Universal verification of the authenticity and origins of NFTs and Tokens

[EddyTheCo]

The verification of the ownership and origins of NFTs is complicated, even more if ones want to do it in a decentralized and public manner. The verification of the ownership is provided by the distributed ledger and cryptographic methods in a very decentralized and public manner.
In order to verify the origins there is the IOTA Public Token Registry . In my opinion this will break decentralization and will be difficult to maintain.
In order to remain decentralized, the creator of the NFT should provide their own Public Token Registry(PTR) by some API.
Example:
Call of duty(COD) creates an artwork for the best player of 2022. Correspondingly they mint a NFT on the IOTA network. Inside of the immutable data of this NFT there is the link to the API of their PTR. After minting they add to their PTR the unique identifier of this NFT on the tangle.
COD then transfer to you(because you are the best one) the ownership of that NFT.
With that you can set the artwork as profile picture of Twitter. Twitter will verify the ownership by interaction with your wallet and verify the origin by interacting with the API written in the NFT.

The API end point should be secure and linked to COD in some manner(like https://www.callofduty.com/nfts). The reputation of "https://www.callofduty.com/" will be added to that profile picture on twitter. Of course small creators could use the IOTA Public Token Registry or any other registry gaining the corresponding reputation.

Instead of a Public Token Registry the creator could choose to validate the origin by the use of private and public key methods in some API linked to the creator. In this case some public key and a signature will be added to the immutable data of the NFT and the API prove that the creator owns the corresponding private key.

In principle there is no need to change the IOTA NFT Standard - IRC27 if this has the possibility to add immutable data when minting a NFT. But the use of a single PTR is not appropriate.