Identity Manager
Description of Identity Manager Canister with other canisters & external systems
Last updated
Description of Identity Manager Canister with other canisters & external systems
Last updated
Central Registry: The Identity Management Canister serves as the central registry responsible for creating and maintaining unique identifiers. Each identifier (ID number) is directly paired with a principal address, forming the core data structure for identity management.
ID Creation and Data Handling: Its primary tasks include:
Mapping: Storing and managing the pairings of ID numbers with their corresponding principal addresses.
Lifecycle Management: Handling registration and removal of these mappings as needed.
Interaction with Other Canisters: Several service-oriented canisters interact with the Identity Management Canister:
User Service, Professional Service, and Facility Service Canisters: These directly utilize the identity data to authenticate users. They can query the registry to verify either the principal address corresponding to an ID number or vice versa.
Extended Systems: Additional components such as Data Services, Gamification Systems, and AI Agent Systems are designed to query the registry as well. These systems may need to verify user authenticity based on the same mappings, thereby integrating seamlessly into the overall architecture.
Use Case for Queries: The architecture is designed so that any canister requiring user authentication—whether it’s a service canister or an external system—can query the Identity Management Canister to retrieve identity information, ensuring a unified and reliable authentication process across the platform.
Permissioned Identity Registration:
Restricted Operations: Only canisters that have completed a registration process with the Identity Management Canister—and have paid the required fees—are authorized to register or remove identity records.
Designated Identity Management: Each registered canister manages the identities it is responsible for, ensuring accountability and secure operations.
Open Querying Environment:
Universal Access: While the registration and modification of identity records are controlled, querying the registry for identity data is open. This allows any external canister or system to verify identities, supporting transparency and broad interoperability.
Optional Participation: External canisters can opt to integrate with the Identity Management Canister if they wish to utilize the centralized identity verification system for their user authentication needs.
