request and makes it available to the End-User, or in Digital Credential terminology, the Wallet or Credential Holder. The Holder then presents the requested credential to Proven Auth where the credential is verified and then transformed into an ID Token to be returned to the RP.

• Increase efficiency, eliminate the need for password resets, and prevent users from being locked out due to user error.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Easily revocable – No requirement to change access rights, passwords, or collect keys when an employee leaves.

• Protect yourself from deepfakes and establish a more secure verification process online before sharing sensitive information.

• All access information is stored securely on the employee's mobile device, removing the need to carry keys, physical ID cards, or remember passwords.

• Know that your personal information is secure because there is no centralized database of logins and passwords.

• Simple, secure, and easy to use interface removes tedious multi-factor authentication.

• Fight impersonation attacks with credentials that can only be presented by the person they are issued to.

Indicio is the leading developer of award-winning decentralized identity solutions for the air transport sector.

For complex information flows where security is critical, Indicio developed and deployed the world’s first Digital Passport Credential based on the International Civil Aviation Organization (ICAO) standards.

Indicio Proven® provides multiple ways to deploy digital identity with biometric authentication for seamless travel and border crossing using verifiable credentials based on ICAO DPC Type 1 specifications.

This “government-grade” digital identity enables passengers to convert their passports into authenticated digital credentials that can be used for pre-authorization for travel and seamless border crossing. Our DPC technology is being implemented by airlines and governments around the world, and is being extended to include immigration visas, airport lounge access, hotel check-in, and customer loyalty programs.

Indicio is the leading innovator in decentralized digital identity for travel.

• World’s first successful implementation of ICAO’s DPC Type 1 specifications in a verifiable credential.

• World’s first successful implementation of IATA’s One ID in a digital wallet for travel.

• World’s first successful combination of a DPC Type 1 and OneID for international travel.

Seamless authentication with government-grade digital identity including authenticated biometrics enables digital transformation across the travel ribbon to remove friction, error from manual data entry, and delay from manual security touchpoints — all without airlines and airports having to securely manage their passengers’ personal data.

With an Indicio Digital Passport, travelers can fully consent to share their biographic and biometric information in advance of arrival, enabling pre-authorized travel and seamless border crossing.

Airports can streamline check-in, baggage management, access to lounges, and boarding because passengers can hold and share authenticated biometric and biographic data from a verifiable digital passport. This means reduced congestion and anxiety for travelers, at the same time as Increase airport capacity without increasing resources.

Airlines can know that every traveler has been precleared to board international flights, reducing the risk of fines for inadmissible travelers. Airlines can always and instantly know their customers when they log in to airline websites and use loyalty programs — and customers can be sure they are logging into their airlines.

Often, less than 3 seconds, offering potential improvement of over 80% compared to agent-to-traveler experience, and up to 50% improvement compared to many e-gates*

*Border admission times vary, therefore improvement metrics will vary accordingly.

Easy to implement, can work with any system… … takes just days to implement, a couple of weeks to trial, and when operational it can scale to handle all your needs — with minimal changes needed to your existing infrastructure. Indicio is the global expert in mediation, the key technical process of connecting credential issuance and verification to mobile devices.

Solves the compliance challenges around biometrics and GDPR With Indicio’s Digital Passport, the passenger holds their own biometric data, sharing it with explicit consent. Biometric presentations can be combined and compared with liveness checks to ensure the highest level of authentication, and can be deployed in multiple workflows to counter the risk of generative AI deepfakes.

Comes with a Mobile SDK So you can quickly and easily implement an Indicio Digital Passport and other verifiable credentials into your apps — we’ve compiled all the code you need for Android and IoS.

Easy for travelers to use Crucially, an Indicio Digital Passport is easy for a traveler to create and use as its based on familiar mobile technology.

Use a Digital PassportCredential Scan and transform your passport into a verifiable credential (with liveness and biometric assurance) for check in and border crossing.

• Manage check-in Customers can pre fill out any information needed for their stay, recurring only a quick scan at the front desk to check in at a hotel or potentially just issuing digital room keys without a check in.

• Digital room keys Securely issue and revoke room keys directly to customers, reducing time spent at the front desk.

• Store tickets on a credential You can manage your airport experience through a credential, storing boarding pass info, passport info, and visa details in a way that is easily shareable.

Indicio Proven ® Highlights

• Secure credential issuance and data verification

  • Enterprises, Governments, and organizations of all sizes can use Indicio Proven to issue and verify tamper-proof credentials in a secure and privacy-preserving way.

• Standards-driven interoperability

  • Proven provides unmatched interoperability by supporting multiple standards, including AnonCreds, W3C Verifiable Credentials, DIDComm, and emerging standards like SD-JWT and OpenID for Verifiable Credentials (OID4VC).

• Global standards

  • Organizations can design credentials tailored to their needs, leveraging the specific strengths of various formats. Proven complies with global data protection standards including eIDAS, EUDI, and industry specific technology standards. Including W3C Verifiable Credentials, Open Badges 3.0 from 1EdTech, and IATA One ID and ICAO DTC for travel.

• Customizable deployment

  • Proven is designed for flexibility, offering both a SaaS platform model or allowing deployment via APIs in various environments, including on-premise, cloud-based, or hybrid setups.

• Plug-and-play integration

  • Indicio Proven works seamlessly with the Indicio Network and other decentralized identity ecosystems. It offers pre-built integrations for developers to easily add decentralized identity to their applications. With easy integration into your existing technologies, Indicio Proven can be configured and operational in days, not months.

• Privacy by design

  • Indicio Proven ensures that data and identity information are shared exclusively between trusted Issuers, Holders, and Verifiers within your ecosystem. Unlike other solutions claiming to use verifiable credentials, Indicio never collects, holds, manages, or accesses your data - delivering true decentralization.

• Secure credential management

  • Indicio Proven enables full lifecycle management of credentials, including issuance, revocation, and expiration. Organizations can define policies for credential management, ensuring compliance with industry standards and internal requirements for credential authenticity and validity.

• Customizable governance

  • Users can configure and manage their own trust frameworks, including selecting roots of trust, defining credential schemas, and customizing credential verification logic. This flexibility supports a wide range of use cases, such as identity verification, secure access management, and compliance monitoring.

• Multi-tenant support

  • Indicio’s infrastructure is built for global scale and to handle high volumes of credential issuance and verification–fast. A single Indicio Proven instance can support multiple clients (tenants) in a single environment. Each organization can then securely manage its own decentralized identity (DID) configurations, verifiable credentials, and trust frameworks without interfering with other tenants, ensuring privacy and data isolation.

• Customization and configuration

  • Indicio Proven can be configured by each customer to match specific business needs, such as selecting roots of trust, defining credential schemas, and managing the lifecycle of digital identities and verifiable credentials. This flexibility enables various use cases, from KYC processes to digital access management.

• APIs for external integration

  • Easily integrate Proven into your existing systems with secure, standards-based APIs for credential issuance and verification.

• UI for issuance and verification

  • Issue and verify verifiable credentials through a simple, user-friendly interface—no technical setup required.

