1
🧠 What is Chain code in Hyperledger Fabric?
Chaincode is the smart contract in Hyperledger Fabric.
But unlike Ethereum (where smart contracts are written in Solidity), in Hyperledger Fabric, chaincode is
usually written in Go, JavaScript ([Link]), or Java.
It defines the business logic that runs when someone interacts with the blockchain — for example,
creating, updating, or querying assets.
🧱 How Does Chaincode Work in Fabric?
In a typical Fabric network:
1. A client application sends a transaction proposal.
2. The proposal is sent to endorsing peers (nodes that run the chaincode).
3. The chaincode executes and returns a result (without updating the ledger yet).
4. The transaction is endorsed (signed) and sent back to the client.
5. If the client receives enough endorsements, the transaction is sent to the ordering service.
6. Once ordered, it’s added to the ledger, and peers update their state.
🧩 Structure of a Chaincode
A chaincode usually includes:
Init() – Initializes the ledger (optional)
Invoke() – Entry point for all function calls
Functions like:
o CreateAsset()
o ReadAsset()
o UpdateAsset()
o DeleteAsset()
Each function performs CRUD operations (Create, Read, Update, Delete) on the ledger state, stored in
key-value pairs.
🔒 Example Use Case:
Imagine a chaincode for a Car Registry:
2
🛠️CreateCar(carID, owner, model) → Adds a new car
👀 ReadCar(carID) → Fetches car info
🔄 TransferCar(carID, newOwner) → Updates ownership
All this logic is inside the chaincode and executed only by authorized nodes.
✅ Key Features of Fabric Chaincode:
Feature Description
Modular Easily pluggable into apps
Runs in Docker Each chaincode runs in its own container
Private Execution Not every peer runs all chaincodes
Policy-Based Access You can define which organizations can invoke it
Deterministic Logic Same input = same output on every node (required for consensus)
📌 Why Chaincode Matters in Case Studies:
You're often asked: “How would a blockchain-based system manage data updates or
workflows?”
If it’s enterprise-grade, Hyperledger Fabric + Chaincode is the answer.
It’s used in supply chains, health records, academic credentials, and asset management.
🧱 What Is Hyperledger Fabric? (Quick Recap)
3
A permissioned blockchain platform under the Linux Foundation.
Designed for enterprise use.
Supports modular architecture, private channels, and custom consensus mechanisms.
✅ Where Is Hyperledger Fabric Used?
1. 🔗 Supply Chain Management
Problem: Difficulty in tracking products, verifying authenticity, or resolving disputes.
Fabric Solution:
Every party (manufacturer, shipper, retailer) joins the blockchain as a known participant.
Data about goods (origin, handling, location) is shared in real-time, immutably.
Example:
IBM Food Trust – used by Walmart to trace the origin of food (e.g., mangoes, pork) in seconds
instead of days.
2. 💸 Trade Finance & Banking
Problem: International trade involves multiple banks, currencies, intermediaries, and paperwork.
Fabric Solution:
Smart contracts automate trade agreements.
Banks can view shared documents in real-time and validate payments securely.
Example:
[Link] – a Fabric-based platform used by European banks for trade finance.
3. 🧾 Digital Identity & KYC
Problem: Repetitive, paper-based KYC (Know Your Customer) processes are time-consuming.
Fabric Solution:
Stores verified digital identities and credentials on the blockchain.
Organizations can access KYC info without duplication.
Example:
4
SecureKey (Canada) – users control access to their identity data shared among banks and
government services.
4. 🏥 Healthcare Records
Problem: Medical data is scattered across clinics/hospitals, and patients lack control.
Fabric Solution:
Patient data is securely stored on a shared ledger.
Hospitals can access real-time, tamper-proof records (with patient consent).
Example:
MediLedger – tracks pharmaceuticals to avoid counterfeit drugs.
5. 🎓 Education & Certifications
Problem: Verifying academic records manually is slow and prone to fraud.
Fabric Solution:
Institutions issue verifiable credentials on-chain.
Employers or universities can verify instantly.
Example:
MIT uses blockchain to issue tamper-proof diplomas.
🔐 Why Fabric Works Well for These Applications:
Feature Benefit
Permissioned access Privacy and control over data
Channels Keep data private between select members
Chaincode Customizable smart contracts for any workflow
Identity management Know exactly who’s on the network
Pluggable consensus More scalable and enterprise-friendly
💡 What Are DApps in the Context of Hyperledger Fabric?
