Topic O - Catalogues for Attestations

[HarriHonko]

Welcome to the discussion on the Catalogues for Attestations, part of the ongoing development of the Architecture and Reference Framework (ARF) for the European Digital Identity (EUDI) Wallet.

The discussion is based on this document. This paper will be the starting point for the discussion related to TS11 - Specification of Interfaces and Formats for the Catalogue of Attestation Rulebooks and Attributes.

Items discussed in the paper:
• Requirements to be defined to implement the catalogue of Attestation Rulebooks and Attributes
• Interfaces for registering a Rulebook
• Interfaces for searching and requesting rulebooks and attribute definitions

This discussion is part of a structured process to refine and complete the ARF, with your input playing a vital role. We invite you to share your comments, insights, and suggestions here. Your contributions will be carefully reviewed and considered as we work towards the next version of the ARF, which will incorporate updates on this topic.

Thank you for participating in this important conversation.

[joergenb]

Related to Question 2 (relationship to other registries):

Isn't there a clear legal requirement missing in the discussion paper, namely to evaluate possible reuse of the Single Digital Gateway components ?
Recital 13 of recent CIR 2025/1569 says https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202501569#rct_13:

In accordance with the principles established by the Interoperable Europe Act (4), in order to facilitate the establishment of catalogue of attributes and catalogue of schemes for the attestation of attributes and reuse, as far as possible, existing catalogues, schemes and information, the Commission should, where appropriate, exploit synergies with the common services of the technical system pursuant to Regulation (EU) 2018/1724 of the Parliament and of the Council establishing a single digital gateway and amending Regulation (EU) No 1024/2012

and Article 10 goes even further:

For the purpose of Articles 3 to 9, Member States may refer to and re-use the common services of the technical system set out in Article 14 of Regulation (EU) 2018/1724, as well as the national components connected to them.

So for Member States it seems beneficial to only have to maintain their semantic definitions in one registry, and not duplicate work. Possible solutions to evaluate could be:

• Do not establish separate Catalogues in EUDIW, just re-use the SDG components like the Semantic Repository directly
• Establish sync capabilities between SDG and EUDIW so that Member States can (automatically? selectively?) transfer definitions between the two registries.

[cre8]

Related to question 4)

I already mentioned in in the PR, but to respect HLR CAT_06 it should be machine readable, required by ARB_26:

The Schema Provider for an Attestation Rulebook describing a type of attestation that is a non-qualified EAA SHOULD define in the Rulebook: - mechanisms allowing a Wallet Unit to verify that the EAA Provider is autorised or registered to issue this type of EAA. - mechanisms allowing a Relying Party to obtain, in a trustworthy manner, the trust anchor(s) of the EAA Providers issuing this type of EAA.

This is only possible when the attestation rulbebooks are machine readable.

I would like to strongly challenge the probably not that is mentioned there and offer a json schema that is used as a template for the rulebook to have a "machine readable first" approach