CEN WI 00224287 - Decomposition of the EUDI Wallet – Part 1: Decomposition of the Solution by Module in the objective of Functional and Security Certifications #497
Description
Formal name
CEN WI 00224287 - Decomposition of the EUDI Wallet – Part 1: Decomposition of the Solution by Module in the objective of Functional and Security Certifications
Overview
The scope of this TS is a normalized decomposition of the EUDI wallet solution and EUDI wallet provider environment, so as to allow some consistency in the assessment and certification of EUDI wallet solutions and related EUDI Wallet providers.
For Part 1, the "Decomposition of the EUDI Wallet Solution in the objective of Functional and Security Certifications" targets to provide:
- description of a generalized model of the EUDI-wallet-solution (as operated by the holder)
- list all the modules in a normalized way
- list respective functional requirements
- list respective identified legal requirements
- list respective identified risks (for which compensated controls should be present)
The list of component-categories considered in this document, is:
- Wallet FrontEnd modules,
- Wallet Core modules,
- Wallet Acquisition modules,
- Wallet Authentication modules,
- Wallet Presentation modules,
- Wallet Security modules,
- Wallet Interface modules.
The list of services-categories considered in this document, is:
- Wallet Provider Core services,
- Wallet Provider Cloud Wallet services,
- Wallet Provider Backend services,
- PID Issuance Front services (*),
- PID Issuance Backend services (*).
(*) while the later are not formally part of the wallet, the regulation provides a clear requirement that a wallet must have an active PID (and else is not a EUDI wallet) + that it needs to properly integration in the national eID scheme, hence proper integration must be part of the reference model.
Work Plan
- CEN is drafting this standard.
- The EC is following up with CEN on this standard.
Tasks
There are no open tasks.
Updates
There are no new updates.
Alerts
There are no open alerts.