-
Notifications
You must be signed in to change notification settings - Fork 39
Blueprint EBWOID issuance #132
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from 2 commits
053bf04
df22a88
62bfe69
325b336
66b1f73
258c100
d65ae91
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,13 +1,6 @@ | ||
| # How the Wallet Interacts with Services | ||
| Todo: | ||
| - EBW: the issuing we do | ||
| - This chapter describes the general **WE BUILD PID/EBWOID issuing process** in a sequence diagram. | ||
| - Mention ETSI standardization: ETSI TS 119 472-3 for (Q)EAA and PID issuance. ETSI TS 119 476-3 will standardize WUA and WIA. | ||
| - High-Level Flows - Revocation and status checking | ||
| - PID issuing | ||
|
|
||
| ## Interaction Pattern: Attestation Issuance | ||
| To be authored by Group 6 (QTSP) and Group 7 (Wallets). Focuses on how use cases get data into the wallet (e.g., PID or QEAA) using protocols like OpenID4VCI (but no need to mention that part, stuff like that should be mainly in CS). | ||
|
|
||
| The [WE BUILD Consortium Conformance Specification (CS)](https://github.com/webuild-consortium/wp4-architecture/blob/blueprint/updates-jan/conformance-specs/cs-01-credential-issuance.md) for high-assurance credential issuance defines the requirements that will be applied within the WE BUILD project to ensure that Wallet Units and Credential Issuers across the WE BUILD ecosystem interoperate reliably and consistently when issuing verifiable digital credentials, with strong security guarantees and privacy protections. | ||
|
|
||
|
|
@@ -81,6 +74,63 @@ Wallet-->>Wallet: Validates the credential | |
| Wallet-->>Wallet: Stores the credential | ||
| User->>Wallet: Accesses the credential | ||
| ``` | ||
| ### General EBWOID issuing process | ||
| The [EBWOID Rulebook](https://github.com/webuild-consortium/webuild-attestation-rulebooks-catalog/blob/main/rulebooks/ds001-ebw-oid-rulebook.md) provides more details on the EBWOID. The sequence diagram below shows the minimum issuance flow for an EBWOID credential. It focuses on the common steps shared across use cases. Optional activities and alternative flows may be included in extended versions of the diagram. | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Why should the Blueprint contain a dedicated specification of EBWOID issuance, if EBWOID is just a PuB-EAA or QEAA? Just like other PuB-EAA and QEAA in WE BUILD, various interaction patterns are possible, and we should align on those interaction patterns. See #114. If there is a justification for having a dedicated specification of EBWOID issuance, this justification should be added to the introduction of this section.
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I agree that a more descriptive introduction would be good and I believe that @miguelaguilar-bv also has a plan for description of some of the steps (those that need describing, I don't see a reason to add descriptions to every action). There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
You are right that the EBWOID (and the PID) share many characteristics with (Q-/Pub-)EAA. However, at the beginning of WE BUILD it seems that this two were considered special. And more over a wallet instance without one of those two is not complete. Any other EAA may be absent without any effect for the status of the wallet instance. Now we have a special task (WP 4, Task 3) for the issuing of the PID and EBWOID. All this justifies a special treatment in the blue print for me.
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Update the EBWOID rulebook link to: |
||
|
|
||
| ``` mermaid | ||
| sequenceDiagram | ||
| autonumber | ||
| actor Rep as Representative | ||
| participant Issuer as EBWOID Issuer | ||
| participant AS as Authentic Source | ||
| participant Wallet as Business Wallet | ||
| %%participant Reg as Revocation / Directory Services | ||
|
|
||
| rect rgb(245,245,245) | ||
| Note left of Rep: Initiate request | ||
| Rep->>Issuer: Initiate EBWOID request | ||
| Rep->>Issuer: Provide credentials | ||
| Issuer-->>Issuer: Verify user credentials | ||
| end | ||
|
|
||
| rect rgb(235,245,255) | ||
| Note left of Issuer: Verify eligibility | ||
| Issuer->>Rep: Request economic operator information | ||
| Rep-->>Issuer: Provide economic operator information | ||
| Issuer->>AS: Request authentic economic operator information | ||
| AS-->>Issuer: Provide authentic economic operator information | ||
| Issuer->>Issuer: Verify economic operator status | ||
| Issuer->>AS: Request user powers | ||
| AS-->>Issuer: Provide user powers information | ||
| Issuer->>Issuer: Verify user powers | ||
| Wallet-->>Issuer: Wallet eligible | ||
| end | ||
|
|
||
| rect rgb(235,245,255) | ||
| Note left of Issuer: Verify Wallet | ||
| Issuer->>Rep: Request wallet address | ||
| Rep-->>Issuer: Provide wallet address | ||
| Issuer->>Issuer: Verify wallet eligibility / status | ||
| end | ||
|
|
||
| rect rgb(235,245,255) | ||
| Note left of Issuer: Issue EBWOID attestation | ||
| Issuer->>AS: Request EBWOID information | ||
| AS->>Issuer: Provide EBWOID information | ||
| Issuer->>Issuer: Construct EBWOID | ||
| Issuer->>Wallet: Issue EBWOID | ||
| Wallet-->>Wallet: Store EBWOID in wallet | ||
| end | ||
|
|
||
| rect rgb(235,245,255) | ||
| Note left of Issuer: Publish revocation information & register issuance | ||
| %% Should it be the issuer or will there be a revocation or directory service | ||
| Issuer->>Issuer: Publish revocation / status information | ||
| Issuer->>Issuer: Register EBWOID issuance information | ||
| end | ||
|
|
||
| Issuer-->>Rep: Confirm EBWOID issuance complete | ||
| ``` | ||
|
|
||
| ## Interaction Pattern: Attestation Presentation (Receiving) | ||
|
|
||
|
|
||
Uh oh!
There was an error while loading. Please reload this page.