• Customer chat using basic message

  • Communicate directly with your customers through secure, in-app messaging powered by decentralized identity.

• Award-Winning technology

  • Indicio Proven stands as the most advanced platform for decentralized identity powered by verifiable credentials and has been recognized by Gartner, KuppingerCole, and Constellation Research, among others, for our customer deployments

Open ID for Verifiable Credentials (OID4VC) Protocol that allows claims to be presented in the form of a verifiable credential on top of Oauth 2.0. OID4VC is a popular format in Europe that we provide to customers who need the capacity to interact with these systems. However, we note that this format is limited and does not provide the capacities that provide important benefits to financial service use cases due to the absence of secure, bidirectional communication (mutual authentication, notification and confirmation, security). Issuing and verifying credentials (such as SD-JWTs) via OID4VC in addition to using DIDComm broadens compatibility and increases flexibility when working with partners.

The OpenID communication protocols, consisting of OpenID4VCI (Verifiable Credential Issuance) and OpenID4VP (Verifiable Credential Presentation), are required by the European Digital Identity Architecture and Reference Framework and are included in the EUDI specification.

These protocols enable verifiable digital identity credentials to be issued to a digital wallet and then be presented from that digital wallet to a relying party for verification. Through these mechanisms, European citizens can use digital identity credentials to access government services, prove their age, hold mobile driver’s licenses, and cross borders.

In addition to our ongoing support for selective disclosure in AnonCreds, Indicio now also supports the new SD JWT (Selective Disclosure JWT) credential format. Selective disclosure is a feature that allows credential holders to present specific information in a credential for verification (instead of having to disclose all the information in the credential at once). This feature is key to meeting the European Union’s requirements for data minimization and privacy in eIDAS.

Indicio proven includes all of these trust establishment options!

Indicio is compliant with all of the following standards & legislation!

Secure sharing of health credentials and data privacy compliance.

By using verifiable credentials, Indicio is able to issue credentials to medical works and patient mobile devices that allow them to cryptographically prove their identity for access to healthcare systems, as well as securely store and share their medical history.

Healthcare provider benefits

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce databreachs by removing reliance on centralized databases for sensitive information.

• Easily manage access, assign roles, and simplify data sharing across your organization.

• Provide a better experience for your patients with faster administrative tasks like document collection and their health records stored securely on their mobile device.

• Protect your systems and staff from deepfakes and fraud with mutual authentication, establishing two way verification process online before sharing sensitive information.

• Access healthcare benefits faster with less time spent on identity and document verification and more time spent addressing your needs.

• Easily share your medical records with new doctors, medical insurances, or new providers with one tap.

• Reduce identity theft and impersonation attempts with a secure digital identification that cannot be copied by bad actors.

• Store all of your healthcare records in one place, and eliminate the hassle of tracking down physical documents and paperwork or reaching out to your care provider.

‘Bring your own biometrics’ Secure biometric data against fraud and AI deepfakes with verifiable credentials

Biometric verification without the risk of having to store biometric data

Biometrics were supposed to solve the problem of passwords. But if a password is stolen, it can be reset. If biometrics are stolen or faked using generative AI, they become an existential threat: You can’t reset someone’s face.

With Indicio Proven, biometric data can be bound to a verifiable credential so that verifiers do not have to store the biometric data to authenticate it.

This also protects against generative AI deepfakes.

• Capture a person’s biometrics in a template during identity assurance and issue the template as a verifiable credential.

• The person presents the verifiable credential when they use biometric authentication and the verifier compares the two to make sure they match. The verifying party records validation and discards the template for simple data privacy compliance.

• No centralized biometrics database is required for authentication.

• Authenticity and integrity of biometric details are cryptographically provable.

• Provides a quick, simple, low-cost way to defend against generative AI deepfakes.

• No loss of biometric verification process benefits.

• Consent is architecturally required, making data protection compliance easy.

Bringing your own biometrics reassures public over biometric privacy and security.

Indicio simplifies access to government services and streamlines permits and licensing

Using verifiable credentials, Indicio is able to issue credentials to citizen mobile devices that allow them to cryptographically prove their identity for access to government services, as well as securely store government-issued permits and licenses.

Government benefits

• Increase efficiency by providing a passwordless, one-tap verification to give citizens access to government services.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing reliance on centralized databases for sensitive information.

• Issue and verify tamper-proof citizen documentation, such as permits, licenses, and contracts, in seconds with one scan.

• Protect your systems and citizens from deepfakes with mutual authentication, establishing a two-way online verification process before sharing sensitive information.

• Access government benefits faster and spend less time on document verification and more time addressing your needs.

• Remove the need to remember passwords or provide multiple documents for accessing government services.

• Reduce identity theft and impersonation attempts with a secure digital identification that cannot be copied by bad actors.

• Easily store all your permits and licenses in one place and eliminate the hassle of tracking down physical documents and paperwork.

The Indicio Academy is a structured learning hub that equips teams with the knowledge to confidently use and integrate Indicio Proven into real-world applications. It combines expert instruction with practical exercises to ensure both technical and non-technical users can deploy verifiable credential solutions effectively.

Whether you're new to decentralized identity or ready to scale your credential-based solutions, the Indicio Academy provides the knowledge, tools, and hands-on experience you need to succeed with Indicio Proven.

What you'll learn

Our curriculum is designed to meet you where you are—from first-time implementers to experienced developers.

Modules include:

• Foundations of Decentralized Identity Understand key concepts, standards, and ecosystem roles.

• Using Indicio Proven Learn how to issue, verify, and manage verifiable credentials through Proven’s intuitive UI and APIs.

• Integration and Deployment Explore best practices for integrating Proven into your business processes and digital systems.

• Advanced Topics Dive into technical topics like DIDComm, credential schemas, trust registries, and interoperability.

• IT Leaders and Solution Architects.

• Product Managers and Innovation Teams.

• Developers and Integrators.

• Government and Enterprise Stakeholders.

Ready to learn more? Contact your account manager or email us to enroll.

The technical specification or structure that defines how credential data is encoded, presented, and exchanged. Credential formats ensure that the data within a verifiable credential can be securely issued, shared, and verified across different systems. Key aspects of a credential format include how the data is digitally signed, the cryptographic techniques used, and how privacy-preserving features like selective disclosure or zero-knowledge proofs are implemented.

Indicio provides robust support for a variety of credential formats, enabling organizations to choose the format that best aligns with their use case and interoperability requirements including:

• JSON-LD (Linked Data): A format that integrates with semantic web technologies, allowing credentials to include rich metadata and context for better interoperability.

• SD-JWT (Selective Disclosure JWT): A JWT-based format with added support for selective disclosure, enabling granular control over what information is shared from a credential.

• mDL: Supports proximity based sharing of driver license.

• Open Badges 3.0: Supports educational achievements.

• DTC for digital passports (ICAO DTC Type 1 compliant): A digital travel credential derived from the data inside a user's passport to be easily held and shared before traveling.

• DTA for digital visas: Digital Travel Authorization that is easily digitized and shared before the traveler arrives and goes through customs or security.