5
A DApp (Decentralized Application) is an application that:
Has a frontend (web/mobile interface)
Interacts with a blockchain backend
Uses smart contracts (in Fabric, called chaincode) for business logic
In Hyperledger Fabric, DApps are built to:
Allow users to interact with the blockchain network
Invoke chaincode functions (like creating or querying assets)
Submit transactions and view blockchain data in real time
🛠️How Do You Implement Hyperledger Fabric with a DApp?
Here’s a high-level overview of the components and flow:
1. Frontend (UI/UX)
Web interface (React, Angular, or plain HTML/JS)
Allows users to input data, click buttons (e.g., "Add Asset", "View History")
2. Backend (Middleware/API Layer)
Built using [Link], Express, or any web framework
Uses Fabric SDK (Software Development Kit) to connect to the blockchain
Authenticates users, constructs transactions, submits them to the network
3. Blockchain Network (Hyperledger Fabric)
Peers: Maintain the ledger and run chaincode
Orderer: Orders transactions and creates blocks
CA (Certificate Authority): Manages identities and access control
Ledger & Chaincode: Stores data and handles logic
📦 Example Workflow: Car Registration DApp
Let’s say you’re building a DApp for managing car ownership records.
🔗 Backend Logic:
Call chaincode functions like:
o CreateCar(carID, owner, color)
6
o TransferCar(carID, newOwner)
o QueryCar(carID)
📲 Frontend:
Form to enter car details
Button to submit new car record
Page to display ownership history
🔄 Flow:
1. User submits data via the frontend.
2. Backend signs and submits a transaction proposal.
3. Fabric endorsing peers run chaincode and return results.
4. If valid, transaction is ordered and added to the ledger.
5. UI updates with new info from the blockchain.
🔐 Key Technologies Used:
Layer Tech/Tools
Smart Contracts Chaincode (Go, [Link])
Backend Integration Hyperledger Fabric SDK (Node/Java/Go)
Frontend React, Angular, or basic HTML/CSS/JS
Blockchain Platform Hyperledger Fabric (peer, orderer, CA)
✅ Benefits of DApps on Hyperledger Fabric:
Real-time interaction with the ledger
User-friendly interface for non-technical users
Fully customizable logic via chaincode
High privacy and scalability due to permissioned setup
📘 Real-World Use Case:
A logistics company builds a DApp on Hyperledger Fabric to allow clients to:
7
o Track shipments
o Update delivery status
o View package history
Each interaction updates the ledger through a chaincode function, and users see live, verified updates
via the DApp.
🚀 What is Scalability in Blockchain?
Scalability refers to a blockchain network’s ability to handle increasing load, i.e., more:
8
Transactions per second (TPS)
Users/nodes
Smart contracts and DApps
In simple terms: Can the blockchain grow and handle real-world demand without slowing down or
getting too expensive?
🧱 Scalability Challenges in Blockchain
1. ⛓️Throughput Limitations
Bitcoin processes ~7 TPS
Ethereum (pre-merge) ~15–20 TPS
These are much lower than centralized systems like:
Visa – ~24,000 TPS
2. 📉 Latency
Time delay in confirming and finalizing transactions
Caused by block intervals (e.g., Bitcoin ~10 min/block)
3. 🏗️Resource-Intensive Consensus
Proof of Work (PoW) is slow and consumes lots of energy
Requires global agreement, causing bottlenecks
4. 💾 Storage and Bandwidth
As the blockchain grows, every node must store and sync the full ledger
Becomes heavy and costly over time
🔧 Scalability Solutions
🧭 1. Layer 1 Solutions (Protocol-Level)
These improve the blockchain’s base layer.
a. Changing Consensus Mechanism
Shift from PoW → PoS or PBFT
Improves efficiency and reduces energy usage
b. Sharding
9
Breaks the blockchain into smaller shards, each processing part of the data
Used in Ethereum 2.0 (planned)
🧱 2. Layer 2 Solutions (Built on Top of Main Chain)
These offload the main chain to reduce load.
