Skip to content

Standards

Used Standards

Below is the list of the most important standards and specifications used in this document:

Standard Description
OAuth 2.0 Attestation-Based Client Authentication - draft 5 This specification defines an extension to the OAuth 2 protocol as defined in [RFC6749] which enables a Client Instance to include a key-bound attestation in interactions with an Authorization Server or a Resource Server. This new method enables Client Instances involved in a client deployment that is traditionally viewed as a public client, to be able to utilize this key-bound attestation to authenticate.
OpenID4VC High Assurance Interoperability Profile with SD-JWT VC - draft 3 This document defines a profile of OpenID for Verifiable Credentials in combination with the credential formats IETF SD-JWT VC [I-D.ietf-oauth-sd-jwt-vc] and ISO mdoc [ISO.18013-5]. The aim is to select features and to define a set of requirements for the existing specifications to enable interoperability among Issuers, Wallets and Verifiers of Credentials where a high level of security and privacy is required. The profiled specifications include OpenID for Verifiable Credential Issuance [OIDF.OID4VCI], OpenID for Verifiable Presentations [OIDF.OID4VP], Self-Issued OpenID Provider v2 [OIDF.SIOPv2], IETF SD-JWT VC [I-D.ietf-oauth-sd-jwt-vc], and ISO mdoc [ISO.18013-5].
Selective Disclosure for JWTs (SD-JWT) - draft 19 This specification defines a mechanism for the selective disclosure of individual elements of a JSON data structure used as the payload of a JSON Web Signature (JWS). The primary use case is the selective disclosure of JSON Web Token (JWT) claims.
SD-JWT-based Verifiable Credentials (SD-JWT VC) - draft 8 This specification describes data formats as well as validation and processing rules to express Verifiable Credentials with JSON payloads with and without selective disclosure based on the SD-JWT [I-D.ietf-oauth-selective-disclosure-jwt] format.
Designated Verifier Signatures for JOSE - draft 1 This specification defines designated verifier signatures for JOSE and defines algorithms that use a combination of key agreement and MACs.
OpenId for Verifiable Credential Issuance - draft 15 This specification defines an API for the issuance of Verifiable Credentials.
OpenID for Verifiable Presentations - draft 28 This specification defines a protocol for requesting and presenting Credentials.
ISO/IEC 18013-5:2021 This document establishes interface specifications for the implementation of a driving licence in association with a mobile device. This document specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure. This document also enables parties other than the issuing authority (e.g. other issuing authorities, or mDL verifiers in other countries) to:
— use a machine to obtain the mDL data;
— tie the mDL to the mDL holder;
— authenticate the origin of the mDL data;
— verify the integrity of the mDL data.
The following items are out of scope for this document:
— how mDL holder consent to share data is obtained;
- requirements on storage of mDL data and mDL private keys.

Further Standards

  • The most important cryptgrafic standards can be found here.
  • An overview of all standards and specifications can be found in the ARF.