Policy & Regulatory



Objectives Current Activities Timelines Papers and Feedback process More
1 eIDAS (consolidated version)

Adopted https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A02014R0910-20240520
2 eIDAS Trust framework


 eIDAS Testbed: https://test.eid.as/ 
3

GDPR




European Data Protection Board: 

https://www.edpb.europa.eu/our-work-tools/our-documents/topic/gdpr_en


1. Implementing Acts



Objectives Current Activities Timelines Papers and Feedback process More
1 Article 5a: Protocols and Interfaces How digital identity wallets should communicate with other systems through protocols and interfaces. Adopted
 
2 Article 5a: Integrity and Core Functionalities Helps to understand what features EUDIW should offer. Adopted
 
3 Article 5a: PID & EAA Understand how data and attributes are managed and verified in the ecosystem. Adopted
 
4 Article 5c: Certification   Adopted
 
5 Ecosystem Notifications Notifications to the Commission Adopted
 
6 Security Breaches Defines how security breaches must be handled, and when and how breached wallets should be suspended. Feedback period ended on 02 January 2025
  
7 Electronic Attestations of Attributes Provides the specifications needed to issue Qualifed Electronic Attestations of Attributes (QEAA) and Electronic Attestations of Attributes (EAA), including how to achieve interoperability and details on revocation mechanisms. Feedback period ended on 02 January 2025


8 Wallet lists Sets out rules for Member States to submit information on certified wallet solutions for the machine-readable list of certified wallets to be published and maintained by the European Union. Feedback period ended on 02 January 2025


9 Identity matching – Cross-border identity matching of natural persons by public sector bodies (RP) Sets out necessary provisions for Member States to ensure correct identity matching in cross-border authentications. Feedback period ended on 02 January 2025 [ref]
Feedback of DC4EU on 2024 Dec 27th 
10 Relying parties – The registration of relying parties and the common mechanism for allowing the identification and authentication of relying parties Sets out rules for the registration of wallet relying parties via national registers. Feedback period ended on 02 January 2025


Work by the commission and the member states



Objectives Current activities Timelines Papers and Feedback process More
1 ARF Consensus work on how the different actors and components in the EUDIW ecosystem should work

ARF V.1.6 (2025 March 7th)

GitHub 

Roadmap



2 Reference implementation Reference blueprint how to implement a wallet based on eIDAS and the ARF



3 EDC European Digital Credential for Learning (EDC). Documentation of learning through verifiable, digital version of a credential issued by an organisation to a learner. To be deposit to the Europass wallet 

Webinar (14th May 2025) Diagramme

Pilot Projects & Real-World Use Cases




Objectives Current Activities Timelines Papers and Feedback process More
1

The EU Digital Identity Wallet Consortium (EWC)is a joint effort to leverage the benefits of the proposed EU digital identity in the form of Digital Travel Credentials across the Member States. The EWC intends to build on the reference wallet application to enable uses related to Digital Travel Credentials.

Covers and test these there usecases: 

  1. The storage and display of digital travel credentials
  2. Payment credential
  3. Organizational Digital Identity (ODI) and legal person ID (PID)

2025/ Mar 7th: EWC (LSP) Trust List (https://github.com/EWC-consortium/ewc-trust-list)

2025/ Mar 7th: EWC Wallet Conformance Backend (https://github.com/EWC-consortium/ewc-wallet-conformance-backend) → Implemented RFCs: 

  • RFC001: Implements the OID4VCI (OpenID for Verifiable Credential Issuance) workflow for credential issuers.
  • RFC002: Implements the OIDC4VP (OpenID for Verifiable Presentations) workflow for verifiers (relying parties).

2025/ Mar 5th: EWC LSP - EUDI Wallet Rulebooks and Data Schemas Electronic Attribute Attestations (https://github.com/EWC-consortium/eudi-wallet-rulebooks-and-schemas).

2025/ Feb 25th: EWC EUDI RFCs (https://github.com/EWC-consortium/eudi-wallet-rfcs).


Insights and deliverables

Data schema ds010-student-id.json

Data schema ds004-legal-person-identification-data.json

2

POTENTIAL aims to foster innovation, collaboration and growth in six digital identity sectors — governmental services, banking, telecommunications, mobile driving licenses, electronic signatures, and health.

Cover and test these 6 Scenarios:

  1. Governmental Services
  2. Banking
  3. Telecommunications
  4. Mobile Driving Licenses
  5. Electronic Signatures
  6. Health(e-prescriptions) 1
2025/ Feb: Meeting to test interoperability of mobile driving licences between European countries: https://www.digital-identity-wallet.eu/news/february-2025-acceleration-for-the-european-digital-driving-licence/

Press


Playground for EUDIW interoperability testing


3

NOBID is a set of Nordic and Baltic countries who, together with Italy and Germany, will pilot the use of the EU Digital Identity Wallet for authorising payments of products and services.

 

The project will focus on a single use-case: the use of the EUDI wallet for the authorisation of payments for products and services by the wallet user.

  1. Wallet issuing
  2. Payment means issuance
  3. Payment Acceptance

It includes WP6, WP7 and WP8.

 

The main goal of Work Package 6 (WP6) in the NOBID project is to demonstrate the ability to issue and revoke Qualified Electronic Attestations of Attributes (QEAAs) of national and international interest.

WP7 is responsible for the detailed design and development of the payment use case in line with the proposed EUDIW Architecture Reference Framework (ARF). This includes identifying high-level solutions in terms of scope, user journey and technical specifications. 