a. State Channels
Open a private channel between users
Only final result is posted on the blockchain
🧾 Example: Lightning Network (Bitcoin)
b. Sidechains
Separate chains connected to the main chain
Can have their own rules and faster processing
c. Rollups (for Ethereum)
Execute transactions off-chain, then submit compressed proof on-chain
Greatly reduces cost and improves speed
🌍 3. Permissioned Blockchains (like Hyperledger Fabric)
Limit participation to known entities
Faster consensus (e.g., PBFT, Raft)
Used in enterprise and private networks
📊 Comparison: Public vs Private Blockchain Scalability
Feature Public Blockchain (e.g. Bitcoin) Private Blockchain (e.g. Fabric)
Nodes Open to all Restricted to known members
Consensus PoW/PoS (slow) PBFT/Raft (fast)
TPS Low High
Use Case Decentralized money, DApps Supply chain, health, finance
10
🧠 Case Study Connection:
If your case study involves:
High-volume transactions (e.g., payments, logistics)
Need for quick confirmation
Many users or IoT devices
→ You must consider scalability and explain which solutions (Layer 1/2) can be applied.
🧠 What is Identity?
Identity refers to the set of attributes or data that uniquely identify a person, organization, or device.
For a person, identity could include:
Name
Date of birth
11
Government-issued ID (Aadhaar, passport)
Phone number
Email
In digital systems, identity also involves:
Usernames, passwords
Digital certificates
Biometric data
🔒 Why Is Identity Important in Blockchain Systems?
In public blockchains like Bitcoin, users are pseudo-anonymous — they’re known by their public key or
wallet address, not by name.
But in enterprise or government applications, you often need to know who is interacting with the
system (e.g., hospitals, students, companies, or citizens).
That’s where digital identity systems come in — and blockchain provides a secure and decentralized way
to manage them.
🧾 Types of Identity Systems
1. Centralized Identity
A central authority (e.g., Facebook, government, bank) issues and controls identities
Users must trust the authority
Risk of single point of failure, data leaks
2. Federated Identity
One ID is used across multiple systems (e.g., “Login with Google”)
Convenience vs. privacy tradeoff
3. Decentralized Identity (DID) (Blockchain-based)
Users control their own identity
No central authority — identity is managed using blockchain + cryptographic keys
You choose when, how, and with whom to share your data
We’ll dive into DID in detail in upcoming subtopics
12
🔐 Identity Components in Blockchain Systems:
Component Description
Public Key Used as a pseudonymous identity (e.g., wallet address)
Private Key Proves ownership of that identity
Digital Signature Verifies that a message or transaction came from the identity
Certificates Used in permissioned networks (e.g., Fabric CA issues IDs)
🔁 Real-World Applications of Digital Identity:
Banking: Blockchain-based KYC
Healthcare: Patients control their medical records
Government: National IDs (like Aadhaar on blockchain)
Education: Verifiable degrees and certifications
Travel: Passport or visa status verification
🏢 What is Centralized Identity Management?
In centralized identity management, a single entity or organization controls the creation, storage, and
management of users' identities.
📌 Examples:
Your Google ID, managed by Google
Aadhaar, managed by the Indian government
13
University login systems (managed by the IT department)
Banks maintaining KYC profiles
All user data is stored in a centralized database, and users rely on the authority to access and protect
their identity.
🛠️How It Works:
1. User registers with the central authority (e.g., signs up for an account).
2. The system stores identity details (name, password, email, etc.) in its central server.
3. When the user logs in, credentials are checked against this central database.
4. The central system controls access and shares data with other services (if needed).
🔐 Advantages of Centralized Identity
Advantage Description
Simple to implement Easy to manage for one organization
Fast verification No need for network consensus
Widely used Standard in most digital services today
❌ Limitations of Centralized Identity
Problem Why It’s an Issue
Single point of failure If the central server crashes or is hacked, all identities are at risk
Privacy concerns The authority has full access to all user data
Data breaches Hackers target central databases (e.g., Facebook leaks)
Vendor lock-in Users depend entirely on one provider
No user control You can’t decide who accesses or shares your identity info
🧠 Case Study Relevance
Imagine a government wants to give citizens a health ID. If it uses a centralized system:
All data is stored in one server.
14
If the server goes down, hospitals can’t access the data.
If the system is hacked, all records are leaked.
A blockchain-based Decentralized Identity system would solve these problems by giving users control
and spreading storage across a secure, distributed network.
👤 What is Decentralized Identity Management (DID)?
Decentralized Identity is a model where individuals or organizations manage their own digital identity
using blockchain — without relying on a central authority.
You own your identity, you control it, and you decide who sees what.
