AIMCIS-IDNT — Identity & Entity Verification
The foundation of all trust. Defines how intelligent systems identify themselves, authenticate actions, and prove authority.
Scope
The Identity & Entity Verification domain covers all aspects of agent identity within the AIMCIS ecosystem — from initial registration through ongoing verification, delegation chains, and revocation.
Core Requirements by Assurance Level
| Requirement | AL0 | AL1 | AL2 | AL3 |
|---|---|---|---|---|
| DID registered in Registry | Self-declared | Verified via DNS TXT | AAA-verified | AAA-verified + annual review |
| Public key stored | Software (any standard library) | Software / optional secure element | HSM or smart card | Dual-key HSM, continuous monitoring |
| Identity claims signed | Optional | Required | Required + AAA attestation | Required + cross-domain linkage |
| Delegation chain supported | No | Basic | Full chain with verification | Full chain + real-time validation |
| Revocation propagation | N/A | 24 hours | Sub-day | 15 minutes |
Certification Test Cases
- DID Resolution: Verify that the entity's DID resolves correctly and returns a valid public key.
- Signature Verification: Sign a test payload with the entity's private key and verify with the resolved public key.
- Claim Signing: Entity signs identity claims and demonstrates verification against Registry.
- Delegation Chain: Demonstrate a delegation chain from parent agent to child agent with proper signature propagation.
- Revocation Check: Revoke the entity's DID and verify that consuming systems reject signed payloads within the required timeframe.
Related domains: IDNT is foundational to all other domains. Every domain profile builds upon IDNT requirements for agent identity verification.