WP8 specific activities include:

  • the provision of specifications for the piloting of the signature; 
  • the development according to these specifications; 
  • the pilot of the implementation for specific use cases (in cooperation with other WPs in NOBID). 

WP7 is currently in the development phase and has set the timeline for the implementation phase. Additionally, it has set out the structure of the impact assessment analysis. 

The second milestone of WP8 targets full technical readiness by the end of Q1 or early Q2 of 2025 for piloting with the defined use cases, the actors involved in the needed roles, and the functionality in place. 

WP6 has no milestone.

-
4

DC4EU provides tangible support to the public and private sectors in the educational and social security sectors by deploying and accessing state-of-the-art trans-European interoperable digital service infrastructures and their integration in a cross-border trust framework.

 

Cover and test use of the EUDI wallet in these two Areas:

  1. The educational sector 
  2. The social security domain

WP5 focuses on several critical use cases, including:

  1. Cross-border enrolment: Facilitating student enrolment in universities across EU member states using verifiable digital credentials
  2. Professional qualification verification: Enabling seamless verification of qualifications for professionals moving between EU countries.
  3. Lifelong learning recognition: Supporting the accumulation and recognition of credentials from various learning experiences throughout an individual’s career

2025/Feb 27th: 

DC4EU Wallet Credential Issuance Demo: DC4EU Credential Acquisition (https://www.dc4eu.eu/dc4eu-wallet-credential-issuance-demo-dc4eu-credential-acquisition/)

 

Timeline on the top of this page

Reports

Onboarding tutorial

Download Credentials tutorial

5

WE BUILD, the consortium Wallet Ecosystem for Business and payments Use cases on Identification, Legal representation and Data sharing, is proud to announce that it has been selected by the Commission to participate in the second round of Large Scale Pilots for the EU Digital Identity Wallet.

 

 

Expected to start working in September 2025, running for 24 months.



6

APTITUDE

 

 

 



Security & Privacy Concerns



Definition Current Activities Timelines Papers and Feedback process More
1 Encryption
Security: https://github.com/eu-digital-identity-wallet/eudi-lib-ios-iso18013-security


2

Key management






3

Zero-trust security models

Zero-Knowledge Proof (ZKP) Protocols (ZK-SNARKs, ZK-STARKs): Enables privacy-preserving identity verification without disclosing private data.

2024/ Jun:

Cryptographers' Feedback on the EU Digital Identity’s ARF #200 (https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/issues/200)


Technical & Research Communities



Definition Current State Timelines Papers and Feedback process More
1

STS

This project collects all the information need to monitor and support the standadization activities for the EUDI Wallet

 
2

Contributions from Identity Foundations (e.g., OpenID Foundation, DIF, Trust Over IP)

  • JSON Web Tokens (JWT), JSON-LD, CBOR, and SD-JWT (IETF): Used for secure, verifiable, and compact digital identity assertions.
  • Decentralized Identity Foundation (DIF) Standards (DIF): Works on interoperability solutions such as DIDComm and secure messaging.
  • ARF (EU commission)
  • OIDC
    • OIDC4VC (OpenID Connect for Verifiable Credentials) is an extension of OpenID Connect (OIDC) designed to support the issuance, presentation, and verification of Verifiable Credentials (VCs) within decentralized identity ecosystems. It bridges traditional authentication systems (like OAuth 2.0 and OpenID Connect) with Self-Sovereign Identity (SSI) principles by leveraging existing identity protocols to issue, present, and verify Verifiable Credentials (VCs) in a decentralized and user-centric manner.
    • OIDC4CI(OpenID Connect for Credential Issuance) is an extension of OpenID Connect (OIDC) that enables the issuance of Verifiable Credentials (VCs) in a decentralized and interoperable way. It is designed to allow identity providers to issue credentials directly to users' digital wallets, bridging the gap between traditional authentication systems and Self-Sovereign Identity (SSI) principles.OIDC4CI follows a process similar to traditional OIDC authentication flows, but instead of issuing an ID token, it issues Verifiable Credentials (VCs).
    • Self-Issued OpenID Provider (SIOP v2) (OIDF): Extends OIDC for user-controlled identities without relying on a central identity provider.
    • EU/EEA Trusted List Browser


  
3

Standardization (W3C, ETSI, ISO)

  • ISO/IEC 18013-5:2021 establishes interface specifications for the implementation of a driving licence in association with a mobile device. It also  specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure.
  • ETSI (European Telecommunications Standards Institute) is an independent, non-profit standards organization that develops globally applicable standards for telecommunications, broadcasting, and IT in Europe.
  • W3C DID Core Specification (W3C): Defines a format and methods for Decentralized Identifiers (DIDs), allowing for cryptographic proofs and verifiable control without centralized authorities.
  • W3C Verifiable Credentials (VC) Data Model (W3C): Specifies a model for issuing, presenting, and verifying credentials in a decentralized manner.
  • GNAP (Grant Negotiation and Authorization Protocol): A modern alternative to OAuth 2.0, designed to offer more flexibility, including decentralized architectures. It can work with DIDs (Decentralized Identifiers) and Verifiable Credentials, making it a better fit for distributed identity models.




4


  • European eIDAS 2.0 & EBSI (European Blockchain Services Infrastructure): Defines a regulatory framework and infrastructure for trusted digital identity in the EU.





  • No labels