Description
This page is a reflection of the different concepts and terminology used in regards to the digital identity wallet. A try to create a common sensemaking around the digital identity wallet ecosystem.
FIXME - Overview and Comparison of the different Terminologies
(see below, References)
Comparison table(?)
Start with ARF because it is the most differentiated model(?) Better start with the specifications.
Split comparison in two parts: 'protocol' and trust framework
References
Introduction
The implementation of digital identity wallets, particularly within the EU framework, involves specific terminology tied to technical standards and regulatory approaches. The purpose of this document is to provide an overview of currently used terminologies and to establish semantic and technical references between the systems.
Overview
- W3C Verifiable Credentials Data Model v2.0
- eIDAS 2.0
- ARF
- (OpenID Federation)
(Building Material)
Core Terminology in EU Standards
- Architecture Reference Framework (ARF)
Defines technical standards, protocols, and roles for the EU Digital Identity Wallet ecosystem[1][2].- Actors: Includes wallet providers, issuers, relying parties (service providers requesting data), and trusted lists (registries of verified entities)[2][3].
- PID (Person Identification Data): Mandatory core attributes for cross-border identification[2][3].
- (Q)EAA: Qualified or non-qualified Electronic Attestations of Attributes, such as diplomas or medical credentials[3][4].
- Implementing Acts (November 2024)
Five regulations formalizing technical standards, including:- Data formats: Uniform structures for cross-border document interoperability[5][6].
- Privacy dashboard: A user-facing feature for transparency in data sharing[5][7].
- Certification framework: Security and privacy compliance requirements for wallet providers[6][8].
Functional Terminology
- PID Issuance/Presentation: Processes for receiving and sharing core identity data[3][4].
- QES (Qualified Electronic Signature): Non-repudiable consent mechanism for legal agreements[3][6].
- Login: Authentication via wallet to access services (e.g., banking or government portals)[3][7].
Implementation-Specific Variations
While the EU standardizes terminology via the ARF and Implementing Acts, non-EU or private-sector approaches may use differing terms:
- Verifiable Credentials (VCs): Commonly used in decentralized identity frameworks (e.g., W3C standards) but termed (Q)EAA in EU specifications[3][4].
- Trust Frameworks: Referred to as trusted lists in the ARF, while other systems might use certificate authorities or blockchain-based attestations[2][8].
- Data Storage: EU mandates local storage ("on the wallet")[5][6], whereas other systems might use cloud-based or hybrid models.
Interoperability vs. Localization
- EU Cross-Border Use: Terms like interoperability protocols and relying parties emphasize seamless service access across member states[6][8].
- National Implementations: Member states may layer additional terminology (e.g., Germany’s Blueprint for the EUDI Wallet Ecosystem specifies PID handling methods)[3][8].
This terminology reflects the EU’s focus on harmonization under eIDAS 2.0, while alternative paradigms (e.g., SSI or national systems) may prioritize different terms for similar functions.
⁂
- https://ec.europa.eu/digital-building-blocks/sites/display/EUDIGITALIDENTITYWALLET/Technical+Specifications
- https://www.bosch-stiftung.de/sites/default/files/publications/pdf/2024-10/European-Digital-Identity-Wallet-Brief.pdf
- https://bmi.usercontent.opencode.de/eudi-wallet/eidas-2.0-architekturkonzept/01-architecture-proposal/
- https://www.dock.io/post/eu-digital-identity-wallet
- https://www.biometricupdate.com/202411/eu-adopts-technical-standards-for-eudi-wallet
- https://www.european-digital-identity-regulation.com
- https://www.bobsguide.com/eu-adopts-technical-standards-for-digital-identity-wallets/
- https://idtechwire.com/european-commission-sets-standards-for-cross-border-digital-identity-wallets/