Identity Without Disclosure: A Post-Centralized Authentication Architecture Using Decentralized Identifiers, Verifiable Credentials, and Zero-Knowledge Proofs

Contemporary digital identity systems are largely constructed around a disclosure-and-retention model: users disclose identifying information to a service provider, the provider stores that information in a centralized database, and subsequent authentication is used to recover access to the stored identity record. This architecture creates a structural contradiction. The more information an organization accumulates to establish trust, the more valuable that organization becomes as a target for compromise. This paper proposes a post-centralized identity architecture based on decentralized identifiers (DIDs), verifiable credentials (VCs), selective disclosure, and zero-knowledge proofs (ZKPs). Rather than repeatedly disclosing static personal information, individuals obtain cryptographically verifiable credentials from trusted issuers and present only the claims or predicates required for a specific transaction. A verifier may therefore confirm that a person is an adult, a resident of a jurisdiction, a licensed professional, or an authorized organizational representative without necessarily obtaining the underlying date of birth, address, license number, or other source data. The proposed architecture separates identity, authentication, authorization, and provenance, thereby reducing the value of centralized personal-data repositories while preserving institutional trust. It further extends provenance from creative artifacts to persons, organizations, artificial intelligence agents, and digitally mediated actions. The central argument is that privacy in an era of scalable cyberattack should shift from protecting ever-larger collections of personal data toward minimizing the creation of such collections in the first place.