DIN Standards Committee Information Technology and IT Applications
Decomposition of the EUDI Wallet - Part 1: Decomposition of the Solution by Module in the objective of Functional and Security Certifications
Abstract
The scope of this TS is a normalized decomposition of the EUDI wallet solution and EUDI wallet provider environment, so as to allow some consistency in the assessment and certification of EUDI wallet solutions and related EUDI Wallet providers. For Part 1, the “Decomposition of the EUDI Wallet Solution in the objective of Functional and Security Certifications” targets to provide: • description of a generalized model of the EUDI-wallet-solution (as operated by the holder) • list all the modules in a normalized way • list respective functional requirements • list respective identified legal requirements • list respective identified risks (for which compensated controls should be present) The list of component-categories considered in this document, is: Wallet FrontEnd modules, Wallet Core modules, Wallet Acquisition modules, Wallet Authentication modules, Wallet Presentation modules, Wallet Security modules, Wallet Interface modules. The list of services-categories considered in this document, is: Wallet Provider Core services, Wallet Provider Cloud Wallet services, Wallet Provider Backend services, PID Issuance Front services (*), PID Issuance Backend services (*). (*) while the later are not formally part of the wallet, the regulation provides a clear requirement that a wallet must have an active PID (and else is not a EUDI wallet) + that it needs to properly integration in the national eID scheme, hence proper integration must be part of the reference model.
Begin
2025-02-13
WI
00224287
Planned document number
00224287
Responsible national committee
NA 043-04-17 AA - Cards and security devices for personal identification