• DIF Presentation Exchange: a codified presentation definition format for verifiers to use to articulate proof requirements.

• W3C Verifiable Credential standards compliant: A set of standards developed by the World Wide Web Consortium to enable the issuance, sharing, and verifiaction of digital credentials in a privacy respecting manner.

• AnonCreds: A privacy-preserving format that supports privacy-preserving features such as selective disclosure, predicate proofs, and zero-knowledge proofs, allowing users to share only the necessary information from a credential without revealing the entire dataset. JSON Web Tokens (JWT): A widely-used format based on JSON that is compact and easy to process, suitable for web-based applications and lightweight implementations.

• BBS+: A secure, multi-message digital signature protocol, supporting proving knowledge of a signature.

By offering this flexibility, Indicio empowers organizations to build decentralized identity solutions that are secure, private, and interoperable across diverse systems and industries.

Your own internal network specially designed for your needs.

What is a private network?

A private network refers to a network that requires permission to use. These “permissioned” networks allow companies or organizations with shared and specific interests and goals to provide verifiable information to their customers or stakeholders. You could, for example, use a private network for managing a supply chain, a government may want to control a private network for a particular purpose, or someone could spin up a private network to conduct specific testing.

Private networks gain power through using interoperable agents. This means that credentials created for use on one private network could have the option to also be verified on other networks, whether public or private. This creates a “network-of-networks effect,” and ensures long-term business flexibility.

Learn More about networks

Why go private?

Make your network for your own use. Governments, scientists, financial institutions, enterprise services, and specialized groups and services need to have control over where the network is hosted, which organizations are part of their network, who can write to the ledger, and how the network is governed. With our customizable Private Network Services, you can have this control.

Get To Market Fast

We’ll get your network up and running in days. We understand the importance of being agile in today’s market and we’ve assembled an industry-leading team of engineers who will set up your network quickly and efficiently. We have your service support and advice—every step of the way.

Build today

With a private network, you can start building and testing your Trusted Data Ecosystem before deploying them in public. You get to understand the the innovative from the inside. Set up the governance that meets your and your customers’ needs.

You want your network to be private; trust us, you also need it to be interoperable. on Hyperledger Indy, the most widely used interoperable platform for decentralized identity. We give you the added functionality and business flexibility that a stand-alone network can’t provide.

Indicio Proven offers all the following software options!

Indicio offers the following communication protocols & technology

Your enterprise-grade network for delivering fast, powerful decentralized identity solutions.

What is a decentralized network?

Using a decentralized network provides a layer of cryptographic trust and a source of truth for your solutions. Through cryptography and metadata you can always be sure on who issued a credential and that the information has not been tampered with. No personal data is ever written to the ledger.

Decentralized networks remove the need for personal data to be stored in siloed databases. In doing this, they provide a simple way to comply with data privacy law and remove the risk from data being stored in third-party databases.

The Indicio MainNet provides a home for your solutions no matter your use case, industry, or organization type. Our architects and engineers have years of experience and are standing by to help you build and deploy your solution on our world renowned network.

Indicio has three public networks you can use for your solutions the MainNet, DemoNet, and TestNet. We also provide private networks for internal testing or development – reach out to ask us more about a private network.

Why use Indicio’s network

Stable

Our professionally managed network ensures you have a dependable, stable place to build mission critical products and services. Over the last four years we have had 100% uptime across all three networks.

Robust

Indicio has nodes across five continents, providing a robust decentralized network you can rely on. Learn more about hosting a node and joining the Indicio Network Consortium.

Privacy Protection

No personal data is ever written to a distributed network. The end user holds and has full control over their data, including who they share it with and how it is shared. Decentralized networks replace storing personal data in risky siloed or third-party databases. They provide a simple way for you to comply with evolving data privacy laws.

Become a Transaction Endoser to start writing to the MainNet today. Complete the

Dependable & Consistent

Our expertly managed network provides you with a reliable and consistent environment to develop mission-critical products and services. Boasting an impressive track record of 100% uptime across the networks over the past four years, you can count on our dedicated network professionals.

Expert support

Indicio’s team of industry professionals have years of experience working with decentralized identity and delivering solutions that are in use around the world. They can help you migrate an existing project or start a new one and ensure you have everything you need to succeed.

Global Coverage

With strategically positioned nodes Indicio provides an unparalleled decentralized network that both meets and elevates your ambitions with steadfast reliability. Unlock even greater advantages by becoming a Node Operator.

Scalable Solutions

Elevate your business with networks designed to grow alongside you, seamlessly accommodating the needs of organizations and solutions of all sizes and sectors. Take advantage of our TestNet and DemoNet at no cost

Privacy Protection

By embracing decentralized networks, you significantly reduce the risks tied to storing personal data in vulnerable siloed environments or third-party databases. This approach fortifies your data protection and streamlines your ability to stay compliant with the ever-evolving landscape of data privacy regulations.

Multiple Networks

Indicio runs three public networks, the MainNet for hosting your solutions, the DemoNet for demoing solutions, and the TestNet for building your solutions. We also provide private networks for internal development. The TestNet and DemoNet are free to use and, if you’re a Node Operator, include free support.

A complete verifiable credential solution for identity and data

Seamless, streamlined, and secure identity verification

Indicio Proven is the world’s most advanced platform for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement — a platform that can work with your existing systems, and it is configurable in days rather than months.

And it’s easy to scale from simple use cases to managing national and global identity verification.

Verifiable credentials are a powerful new way to authenticate identity and data. As Gartner Research notes in its 2024 Market Report for Decentralized Identity, they represent “magnitudes of improvement in terms of efficiency, cost and assurance.”

Indicio Proven allows you to build in a way that works best for you, with flexible deployment options, including on premises, in Amazon Web Services, Azure, Google Marketplace, Oracle, or a provider of your choice.

What's included

Issuer & Verifier Agents

The software needed to create, issue, and verify credentials.

The software to download, store, and use credentials on mobile devices.

Flexible template for creating credentials.

Make use of a robust and stable distributed ledger, professionally managed by Indicio, choose the provider that works best for you, or have us build your own distributed ledger network.

• Verifiable credentials can hold all kinds of valuable information in a way that any attempt to alter that information breaks the credential.

• Instant, cryptographic proof of who issued a credential, and that the person presenting it is the rightful owner — an identity fraud killer.

• You are always able to verify who you share data with before sharing it — and they you.

• Data is shareable across disparate systems without direct integration.

Proven Mobile SDK: All the code you need in one place to implement decentralized identity

The Indicio Proven Mobile SDK removes a critical blocker to deploying verifiable credential solutions — the lack of a single source for all the code needed to build customized apps with interoperable digital wallets.

Whether Android or iOS, the Proven Mobile SDK enables your developers to easily add wallet and verifiable credential functionality to your applications without having to learn new programming languages or practices or having to develop complicated, multi-app workflows.

Features

• Multiple libraries:

  • The SDK contains packages for Swift, Kotlin, and React Native — all compiled from a single code base, making it easy to develop apps for both iOS and Android.

