Implement use cases with digital credentials (EAAs)
Credentials in the European Digital Identity Wallet
Electronic Attestations of Attributes (EAA) are a credential providing a proof of a characteristic, quality, right or permission of a natural or legal person or of an object. Although being secure they don’t need the same level of assurance as Qualified Attestations of Attributes. Therefore they can originate from any trusted and reliable source that is the primary instance of that attribute. They are issued with an EUDI-Wallet connector software into an EUDI-Wallet. EAAs are supervised under the eIDAS regulation and will be subject to the legal and contractual frameworks in the areas they are issued.
Organisations and users greatly benefit
A standardised format for storing and verifying attestations throughout the European Union provides organisations with a secure and efficient way to integrate and implement use cases with digital attestations. By using EUDI-Wallets and digital credentials, organisations can efficiently and easily comply with regulatory and legal requirements, while reducing the risk of fraud or legal issues and generally improving organisational processes.
The integration and usage of the EUDI-Wallet and EEAs can replace obsolete analog processes in organisational processes. This enables more efficient and automated data processing, easier verification, and storage, resulting in a significant reduction in costs.
Organisations become more transparent and trustworthy in the eyes of the user. Users can clearly identify the organisation effectively preventing phishing, track the interaction history with the organisation and, if necessary, apply data protection rights directly from the Wallet! Furthermore, it greatly enhances user interaction and will create a completely new user centric experience. It also enables organisations to pursue new business models and opportunities by creating new communication channels to clients.
Fast, efficient and secure processes
Decrease cost for document verification
Increased organisational transparency and trust for the user
Risk and cost reduction
Improved user experience
New business opportunities
Easily issue and verify electronic
attestations of attributes
Issuance and verification
A EU citizen is travelling through Italy and spontaneously decides to take a day trip to the nearby island of Sardinia, as she is currently staying in Naples. She already has an EUDI-Wallet with a credit card provided by her bank.
Enter booking process
To purchase a valid ticket, she enters the booking process on the ferry company's website. She selects the date and time and is taken to the personal details, and payment section. She then selects the option to check-out with the EUDI-Wallet.
Attribute collection
She is asked to provide her name as well as her credit card. She approves the requested data and presents the information from within the wallet. By using the EUDI-Wallet and her credentials, she has saved the time of filling in all the data herself and she has a record of the data she has shared with the ferry company.
Issuance
She completes the booking process by confirming the strong customer authentication process of her credit card, which is also done directly via the EUDI-Wallet and pays for the ticket. Directly after presenting this data an issuance session is triggered and the ferry ticket is issued as an EEA credential to her EUDI-Wallet. The ferry company handles these processes by using an EUDI-Wallet connector software, such as the Lissi EUDI-Wallet Connector.
Usage and presentation
On the day of departure, she enters the terminal to board the ferry. All she has to do is present her ferry ticket via her EUDI-Wallet and she can board the ferry with ease.
Revocation & Expiration
An Electronic Attestation of Attributes (EAA) is valid, until one of these events occur:
The EAA is deleted by the user, to whom it was issued.
The EAA expires, on the basis of the EAAs validity end date.
The certificate is revoked when the EAA provider takes action to revoke it or when a third party notifies the provider of the need for revocation. The revocation process may also be influenced or dictated by the regulations and laws that apply to the specific use case domain.
eIDAS 2 credentials
EUDI-Wallet conform
EU-wide standardisation
Support selective disclosure
Attributes
Attributes that require a moderate trust level
Non-identification attributes, that require high trust level
Identification attributes of a person
Security
Moderate security
High level of security and assurance
Highest level of security and assurance
Data source
Derived from reliable source in the attributes domain
Derived from an authentic source
Authentic source, which is authorised by a member state
Validated by
Validated by primary instance of the attribute
Validated by qualified trust service provider
Validated by qualified trust service provider
Basis for
All services that only need moderate trust levels
Basis for all high trust services outside the identification scope
Basis for all identification services
Use cases
Employee card, student-IDs or customer cards
Tax data, mobile driver licence
Identification (Know-your-customer)