ec4c86799c360441c7987ddc7171f4c0 3777-10258-1-PB-1.pdf 88a64f03664c3d08ff47febf7fa7d6db7840f818 3777-10258-1-PB-1.pdf 392d8295a6f9251683b95dc635680707f0ee575f760b2d16b5b4b97be66d7e32 3777-10258-1-PB-1.pdf Title: Reflections on the European Digital Identity project in the light of the Digital COVID Certificate and the self-sovereign identity movement Subject: What is anticipated from the European Digital Identity project is being able to prove possession of a COVID-19 vaccination certificate without submitting any personal data. The introduction of this project through the draft amendment of the Regulation on electronic identification and trust services (eIDAS) has established for the first time the creation of a Digital Identity Wallet that could be used as a means of identification and a container of identity credentials, without depending on centralised files or tracking who they are presented to, with the premise of security and privacy of personal data by design as a fundamental objective. This vision, which is strongly influenced by the self-sovereign identity movement, together with the creation of the European Blockchain Services Infrastructure (EBSI) on which the European Self-Sovereign Identity Framework (ESSIF) depends, is reflected in the amendment of the eIDAS Regulation, and, indirectly, in the EU Digital COVID Certificate. As a result of the pandemic, the need to create a reliable, secure, interoperable system with full respect for the General Data Protection Regulation (GDPR) to certify health in relation to the disease led to the adaption of the European Digital Identity project to the COVID certificate. The opportunity presented by the study of the technical functioning of the certificate means that the assessment of improvements to be introduced can be transferred to the European Digital Identity project, including the blockchain resource as an alternative to the traditional public key infrastructure (PKI). In this respect, the certificate represents a firm step towards a decentralised digital identity model to ensure that individuals have full control over their data. Acreditar la possessió d’un certificat de vacunació contra la COVID-19 sense lliurar cap dada de caràcter personal és el que s’anticipa del projecte Identitat Digital Europea. La introducció d’aquest projecte mitjançant l’esborrany de modificació del Reglament d’identificació electrònica i serveis de confiança (eIDAS) planteja per primera vegada la creació d’una cartera d’identitat digital que es pugui emprar com a mitjà d’identificació i com a contenidor de credencials d’identitat, sense la dependència d’arxius centralitzats ni traça davant qui es presenten, amb la premissa de la seguretat i la privacitat de les dades personals per disseny com a objectiu fonamental. Aquesta visió, fortament marcada pel moviment sobre la self-sovereign identity, –junt amb la creació de la Infraestructura Europea de Serveis de Cadena de Blocs (European Blockchain Services Infrastructure, EBSI), de la qual depèn el Marc Europeu d’Identitat Sobirana (European Self-Sovereign Identity Framework, ESSIF)– es veu reflectida en la modificació del Reglament eIDAS, i, de retruc, en el certificat COVID digital de la UE. La necessitat, arran la pandèmia, de crear un sistema fiable, segur, interoperable i amb ple respecte pel Reglament general de protecció de dades (RGPD) per acreditar la salut en relació amb la malaltia ha portat a adaptar part del projecte d’identitat digital europea al certificat COVID; l’oportunitat que s’introdueix amb l’estudi del funcionament tècnic del