You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: blueprint/01-executive-summary.md
+4Lines changed: 4 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,3 +1,7 @@
1
+
---
2
+
title: WE BUILD — Architecture & Integration Blueprint (D4.1)
3
+
---
4
+
1
5
# Executive Summary and Project Context
2
6
## Background
3
7
[WE BUILD](https://webuildconsortium.eu/) is a [Large Scale Pilot (LSP)](https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487808/What+are+the+Large+Scale+Pilot+Projects) funded by the European Commission. The project tests how the European Digital Identity (EUDI) Wallet and the European Business Wallet (EBW) can support cross-border business processes across the EU.
Copy file name to clipboardExpand all lines: blueprint/appendix-adr.md
+5-3Lines changed: 5 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,12 @@
1
-
# Appendix G. Architecture decision records
1
+
---
2
+
title: Architecture decision records
3
+
---
2
4
3
5
[WE BUILD](https://www.webuildconsortium.eu/) maintains a lightweight architecture decision record (ADR) for each software-related decision affecting interoperability.
4
6
5
7
Propose new ADRs using the [template](_template.md). Announce them to the [Architecture group](https://portal.webuildconsortium.eu/group/architecture) in the Portal to get feedback to understand the consortium’s opinion.
The Conformance Specifications define how WE BUILD participants implement wallet interfaces and communication protocols between issuers, wallets, and relying parties (RPs).
6
8
They ensure interoperability and conformance by translating ADR decisions into precise implementation requirements.
7
9
8
10
The ITB will be based on the CS as a starting point. The test suites in the ITB are relying predominantly on the CS.
9
11
10
-
##Contributing
12
+
# Contributing
11
13
12
14
The Architecture group define the CS, with help from all implementing participants (wallets, issuers and verifiers). For members of the consortium, find more information on the CS processes are held on [open social - Architecture Group](https://portal.webuildconsortium.eu/group/architecture).
13
15
14
-
##CS Process Summary for WE BUILD Large Scale Pilots (LSPs)
16
+
# CS Process Summary for WE BUILD Large Scale Pilots (LSPs)
15
17
16
18
Conformance Specifications (CS) progress through the following process towards the Large Scale Pilots (LSPs):
17
19
18
20

Copy file name to clipboardExpand all lines: blueprint/appendix-ebw-definition.md
+15-13Lines changed: 15 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,16 +1,18 @@
1
-
# Appendix D. Business Wallet Definition
1
+
---
2
+
title: Business Wallet Definition
3
+
---
2
4
3
5
Revision 1.0
4
6
5
-
##Scope and context
7
+
# Scope and context
6
8
7
9
This document sets out a non-technical working definition of “business wallet” as introduced in the European Business Wallet regulatory proposal, to support a common interpretation within WE BUILD and in dialogue with the European Commission. It is intended as reference material for the WE BUILD use case and capability work. It does not cover detailed architecture, protocol choices, implementation design, or use case roadmaps.
8
10
9
11
This document draws on the EUDI Wallet regulations, EWC deliverables<sup><sup>[\[1\]](#footnote-0)</sup></sup>, and relevant industry and consortium publications, and incorporates the draft Implementing Act on Business Wallet.
10
12
11
-
##Core concepts
13
+
# Core concepts
12
14
13
-
###Description
15
+
## Description
14
16
15
17
A **Business Wallet** is a product and service that enables an organisation to identify itself, manage authorisations, exchange verified attributes and documents, and receive legally relevant notifications in support of administrative and regulatory procedures. Unlike European Digital Identity Wallets, an European Business Wallet does not need to be an eID means under an eID scheme, although it may reuse similar components.
16
18
@@ -24,7 +26,7 @@ The wallet owner is defined by **European Business Wallet Owner Identification D
24
26
25
27
A Business Wallet can have multiple **wallet users**, meaning natural or legal persons that operate the wallet through a user interface or an application programming interface under roles and mandates set by the wallet owner. These wallet users may apply software applications to access these interfaces. Some users may be **authorised representatives**, while others may be employees or service providers operating within delegated permissions.