• Support for multiple credential types, protocols, governance:

  • AnonCreds, SD-JWTs, and JWT-VCs ,JSON-LD . OID4VC; DEGov (Decentralized Ecosystem Governance, based on DIF Credential Trust Establishment).

• Secure communications:

  • Enable secure communication through DIDComm protocols in your application, including both wallet to wallet and enterprise to wallet.

• Incorporate liveness checks into your application

  • Indicio’s “bring your own biometrics” is a transformational way to manage biometric privacy and security, enabling a person to combine a liveness check with an authenticated biometric from a credential. Can be included in SDK with a license.

Share and verify data without the need for direct integrations

Indicio’s verifiable credentials allow you to store data inside a secure credential and share it with anyone who has the verifier software without the need for integrations between systems and databases.

Organization benefits

• Increase efficiency and eliminate the need for expensive and complex integrations between disparate systems.

• Enable secure login and access through personalized digital identities stored securely on the user’s mobile device.

• Remove reliance on centralized databases for storing sensitive information and save your team money, time, and liability.

• Fight fraud and phishing attempts with data that can be cryptographically traced back to its source.

• Store important identity information conveniently in one place and easily share it across your organization and with partners without the need to re-collect data.

• All access information is stored securely on the employee's mobile device, removing the need to carry keys, physical ID cards, or remember passwords.

• Eliminate the hassle of tracking down physical documents and manually filling out paperwork.

• Simple, secure, and easy-to-use interface removes tedious multi-factor authentication and allows for faster data and document sharing.

• Store all of the data you need in one convenient place and share it securely with the tap of a QR code.

Indicio’s solution is unmatched in the market, offering a truly decentralized approach that eliminates the need for a centralized trust registry. It implements the DIF Credential Trust Establishment specification, setting a new standard for governance automation in verifiable credential ecosystems. This innovative approach empowers ecosystems to grow efficiently, securely, and without reliance on centralized third-party services, ensuring a frictionless flow of trusted information.

Indicio uses machine-readable governance to simplify and automate ecosystem rules. Machine-readable governance encodes human-made governance decisions and rules into a machine-readable format, enabling automated implementation. These rules often include trust lists of approved credential issuers and verifiers, streamlining ecosystem management. This is calle

• DEGov: A standard for Machine-Readable Governance from the Decentralized Identity Foundation (DIF) standard, integrates traditional governance (e.g., system control) with technical policies, rules, and procedures specific to verifiable credential ecosystems. Its data format is compatible with ToIP Trust Registries, ensuring broad interoperability.

Governance Editor & Interpreter

Indicio’s governance solution provides an unparalleled framework for managing decentralized ecosystems with two key components:

1. Governance Editor: A user-friendly interface designed to simplify and accelerate the creation of governance files, making it easy to encode governance rules in machine-readable formats.

2. Governance Interpreter: Enables agents to interpret governance files and assess whether actions—such as issuing or verifying a credential—comply with the established governance rules in a decentralized ecosystem.

By streamlining the creation and enforcement of governance rules, Indicio empowers organizations to implement robust governance quickly and efficiently. No other company offers a comparable solution, positioning Indicio as the emerging standard for governance in the decentralized identity space.

Governance Wizard: An enhancement to DEGov in Indicio Proven with a user-friendly interface enabling seamless creation and updates of governance files.

Key Benefits

• Simplified Implementation: Governance rules are easily linked to ecosystem actions, such as issuing and verifying credentials, fostering ecosystem growth.

• Real-Time Updates: Rapid changes can be propagated across the ecosystem or jurisdiction, eliminating delays caused by third-party updates.

• Error-Free Coordination: Rules and permissions can be choreographed efficiently and accurately, reducing the potential for miscommunication or errors.

The global leader in verifiable digital identity solutions, trusted by enterprises and governments worldwide to streamline operations, eliminate errors, and prevent fraud.

Indicio’s Proven APIs offer a simple, effective way to integrate the ability to issue, hold, share, and verify decentralized Verifiable Credentials for proving identity information directly into your existing systems. Built on open-source technology, Indicio’s solutions are interoperable with W3C standards, EUDI, SD-JWTs, AnonCreds, DIDComm, and more, ensuring that your systems will work around the globe.​Functionality includes:

• Completely decentralized — eliminate your reliance on centralized databases for sensitive user identity information

• Hosting options — Build on premises, in the cloud, or managed by Indicio, our team offers maximum flexibility

• Pre-set use cases and schemas — Build your own custom solution or choose from one of Indicio’s templates to get started fast

• Automated Governance — quickly create the rules for your system and implement them system wide with a few clicks

• Offline identity verification — Use your credentials where and when you need them, even if you or the verifier can’t connect to the internet

If you want to learn more about Indicio or discuss the information contained please complete the following form to schedule time with a member of our team.

​​​​​​​

The documents contained on these pages are intellectual property of Indicio and are not to be duplicated or shared. By requesting access to these pages you agreed tho these terms and conditions.

Indicio decentralizes and digitizes your citizen identity for faster, more secure access to government services.

By using verifiable credentials, Indicio offers you a way to issue secure, decentralized digital identities to your citizens that allow them to cryptographically prove their identity for fast and trusted access to government benefits and systems they need.

Government benefits

• Increase security with phishing-proof verifiable credentials; unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing reliance on centralized databases for sensitive identity information.

• Provide a better experience for your citizens with fast, secure access to the information they need.

• Save time and money by removing the need to manually issue paper documents

• Protect your systems and staff from deepfakes and fraud with mutual authentication, which establishes a digital two-way verification process before sharing sensitive information.

• Access the benefits you need with less time spent on identity and document verification.

• Reduce identity theft and impersonation attempts with a secure digital identification that cannot be copied by bad actors.

• Reduce dependency on collecting and keeping fragile paper documents for proving identity.

• Prove and verify identity in seconds with these fast, simple, easy-to-use credentials.

#DID Methods

The DID method specifies how DIDs and DID documents are created, resolved, updated, and deactivated. We recommend and use DID methods that allow for communication endpoints even if the use case doesn’t require them. Their presence will make innovation easier in the future. We also, generally, recommend and use DID methods that provide high durability through writing to a distributed ledger. Proven supports multiple DID methods, which promotes interoperability with multiple DID-based solutions.

• did:sov

• did:key

• did:peer

• did:web (resolution only)

• DID resolution via Universal Resolver

• did:sod

• did:key

• did:jwk

• did:indy

• did:sov

• did:key

• did:jwk

• did:indy

• did:key

• did:peer1

• did:peer2

• did:key

• did:peer1

• did:peer2

• did:sov

Indicio automates the rules for your decentralized ecosystem for quick and simple administration.

Every decentralized identity system requires established rules for its users. This includes specifying who within the system is permitted to issue credentials and what credentials are necessary for particular actions. DEGov offers an easy method for system operators to modify these rules and implement system-wide updates.

Organization benefits

• Increased efficiency in creating and governing your decentralized identity solution.