certificat permet que l’avaluació de les millores a introduir siguin traslladables al projecte d’identitat digital europea, com el recurs a xarxes de cadenes de blocs (blockchain) a manera d’alternativa a la tradicional infraestructura de clau pública (PKI). En aquest sentit, el certificat suposa un pas ferm cap a un model d’identitat digital descentralitzat per garantir que l’individu tingui ple control sobre les seves dades. Author: Raül Ramos Fernández Creator: Adobe InDesign CC 13.1 (Windows) Producer: Adobe PDF Library 15.0 CreationDate: Mon Dec 12 11:38:55 2022 CET ModDate: Mon Dec 12 11:39:00 2022 CET Tagged: yes UserProperties: no Suspects: no Form: none JavaScript: no Pages: 15 Encrypted: no Page size: 595.276 x 841.89 pts (A4) Page rot: 0 File size: 514464 bytes Optimized: yes PDF version: 1.7 name type encoding emb sub uni object ID ------------------------------------ ----------------- ---------------- --- --- --- --------- ELZLIG+TimesNewRomanPSMT CID TrueType Identity-H yes yes yes 611 0 VGGUMY+TimesNewRomanPS-ItalicMT CID TrueType Identity-H yes yes yes 627 0 JLNKAW+TimesNewRomanPSMT TrueType WinAnsi yes yes yes 612 0 OTDVCM+Arial-BoldMT TrueType WinAnsi yes yes yes 613 0 HDKTYA+Arial-ItalicMT TrueType WinAnsi yes yes yes 614 0 ZMJSQQ+ArialMT TrueType WinAnsi yes yes yes 628 0 XMEBOU+TimesNewRomanPS-BoldMT TrueType WinAnsi yes yes yes 637 0 BSCZSM+TimesNewRomanPS-ItalicMT TrueType WinAnsi yes yes yes 636 0 QWHHEI+DINAlternate-Bold TrueType WinAnsi yes yes yes 675 0 OTDVCM+Arial-BoldMT TrueType WinAnsi yes yes yes 677 0 BFNQCM+DINNextLTPro-Bold TrueType WinAnsi yes yes yes 681 0 WKNCAW+ArialMT CID TrueType Identity-H yes yes yes 68 0 ZMJSQQ+ArialMT TrueType WinAnsi yes yes yes 66 0 FFKMWE+Arial-BoldMT CID TrueType Identity-H yes yes yes 85 0 DXHVUI+ArialMT CID TrueType Identity-H yes yes yes 90 0 Jhove (Rel. 1.22.1, 2019-04-17) Date: 2023-05-09 02:28:43 CEST RepresentationInformation: 3777-10258-1-PB-1.pdf ReportingModule: PDF-hul, Rel. 1.12.1 (2019-04-17) LastModified: 2023-05-08 09:51:24 CEST Size: 514464 Format: PDF Version: 1.7 Status: Well-Formed and valid SignatureMatches: PDF-hul MIMEtype: application/pdf Profile: Linearized PDF PDFMetadata: Objects: 685 FreeObjects: 416 IncrementalUpdates: 1 DocumentCatalog: ViewerPreferences: HideToolbar: false HideMenubar: false HideWindowUI: false FitWindow: false CenterWindow: false DisplayDocTitle: true NonFullScreenPageMode: UseNone Direction: L2R ViewArea: CropBox ViewClip: CropBox PrintArea: CropBox PageClip: CropBox PageLayout: SinglePage PageMode: UseNone Language: en-GB Outlines: Item: Title: 1 Introduction Item: Title: 2 The transition to a new model of managing digital identity in the European Union Children: Item: Title: 2.1 Limitations of the eIDAS Regulation Item: Title: 2.2 Conceptualisation of the sovereign European identity project Item: Title: 3 The self-sovereign identity movement Children: Item: Title: 3.1 Controversy over the term sovereign Item: Title: 3.2 The contribution of blockchain to the identity debate Item: Title: 4 The European Union’s Digital COVID Certificate Children: Item: Title: 4.1 Technical elements of the COVID-19 digital certificate Item: Title: 4.2 The contribution of the COVID-19 digital certificate to the sovereign identity project Item: Title: 5 Conclusions Item: Title: 6 References Info: Title: Reflections on the European Digital Identity project in the light of the Digital COVID Certificate and the self-sovereign identity movement Author: Raül Ramos Fernández Subject: What is anticipated from the European Digital Identity