Instead of being stored in one big database (like in centralized identity), identity credentials are:
Stored on your device or wallet
Verified through blockchain-based proofs
15
Shared selectively with trusted parties
🧱 Key Components of DID Systems:
Component Description
DID A Decentralized Identifier (e.g., did:example:123abc) — like a unique ID
DID Document Contains public key, service endpoints, authentication methods
Issuer Entity that gives a credential (e.g., university, government)
Holder The user who owns and manages the credential
Verifier Someone who checks the validity of the credential (e.g., employer, school)
🔐 How Decentralized Identity Works (Flow):
1. A university (issuer) gives Alice a digital degree credential.
2. Alice (holder) stores it in her digital wallet (e.g., mobile app).
3. When applying for a job, she sends a verifiable proof to the employer.
4. The employer (verifier) checks the authenticity using blockchain — no need to contact the
university!
✅ Benefits of Decentralized Identity:
Benefit Explanation
User control Users decide who can access their info
No central storage Reduces the risk of massive data breaches
Privacy-preserving Share only necessary data (e.g., prove you're over 18 without revealing DOB)
Interoperable One ID can work across platforms and borders
Tamper-proof Blockchain ensures data integrity
🔒 Real-World Use Cases:
Education: Digital diplomas (e.g., MIT, Indian universities using blockchain)
Healthcare: Health records owned by patients
16
Banking: KYC once, reuse everywhere
Government: National ID systems (e.g., EU’s ESSIF project)
Employment: Background checks and digital resumes
🧠 Case Study Tip:
If a case involves:
Verifying identity across institutions
Giving users control over personal data
Reducing dependence on a central database
→ Propose Decentralized Identity using blockchain (DID + Verifiable Credentials)
🔐 What is Single Sign-On (SSO)?
Single Sign-On (SSO) is an authentication process that allows a user to access multiple applications or
services using just one set of login credentials (usually username and password).
✅ Instead of logging into each system separately, you log in once — and gain access to all connected
systems.
🎯 Example (Everyday Life):
When you use your Google account to log into:
YouTube
Gmail
17
Google Docs
Google Drive
…you’ve experienced SSO in action.
⚙️How Does SSO Work? (Simplified)
1. You log in once through a central identity provider (like Google or Microsoft).
2. The provider authenticates you and gives you a token or session key.
3. Other apps trust that token and let you in without asking for credentials again.
✅ Benefits of SSO:
Benefit Why It’s Useful
Convenience Log in once → access everything
Improved UX No repeated login prompts
Fewer passwords Reduces password fatigue
Centralized control Easy for IT admins to manage users
❌ Limitations of Traditional SSO:
Limitation Why It’s a Problem
Centralized control One provider holds your identity data
Single point of failure If the identity server goes down, all services fail
Privacy concerns Provider knows all your activity
🔗 How Blockchain Can Improve SSO:
When SSO is built with Decentralized Identity (DID):
The user authenticates using their DID and private key
No need for a central server or password
The user owns their credentials, not a big tech company
Verification happens via blockchain (trustless and tamper-proof)
18
This is often called Self-Sovereign Identity (SSI) combined with DID-based login.
🧠 Case Study Connection:
If you’re asked:
How can we improve login systems across multiple apps or organizations while preserving user privacy?
Propose:
Blockchain-based SSO using DIDs
Use of verifiable credentials instead of passwords
🧠 What is a DID (Decentralized Identifier)?
A DID is a unique, permanent, and self-owned identifier that allows individuals or organizations to have
a digital identity without relying on a central authority (like Google or the government).
It's like a digital identity address that you control.
🔑 DID Example:
did:example:123456789abcdefghi
did: → the scheme
example → the DID method (depends on the blockchain or network)
123456789abcdefghi → the unique identifier
🧩 What Makes a DID Special?
19
Property Explanation
Decentralized No central authority needed to issue or manage it
Globally unique Each DID is distinct and traceable to its owner
Self-owned The owner controls it via private keys
Blockchain-anchored Its metadata is recorded on a blockchain for trust
🗂️DID Document
Each DID links to a DID document, which contains:
Public key(s) for verification
Service endpoints (how to interact with the identity)
Authentication methods (e.g., for logging in)
Timestamps, etc.
This document is stored on-chain or referenced via the blockchain, allowing anyone to verify it securely.
🔐 How Is a DID Used?