• Offline functionality. Most systems require checking in with a governance authority before acting; Indicio’s system allows for caching the latest rules and enables actions when you don’t have a constant connection.

• Efficiently manage the entire decentralized identity solution and push system-wide changes with automation.

• Reduce liability for both the organization and users of the solution with built in rule-setting and automation. Indicio’s solution is engineered to ensure there is no chance of someone accessing something they shouldn't be able to.

Set up the rules quickly and easily without requiring technical expertise using Indicio’s simple and intuitive interface.

• Offline functionality ensures that you can use your decentralized identity whether you have a connection to the internet or not.

• Fast interaction times with the decentralized identity system through automation.

• Easily set up systems to accept a variety of credentials and allow the user to get more functionality out of credentials they already have.

• Automated rules provide more guardrails and security for the user’s personal information.

DIDComm — short for Decentralized Identifier Communication — provides a method for creating a direct, secure line of communication between the owners of Decentralized Identifiers (DIDs). But DIDComm is more than just a mechanism for an individual message, it’s a framework for safe, structured interactions built on decentralization technology.

DIDComm creates an encrypted communications channel for issuing, presenting, and verifying a verifiable credential. It provides maximal security for these processes by allowing each party to mutually authenticate each other before sharing information. It allows for rich, consent-based communication that facilitates the creations of trusted relationships between passengers and airlines and other partners. This is the foundation for a new level of customer personalization that no other exchange protocol provides

In this framework each holder of a DID agrees to accept a connection and enables communication along that channel, whether it be through a website, email, mobile push notifications, QR codes, or a text message. These connections benefit from the built-in features of DIDComm technology, including message encryption, mutual authentication, and message routing.

While some interactions happen entirely within DIDComm protocol messages, such as identity verification and connection creation, DIDComm protocols can also be used to facilitate interactions within other protocols. For example, a video conference call or a phone call could be coordinated using DIDComm protocols to make use of the trust provided by the DIDComm relationship.

A key use for DIDComm is in the communication of verifiable credentials. In the annotated stack diagram from Trust Over IP (below) we can see the role that DIDComm could play in its architectural design.

Building to EUDI specifications with Proven

Streamline your digital identity systems and build to new European standards

Indicio makes EUDI work for you.

Europe’s new frameworks for trusted digital identities, eIDAS 2.0 and the European Digital Identity Wallet (EUDI), are laying the groundwork for faster, more privacy-preserving digital identity verification. Indicio Proven simplifies and accelerates the implementation of your digital identity solutions to meet these new specifications (most implementations within 12-48 hours).

The goals set for eIDAS and EUDI by the EU

• Create secure, cross-border digital identities that meet the demands of both private and public sectors.

• Eliminate unnecessary data sharing and provide Europeans with full control over their data while accessing online services.

• Create the technical foundations and a clear legal framework for people, companies, and public administrations to access services safely and conduct transactions online.

• Establish mutual recognition for electronic IDs issued by European countries.

• Develop a technology-neutral framework that does not favor any particular technical solution for electronic ID implementation.

• Create a universal, trustworthy, and secure European digital identity wallet standard.

• Indicio offers a complete suite of products built to the new European specifications, including a digital wallet and system for issuing, verifying, and managing digital identity credentials, all from a simple interface.

• You will be able to use these credentials to prove identity across your organization with the tap of a screen; no more passwords, multi-factor authentication, or reliance on third-party providers and databases.

• Users store their credentials locally and maintain complete control over their personal information.

• Indicio’s pre-built solutions and simple integrations reduce your team’s development costs and time investment.

• Europe is just the beginning – Indicio’s credentials are compatible with systems both inside and outside of Europe, preparing you for the next generation of digital trust that is usable across the globe.

• Indicio’s team monitors global standards and regulations to ensure that your solution maintains maximum interoperability.

Indicio enhances Zero Trust architecture by providing a more robust identity layer

By using verifiable credentials, Indicio is able to issue secure decentralized digital identities to your users that allow them to cryptographically prove their identity for fast, trusted access to systems and applications they need inside your Zero Trust environment.

Organization benefits

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing the reliance on centralized databases for sensitive identity information.

• Easily manage access and assign roles across your organization.

• Provide a better experience for your users with fast and secure access to the information they need.

• Protect your systems and staff from deepfakes and fraud with mutual authentication, establishing a two-way online verification process before sharing sensitive information.

• Access the applications you need with less time spent on identity and document verification.

• Reduce identity theft and impersonation attempts with secure digital identification that cannot be copied by bad actors.

• Eliminate time-consuming multi-factor authentication.

• Fast, simple, and easy to use, these credentials can contain all the information needed to prove identification across your organization and partner organizations.

• 1 Ed Tech Open Badges 3.0 Specification.

• Internet Engineering Task Force SD-JWT and SD-JWT VC specifications.

• LF Decentralized Trust Indy Working Group Node, Plenum, Cryptography.

• International Civil Aviation Organization (ICAO) (DTC) standard.

• LF Decentralized Trust .

• LF Decentralized Trust.

• .

• LF Decentralized Trust .

• Aries Cloud Agent Python agents (ACA-Py) Bifold Wallet (built on Credo - formerly Aries Framework Javascript).

• (OID4VC) Communication protocol.

• Decentralized Identity Foundation DIDComm.

• Decentralized Identity Foundation Decentralized Ecosystem Governance.

• Trust Over IP Foundation .

• World wide Web Consortium, .

• EU Digital Identity Wallet (EUDI). .

As AI agents begin to take on sensitive tasks—from travel planning to healthcare coordination—we need to verify who they are, confirm who they represent, and ensure they access our data and act only with our permission. ProvenAI brings a trusted identity layer to AI by using standards-based verifiable credentials and privacy-preserving protocols to establish cryptographic trust.

ProvenAI addresses a fast-emerging need across sectors like travel, finance, education, where AI is already being deployed. It is ideal for customer-facing AI systems, like chatbots that book travel, process loan applications, or assist with student services—where trust, authentication, and compliance are non-negotiable.

How ProvenAI Works

• Prove the AI agent is legitimate AI agents hold and present verifiable credentials to prove their identity and permissions when interacting with services or users.

• Consent to share personal data Users share identity information with the AI agent using verifiable credentials, seeding the agent with the information it needs to provide accurate and relevant information.

• Authenticate users without revealing data ProvenAI supports biometric-linked credentials and zero-knowledge proofs to confirm identity without exposing sensitive data.

ProvenAI is built on Indicio Proven and aligned with EUDI, ISO, and W3C standards, delivering global interoperability with support for wide range of standardized credential formats—including SD-JWTs, mdoc/mDL, JSON-LD, and AnonCreds—and widely used communication protocols like DIDComm and OpenID4VC.

The combination of secure, verifiable digital identity, secure, bi-directional communication, and decentralized governance enable a host of critical features for managing AI agents, chatbots, digital twins, drones, and smart cities. Whether it’s decentralized command and control of drone flight paths, permissioning verifiable AI agents to access your data, or personalized, secure chatbot interaction, Indicio Proven provides powerful, elegant solutions to the emerging authentication and communication challenges around new technologies

Indicio Proven helps businesses easily implement reliable and scalable decentralized identity solutions. With a plug-and-play suite of tools and services, it streamlines operations, reduces manual processes, and accelerates deployment while ensuring modern, secure data verification. Indicio Proven provides everything needed to create, issue, verify, and manage verifiable credentials using W3C decentralized identifiers (DIDs).

