Lumia Passport

Introduction to Lumia Passport

Lumia Passport is your blockchain identity with infinite dencentralized possibilites.

In essence, it is an Account Abstraction (AA) wallet that replaces traditional private key wallets with smart contracts. AA makes your crypto experience more secure, user-friendly and enabling features like social recovery, multi-factor authentication, bundled transactions, and spending limits. All of this is now handled by custom logic instead of just a single private key.

At the core of Lumia Passport are both decentralized identity and account abstraction solution. It is based on the ERC-4337 account abstraction and Sumsub KYC and identity verification. While ERC-4337 standardized AA on Ethereum, allowing wallets to act like bank accounts with flexible rules, Sumsub handles the core KYC/AML compliance and issues verifiable attestations on-chain.

Lumia Passport represents a paradigm shift in how users interact with blockchain applications, removing the complexity of traditional wallet management while maintaining the security and decentralization principles that define Web3.

What is in Lumia Passport?

Lumia Passport is a multi-layered identity and account management system that combines:

  1. ERC-4337 Smart Accounts: Programmable wallet accounts that enable gasless transactions, batch operations, and custom authorization logic

  2. Sumsub Integration: A combination of ZKPs for secure verification, document checks, biometrics, and transaction monitoring, aiming to balance user privacy with strict regulatory needs.

  3. Reusable Identity: A single, portable identity that works across all dApps and services within the Lumia ecosystem

  4. Selective Disclosure: Users control exactly what information they share with different applications.

The Passport serves as both a Smart Account wallet and a verified credential container, allowing users to seamlessly interact with decentralized applications while maintaining complete control over their personal data.

Core Components

ERC-4337 Smart Account Architecture

Lumia Passport leverages the ERC-4337 standard to transform traditional externally owned accounts (EOAs) into programmable smart contract accounts. This architecture provides several key advantages:

UserOperation Objects

Instead of traditional transactions signed by private keys, Lumia Passport uses UserOperations—pseudo-transaction objects that represent user intent. A UserOperation contains:

  • sender: The smart account address initiating the operation

  • nonce: Sequential number preventing replay attacks

  • initCode: Bytecode for deploying the account if it doesn't exist

  • callData: The actual function call and parameters to execute

  • callGasLimit: Maximum gas for the main execution

  • verificationGasLimit: Maximum gas for signature verification

  • preVerificationGas: Gas compensation for bundler operations

  • maxFeePerGas: Maximum total gas price willing to pay

  • maxPriorityFeePerGas: Maximum priority fee for miners

  • paymasterAndData: Information about third-party gas sponsorship

  • signature: Cryptographic proof authorizing the operation

Entry Point Contract

The Entry Point contract is the singleton smart contract that orchestrates all ERC-4337 operations on Lumia chain. It:

  • Validates UserOperations before execution

  • Manages the execution flow and gas accounting

  • Coordinates with Paymasters for gas sponsorship

  • Ensures security through standardized validation

  • Handles batch execution of multiple operations

Lumia chain utilizes a deployed Entry Point contract compatible with the ERC-4337 v0.6 specification, ensuring broad compatibility with the account abstraction ecosystem.

Smart Account Contract

Each Lumia Passport is implemented as an ERC-4337-compliant smart contract that:

  • Stores all user assets (tokens, NFTs, etc.)

  • Implements custom validation logic before transaction execution

  • Supports multiple signers and authorization schemes

  • Enables modular functionality through plugins

  • Maintains upgrade paths while preserving security

The Smart Account is signer-agnostic, meaning users can authenticate using various methods including traditional private keys, multi-signature schemes, hardware wallets, biometrics, or passkeys.

Sumsub Integration

Comprehensive Identity Verification Lumia Passport leverages Sumsub, a full-cycle verification platform that orchestrates the entire user lifecycle. Sumsub enables secure and compliant identity verification, allowing users to meet regulatory standards while ensuring their digital identity remains portable and secure.

Advanced Verification & Fraud Prevention At the core of Sumsub is a robust compliance engine that validates user credentials with high accuracy and liveness detection. This technology allows for:

  • Non-Doc Verification: Verify identity using banking or database records without uploading physical documents

  • Liveness and Biometrics: Prove you are a real human presence to prevent bot attacks and fraud

  • Behavioral Intelligence: Analyze user patterns to detect suspicious activity without compromising sensitive data

Lumia chain integrates Sumsub's verification orchestration to support this functionality, ensuring that sensitive user information is processed securely while meeting strict global compliance requirements.

Credential Issuance and On-Chain Attestations Lumia Passport credentials are issued through Sumsub's trusted verification flow. The integration supports:

  • Global Coverage: Verification capabilities across 220+ countries and territories

  • Multi-Level Checks: From basic liveness to advanced AML screening

These credentials support:

  • Personal information verification (name, address, date of birth)

  • Government-issued IDs and proof of address validation

  • Accreditation status for qualified investors

  • Continuous monitoring for AML risks

Once verified, the status can be anchored on-chain as a verifiable attestation or Soulbound Token (SBT), ensuring immutability and allowing dApps to check status without re-verifying data.

Reusable Identity Mechanism The Sumsub-integrated Passport implements a reusable identity protocol that allows users to verify once and share their status across multiple dApps. This is achieved through:

  • Unified Profile: A single verification flow creates a portable identity

  • Privacy-Preserving Checks: dApps verify the "Verified" status rather than raw data

  • Cross-Service Portability: Seamless onboarding to new services within the ecosystem

  • Fine-grained access control mechanisms

Users can choose when to present their verified status to each dApp, maintaining privacy while enabling necessary regulatory verifications.