Here’s what you can do with a DID:
Authenticate without username/password
Sign documents
Share credentials securely (e.g., diplomas, licenses)
Log in to systems using blockchain-based SSO
📲 Real-Life DID Use Case:
A student has a DID:
Their university issues a degree credential linked to their DID
When applying for a job, the student can prove ownership of the degree
The employer verifies it via the blockchain — no need to call the university
🔄 DID vs Traditional ID
20
Feature Traditional ID DID (Decentralized ID)
Stored by Central authority User-controlled (wallet)
Risk of hacks High Very low
Privacy Low High
Requires trust in Government/Provider Protocol/Blockchain
🔄 What is the DID Workflow?
The DID workflow refers to the sequence of steps that take place when a Decentralized Identifier is
used for:
Proving identity
Sharing credentials
Authenticating with services
It usually involves three main roles:
1. Issuer – issues a credential (e.g., a university)
2. Holder – owns and controls the credential (e.g., a student)
3. Verifier – checks the credential (e.g., an employer)
🔐 Step-by-Step DID Workflow
21
1. DID Creation
The holder (user) creates a DID and key pair (public + private key)
The DID is registered on the blockchain, linking it to a DID document
The user now owns a self-sovereign identity
2. Credential Issuance
An issuer (e.g., a university) verifies the user in real life
It creates a Verifiable Credential (VC) (e.g., a degree certificate)
The VC is digitally signed by the issuer and linked to the user’s DID
The credential is stored off-chain (e.g., in a wallet), and only proof is anchored on the blockchain
3. Storing the Credential
The holder stores the credential in their digital identity wallet
The wallet can be on a mobile device or secure app
4. Presenting the Credential
When the user wants to prove something (like job application), they share a Verifiable
Presentation (VP) — a version of their credential
🔒 The user shares only necessary data, protecting privacy (e.g., prove you’re over 18, without revealing
your DOB)
5. Verification
The verifier checks:
o Is the credential digitally signed by a trusted issuer?
o Is the DID still valid and not revoked?
o Does the credential match the user’s DID?
The verifier does this by checking the blockchain (to fetch the issuer’s DID document and public
key)
✅ If everything matches, the identity is verified.
22
👤 Example Case: Job Application with DID
1. You have a DID + credential from your university.
2. You apply to a company → they ask for your degree proof.
3. You send a verifiable presentation from your wallet.
4. The company checks the issuer’s signature using the blockchain.
5. You get verified — instantly, securely, and with full control of your data.
🧠 Why This Matters in Case Studies:
If the case involves:
KYC, digital ID, education records, vaccination proof
And needs privacy, tamper-proof records, and user control
→ Use DID + VC + Blockchain
→ Show how DID workflow removes intermediaries and puts the user in control
🎓 What are Verifiable Credentials (VCs)?
A Verifiable Credential is a digitally signed piece of data (a certificate, ID, or claim) that can be:
Issued by a trusted entity (Issuer)
Held by a user (Holder)
Verified by anyone (Verifier)
It's like a digital version of your ID card, diploma, or license — but verifiable using cryptography and
blockchain.
🧩 Key Roles in VCs
Role Description
Issuer Entity that issues the credential (e.g., university, government)
Holder Person or organization who owns the credential
Verifier Checks the credential's authenticity (e.g., employer)
23
⚙️How Verifiable Credentials Work (Step-by-Step):
1. Issuance
A trusted authority (Issuer) creates a digital credential (e.g., degree, vaccine record).
The issuer digitally signs the credential using its private key.
The credential is issued to the Holder’s DID.
2. Storage
The Holder stores the VC in a digital wallet (mobile or web-based).
The credential is stored off-chain, while proof (DID + signature) is linked on the blockchain.
3. Presentation
When needed (e.g., job application), the Holder sends a Verifiable Presentation (VP).
The VP is selectively shared — only relevant information is revealed.
4. Verification
The Verifier:
o Checks the issuer’s DID document from the blockchain.
o Uses the issuer's public key to verify the signature.
o Optionally checks for revocation status.
✅ If everything is valid → the credential is trusted.
🔐 Key Principles Behind VCs
Principle Meaning
Cryptographic Proof Every credential is digitally signed by the issuer
Tamper Resistance If altered, the signature becomes invalid
Selective Disclosure Share only necessary data (e.g., "I'm over 18", not your full DOB)
Interoperability Can be used across apps and platforms
User Control Holder decides when and what to share
Revocation Issuers can revoke credentials if needed (via blockchain)
24
🔍 Example Use Case: Digital Driving License
RTO (issuer) issues a VC to your DID.
You store it in your mobile wallet.
