Self-Sovereign
Identity Explained

Self-Sovereign Identity (SSI) is the idea that individuals — not platforms, governments, or corporations — should own and control their digital identities. Coined by Christopher Allen in 2016, SSI rests on ten principles: Existence, Control, Access, Transparency, Persistence, Portability, Interoperability, Consent, Minimization, and Protection. In practice, SSI means: you generate your identity locally (a DID — Decentralized Identifier). You receive Verifiable Credentials (VCs) from issuers — a university issuing a degree, a government issuing an ID, a bank verifying KYC. You present these credentials to verifiers, proving claims about yourself without contacting the issuer each time. The key insight: the credential holder (you) is at the center. Issuers and verifiers communicate through you, not around you. This inverts the Web2 model where platforms mediate every identity transaction.

A decade after Allen's principles, SSI has delivered real infrastructure: DIDs are standardized. The W3C DID Core specification is stable. Decentralized identifiers are resolvable across networks — did:ethr on Ethereum, did:indy on Hyperledger Indy, did:key for lightweight use cases. You can generate a DID today and use it across compliant wallets. Verifiable Credentials work. The W3C VC Data Model v2.0 enables cryptographically signed claims that are privacy-preserving by default. Selective disclosure — proving "I am over 21" without revealing your birth date — is production-ready with BBS+ and CL signatures. Enterprise adoption is real. The EU's eIDAS 2.0 regulation mandates SSI-compatible digital identity wallets for all 450 million EU citizens by 2027. Deutsche Bank uses Polygon ID (now Billions) for ZK-based age verification. The IATA Travel Pass uses VCs for COVID-era health credentials. SSI is not a theoretical vision anymore. It is deployed infrastructure.

For all its achievements, SSI has a structural blind spot that no amount of credential infrastructure can fix: SSI verifies claims. It does not verify continuity. A Verifiable Credential proves: "at issuance time, this attribute was true about this subject." It does not prove: "the subject presenting this credential now is the same continuous entity that received it." This gap is invisible in the physical world because physical credentials are (mostly) non-transferable. Your passport photo matches your face. Your biometric ID card requires a fingerprint. But in the digital world, a VC is a data object — it can be copied, transferred, sold, or stolen without detection. If Alice gets a KYC credential and sells it to Bob, the credential is still valid. The signature still verifies. The issuer has no way to know the credential changed hands. SSI's answer is "bind the credential to a biometric" — but as we've established, static biometrics are broken. Your face can be deepfaked. Your fingerprint can be replayed. Your iris hash can be stolen from a database. SSI solved the issuance problem. It did not solve the continuity problem.

The missing layer in the SSI stack is proof of continuity — a cryptographic attestation that the entity presenting a credential is the same continuous subject that received it. This is not a credential problem. It is a physics problem. The only identity signal that is both universal (every human has it) and non-transferable (cannot be separated from the living body) is motion. The way you move — your micro-timing variance, your physiological tremor, your motor unit recruitment patterns — is biologically unique and mathematically impossible for AI to forge. MyShape Protocol adds this missing layer to the SSI stack: DID + VC + Continuity Proof = Complete Sovereign Identity The DID establishes the identifier. The VC establishes the claim. The Continuity Proof establishes that the same human has continuously controlled this identity across time — not through a static biometric, but through a dynamic motion-signature that AI cannot simulate and that cannot be transferred. This is not a replacement for SSI. It is the completion of SSI. The ten principles were written before the Agent Economy existed. They did not anticipate a world where autonomous AI agents execute transactions on behalf of humans, where deepfakes defeat static biometrics, and where credentials can be bought and sold on darknet markets. Continuity is the 11th principle that SSI needs.