It’s easy to scale from simple use cases to managing national and global identity verification. Indicio Proven allows you to build in a way that works best for you, with flexible deployment options, including on premises, in Amazon Web Services, Azure, Google Marketplace, Oracle, or a provider of your choice.

About Us

Indicio is a global leader in digital identity, authenticated biometrics, and verifiable credential technology with scalable solutions that organizations can easily and rapidly deploy for increased efficiency, better user experience, and reduced cost. Our award-winning enterprise solution, Indicio Proven®, offers the widest range of interoperable decentralized identity options for global deployments, from single sign-on to seamless border crossing, as well as compatibility with the European Union’s digital identity and wallet standards and leading open-source specifications. Learn more about how Indicio is using this technology to successfully transform education, finance, government, health, travel and tourism, and supply chains at indicio.tech.

Public Benefit Corporation

Founded in 2020, on the belief in privacy and security by design, Indicio supports the open source and interoperability goals of the decentralized identity community. Indicio is committed to advancing decentralized identity as a public good that enables people to control their identities online and share their data by consent. Identity should be simple, inclusive, and work for everyone.

Aries Askar

Indicio integrates Aries Askar across its suite of solutions, leveraging its compatibility with different database backends to provide flexibility for customers with unique storage needs. This is the foundational secure storage of Indicio's agents and mediators, ensuring the protection and accessibility of credentials, schemas, and cryptographic keys.

Aries Askar is a part of the Hyperledger Aries ecosystem, designed to handle secure storage and cryptographic operations essential for decentralized identity frameworks. Askar efficiently handles wallet operations like key generation, signing, and verification while maintaining the highest security standards.

It supports secure DIDComm message exchange, credential issuance, and verification, enabling seamless and trusted interactions. Scalable and robust, Aries Askar ensures Indicio's solutions meet the demands of enterprise and ecosystem-level applications.

As the world continues to adapt the use of digital identity and credentials, Indicio takes great care to ensure we continue to remain on top of global interoptibility. Below is a current look at how Proven is global. This will continue to grow, expand, and include many more across the world.

Indicio uses verifiable credentials to issue decentralized digital identities directly to customers' mobile devices, enabling them to cryptographically prove their identity for account access with a simple tap. These credentials also allow for the secure storage of Know Your Customer (KYC) information in a tamper-proof and verifiable manner, making it trustworthy and reusable across your organization, and with partner organizations.

• Increase security with phishing-proof verifiable credentials; unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Protect yourself from deepfakes and stop fraud with mutual authentication that allows both parties to verify each other’s credentials before exchanging sensitive information.

A privacy-preserving credential format that enables selective disclosure, allowing users to share only the information needed without revealing everything on a credential.

A governance model—based on a DIF standard—that defines machine-readable rules and policies for credential ecosystems, allowing systems to self-update without third-party arbitration; supported by Indicio Proven's “Governance Wizard.”

An ICAO-standardized digital representation of a traveler’s passport that can be securely stored and presented via a mobile device.

An application that stores, manages, and presents verifiable credentials securely, typically installed on a mobile device.

A secure messaging protocol that allows identity agents (wallets, issuers, verifiers, mediators) to communicate directly and privately using DIDs.

A decentralized database maintained by a network of nodes, ensuring transparency, immutability, and shared control over data.

A professionally managed network of distributed ledgers, such as the Indicio Network, used for anchoring credentials and public identifiers (DIDs).

With Indicio Proven® Digital Farming, authenticated data can be shared instantly and reused endlessly

Farming is data-intensive work and each hour spent on data management is a measurable economic cost to farmers. Indicio Proven developed an award-winning solution to this problem using verifiable credentials and decentralized identity.

With a verifiable credential, a farmer can hold and manage authoritative farm data from their phone, share it seamlessly with other stakeholders in the agricultural value chain — suppliers, government agencies, financial services, and vendors — all while maintaining data privacy and protection.

With this easy-to-implement solution, data doesn’t need to be stored by third parties in order to be authenticated. Thanks to cryptography, the data shared from a credential cannot be tampered with — and the credential origin is always provable.

This means that data can be reused over and over again with the absolute certainty that those who need to see it can verify it as authentic. It gives farmers the power to be their own data platforms, while radically simplifying their data management burden.

Indicio Proven provides comprehensive verifiable credential solutions for rapid, remote onboarding, seamless account access and reusable (with expiration) Know-Your-Customer (KYC) checks.

By issuing a biometric template as a verifiable credential, institutions have a powerful way to verify liveness without having to store biometric data — and they can implement simple, instant workflows to defeat AI-generated identity fraud

Indicio Proven offers an innovative, decentralized identity solution that transforms account recovery by leveraging verifiable credentials within a digital wallet. This solution enables secure, frictionless identity for quick account recovery while reducing operational costs and improving compliance readiness.

1. Issue a Recovery Credential:

Upon account creation, the bank issues a recovery verifiable credential (VC) to the customer. This credential is stored in the customer’s digital wallet within their banking app. The credential is cryptographically secure, private, and tamper-proof.

• World’s first successful implementation of ICAO’s DPC Type 1 specifications in a verifiable credential.

• World’s first successful implementation of IATA’s One ID in a digital wallet for travel.

• World’s first successful combination of a DPC Type 1 and OneID for international travel.

Seamless authentication with government-grade digital identity including authenticated biometrics enables digital transformation across the travel ribbon to remove friction, error from manual data entry, and delay from manual security touchpoints — all without airlines and airports having to securely manage their passengers’ personal data.

Indicio uses Hyperledger Indy, private or public networks, or other ledgers when requested. Support for ledgerless operation is also offered. Use of a ledger provides the availability, durability, and redundancy necessary to support a robust identity ecosystem.

While we support alternative non-ledger-based solutions (see DID:WEBVH below), we highly recommend the robust Hyperledger Indy identity ledger.

• Hyperledger Indy Networks: Hyperledger Indy is the leading open-source code for distributed ledgers. A distributed ledger provides a way to find credential issuers (through public DIDs) and perform the cryptography necessary to verify credentials. Using a distributed ledger provides a high level of cryptographic trust, information security, and network resilience.

Indicio Proven is also compatible with

A complete end-to-end solution, Proven is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems, and is interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement and scale, from simple use cases to managing national and global identity verification, and unlike many digital credential solutions that claim to be decentralized, with Indicio technology, you are always in full control of your data.

• Verifiable credentials can hold all kinds of valuable information in a tamper-proof way, as any attempt to alter that information breaks the credential.

A complete verifiable credential solution for identity and data

Indicio Proven is the world’s most advanced solution for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity. This includes the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It is easy to implement — a platformless solution that can work with your existing systems — and it is configurable in days rather than months.

