A solution architect is designing a system for managing academic credentials.
The system must allow universities to issue digital diplomas (Verifiable Credentials) to students, who can then present them to potential employers for verification.
A core requirement is that students must have full control over their own identity data, without relying on a central identity provider.
Which architectural model is best suited for this requirement?