Table of Content

• 1 Scope
  • 1.1 Wallet Lifecycle
  • 1.2 PID Lifecycle
  • 1.3 EAA Lifecycle
• 2 Architecture
  • 2.1 Decomposition
    • 2.1.1 Roles
    • 2.1.2 Components
    • 2.1.3 Logical Components
    • 2.1.4 Wallet Instance (WI)
    • 2.1.5 Wallet Provider Backend (WB)
    • 2.1.6 Remote Wallet Secure Cryptographic Device and Application (RWSCD/RWSCA)
    • 2.1.7 Mobile Device Vulnerability Management Service (MDVM)
  • 2.2 Data Register
  • 2.3 Cryptography
    • 2.3.1 Identification Means, Authentication Means, and 2FA
    • 2.3.2 Cryptographic Key Algorithms and Lifecycle
    • 2.3.3 Token Lifecycle
    • 2.3.4 Lifecycle Considerations and Dependencies
    • 2.3.5 Critical Assets
  • 2.4 Mobile Devices
• 3 Data Flows
  • 3.1 Wallet Lifecycle
    • 3.1.1 Wallet Activation
    • 3.1.2 Wallet Dashboard
    • 3.1.3 Wallet Revocation
    • 3.1.4 Wallet Deletion
  • 3.2 PID Lifecycle
    • 3.2.1 PID Issuance
    • 3.2.2 PID Presentation
    • 3.2.3 PID Deletion
  • 3.3 EAA Lifecycle
    • 3.3.1 EAA Issuance
    • 3.3.2 EAA Presentation
    • 3.3.3 EAA Deletion
• 4 Wallet Backend
  • 4.1 WB Operations
  • 4.2 WB Data Flows
    • 4.2.1 Registration
    • 4.2.2 WIA Issuance
    • 4.2.3 Wallet Account Deletion
  • 4.3 WB Setup
  • 4.4 WB Account Database
  • 4.5 Wallet Instance Attestation
• 5 Remote WSCA
  • 5.1 RWSCA Operations
  • 5.2 RWSCA Data Flows
    • 5.2.1 Create Account
    • 5.2.2 Initialize PIN and Start PIN Session
    • 5.2.3 Create Key, Sign Data and Delete Account
  • 5.3 RWSCD Setup
  • 5.4 RWSCA Account Database
  • 5.5 RWSCA PIN
  • 5.6 Wallet Trust Evidence
• 6 MDVM
  • 6.1 MDVM Concept
  • 6.2 MDVM Flow
    • 6.2.1 Android MDVM Flow
    • 6.2.2 iOS MDVM Flow
• 7 UI/UX
  • 7.1 Design Process and User Studies
  • 7.2 User Flow Diagrams
  • 7.3 Accessibility
• Appendix
  • A.1 App Attestation Guidelines
  • A.2 eID Flow