Glossary
Physical Document
A document refers to a physical credential document held by a user, such as a driver license, firearm license, or identity card. A document is identified by a document number (documentId) associated with this specific physical document at the time it was issued. It is often used during the identity proofing operation as evidence for determining Level of Assurance.
Digital Credential
A Digital Credential is tamper proof assertion of a person identity and optionally privilege that lives a person's smart device. It is cryptographically bound to the device, signed by an issuing authority and verifiable.
Each Digital Credential is identified by a unique credentialId, which is assigned at the time of initial issuance and represents the logical credential at the user level.
A specific instance of a digital credential in a wallet on a device is referred to as a deviceCredential and is identified by a unique midUid that is assigned by the Digital Credential Platform.
As the Digital Credential Platform supports registering the same Digital Credential on multiple devices, a single credentialId may be associated with multiple midUid values, one for each device on which the credential is provisioned.
Datagroup
A datagroup is a binary bundle that represents a credential.
It typically contains:
- user identity attributes,
- optional privilege attributes,
- a device authentication public key,
- an Issuer digital signature traceable to a trusted Issuer.
An example of such a structure is the ISO 23220-4 PhotoID mDoc.
Digital Wallet
A digital wallet is a container for digital credentials. A user can have the multiple credentials enrolled in one wallet simultaneously.
The DC platform supports the following digital wallets for digital credentials:
- IDEMIA iD Wallet
- Customer-branded iD Wallet Application
- Customer Application embedding the DC Mobile SDK
State
represents the current lifecycle status of a credential or a deviceCredential.
As a general principle, the state of a credential and the states of its associated deviceCredentials are expected to be consistent. However, the platform provides flexibility that allows certain state changes to be applied to an individual deviceCredential without changing the state of the parent credential. For example, a specific deviceCredential may be suspended while the credential itself remains unchanged.
Any state change applied at the credential level automatically propagates to all associated deviceCredentials, updating their states accordingly.
Credential State | deviceCredential state |
|---|---|
| ACTIVE | ACTIVE |
| SUSPENDED | SUSPENDED |
| REINSTATED | ACTIVE |
Credential vs. deviceCredential State Definitions.
Digital identifiers :
Identifier | Definition |
|---|---|
| documentId | Identifier associated with physical credential in Issuer's Backend. |
| credentialId | Unique identifier of credential, UUID during enrollment process. Used to identify the digital credential across multiple devices. |
| midUid | Identifies the digital credential instance (deviceCredential) in a digital wallet on a specific device. Multiple midUid values may link to a single credentialId. |
| deviceId | Universal unique identifier of device, set by the digital wallet client application. Mobile devices are not able to identify hardware, so there is no guarantee that this value is the same for each installation on the same device. Informational reference that could be used for discussions between Issuers and Wallet providers. |
This table provides a description of each digital identifier