The DIF identity hub lies within the TheFsm Architecture and is implemented through the OTNode DID Services. The component is used to securely store verifiable credentials. It is a datastore containing semantic data objects at well-known locations. Each object in a Hub is signed by an identity and accessible via a globally recognized API format that explicitly maps to semantic data objects. Identity hubs are addressable via unique identifiers maintained in a global namespace and are associated with the Decentralized Identifier standard described previously in the document.

A single entity (DID subject) may have one or more instances of a Hub, all of which are addressable via a URI routing mechanism linked to the entity’s identifier. Hub instances sync state changes, ensuring the owner can access data and attestations from anywhere, even when offline.