Fostering eIDAS 2 relevant standardization and the use of DLT as a trust anchor

Data Provenance

Identity Management

DLT as trust anchor infrastructure

DLT-based profile aligned with eIDAS

While the legal framework of eIDAS 2 provides a clear mandate, there is a notable absence of standardised profiles for essential formats such as Selective Disclosure JSON Web Tokens Verifiable Credentials (SD-JWT VC) and mdoc-MSO (Mobile Driver's License). The convergence of various elements, including the Attestation Reference Framework (ARF) development and the intricate requirements of the large-scale pilot projects, demands a coherent and standardised approach and significant know-how and expertise in the various areas involved.
SMEs are among the most active actors (cf. the expert’s own activity)  in the area of identity management and privacy preservation. The closing of standardisation gaps will result in increased opportunities for them to bring innovative, interoperable products to the market.
Europe has set itself the strategic goal of offering digitalised services to all citizens of the Member States. Foundational technology in this respect is interoperable, privacy preserving, trustworthy digital identity management.

Primarily ETSI TS 119472, and CEN/TC 224 WG20 on PID onboarding. The privacy objective aimed to develop ETSI TR 119 476 and integrate it with ETSI TS 119 472. This was achieved with the previous update of ETSI TR 119 476. A new version, published in May 2025, offers clearer privacy preservation recommendations and a laddered approach for issuers:
 

• Issue SD-JWT Attestations Without Disclosures: Minimal changes for issuers, with attestations limited to verifier-requested attributes.
• Add Salted Hash Digest Disclosures: Enables multi-show presentations, allowing users to selectively disclose attributes.
• Implement Batch Issuance with One-Time Keys: Ensures single-use, unlinkable attestations, even for colluding verifiers.
• Integrate a ZKP Layer: The most advanced option, using zero-knowledge proofs for maximum privacy.