Key Features and Benefits

Simplified User Onboarding

Lumia Passport eliminates the complexity of traditional blockchain onboarding:

  • No Seed Phrases: Users don't need to memorize or secure 12-24 word recovery phrases

  • Social Recovery: Authorize trusted friends, family, or devices to help recover accounts

  • Web2-Style Login: Authenticate using familiar methods like email, social accounts, or biometrics

  • Instant Account Creation: Smart accounts are deployed on-demand when first needed

Gasless Transactions

Through Paymaster integration, Lumia Passport enables truly gasless experiences:

  • Sponsored Transactions: Protocol or application pays gas fees on behalf of users

  • ERC-20 Gas Payment: Pay transaction fees using any supported token (USDC, LUMIA, etc.)

  • Flexible Fee Models: Developers can implement custom fee structures

  • No Native Token Required: Users don't need to hold LUMIA tokens to interact with dApps

The Paymaster acts as a gas tank, covering transaction costs and enabling seamless onboarding for Web2 users unfamiliar with blockchain economics.

Enhanced Security Features

Lumia Passport provides multiple layers of security:

Session Keys

Create temporary authorization keys with limited permissions and time bounds. For example:

  • Allow a gaming dApp to execute trades up to 100 LUMIA for 24 hours

  • Grant a DeFi protocol permission to interact with specific smart contracts

  • Revoke access instantly if a device is compromised

Multi-Chain Validation

Validate transactions across multiple blockchains before execution, enabling:

  • Cross-chain transaction coordination

  • Unified security policies across chains

  • Protection against replay attacks on different networks

Passkey Support

Leverage device-native biometric authentication:

  • Face ID or Touch ID on mobile devices

  • Windows Hello on desktop

  • Hardware security keys for maximum protection

Transaction Limits

Configure spending limits to prevent account drainage:

  • Set maximum transferable value per transaction

  • Define daily or weekly spending caps

  • Implement time-locked large transactions

Whitelists

Create lists of trusted addresses:

  • Only allow transfers to pre-approved addresses

  • Prevent phishing attacks and malicious transactions

  • Add friction to unusual transaction patterns

Flexible Authorization

Lumia Passport is completely signer-agnostic, supporting:

  • Traditional Private Keys: Standard ECDSA signatures

  • Multi-Signature: Require multiple approvals for transactions

  • Social Recovery: Designated guardians can help restore access

  • Hardware Wallets: Ledger, Trezor integration

  • Biometric Authentication: Fingerprint, facial recognition

  • Passkeys: WebAuthn-based authentication

  • Future Quantum-Proof: Ready for post-quantum cryptography

Users can mix and match authentication methods and change them over time without affecting their account address or assets.

Cross-Chain Compatibility

Lumia Passport works seamlessly across multiple blockchains:

  • Native support for all EVM-compatible chains

  • Integration with Polygon AggLayer for unified liquidity

  • Cross-chain account abstraction through Particle Network

  • Atomic operations spanning multiple chains

Users maintain a single Passport identity while interacting with dApps deployed on different chains, with all bridging and interoperability handled automatically in the background.

Compliance and Regulatory Features

KYC/AML Integration

Lumia Passport ensures regulatory compliance through:

Global Regulatory Alignment

The KYC process is designed to be flexible and adaptable to different jurisdictions:

  • Country-specific KYC requirements

  • Regional data protection compliance (GDPR, CCPA)

  • Industry-specific regulations (MiFID II for financial services)

  • Ongoing monitoring and reporting capabilities

Institutional Requirements

For institutional participants, Lumia Passport supports:

  • Enhanced due diligence (EDD) procedures

  • Accredited investor verification

  • Corporate KYC for entities

  • Beneficial ownership identification

  • Source of funds verification

Compliance Monitoring

Ongoing compliance features include:

  • Transaction Monitoring: Real-time analysis of transaction patterns

  • Risk Assessment: Automated scoring based on behavior and associations

  • Reporting Tools: Generate compliance reports for auditors and regulators

  • Alert Systems: Flag suspicious activities for review

  • Audit Trail: Immutable record of all KYC and compliance actions

Privacy-Preserving Compliance

Despite strict compliance requirements, Lumia Passport maintains user privacy:

  • Credentials stored off-chain with only hashes on-chain

  • Zero-knowledge proofs for verification without data exposure

  • Selective disclosure of only necessary information

  • Encrypted credential storage

  • User-controlled data sharing

Real-World Asset (RWA) Enablement

Lumia Passport is essential for RWA applications:

Asset Tokenization

Enable compliant tokenization of real-world assets:

  • Real estate properties

  • Commodities (gold, diamonds, aluminum)

  • Art and collectibles

  • Intellectual property

  • Securities and financial instruments

Legal Framework Support

Integration with legal and regulatory frameworks:

  • Smart contract templates for compliant agreements

  • Bailee agreements for asset custody

  • Common law compliance structures

  • Jurisdictional flexibility

Fractional Ownership

Enable compliant fractional ownership:

  • Verify investor accreditation

  • Enforce ownership transfer restrictions

  • Maintain shareholder registries

  • Distribute dividends or yields

Last updated

Was this helpful?