Organizations and Regulations
Governments started legislating for decentralized identity around 2021. This page is context rather than API reference. It lists which jurisdictions are building self sovereign identity (SSI) infrastructure and says where a did:bio identifier fits into that landscape.
All of these initiatives share the aim that motivates this platform. People should be able to prove things about themselves without handing their data to a central authority that becomes a honeypot, a gatekeeper, or both.
Government initiatives at a glance
| Region | Initiative | Description |
|---|---|---|
| Europe | eIDAS 2.0 | Enables European citizens to access online services across the EU through SSI |
| Europe | EUDIW | Secure storage for European citizens to store credentials and attributes |
| Europe | eSSIF-Lab | EU project to promote the adoption of SSI |
| Europe | EBSI | Unified platform involving all 27 EU members for seamless cross border services |
| Canada | PCTF | Rules, standards, and best practices for verifiable credentials across Canada |
| South Korea | Busan Blockchain ID App | Identity app for smart city facilities |
| China | RealDID | Digital identity service for verifying real name digital identities |
| Africa | Diwala | Uses verifiable credentials so that credentials can be verified easily |
| New Zealand | DISTF | Framework to promote the use of verifiable credentials in daily life |
eIDAS 2.0, in particular
The most consequential of these is eIDAS 2.0, proposed by the European Commission in 2021. It commits the EU to an SSI model. Individuals control their own identity data, every citizen gets a digital wallet, the EUDIW, associated with a DID, and trusted entities issue verifiable credentials whose verification keys are public. For anyone building research infrastructure in or with Europe, this is the regulatory environment the infrastructure will operate in.
Where Bio-DID-Seq stands in this
The platform was built on the same standards these initiatives legislate around, so alignment is a matter of format rather than translation.
Because did:bio implements the W3C DID 1.0 data model rather than a proprietary scheme, a research identifier minted here resolves to the kind of document an EU wallet or any other DID aware verifier already understands, with standard contexts, Multikey verification methods, standard verification relationships and service entries. Whether a given national wallet accepts a particular method is that wallet's policy. What the method guarantees is that nothing about the document needs converting first.
On cryptography, the platform is ahead of most of what it aligns with, in the places where it applies. DID documents can carry ML-DSA-87 assertion keys, UCAN chains can include ML-DSA principals, and every stored content key is wrapped with ML-KEM-1024. These are the final FIPS 204 and FIPS 203 standards at their highest parameter sets, implemented through aws-lc-rs, which offers a FIPS validated module. Registry transactions and wallet signatures remain Ed25519, as the chain requires. Regulators are moving toward mandating post quantum protection for long lived data. Research data is the canonical example of long lived data, so the platform started there. The full picture, including where the boundary sits, is on Post Quantum Security.
Authorization and privacy follow the same pattern. UCAN passes give researchers the granular, delegable, revocable control these frameworks require. The GDPR mechanics of minimisation, erasure and explicit access are covered in Privacy Controls rather than repeated here.