add Wallet Dashboard chapter (3.1.2) with credential overview, credential inspection and transaction log
add Wallet Deletion flow (3.1.4), including app deletion and backend data retention strategy
add the last-seen timestamp to the MDVM account database (6.2), which is evaluated by the MDVM to identify the accounts that exceeded the data retention period
renew the mdvm_token during subsequent start-ups (3.1.1), if the last renewal is older than one month, to keep the last-seen timestamp up-to-date
add the purge queue (8.3) that propagates the deletion of stale accounts between the backends
add Purge Account operation (6.2.4) to the MDVM chapter and trigger the Purge Account operations of the WB (4.2.3), the RWSCA (5.2.5) and the PNS (7.2.3) by purge events
add EAA presentation flow (3.3.2) with same-device and cross-device flow as well as cryptographic and claims-based holder binding
add EAA deletion flow (3.3.3) as a local deletion of the EAA credentials and local key material
remove Play Integrity from the MDVM, Android Key Attestation and RASP remain the platform integrity mechanisms on Android (6)
remove the App Attestation Guidelines appendix
remove the status information of the Wallet Trust Evidence (rwsca_wte_status), WTE revocation is done by revoking the WTE signing certificate (5.6)
add cipher TLS_CHACHA20_POLY1305_SHA256 as a deviation from BSI TR-02102-2 (2.4.1)
add CT log monitoring of Wallet Provider domains (2.4.2)
v0.14.0
add EAA issuance flow (3.3.1) with initial issuance (Authorization Code and Pre-Authorized Code Flow); re-issuance is tbd
add Presentation during Issuance (3.3.1) describing the nested OpenID4VP flow used within the Authorization Code Flow until OpenID4VCI 1.1's Interactive Authorization Endpoint is supported
add Push Notification Service (PNS) (7)
add PNS component to the decomposition (2.1.2)
add Create, Update and Delete Account (7.2.1) and Send Push Notification (7.2.2) operations
register the push notification token during Wallet Activation (3.1.1) and renew it monthly on subsequent start-ups
add Message Queue (MQ) component (8)
add MQ component to the decomposition (2.1.2)
link usage of push notifications event and revocation events to the message queue component
add Wallet Instance self-locking in the Wallet Revocation chapter (3.1.3)
add opt-in push notifications to trigger the Wallet Instance self-locking
rename pp_wia_pop_nonce to pp_wia_pop_challenge
v0.13.0
add overview of standards and design choices to the introduction of the PID issuance flow (3.2.1) and PID Presentation flow (3.2.2)
add Communication Channels chapter (2.4) with a register of communication channels, transport security and authentication properties, add TLS requirements (2.4.1)
add minimum mobile device requirements (2.5)
add details on access certificate and registration certificate for signed metadata and consent screen in the PID issuance flow (3.2.1)
add details on access certificate and registration certificate for signed presentation request, over-asking and consent screen on the PID presentation flow (3.2.2)
v0.12.0
add optional PID re-issuance to PID Presentation flow, due to low number or expiry of remaining PID Credential batch, define conditions and thresholds for refresh
remove the duplicate Wallet Trust Evidence (WTE) section from the PID issuance flow
revocation events are propagated between the backend services through a shared revocation queue
add Revoke Account operations to the WB, RWSCA and MDVM chapters
v0.11.0
restructure Wallet Backend (WB) chapter
add Delete Account operation
add details about revocation with Status List
make the revocation code static
updates to decomposition with regard to components and communication links related to revocation
add revocation with Token Status List to the Wallet Trust Evidence (WTE)
add details DPoP parameters and contained key attestations in the PID issuance flow
clarifications on encryption at rest
editorial changes on MDVM
v0.10.0
define encryption at rest for the Wallet Instance
provide details on Platform Authenticator
RWSCA PIN retry counter allows a maximum of 3 tries
v0.9.1
restructure documentation
provide chapter/section numbering
add changelog inside the documentation
smaller editorial fixes
v0.8.0
add section for key and token lifecycle to cryptography chapter
add UI/UX section on accessibility
add section for key attestation and chain revocation (for PID)
updates to align WIA and WTE with ETSI draft 119 476-3
minor fixes of example data
v0.7.0
add wallet revocation
user-initiated wallet revocation
MDVM-initiated wallet revocation
minor editorial fixes
v0.6.0
add PID deletion flow
v0.5.1
editorial fixes
v0.5.0
redesign of Remote WSCA flow
PIN session token to remove client side caching
direct PKCS#11 calling HSM instead of external KMS
wrapped keys are stored on the Wallet Instance
integration of MDVM token
small changes and fixes for MDVM flows
clearly mark sub flows in sequence diagrams
v0.4.0
added UI sitemap / user flow chapter
App Onboarding (Wallet Activation)
PID Issuance
Set eID Card PIN
PID Inspection
PID Presentation
v0.3.1
splitting Remote WSCD into Remote WSCD and Remote WSCA
updating decomposition diagrams
updating data register, flows and other occurrences
v0.3.0
wrapped keys from Remote WSCD are bound to Wallet Instance accounts and stored on the Wallet Instance app
update cryptography chapter to clarify boundaries of WSCD and WSCA
v0.2.2
editorial changes (moving MDVM flows to the MDVM chapter)
v0.2.1
editorial fix
v0.2.0
add mobile device vulnerability management (MDVM) to decomposition as a separate service
add MDVM flows for registration and renewal of MDVM token
integrate MDVM token into RWSCD registration, RWSCD operations, WB registration and WB wallet attestation
v0.1.1
fix plantuml diagrams to be included
v0.1.0
initial release using versioning of Gitlab pages generated with mkdocs
v0.0.3
add MDVM section with MDVM signals
updates on overall decomposition
updates on RWSCD decomposition
updates on MDVM decomposition
fixes on WIA content and description
v0.0.2
removing deploy steps from index file
v0.0.1
added UI/UX process description
updated terminology regarding WSCA / WSCD
1st of October 2025
added wallet activation flow
added PID presentation flow
added Mobile Device Vulnerability Management in the decomposition
added Mobile Device Vulnerability Management in the Remote WSCD flows