When asked for ID, you show only proof of age — not your address or license number.
The verifier checks the RTO’s public key via blockchain and accepts it.
🧠 In Case Studies:
If you're asked about:
Digital ID
Fake certificates
Sharing credentials without exposing all data
→ Propose DID + VC model
→ Show how VCs use cryptography and blockchain to ensure privacy, control, and trust
🧩 1. Issuer
Who they are:
A trusted organization or authority that creates and issues credentials.
Examples:
University → Issues a diploma
Hospital → Issues a vaccination certificate
Government → Issues a digital driving license
Bank → Issues a KYC-verified credential
🔐 What the Issuer Does:
Creates a Verifiable Credential with the relevant data
Signs it using its private key
Issues it to the Holder's DID
May register proof or revocation info on the blockchain
The issuer’s trust is the foundation of the whole system.
25
🧍 2. Holder
Who they are:
The individual or organization that owns the credential.
Examples:
A student with a university degree
A driver with a digital license
A patient with a medical record
📲 What the Holder Does:
Stores the VC in a digital wallet
Controls when and what to share
Creates presentations from the VC when asked
Proves they own the credential using their private key
The Holder has full control and can selectively disclose info.
🕵️3. Verifier
Who they are:
A person or organization that wants to verify the authenticity and ownership of a credential.
Examples:
Employer verifying a degree
Airport verifying a passport or visa
Company verifying KYC before onboarding
🔍 What the Verifier Does:
Receives the Verifiable Presentation from the Holder
Checks:
o Is the issuer trusted?
o Is the credential valid and untampered?
o Is the credential revoked or still active?
Uses public key infrastructure (PKI) and blockchain to verify
26
Verification is automated, fast, and doesn’t require calling the issuer.
🎓 Example:
Imagine a student applying for a job.
1. University (Issuer) issues a degree to the students DID.
2. Student (Holder) stores it in a digital wallet.
3. Company (Verifier) requests proof.
4. Student shares a Verifiable Presentation.
5. Company verifies it via the university's DID on the blockchain — all without contacting the
university directly.
🧱 What Is a Decentralized Registry?
A Decentralized Registry is a blockchain-based directory used to:
Register DIDs (Decentralized Identifiers)
Store or reference DID Documents
Track issuer public keys and metadata
Publish revocation status of credentials
Think of it as a public phone book or ID store, but it’s distributed and tamper-proof.
🧩 How It Works in VC Management:
When a Verifier wants to check a Verifiable Credential (VC), they need to:
1. Know who issued it
2. Check the issuer’s DID
3. Fetch the issuer’s public key (to verify the signature)
4. Check if the VC has been revoked
27
This is where the Decentralized Registry (usually a blockchain) comes in:
It stores the issuer’s DID Document
Verifiers read it from the chain
It ensures trust without contacting the issuer directly
🔗 What’s in the Registry?
Stored Item Purpose
DID Document Holds public key, authentication methods
Service Endpoints Where to interact with the DID owner
Credential Schemas Format definitions for VCs
Revocation Registry Optional – tracks revoked credentials
📘 Real-World Use Case
Let’s say:
A university issues digital degrees as VCs.
It publishes its DID and public key to a decentralized registry (e.g., on Ethereum or Hyperledger
Indy).
An employer (verifier) checks a student's credential.
The employer queries the registry to:
o Validate the university’s DID
o Check that the credential is signed correctly
o Confirm it hasn’t been revoked
✅ Done — without needing to contact the university!
✅ Why Use a Decentralized Registry?
Benefit Explanation
Trustless verification Verifiers don’t need to call the issuer
Tamper-proof records Stored on blockchain
28
Benefit Explanation
Always available Distributed, not dependent on one server
Interoperability Multiple verifiers/issuers can use the same registry
Decentralized governance No single authority control’s identity data
🧠 In Case Studies
When the case mentions:
Cross-border ID verification
KYC without central databases
Privacy-preserving document sharing
→ You can propose using a decentralized registry to manage DIDs and credential metadata securely.
🔐 What is the VC Trust Model?
The VC Trust Model defines the relationships and responsibilities between the three main actors in the
Verifiable Credential ecosystem:
1. Issuer
2. Holder
3. Verifier
It ensures that a Verifiable Credential can be trusted through cryptographic methods, even if the verifier
and issuer don’t know each other.
🤝 Roles and Trust Relationships
1. Issuer → Holder
The issuer must verify the real-world identity of the holder before issuing a credential.
