From af3029cccffd3a92d74d277c9ddae2393577347b Mon Sep 17 00:00:00 2001 From: Leone Riello <167330153+LeoneRiello74@users.noreply.github.com> Date: Fri, 15 Nov 2024 09:28:02 +0100 Subject: [PATCH] ewc-rfc003-issue-person-identification-data.md --- ...rfc003-issue-person-identification-data.md | 24 ++++++++----------- 1 file changed, 10 insertions(+), 14 deletions(-) diff --git a/ewc-rfc003-issue-person-identification-data.md b/ewc-rfc003-issue-person-identification-data.md index 2764db9..5dfb096 100644 --- a/ewc-rfc003-issue-person-identification-data.md +++ b/ewc-rfc003-issue-person-identification-data.md @@ -69,17 +69,14 @@ The PID issuance follows detailed steps starting from the discovery of issuer ca sequenceDiagram participant I as Individual using EUDI Wallet participant TA as Trust Anchor - box PID Provisioning Services participant O as Identity Provider - participant CI as Credential Issuer participant AS as Authentic Source - end - - Note over I,CI: Discovery of Issuer Capabilities + + Note over I,O: Discovery of Issuer Capabilities - I->>CI: GET: Credential Offer URI - I->> CI: GET: /.well-known/openid-credential-issuer - CI-->> I: OpenID credential issuer configuration + I->>O: GET: Credential Offer URI + I->> O: GET: /.well-known/openid-credential-issuer + O-->> I: OpenID credential issuer configuration I->> O: GET: /.well-known/oauth-authorization-server O-->>I: OAuth authorization server metadata @@ -102,7 +99,7 @@ The PID issuance follows detailed steps starting from the discovery of issuer ca I->> O: Token request Note right of I: hypotesis: WTA and WIA should be sent as parameters on token request O-->>O: Wallet Unit attestation validation - O-->>O: Wallet Provider verification against Trust Framework + O-->>TA: Wallet Provider verification against Trust Framework opt wallet attestations not valid O-->>I: Error message response end @@ -112,12 +109,11 @@ The PID issuance follows detailed steps starting from the discovery of issuer ca Note over I,O: PID Generation and Secure Issuance I->>O: POST: Credential request with access token - O->>CI: Credential request - Note over CI,AS: Data Acquisition from Authentic Source
or temporary storage (userInfo) - CI->>AS: Request Personal Identifier Data - AS-->>CI: Provide Personal Identifier Data + Note over O,AS: Data Acquisition from Authentic Source
or temporary storage (userInfo) + O->>AS: Request Personal Identifier Data + AS-->>O: Provide Personal Identifier Data - CI-->>I: Credential response with PID, stored securely in wallet + O-->>I: Credential response with PID, stored securely in wallet ```