cen:proj:79593

EUDI Wallet Held Attributes Access Control cen:proj:79593

Scope

This document describes Access Control to EUDI Wallet Held Attribute(s) (PID and (Q)EAA). A generic design approach is addressed in this document.

This document specifies the requirements and guidelines for:
(1) a generic Access Control Model supporting access control to EUDI Wallet Held Attribute(s) (PID and (Q)EAA);
(2) the definition and classification of various types of data and metadata, supporting access control to EUDI Wallet Held Attribute(s), as well as their contents and structures;
(3) a generic wallet access control decision engine processing the relying party request to output the decision regarding the disclosure of EUDI Wallet Held Attribute(s) (PID, (Q)EAA) to a relying party;
(4) the notification of the decision to the relying party requesting access to EUDI Wallet Held Attribute(s) (PID and (Q)EAA);
(5) ensuring the wallet holder makes informed decision regarding disclosure of Wallet Held Attribute(s) when such decision is deferred to them.

This document also:
- identifies technical specifications and standards that may be used to support the concepts described herein;
- specifies additional requirements for the use of the identified specifications to meet the above objectives;
- provides the missing technical specifications needed to meet the above objectives where needed;
- provides examples and use cases.

The following areas are out of the scope of this document:
- Policies assigned for the disclosure of EUDI Wallet Held Attribute(s) (PID, (Q)EAA), as well as the nature of the entities assigning these policies and their governance;
- Access Control Metadata implementation choice and encoding;
- (Q)EAA encoding that are in the remit of ETSI/TC ESI.