The holder trusts the issuer to issue accurate and truthful credentials.
2. Holder → Verifier
29
The holder presents the credential to the verifier.
The holder controls what to share and when (selective disclosure).
3. Verifier → Issuer
The verifier must trust that the issuer is legitimate.
The verifier checks:
o Is the credential digitally signed by the issuer?
o Is the issuer’s DID valid and recognized?
o Is the credential revoked or expired?
This trust is established by looking up issuer metadata (DID Document, public key) in a Decentralized
Registry.
🔁 How Trust Is Established Without a Central Authority
Element Purpose
Digital Signatures Prove credential was issued by the claimed issuer
DIDs + DID Documents Prove ownership of keys and provide public verification info
Blockchain Registry Stores immutable references to DIDs, revocation lists, schemas
Verifiable Presentations Give holder control over what is shared, with proof
This model creates a web of trust backed by math and cryptography, not by phone calls or emails.
🎓 Real-World Example: Digital Degree
University (issuer) gives a VC to a graduate.
The student (holder) applies for a job.
The employer (verifier):
o Checks the signature to confirm it came from the university
o Looks up the university’s DID in a decentralized registry
o Accepts the credential if it’s valid and not revoked
The verifier never had to call or email the university — trust is built into the system.
✅ Benefits of the VC Trust Model
30
Benefit Why It Matters
Trust without contact Reduces verification time and effort
Privacy-first Holder shares only necessary info
Tamper-proof Credentials can’t be faked or altered
Global interoperability Works across borders and industries
🔗 How DID and VC Work Together
Think of it like this:
A DID (Decentralized Identifier) is your identity reference — it’s like your name or ID number,
but self-owned.
A VC (Verifiable Credential) is a proof about you — like your degree, age, license, etc.
Together, they allow a trusted claim to be made and verified — without involving a central
authority.
✅ DID is the “who”, and VC is the “what” about that identity.
🔁 Workflow When Combined
1. Identity Creation (DID)
The user (Holder) creates a DID (and key pair).
This DID is stored on a blockchain and becomes their digital ID.
2. Credential Issuance (VC)
A trusted Issuer (e.g., university, government) verifies the user in real life.
The Issuer creates a VC and binds it to the user’s DID.
The credential is digitally signed and given to the Holder.
31
3. Credential Storage
The Holder stores the VC in their identity wallet (secure mobile app or desktop tool).
4. Credential Sharing
When needed, the Holder creates a Verifiable Presentation from the VC.
This is shared with a Verifier (e.g., employer), along with a proof that the DID belongs to the
user.
5. Verification
The Verifier:
o Checks that the DID is valid (using blockchain registry)
o Verifies the signature on the VC
o Confirms it hasn't been revoked
🔐 Benefits of Combining DID + VC
Feature Description
Self-Sovereignty Users own and control their identities and credentials
Privacy-preserving Share only what’s needed (selective disclosure)
Tamper-proof verification Signatures and DIDs make falsification nearly impossible
Global interoperability Can work across platforms and borders
No central authority needed Trust is handled cryptographically and publicly
🎓 Real-World Example:
Imagine a digital vaccine passport system:
A hospital (issuer) issues a VC for a patient's vaccination.
The patient (holder) receives it, linked to their DID.
When traveling, the patient presents only the proof of vaccination to airport authorities
(verifier).
The verifier checks the hospital’s DID and signature to trust the credential — without contacting
the hospital.
32
🧠 In Case Studies:
When the case involves:
Secure digital identity
Fraud-proof certificates or records
Cross-border credential validation
You should recommend a DID + VC model. It ensures user control, trust, and decentralization.
🔗 What is Blockchain Interoperability?
Blockchain Interoperability is the ability of different blockchain networks to communicate, share data,
and work together, even if they:
Use different technologies
Have different consensus models
Run on different architectures
In simple terms: It means blockchains talking to each other securely and efficiently.
🧠 Why Is It Important?
