DID Method: did:galileo

The did:galileo method defines how Decentralized Identifiers are created and resolved for luxury products and participants in the Galileo ecosystem.

Method Syntax

did:galileo:<type>:<identifier>[:<sub-identifier>]

Examples:
did:galileo:01:00614141123452:21:ABC123     (product)
did:galileo:brand:louisvuitton              (brand)
did:galileo:customer:0x1234abcd             (customer)

Product DIDs

Product DIDs encode GS1 identifiers using Application Identifiers:

01 — GTIN (Global Trade Item Number)
21 — Serial Number
10 — Batch/Lot Number (optional)

GTIN Format

GTINs must be 14 digits (GTIN-14). Shorter formats are zero-padded:

GTIN-8:  12345678     -> 00000012345678
GTIN-12: 012345678901 -> 00012345678901
GTIN-13: 0123456789012 -> 00123456789012
GTIN-14: 01234567890123 (no padding)

Resolution

DIDs resolve to DID Documents via the Galileo resolver:

GET https://resolver.galileoprotocol.io/1.0/identifiers/did:galileo:01:00614141123452:21:ABC123

DID Document Structure

{
  "@context": [
    "https://www.w3.org/ns/did/v1",
    "https://vocab.galileoprotocol.io/v1"
  ],
  "id": "did:galileo:01:00614141123452:21:ABC123",
  "controller": "did:galileo:brand:hermes",
  "verificationMethod": [{
    "id": "did:galileo:01:00614141123452:21:ABC123#key-1",
    "type": "JsonWebKey2020",
    "controller": "did:galileo:brand:hermes",
    "publicKeyJwk": { "kty": "EC", "crv": "P-256", ... }
  }],
  "service": [{
    "id": "did:galileo:01:00614141123452:21:ABC123#dpp",
    "type": "DigitalProductPassport",
    "serviceEndpoint": "https://dpp.hermes.com/ABC123"
  }]
}

Operations

Create

DIDs are created by authorized issuers (brands with issuer claims). Creation triggers on-chain token minting.

Read (Resolve)

Anyone can resolve a DID to its document. The resolver returns different views based on the requester's role.

Update

Only the DID controller can update the document. Updates require signature verification.

Deactivate

Deactivation is permanent. Used when products are destroyed or reach end-of-life. Token is burned.

Security Considerations

DIDs are deterministic from GS1 identifiers — no collision risk
Controller change requires multi-sig approval
Key rotation supported via versioned verification methods
Post-quantum ready via crypto-agile signature suite