project is being able to prove possession of a COVID-19 vaccination certificate without submitting any personal data. The introduction of this project through the draft amendment of the Regulation on electronic identification and trust services (eIDAS) has established for the first time the creation of a Digital Identity Wallet that could be used as a means of identification and a container of identity credentials, without depending on centralised files or tracking who they are presented to, with the premise of security and privacy of personal data by design as a fundamental objective. This vision, which is strongly influenced by the self-sovereign identity movement, together with the creation of the European Blockchain Services Infrastructure (EBSI) on which the European Self-Sovereign Identity Framework (ESSIF) depends, is reflected in the amendment of the eIDAS Regulation, and, indirectly, in the EU Digital COVID Certificate. As a result of the pandemic, the need to create a reliable, secure, interoperable system with full respect for the General Data Protection Regulation (GDPR) to certify health in relation to the disease led to the adaption of the European Digital Identity project to the COVID certificate. The opportunity presented by the study of the technical functioning of the certificate means that the assessment of improvements to be introduced can be transferred to the European Digital Identity project, including the blockchain resource as an alternative to the traditional public key infrastructure (PKI). In this respect, the certificate represents a firm step towards a decentralised digital identity model to ensure that individuals have full control over their data. Acreditar la possessió d’un certificat de vacunació contra la COVID-19 sense lliurar cap dada de caràcter personal és el que s’anticipa del projecte Identitat Digital Europea. La introducció d’aquest projecte mitjançant l’esborrany de modificació del Reglament d’identificació electrònica i serveis de confiança (eIDAS) planteja per primera vegada la creació d’una cartera d’identitat digital que es pugui emprar com a mitjà d’identificació i com a contenidor de credencials d’identitat, sense la dependència d’arxius centralitzats ni traça davant qui es presenten, amb la premissa de la seguretat i la privacitat de les dades personals per disseny com a objectiu fonamental. Aquesta visió, fortament marcada pel moviment sobre la self-sovereign identity,  junt amb la creació de la Infraestructura Europea de Serveis de Cadena de Blocs (European Blockchain Services Infrastructure, EBSI), de la qual depèn el Marc Europeu d’Identitat Sobirana (European Self-Sovereign Identity Framework, ESSIF)  es veu reflectida en la modificació del Reglament eIDAS, i, de retruc, en el certificat COVID digital de la UE. La necessitat, arran la pandèmia, de crear un sistema fiable, segur, interoperable i amb ple respecte pel Reglament general de protecció de dades (RGPD) per acreditar la salut en relació amb la malaltia ha portat a adaptar part del projecte d’identitat digital europea al certificat COVID; l’oportunitat que s’introdueix amb l’estudi del funcionament tècnic del certificat permet que l’avaluació de les millores a introduir siguin traslladables al projecte d’identitat digital europea, com el recurs a xarxes de cadenes de blocs (blockchain) a manera d’alternativa a la tradicional infraestructura de clau pública (PKI). En aquest sentit, el certificat suposa un pas ferm cap a un model d’identitat digital descentralitzat per garantir que l’individu tingui ple control sobre les