Today, blockchains are often isolated systems (like islands):
Bitcoin, Ethereum, Hyperledger Fabric, Solana — all speak their own "language"
This causes data silos, duplication, and inefficiency
Interoperability solves this by allowing:
Cross-chain asset transfers
Data exchange between public and private chains
Smart contracts on one chain to trigger actions on another
33
🧱 Key Use Cases of Blockchain Interoperability
Use Case Description
Cross-chain payments Sending value between networks (e.g., Bitcoin → Ethereum)
Sharing data between private chains (e.g., Manufacturer on Fabric ↔
Supply chain traceability
Retailer on Ethereum)
Decentralized finance (DeFi) Interoperable assets (e.g., wrapped tokens like WBTC)
Digital identity verification Using identity credentials across blockchain ecosystems
Healthcare or education
Securely verifying records from different blockchain sources
records
🔧 How Interoperability Is Achieved
1. Cross-Chain Bridges
Connect two blockchains and lock assets on one chain, then issue equivalent tokens on another.
Example: Wrapped BTC (WBTC on Ethereum)
2. Oracles
Off-chain services that fetch and deliver data between blockchains and external systems.
Example: Chainlink – used for price feeds, weather data, or identity info.
3. Interoperability Protocols
Platforms built specifically to enable multi-chain communication.
Examples:
Polkadot: Connects many blockchains using parachains and a central relay chain.
Cosmos: Uses the Inter-Blockchain Communication (IBC) protocol to allow data exchange.
Wanchain, Quant, ICON: Focused on enterprise and financial blockchain interoperability.
4. APIs and Middleware
Interfaces that connect legacy systems or apps to different blockchains.
🔐 Challenges in Interoperability
Challenge Why It’s an Issue
Different architectures Blockchains use different data models, consensus, and transaction formats
34
Challenge Why It’s an Issue
Security risks Cross-chain bridges can be attack points
Standardization No universal standard yet for interoperability
Latency and cost Transferring assets/data across chains can be slow or expensive
✅ Benefits of Interoperability
Greater ecosystem collaboration
Seamless data and asset exchange
More powerful hybrid applications
Reduces vendor lock-in
Enables multi-blockchain solutions
🧠 In Case Studies:
If a scenario involves:
Different departments or companies using different blockchain platforms
Moving digital identity or assets between systems
Public and private blockchains working together
→ You should mention interoperability as a solution.
35
🧠 What is Hyperledger Indy?
Hyperledger Indy is an open-source blockchain platform specifically designed for decentralized identity
management.
It is part of the Hyperledger family (under the Linux Foundation), but unlike Fabric or Sawtooth (which
focus on general-purpose enterprise solutions), Indy is built only for digital identity.
✅ It provides all the tools to create, manage, and verify DIDs (Decentralized Identifiers) and VCs
(Verifiable Credentials).
🔑 Key Features of Hyperledger Indy
Feature Description
🧱 Purpose-built for identity Not a general ledger — fully focused on decentralized ID
🔐 Supports DIDs & VCs Native support for W3C standards
🌐 Public, permissioned ledger Anyone can verify; only trusted orgs can write
📜 Revocation registry Built-in support for revoking credentials
🔄 Pluggable components Integrates with wallets, apps, and other blockchains
36
🧩 Components of Hyperledger Indy
1. Indy Ledger
Stores DIDs, schemas, credential definitions, and revocation registries.
Permissioned blockchain — only trusted nodes can write, but anyone can read.
2. Indy SDK
A toolkit (in Python, [Link], Java) for building apps that use Indy for identity management.
3. Indy Agents
Software components that interact with the ledger and other agents.
Examples: Mobile wallet apps, verifiers, credential issuers.
🔄 How It Works: A Basic Flow
🎓 Example: University Degree on Indy
1. Issuer (University) creates a schema and credential definition on Indy.
2. It issues a VC to a student’s DID (stored in their mobile wallet).
3. The student (Holder) stores it off-chain.
4. When applying for a job, they present it to a Verifier (employer).
5. The verifier checks:
o Issuer’s DID
o Credential definition
o Revocation status
→ All using Indy Ledger.
No need to call the university. It’s fast, trustless, and private.
🧠 Why Hyperledger Indy is Special
Feature Advantage
Privacy-preserving Uses zero-knowledge proofs and selective disclosure
No central control Every user controls their identity
Interoperability Supports W3C DID and VC standards
Flexible integration Works with wallets, apps, and other ledgers (via Aries, Ursa)
37
Feature Advantage
🔌 Connects With:
Hyperledger Aries: Agent framework for building secure interactions
Hyperledger Ursa: Cryptographic library used in Indy for signatures, ZKPs
🧠 In Case Studies:
If the scenario is about:
Creating a national digital ID system
Issuing tamper-proof academic or health credentials
Giving users control over their data
→ You can confidently recommend Hyperledger Indy as the identity solution.