It is easy to scale from simple use cases to managing national and global identity verification.

Verifiable credentials are a powerful new way to authenticate identity and data. As Gartner Research notes in its 2024 Market Report for Decentralized Identity, they represent “magnitudes of improvement in terms of efficiency, cost and assurance.”

in education allow students to share their data with verifying parties — such as places of employment or universities — without the need to check in with the original source of that information, namely the school or college where they did their coursework or received their diploma.

• Immediate proof of degrees and accreditation

• Prove specific skills with microcredentials

• Eliminate redundant paperwork and manual processes

With Holdr+, Indicio has your digital wallet needs covered.

• Holdr+ allows someone using a mobile device to receive, hold, and present verifiable credentials and to create and establish secure, mutually authenticated communication between parties.

  • Supports governance file establishing who trusted issuers of credentials are.

A Mobile Driver’s License (mDLs) is a digital specification for a physical driver’s license. Given that driver’s licenses are widely used for identification, it's likely that a digital version would enjoy similar ubiquity online. Here, we look at what exactly they are (are they verifiable credentials?) their benefits, and why they are not currently widely available.

It all starts with the International Organization for Standardization (ISO) 18013 series. In a nutshell, this document creates a common standard for international recognition of a digital driver’s license.

The standard lays out the scope as follows:

• You must use a machine to obtain the mDL.

• The mDL must be tied to the mDL holder.

Indicio Proven includes all these features!

A complete end-to-end solution, Proven is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems, and is interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement and scale, from simple use cases to managing national and global identity verification, and unlike many digital credential solutions that claim to be decentralized, with Indicio technology, you are always in full control of your data.

• Verifiable credentials can hold all kinds of valuable information in a tamper-proof way, as any attempt to alter that information breaks the credential.

Indicio is compliant with all of the following credential formats!

Indicio Proven Auth allows you to quickly configure single sign-on (SSO) with policy-driven authorization so that your customers or end users can login with portable digital identities instead of usernames and passwords. It allows you to easily implement policies that define access rules dynamically. No more one-size-fits-all permissions. No more access silos.

With Proven Auth, you can use dynamic access rules that respond instantly when a verifiable credential is presented. Instead of granting broad permissions, you can enforce fine-grained policies that determine exactly what each person should access based on their role, credentials, and other verified attributes.

1. Issue verifiable credentials using Indico Proven to employees, customers, partners, or have your contractors issue them to their employees that contains information that would affect their access. This could include things like their role, location, years of experience, certifications or other relevant information.

1. Issuer

The issuer is an entity that creates and provides verifiable credentials to holders.

Responsibilities:

• Credential Creation: Issues credentials that are cryptographically signed to ensure authenticity.

• Data Source: Acts as the trusted source of information contained in the credentials.

• Examples: Government agencies issuing digital IDs, universities issuing diplomas, or banks issuing creditworthiness statements.

The holder is the individual or entity that owns and controls the verifiable credential.

Responsibilities:

• Credential Storage: Stores credentials securely, often in a digital wallet.

• Consent and Sharing: Shares credentials selectively with verifiers when needed.

• Examples: A student holding a digital diploma or a traveler holding a digital passport.

The verifier is an entity that validates the authenticity and integrity of a verifiable credential.

Responsibilities:

• Verification Requests: Requests credentials from the holder for authentication or authorization.

• Credential Validation: Uses cryptographic proofs to ensure the credential is issued by a trusted issuer and has not been tampered with.

• Examples: Employers verifying a candidate’s diploma or an airport validating a digital passport.

The governance rules define the rules and standards for how verifiable credentials are issued, held, and verified.

Responsibilities:

• Establishes trusted relationships among issuers, holders, and verifiers.

• Specifies technical and policy requirements for interoperability and compliance.

• Examples: Emerging European identity regulations, eIDAS and EUDI for digital wallets.

A mediator plays a crucial role in enabling seamless, secure communication and interaction between mobile digital wallets and other entities (issuers, verifiers, and other wallets) in decentralized identity ecosystems. A mediator does in relation to mobile digital wallets:

Responsibilities:

• Facilitates Secure Connections: Mobile wallets often need to establish secure, private channels for exchanging verifiable credentials and other data. This is especially useful for wallets on devices that are not always online or directly addressable (e.g., behind a firewall or NAT).

• Routes Message: Mobile wallets may not be constantly connected to the internet, making direct communication with other parties (issuers, verifiers, or holders) challenging. The mediator acts as an intermediary to store and forward messages. It ensures that messages sent to the wallet are reliably delivered when the wallet becomes available.

• Supports Credential Exchange: Mediators play a role in helping mobile wallets request and receive credentials from issuers and present credentials to verifiers, often through secure and automated communication channels.

A registry or ledger may be used to publish public information, such as issuer credentials or revocation lists.

Responsibilities:

• Stores metadata (not user information or credentials) like public keys or credential schemas.

• Verifiers use it to confirm the trustworthiness of an issuer or the revocation status of a credential.

  • Examples: Blockchain networks like Hyperledger Indy or the .

• Issuers provide credentials to holders.

• Holders share credentials with verifiers.

• Verifiers validate the credentials using public keys or registries.

• All interactions occur under a governance framework to ensure security and trust.

Life online would be impossible without interoperability. Without TCP/IP (Transmission Control Protocol/Internet Protocol), a shared set of standards and rules allowing computers to communicate with each other, there would be no internet. Without HTML—Hypertext Markup Language— there would be no World Wide Web. And, as you read this— almost certainly in HTML on the WWW through TCP/IP—a new set of protocols are being built and adopted which aim to create interoperability around new technologies for digital Identity, data sharing, verification, and trust.

What does it mean to have a digital identity? The inter- net and the web evolved with effective ways to identify computers and websites but less so the people using them. Arguably, email addresses became the first way to establish human identity. They are the key building block for creating and accessing user accounts, often as login credentials, in tandem with passwords.

Whether as an email address leased from an email pro- vider, or as a user account brokered by an email account, these digital identities are not owned by us. They can be revoked. Because they are easy to create, they often require additional personal information to be verifiable. All this real-world and virtual data is stored by the “identity leasing agencies”—the myriad companies and services we use online through email and user accounts. This includes the metadata we generate by being online, which is aggre- gated, packaged, and sold on to other parties for undisclosed purposes, but which frequently include marketing and advertising. We must give prior consent to our data being used in this way in order to lease our digital identities. While all of this is presented as either mostly benign or mildly annoying, and unavoidable—a trade-off for the plenitude of goods and efficiencies online—the system isdesigned to fail. Emails are easy to find or guess. Passwords, if easy to remember, are easy to hack. People are easily “phished”into giving up personally-identifying information that can be used to replicate their identity online. Identity fraud is endemic to this system. Data breaches are frequent and expensive, a combination of the cost of lost data, the cost of being fined for losing the data, the cost of meeting increasingly stringent data privacy mandates, the cost of implementing better security, and the reputational cost of lost trust from losing all your customer data. In this system of centralized databases, each identity can be a single point of failure for the entire system. Federated identity, once thought of as a solution, replicates the under- lying problem with higher stakes: if something goes wrong, you lose access to everything tied to your digital identity. New, decentralized identity technologies mean that we can completely overhaul this system. We can establish digital uniqueness independent of any third party. We can generate the kind of verification that enables trust without storing personal information on third-party databases.