seves dades. Creator: Adobe InDesign CC 13.1 (Windows) Producer: Adobe PDF Library 15.0 CreationDate: Mon Dec 12 11:38:55 CET 2022 ModDate: Mon Dec 12 11:39:00 CET 2022 ID: 0x3f188c58185dce48b783255bf3ea50c9, 0xbdd964840c898a42bff6e37634372916 Filters: FilterPipeline: FlateDecode Fonts: Type0: Font: BaseFont: VGGUMY+TimesNewRomanPS-ItalicMT Encoding: Identity-H ToUnicode: true Font: BaseFont: ELZLIG+TimesNewRomanPSMT Encoding: Identity-H ToUnicode: true Font: BaseFont: FFKMWE+Arial-BoldMT Encoding: Identity-H ToUnicode: true Font: BaseFont: DXHVUI+ArialMT Encoding: Identity-H ToUnicode: true TrueType: Font: BaseFont: JLNKAW+TimesNewRomanPSMT FontSubset: true FirstChar: 32 LastChar: 252 FontDescriptor: FontName: JLNKAW+TimesNewRomanPSMT Flags: Serif, Nonsymbolic FontBBox: -568, -307, 2000, 1007 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true Font: BaseFont: ZMJSQQ+ArialMT FontSubset: true FirstChar: 32 LastChar: 121 FontDescriptor: FontName: ZMJSQQ+ArialMT Flags: Nonsymbolic FontBBox: -665, -325, 2000, 1006 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true Font: BaseFont: OTDVCM+Arial-BoldMT FontSubset: true FirstChar: 32 LastChar: 121 FontDescriptor: FontName: OTDVCM+Arial-BoldMT Flags: Nonsymbolic FontBBox: -628, -376, 2000, 1018 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true Font: BaseFont: HDKTYA+Arial-ItalicMT FontSubset: true FirstChar: 32 LastChar: 146 FontDescriptor: FontName: HDKTYA+Arial-ItalicMT Flags: Nonsymbolic, Italic FontBBox: -517, -325, 1359, 998 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true Font: BaseFont: BSCZSM+TimesNewRomanPS-ItalicMT FontSubset: true FirstChar: 32 LastChar: 117 FontDescriptor: FontName: BSCZSM+TimesNewRomanPS-ItalicMT Flags: Serif, Nonsymbolic, Italic FontBBox: -498, -307, 1333, 1023 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true Font: BaseFont: XMEBOU+TimesNewRomanPS-BoldMT FontSubset: true FirstChar: 32 LastChar: 116 FontDescriptor: FontName: XMEBOU+TimesNewRomanPS-BoldMT Flags: Serif, Nonsymbolic FontBBox: -558, -307, 2000, 1026 FontFile2: true Encoding: WinAnsiEncoding ToUnicode: true CIDFontType2: Font: BaseFont: FFKMWE+Arial-BoldMT CIDSystemInfo: Registry: Adobe Registry: Identity Supplement: 0 FontDescriptor: FontName: FFKMWE+Arial-BoldMT Flags: Symbolic FontBBox: -628, -376, 2000, 1018 FontFile2: true Font: BaseFont: WKNCAW+ArialMT CIDSystemInfo: Registry: Adobe Registry: Identity Supplement: 0 FontDescriptor: FontName: WKNCAW+ArialMT Flags: Symbolic FontBBox: -665, -325, 2000, 1006 FontFile2: true Font: BaseFont: ELZLIG+TimesNewRomanPSMT CIDSystemInfo: Registry: Adobe Registry: Identity Supplement: 0 FontDescriptor: FontName: ELZLIG+TimesNewRomanPSMT Flags: Serif, Symbolic FontBBox: -568, -307, 2000, 1007 FontFile2: true Font: BaseFont: VGGUMY+TimesNewRomanPS-ItalicMT CIDSystemInfo: Registry: Adobe Registry: Identity Supplement: 0 FontDescriptor: FontName: VGGUMY+TimesNewRomanPS-ItalicMT Flags: Serif, Symbolic, Italic FontBBox: -498, -307, 1333, 1023 FontFile2: true XMP: application/pdf Raül Ramos Fernández Reflections on the European Digital Identity project in the light of the Digital COVID Certificate and the self-sovereign identity movement What is anticipated from the European Digital Identity project is being able to prove possession of a COVID-19 vaccination certificate without submitting any personal data. The introduction of this project through the draft amendment of the Regulation on electronic identification and trust services (eIDAS) has established for the first time the creation of a Digital Identity Wallet that could