About UCAN

User Controlled Authorization Network (UCAN) is a capability-based authorization system that enables users to delegate permissions without requiring a centralized authority. UCAN puts control back in the hands of users while maintaining the highest levels of security and privacy.

The Vision Behind UCAN

UCAN was built with the belief that authorization systems should empower users without compromising privacy or requiring trust in central authorities. UCAN's decentralized approach ensures that users maintain complete control over their permissions and data, no matter the connectivity status or network conditions.

Core Principles of UCAN

User Control: Users maintain complete control over their authorizations. All permissions are user-originated and can be revoked at any time.

Cryptographic Security: All authorizations are cryptographically signed and verifiable, ensuring that permissions cannot be forged or tampered with.

Decentralized: No central authority is required for authorization verification. The system operates in a completely distributed manner.

Offline-First: UCAN works without an internet connection, enabling authorization even in disconnected environments.

Composable: UCANs can be chained and combined to create complex authorization flows while maintaining security guarantees.

Technical Foundation

UCAN leverages proven cryptographic primitives and standards to ensure maximum security and interoperability:

  • JSON Web Tokens (JWT): UCAN builds on the widely-adopted JWT standard for maximum compatibility.
  • Decentralized Identifiers (DIDs): Uses DIDs for identity management and key resolution.
  • Public Key Cryptography: All authorizations are signed using industry-standard cryptographic algorithms.
  • Capability-Based Security: Implements the principle of least authority (PoLA) for precise permission control.

Standards Compliance

UCAN is designed to be standards-compliant and interoperable with existing web technologies. It builds on established protocols and can be integrated into any system that supports JWT and standard HTTP mechanisms.

The UCAN Working Group

UCAN is developed and maintained by a working group of security experts, cryptographers, and distributed systems engineers. The specification is open-source and community-driven, ensuring transparency and broad adoption.

We welcome contributions from the community and are committed to making UCAN the standard for decentralized authorization. If you're interested in contributing or have questions, please visit our GitHub repository or join our community discussions.

Future Development

The UCAN specification continues to evolve based on real-world usage and community feedback. Our roadmap includes:

  • Additional programming language implementations
  • Integration with emerging web standards
  • Performance optimizations for high-throughput applications