Indicio Proven™ provides the tools to establish a Trusted Digital Ecosystem (TDE). You can immediately issue, verify, and manage credentials. While the options are almost limitless, this tutorial will lead you through a simple workflow that illustrates some of Proven’s core capabilities.

In order to interact with Proven, please download and install the free Holdr+ wallet from either the or the .

1. Swipe past the first two images and click Get Started on the third image as shown below.

1. Read and accept the Terms of Use and the Privacy Policy

By using verifiable credentials, Indicio is able to issue proof of achievements and new skills as Open Badges 3.0, allowing users to securely hold these badges on their mobile devices and share them at their discretion without relying on a third-party hosting platform or provider.

• Provide a more convenient and automated information sharing process for faculty and students.

• Remove the need to manually look up student grades when other universities or businesses need to verify them.

• Remove reliance on third-party providers to store and share student achievement data.

Installing and Configuring ACA-Py Mediator

This document will guide you through the steps to deploy and configure the Proven Mediator in Google Cloud using Indicio Proven ACA-Py Mediator from the GC Marketplace. The first part of this document is intended to be a “quick start” to get you up and running quickly, then you can look at the indicated appendices for more details if needed.

Get the most of your Indicio Proven ACA-Py Mediator

Indicio is here to help you on every step of your journey and is offering Google Cloud customers exclusive access and discounts to Indicio's expert support and training. Get your critical technical questions answered from our experienced support team. Help your development, sales, and marketing teams get up to speed with the fundamentals of the technology and communication of Trusted Digital Ecosystems by taking advantage of our instructor-led workshops and certifications from the Indicio Academy. Learn more about these exclusive discounts and benefits for Google Cloud customers and contact us today!

Prerequisites

1. You will need a DNS name for your new mediator. This is mentioned before you begin as informational because you will probably want to create a static IP address during the installation process and because you will need the ability to add the DNS name to your registrar.

Create the VM instance (Defaults will work for all items not included in these instructions)

1. Navigate to the Google Cloud Console,

2. Select or create the project that you want the Mediator instance to reside in.

3. In the Navigation Menu (top left), go to Compute Engine > VM Instances

4. Click CREATE INSTANCE on the top bar

1. Add a DNS entry for your new mediator.

1. SSH into the VM

   1. From Compute Engine > VM instances > [instance name] click SSH towards the top of the screen

2. Change directories to the mediator service directory cd /opt/indicio/aries-mediator-service

MEDIATOR_CONTROLLER_ADMIN_API_KEY=<your choice> You can generate strong tokens for production with OpenSSL: openssl rand 32 -hex MEDIATOR_AGENT_ADMIN_API_KEY=<your choice> You can generate strong tokens for production with OpenSSL: openssl rand 32 -hex MEDIATOR_ALIAS= Can be any string. (e.g. MyProdMediator1) LOG_LEVEL= Can be ERROR, WARNING, or INFO, depending on your preference. Note: INFO level produces the largest log file. SITE_ADDRESS= This is the complete mediator DNS Name you configured in a previous step. MEDIATOR_URL= This is the same as SITE_ADDRESS, except add https:// to the front of it. EMAIL_ADDRESS= The email you want log information sent to. MEDIATOR_AGENT_LABEL= This is what you want the mediator name to show up as on other agents.

1. Here is an example of a configured .env file using a local database: MEDIATOR_CONTROLLER_ADMIN_API_KEY=openssl-secure-key-a<br> MEDIATOR_AGENT_ADMIN_API_KEY=openssl-secure-key-b<br> MEDIATOR_ALIAS=Indicio Mediator<br> LOG_LEVEL=WARNING<br> SITE_ADDRESS=indiciomediator.dev.indiciotech.io<br> MEDIATOR_URL=https://indiciomediator.dev.indiciotech.io<br> EMAIL_ADDRESS=example@indicio.tech<br> MEDIATOR_AGENT_LABEL=IndicioMediator

2. For instructions or help configuring the mediator to use a remote database, please contact support@indicio.tech, but to get started, please see the complete list of other possible config options in Appendix B.

3. To start the Mediator, run these commands

1. For future starts/stops of your mediator you can use the mediator service. (The first time, you needed to run it manually from the command line so that you could see and copy the invitation as described in the next step.) sudo systemctl start mediator sudo systemctl stop mediator sudo systemctl restart mediator

1. You should see an Invitation URL in the mess of activity that occurs during startup. Just scroll up a ways and you will see it. Copy and save this invitation for later use.

   1. If you open the mediator link generated, you should see the following message:

      "You have received a connection invitation. To accept the invitation, paste it into your agent application."

2. Update the configuration files of your agents to use the new mediator invitation. For example, to update a Proven issuer to use your new mediator:

To setup DNS for your new Mediator on Google’s Cloud DNS, (by creating a new subdomain of your existing domain) do the following:

1. Go to GCP’s Cloud DNS section in Network services (Navigation Menu > Networking > Network Services > Cloud DNS)

2. Click Create Zone if a new Zone is desired. Otherwise, if a zone is already created, click on the zone name then skip to step 3.

   1. Give the zone a name. This name is just how it will appear in the list and need not necessarily match the new subdomain.

CA_CERT= This is the path to the SSL certificate for the remote database. You MUST specify a file, otherwise the mediator will not work at all if using a remote database. If you do not wish to use a certificate (they will not work with the setup detailed in this documentation), you will need to specify an empty file. Example: ./server-ca.pem POSTGRESQL_HOST= The hostname or ip address of the remote database. IP address will not work if you are using SSL, as SSL requires a FQDN. Postgresql options should not be set if using a local database. POSTGRESQL_USER= The username of an account on the remote database. This can be the same user as the Admin User. Postgresql options should not be set if using a local database. POSTGRESQL_PASSWORD= The password to the account on the remote database instance. MUST BE IN SINGLE QUOTES (eg: ‘samplepassword’) Postgresql options should not be set if using a local database. POSTGRESQL_ADMIN_USER= This is the username for the Administrator account on the remote database. It is “postgres” by default. Postgresql options should not be set if using a local database. POSTGRESQL_ADMIN_PASSWORD= This is the password for the Administrator account on the remote database. Postgresql options should not be set if using a local database. MEDIATOR_WALLET_NAME= Use a descriptive name MEDIATOR_WALLET_KEY= Use a secure string, we recommend a randomly generated 32 character string

This tutorial goes through a series of steps to exercise a few of the key features of the Proven API and help you begin to construct your own workflows.

To connect, one agent must issue an invitation to the other. Generally, the server agent issues an invitation to the mobile agent by displaying an invitation URL encoded in a QR code.

Webhooks provide real-time notifications about events on Proven agents. They are delivered as HTTP POST requests to a configured endpoint.