The Mediterraneus Protocol: building an SSI native decentralised ecosystem of digital services

Abstract: This paper presents, for the first time, the Mediterraneous protocol. It is designed to support the development of an Internet of digital services, owned by their creators, and consumed by users by presenting their decentralised digital identity and a proof of service purchase. Mediterraneous is Self-Sovereign Identity (SSI) native, integrating the SSI model at the core of its working principles to overcome the limitations resulting from using pseudonyms and centralised access control of existing Web3 solutions.

• The paper introduces a novel decentralized digital services framework that embeds Self-Sovereign Identity principles to empower both creators and consumers.
• It utilizes a trustless architecture with Ethereum-compatible IOTA Smart Contracts to enable secure and cost-effective service publication and access.
• The research demonstrates enhanced privacy and censorship resistance through Zero-Knowledge Proofs and verifiable credentials, paving the way for future innovations.

Overview of the Mediterraneous Protocol for Decentralized Digital Services

The paper in question introduces the Mediterraneous protocol, an innovative framework designed to facilitate a decentralized ecosystem of digital services. At its core, the protocol is built upon the principles of Self-Sovereign Identity (SSI) to empower both creators and consumers within a decentralized Internet of Services. The protocol seeks to address the limitations of pseudonyms and centralized access control mechanisms characterizing contemporary Web3 solutions by embedding SSI principles directly into its operational framework.

Foundational Principles and Architecture

Mediterraneous operates without the need for a centralized orchestrator, allowing users full autonomy over their services. Service providers can dictate access and pricing, defining terms such as one-time or time-bound access within a decentralized architecture. This is achieved through smart contracts which underpin service publication and transactions execution. These architectural decisions ensure that the protocol adheres to a trustless and censorship-resistant model, thereby eliminating reliance on a central authority for transaction execution and service access.

The infrastructure underpinning Mediterraneous includes a Verifiable Data Registry, Distributed Data Storage, and a Smart Contract Platform. These components collectively ensure the minimal use of distributed ledgers for storing large volumes of data, thus reducing storage costs and latency while leveraging the Ethereum Virtual Machine (EVM) compatible IOTA Smart Contracts for computation.

Self-Sovereign Identity Integration

SSI integration is at the core of the Mediterraneous protocol’s architecture, allowing for decentralized access control. Users maintain control over their identity through a non-custodial approach, with all transactions being mediated in accordance with SSI standards. This includes interactions for service publication via tokenization, utilizing ERC-721 (NFTs) for service discoverability and ERC-20 tokens for access transactions. The Identity Smart Contract is integral, providing on-chain verification for both service providers and consumers, ensuring only those with valid and non-expired identity credentials can participate in the ecosystem.

Comparative Analysis and Implications

When compared to existing frameworks such as the Ocean Protocol, Mediterraneous offers enhanced decentralization by eliminating the need for a marketplace-level access control server, thus ensuring stronger privacy and censorship-resistant properties. The protocol's reliance on Verifiable Credentials (VCs) enables flexible access control, free from the necessitation of a verifiable data registry for managing access lists. This provides inherent advantages in decentralized identity management, ensuring that the trust and privacy of participants are safeguarded.

The adoption of Zero-Knowledge Proof (ZKP) techniques further enriches protocol functionality by enabling privacy-preserving transactions where users can determine the level of identity information disclosed. Such capabilities suggest broader implications for the protocol’s adoption, particularly in sectors prioritizing user privacy and data sovereignty.

Future Directions

The paper concludes with a forward-looking perspective, outlining potential enhancements such as integrating Zero-Knowledge Verifiable Credentials to bolster privacy. Additionally, it contemplates extending the protocol to support VCs issued by diverse issuers, harnessing the interoperability potential inherent in the SSI model. Furthermore, expanding service access options and developing cryptographic techniques for on-chain identity proofing represent areas for future research.

In sum, the Mediterraneous protocol proposes a robust framework for developing a decentralized digital services ecosystem by centrally embedding SSI principles and supporting advanced privacy-preserving technologies. As developments progress, the protocol could significantly influence the trajectory of digital service ecosystems within the Web3 paradigm, offering a novel intersection of decentralization and identity sovereignty.