Documentation

Official guides & specifications

Everything you need to understand, deploy, and integrate the Internet Identity Card. For end users, developers, security auditors, and integrators.

Documentation is public — the generator is access-controlled

The four official documents below — User Guide, Technical Specification, Engineering Specification, and Threat Model — are freely available for review, audit, and reference. Their integrity is anchored on the Bitcoin and Ethereum blockchains and on OpenTimestamps. The underlying architecture is disclosed in two open defensive publications on Technical Disclosure Commons (CC BY 4.0).

The generator application (distributed inside the Complete Package), however, is not publicly downloadable. Due to the critical and sensitive nature of identity infrastructure, access to the generator is granted through a controlled onboarding process to ensure security, compliance, and operational alignment.

For demo requests or partnership inquiries, please contact us at demo@internetidentitycard.com.

USER
GUIDE
For end users

IIC User Guide

Step-by-step instructions to create your first card, choose between Quick and Secure modes, share your identity safely, understand SHA-256 page integrity, and answer common questions about Memorable Words, Card Passphrases, and recovery.

PDF · v8.4.1 · 20 KB · 7 pages
Blockchain timestamp proofs
SHA-256c151638e93fdf7c89298ec4ff98371f33511decbc52ff6e667be77497cada2e5
TECH
SPEC
For developers & auditors

Technical Specification

Full cryptographic architecture and API reference. Covers AES-256-GCM, Argon2id RFC 9106 (96 MiB, t=4, p=4), PBKDF2 600K iterations for backups, ECDSA P-256, the dual-passphrase architecture, SHA-256 page integrity (Mode A), IIFE module isolation, threat model, and storage format.

PDF · v8.4.1 · 23 KB · 8 pages
Blockchain timestamp proofs
SHA-256d61908e6f7fec563d5351faeec3a1d9c557f677c3d6c9ef993fbf6bb7642d41e
ENG
SPEC
For integrators & reviewers

Engineering Specification

System architecture, provenance timeline (2013–2026), defensive publications (TDCommons #10079 and #10167), standards compliance, and version history. Documents NIST, RFC, GDPR alignment and the registration timeline of Https Card Ltd. Reference document for procurement, due diligence, and compliance reviews.

PDF · v8.4.1 · 20 KB · 7 pages
Blockchain timestamp proofs
SHA-256760129676c9852902c4e086c5a27ae1023df5d25162a8be5ad98425e29051975
THREAT
MODEL
For security auditors

Threat Model

Realistic security analysis: trust assumptions, assets, adversary model (A1–A4), STRIDE analysis, ten concrete attack scenarios, and an honest account of residual risks and out-of-scope threats (compromised devices, generator authenticity, coercion, quantum). Companion to the Technical & Engineering Specifications.

PDF · v8.4.1 · 17 KB · 6 pages
Blockchain timestamp proofs
SHA-2560c83f4edfc7cb24804b6eec8bb839f50d50846871ec08f19a2860a976ab10f82
Access-controlled

Complete Package — generator + documentation

The Complete Package is a single archive containing the four official documents (User Guide, Technical Specification, Engineering Specification, Threat Model), the generator application (~338 KB), the README, and a SHA256SUMS checksum file. Because it includes the generator, this download is provided through the controlled onboarding process described above.

🔒 Request access — demo@internetidentitycard.com

Once granted, you can verify the authenticity of the archive against the published SHA-256 hash and ECDSA P-256 signature.

Blockchain timestamp proofs
SHA-2564e509b863b7ffe9ddcd6b3025ca1e0e9af89b2e52e0aa7b2e0d812715972a4fa

Defensive publications

The cryptographic constructions underlying the Internet Identity Card are disclosed as open prior art on Technical Disclosure Commons (operated by Elsevier), released under the Creative Commons Attribution 4.0 license with explicit patent waivers from the inventor. They are indexed by Google Scholar, Semantic Scholar, and the bepress Digital Commons Network.

TD
#10079
12 May 2026

Cryptographic Identity Document System Using TOTP-Derived Symmetric Keys

Discloses the TOTP-derived symmetric key system, dual-domain PBKDF2 architecture, AES-256-GCM encryption, IIFE module isolation, ECDSA P-256 signatures, and single-file HTML distribution model for offline issuer-mediated access control.

Defensive Publications Series · CC BY 4.0
TD
#10167
19 May 2026

Self-Verifying Single-File Cryptographic Documents with Dual-Passphrase Architecture

Discloses two new constructions: (i) the SHA-256 page integrity scheme (Mode A) with fail-closed lockdown, and (ii) the dual-passphrase key architecture using Argon2id RFC 9106 (96 MiB, t=4, p=4) for per-export recipient passphrases.

Defensive Publications Series · CC BY 4.0

Which document should I read?

Pick the one that matches your role and what you want to do.

I want to use IIC
→ User Guide
I want to integrate IIC
→ Technical Specification
I am evaluating IIC
→ Engineering Specification
I am assessing security risk
→ Threat Model
I am auditing the cryptography
→ Technical Specification + Threat Model
I need standards compliance
→ Engineering Specification

Page integrity

In addition to file verification, you can verify the SHA-256 integrity of every HTML page on this site in real time — directly in your browser, using the W3C Web Crypto API. Nothing is uploaded.

View page integrity →