A solution architect is designing a system for managing academic credentials. The system must allow universities to issue digital diplomas (Verifiable Credentials) to students, who can then present them to potential employers for verification. A core requirement is that students must have full control over their own identity data, without relying on a central identity provider. Which architectural model is best suited for this requirement?