26
28
27
-
###Conceptual model
29
+
## Conceptual model
28
30
```mermaid
29
31
graph LR
30
32
A(Other Business Wallets) --> B(Business Wallets)
@@ -40,9 +42,9 @@ graph LR
40
42
class B businessWallet
41
43
```
42
44
43
-
##Business Wallet definition
45
+
# Business Wallet definition
44
46
45
-
###Roles supported
47
+
## Roles supported
46
48
47
49
A business wallet enables its owner, amongst other operations, to act as:
48
50
@@ -62,15 +64,15 @@ Other relevant roles are:
62
64
- Wallet provider: the entity that provides the business wallet solution to its owner (potentially the owner themselves)
63
65
- Owner identification data provider: the entity that verifies the identity of an authorised representative enrolling the wallet owner and attests, using an electronic attestation of attributes, the wallet owner's identification data in accordance with authentic source registrations
64
66
65
-
###Key functions
67
+
## Key functions
66
68
67
-
####Wallet lifecycle management
69
+
### Wallet lifecycle management
68
70
69
71
The business wallet enrols its owner via the electronic identification of an authorised representative and facilitates enrolment in connected trust services and directory services. The wallet provider is responsible for attesting to its validity to relying parties and enabling authorised representatives to revoke the business wallet and perform other lifecycle changes. In several cases, the wallet provider is also responsible for notifying authorised representatives and government authorities about lifecycle changes.
70
72
71
73
**_WE BUILD implementation note:_**_This will be the responsibility of the WP4 Wallet Providers group. At least several providers will be ready to manage their wallet solution and issue wallet units under new and changing business wallet requirements._
72
74
73
-
####Digital document management
75
+
### Digital document management
74
76
75
77
The business wallet enables the wallet owner to create, store, use and validate various types of digital documents:
76
78
@@ -84,18 +86,18 @@ For this purpose, the business wallet implements several applications, including
84
86
85
87
**_WE BUILD implementation note:_**_The WP4 Wallet Providers provide, as part of their business wallet solutions, a subset of the functionalities required by the use cases. For the functionalities that require qualified trust services, such as the issuance of qualified certificates or the sealing of documents with qualified electronic seals, the WP4 QTSP group provides these services within WE BUILD. For reference, see the [QTSP documentation](#appendix-f-qtsp-documentation)._
86
88
87
-
####Secure communication channel
89
+
### Secure communication channel
88
90
89
91
To enable public and private sector information exchange, such as in B2G eGovernment notifications, B2B/B2G eProcurement business documents and other business use cases, a business wallet implements a secure communication channel with other business wallets, with users of digital identity wallets, or with alternative solutions provided through a gateway. This channel enables cross-border delivery and receipt of submissions and notifications with legal effect, and provides a trusted channel with public authorities and other regulated parties across the EU. The channel is implemented using a qualified electronic registered delivery service (QERDS). The digital address for the channel is registered in a standard digital directory.
90
92
91
93
**_WE BUILD implementation note:_**_the WP4 QTSP group will explore delivering an interoperable pre-production QERDS, along with CIR (EU) 2025/1944 requirements, as a service to the WP4 Wallet Providers group, working with the WP4 Architecture group on cross-cutting concerns, such as interoperability specifications. This enables wallet providers to provide a business wallet to the use cases with a digital address and access to the designated QERDS. For reference, see the [QERDS documentation](#qerds-documentation)._
92
94
93
-
####Access control mechanism
95
+
### Access control mechanism
94
96
95
97
To enable wallet owners, authorised representatives and other authorised users to access the business wallet while preventing unauthorised access, each business wallet implements role-based access control for the assets it protects, including digital documents and the secure communication channel. To identify, authenticate, and authorise wallet users, the access control mechanism relies on electronic identification means, such as digital identity wallets, and, potentially, on trust services for the electronic attestation of attributes.
96
98
97
99
**_WE BUILD implementation note:_**_The WP4 Architecture group, in collaboration with the WP4 Wallet Providers group, will explore the access-control mechanism for business-wallet solutions. This may rely on the EUDI wallets within WE BUILD or on other electronic identification means._
98
100
99
-
####Digital transaction management
101
+
### Digital transaction management
100
102
101
103
Business wallets keep logs and provide dashboard user interfaces to enable control over transactions, including operations on the wallet lifecycle and on digital documents and messages sent and received over the secure communication channel. In addition, these logs enable dispute resolution regarding potentially unauthorised transactions, failures to meet reporting obligations, or administrative or procedural activities.
The WP4 QTSP group collaborates on [internal reference code and documentation](https://github.com/webuild-consortium/wp4-qtsp-group) to increase interoperability. This appendix lists the entry points for this reference documentation by each provided service.
0 commit comments