be used as a means of identification and a container of identity credentials, without depending on centralised files or tracking who they are presented to, with the premise of security and privacy of personal data by design as a fundamental objective. This vision, which is strongly influenced by the self-sovereign identity movement, together with the creation of the European Blockchain Services Infrastructure (EBSI) on which the European Self-Sovereign Identity Framework (ESSIF) depends, is reflected in the amendment of the eIDAS Regulation, and, indirectly, in the EU Digital COVID Certificate. As a result of the pandemic, the need to create a reliable, secure, interoperable system with full respect for the General Data Protection Regulation (GDPR) to certify health in relation to the disease led to the adaption of the European Digital Identity project to the COVID certificate. The opportunity presented by the study of the technical functioning of the certificate means that the assessment of improvements to be introduced can be transferred to the European Digital Identity project, including the blockchain resource as an alternative to the traditional public key infrastructure (PKI). In this respect, the certificate represents a firm step towards a decentralised digital identity model to ensure that individuals have full control over their data. Acreditar la possessió d’un certificat de vacunació contra la COVID-19 sense lliurar cap dada de caràcter personal és el que s’anticipa del projecte Identitat Digital Europea. La introducció d’aquest projecte mitjançant l’esborrany de modificació del Reglament d’identificació electrònica i serveis de confiança (eIDAS) planteja per primera vegada la creació d’una cartera d’identitat digital que es pugui emprar com a mitjà d’identificació i com a contenidor de credencials d’identitat, sense la dependència d’arxius centralitzats ni traça davant qui es presenten, amb la premissa de la seguretat i la privacitat de les dades personals per disseny com a objectiu fonamental. Aquesta visió, fortament marcada pel moviment sobre la self-sovereign identity, –junt amb la creació de la Infraestructura Europea de Serveis de Cadena de Blocs (European Blockchain Services Infrastructure, EBSI), de la qual depèn el Marc Europeu d’Identitat Sobirana (European Self-Sovereign Identity Framework, ESSIF)– es veu reflectida en la modificació del Reglament eIDAS, i, de retruc, en el certificat COVID digital de la UE. La necessitat, arran la pandèmia, de crear un sistema fiable, segur, interoperable i amb ple respecte pel Reglament general de protecció de dades (RGPD) per acreditar la salut en relació amb la malaltia ha portat a adaptar part del projecte d’identitat digital europea al certificat COVID; l’oportunitat que s’introdueix amb l’estudi del funcionament tècnic del certificat permet que l’avaluació de les millores a introduir siguin traslladables al projecte d’identitat digital europea, com el recurs a xarxes de cadenes de blocs (blockchain) a manera d’alternativa a la tradicional infraestructura de clau pública (PKI). En aquest sentit, el certificat suposa un pas ferm cap a un model d’identitat digital descentralitzat per garantir que l’individu tingui ple control sobre les seves dades. COVID-19 eIDAS Regulation self-sovereign identity blockchain interoperability key public infrastructure COVID-19 Reglament eIDAS identitat autosobirana cadena de blocs interoperabilitat infraestructura de clau pública 2022-12-12T11:38:55+01:00 2022-12-12T11:39+01:00 2022-12-12T11:39+01:00 Adobe InDesign CC 13.1 (Windows) uuid:127199eb-7670-49c9-8bfc-e30742b33782 xmp.did:E981601902F9E211B9488A0131FC7D8E xmp.id:64db3f2b-5a4b-1a45-99ec-ac72bcbb56e7 proof:pdf xmp.iid:f77b766d-8ab3-1847-aaa2-c1ca1ed75e2c xmp.did:57c959d7-97f5-e140-97db-a4e340cabe33 xmp.did:E981601902F9E211B9488A0131FC7D8E default converted from application/x-indesign to application/pdf Adobe InDesign CC 13.1 (Windows) / 2022-12-12T11:38:55+01:00 True https://creativecommons.org/licenses/by-nc-nd/3.0/es/deed.ca Adobe PDF Library 15.0 False Pages: Page: Label: 179 Sequence: 1 Annotations: Annotation: Subtype: Link Rect: 452, 131, 530, 120 Annotation: Subtype: Link Rect: 445, 89, 544, 78 Annotation: Subtype: Link Rect: 70, 79, 120, 68 Annotation: Subtype: Link Rect: 68, 53, 176, 29 Annotation: Subtype: Link Rect: 490, 53, 546, 29 Thumb: true Page: Label: 180 Sequence: 2 Annotations: Annotation: Subtype: Link Rect: 70, 744, 133, 729 ActionDest: 4 Annotation: Subtype: Link Rect: 70, 719, 438, 705 ActionDest: 7 Annotation: Subtype: Link Rect: 79, 703, 259, 689 ActionDest: 11 Annotation: Subtype: Link Rect: 79, 682, 363, 667 ActionDest: 11 Annotation: Subtype: Link Rect: 70, 651, 246, 637 ActionDest: 13 Annotation: Subtype: Link Rect: 79, 636, 256, 621 ActionDest: 15 Annotation: Subtype: Link Rect: 79, 614, 327, 599 ActionDest: 15 Annotation: Subtype: Link Rect: 70, 583, 297, 569 ActionDest: 17 Annotation: Subtype: Link Rect: 79, 567, 337, 553 ActionDest: 26 Annotation: Subtype: Link Rect: 79, 546, 469, 531 ActionDest: 29 Annotation: Subtype: Link Rect: 70, 515, 133, 501 ActionDest: 34 Annotation: Subtype: Link Rect: 70, 491, 130, 476 ActionDest: 36 Thumb: true Page: Label: 181 Sequence: 3 Annotations: Annotation: Subtype: Link Rect: 91, 565, 134, 551 Annotation: Subtype: Link Rect: 325, 172, 411, 160 Thumb: true Page: Label: 182 Sequence: 4 Thumb: true Page: Label: 183 Sequence: 5 Thumb: true Page: Label: 184 Sequence: 6 Thumb: true Page: Label: 185 Sequence: 7 Thumb: true Page: Label: 186 Sequence: 8 Thumb: true Page: Label: 187 Sequence: 9 Thumb: true Page: Label: 188 Sequence: 10 Annotations: Annotation: Subtype: Link Rect: 273, 700, 406, 686 Annotation: Subtype: Link Rect: 441, 700, 544, 686 Annotation: Subtype: Link Rect: 167, 674, 359, 660 Annotation: Subtype: Link Rect: 124, 648, 325, 634 Thumb: true Page: Label: 189 Sequence: 11 Annotations: Annotation: Subtype: Link Rect: 220, 105, 507, 93 Thumb: true Page: Label: 190 Sequence: 12 Thumb: true Page: Label: 191 Sequence: 13 Thumb: true Page: Label: 192 Sequence: 14 Annotations: Annotation: Subtype: Link Rect: 272, 564, 544, 549 Annotation: Subtype: Link Rect: 99, 551, 270, 536 Annotation: Subtype: Link Rect: 233, 507, 335, 493 Annotation: Subtype: Link Rect: 234, 485, 384, 471 Annotation: Subtype: Link Rect: 168, 438, 340, 423 Annotation: Subtype: Link Rect: 236, 416, 324, 401 Annotation: Subtype: Link Rect: 241, 394, 518, 379 Annotation: Subtype: Link Rect: 302, 359, 544, 344 Annotation: Subtype: Link Rect: 99, 346, 217, 331 Annotation: Subtype: Link Rect: 222, 311, 486, 297 Annotation: Subtype: Link Rect: 204, 276, 387, 262 Annotation: Subtype: Link Rect: 235, 220, 521, 205 Annotation: Subtype: Link Rect: 362, 198, 479, 183 Annotation: Subtype: Link Rect: 239, 163, 541, 148 Thumb: true Page: Label: 193 Sequence: 15 Annotations: Annotation: Subtype: Link Rect: 241, 695, 544, 681 Annotation: Subtype: Link Rect: 99, 683, 149, 668 Annotation: Subtype: Link Rect: 227, 661, 381, 646 Thumb: true Checksum: 5e03431c Type: CRC32 Checksum: ec4c86799c360441c7987ddc7171f4c0 Type: MD5 Checksum: 88a64f03664c3d08ff47febf7fa7d6db7840f818 Type: SHA-1