Versions Compared

Old Version 14

changes.mady.by.user Esther Ruiz Ben

Saved on

compared with

New Version 15

changes.mady.by.user Esther Ruiz Ben

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...



DefinitionCurrent ActivitiesTimelinesPapers and Feedback processMore
1Encryption
Security: https://github.com/eu-digital-identity-wallet/eudi-lib-ios-iso18013-security  


2

Key management






3

Zero-trust security models

Zero-Knowledge Proof (ZKP) Protocols (ZK-SNARKs, ZK-STARKs): Enables privacy-preserving identity verification without disclosing private data.

2024/ Jun:

Cryptographers' Feedback on the EU Digital Identity’s ARF #200 (https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/issues/200)


Technical & Research Communities



DefinitionCurrent StateTimelinesPapers and Feedback processMore
1

Contributions from Identity Foundations (e.g., OpenID Foundation, DIF, Trust Over IP)

  • JSON Web Tokens (JWT), JSON-LD, CBOR, and SD-JWT (IETF): Used for secure, verifiable, and compact digital identity assertions.
  • Decentralized Identity Foundation (DIF) Standards (DIF): Works on interoperability solutions such as DIDComm and secure messaging.
  • ARF (EU commission)
  • OIDC
    • OIDC4VC (OpenID Connect for Verifiable Credentials) is an extension of OpenID Connect (OIDC) designed to support the issuance, presentation, and verification of Verifiable Credentials (VCs) within decentralized identity ecosystems. It bridges traditional authentication systems (like OAuth 2.0 and OpenID Connect) with Self-Sovereign Identity (SSI) principles by leveraging existing identity protocols to issue, present, and verify Verifiable Credentials (VCs) in a decentralized and user-centric manner.
    • OIDC4CI(OpenID Connect for Credential Issuance) is an extension of OpenID Connect (OIDC) that enables the issuance of Verifiable Credentials (VCs) in a decentralized and interoperable way. It is designed to allow identity providers to issue credentials directly to users' digital wallets, bridging the gap between traditional authentication systems and Self-Sovereign Identity (SSI) principles.OIDC4CI follows a process similar to traditional OIDC authentication flows, but instead of issuing an ID token, it issues Verifiable Credentials (VCs).
    • Self-Issued OpenID Provider (SIOP v2) (OIDF): Extends OIDC for user-controlled identities without relying on a central identity provider.
    • EU/EEA Trusted List Browser


  
2

Standardization (W3C, ETSI, ISO)

  • ISO/IEC 18013-5:2021 establishes interface specifications for the implementation of a driving licence in association with a mobile device. It also  specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure.
  • ETSI (European Telecommunications Standards Institute) is an independent, non-profit standards organization that develops globally applicable standards for telecommunications, broadcasting, and IT in Europe.
  • W3C DID Core Specification (W3C): Defines a format and methods for Decentralized Identifiers (DIDs), allowing for cryptographic proofs and verifiable control without centralized authorities.
  • W3C Verifiable Credentials (VC) Data Model (W3C): Specifies a model for issuing, presenting, and verifying credentials in a decentralized manner.
  • GNAP (Grant Negotiation and Authorization Protocol): A modern alternative to OAuth 2.0, designed to offer more flexibility, including decentralized architectures. It can work with DIDs (Decentralized Identifiers) and Verifiable Credentials, making it a better fit for distributed identity models.




3


  • European eIDAS 2.0 & EBSI (European Blockchain Services Infrastructure): Defines a regulatory framework and infrastructure for trusted digital identity in the EU.




Implementing Acts



ObjectivesCurrent ActivitiesTimelinesPapers and Feedback processMore
1Security BreachesDefines how security breaches must be handled, and when and how breached wallets should be suspended.

  
2Electronic Attestations of AttributesProvides the specifications needed to issue Qualifed Electronic Attestations of Attributes (QEAA) and Electronic Attestations of Attributes (EAA), including how to achieve interoperability and details on revocation mechanisms.



3Wallet listsSets out rules for Member States to submit information on certified wallet solutions for the machine-readable list of certified wallets to be published and maintained by the European Union.



4Identity matching – Cross-border identity matching of natural persons by public sector bodies (RP)Sets out necessary provisions for Member States to ensure correct identity matching in cross-border authentications.



5Relying parties – The registration of relying parties and the common mechanism for allowing the identification and authentication of relying partiesSets out rules for the registration of wallet relying parties via national registers.