16.1. Defined Terms and Acronyms

This section aligns the IT-Wallet System's terminology with the definitions provided in ARF 3.0.0 (see ARF Annex 1) and with CIR2026/1730, which amends CIR2025/848. For each term, the IT-Wallet definition is compared and mapped to the ARF definition, with notes on any differences or clarifications.

The following terms are defined in the EIDAS-ARF. The terms are User, Trust Service, Trust Model, Trusted List, List of Trusted Entities, and Trust Framework. The terms also include Attribute, Electronic Attestations of Attributes Provider or Trust Service Provider (TSP), and Person Identification Data (PID). The terms also include Revocation List, Qualified Electronic Attestations of Attributes Provider or Qualified Trust Service Provider (QTSP), and Electronic Attestation of Attributes (EAA). The terms also include Wallet Unit Attestation and Relying Party Service.

Below is the description of acronyms and definitions which are useful for further insights into topics that complement the IT-Wallet System and the interacting components.

Access Certificate

Certificate authenticating and validating the Wallet Relying Party. Aligned with ARF 3.0.0.

Access Certificate Authority

Access CA

Provider of WRPAC

Legal person mandated by a Member State to issue Wallet-Relying Party Access Certificates to Wallet-Relying Parties registered in that Member State. In the EUDIW Trust Framework it is the Provider of WRPAC. Aligned with ARF 3.0.0.

Accreditation Process

Process performed by the National Accreditation Body to accredit CABs, resulting in an accreditation certificate. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Administrative validity

Interval during which the attested attributes remain valid, for example the expiry of a licence.

Attestation identity code

Identifier of one issued Electronic Attestation of Attributes. In SD-JWT VC it is the jti claim. In mdoc it is the document_number data element.

Attestation Rulebook

Human-readable document that defines a type of Attestation by specifying the identifiers, the syntax, the semantics and the encoding of its Attributes. The document also specifies the proof mechanisms and, where needed, the trust and the presentation mechanisms. Aligned with Section 5.5 of the EIDAS-ARF.

Attestation Scheme Provider

Entity that defines a type of Attestation, publishes its Attestation Rulebook together with the corresponding machine-readable attestation scheme, and may request their registration in a catalogue. Within IT-Wallet it is the Entity that requests the registration of a Credential type in the Digital Credentials Catalog. Aligned with Section 3.15 of the EIDAS-ARF.

Attributes

User Attribute

User Claim

A set of characteristics, qualities, rights, or permissions of a person or object, or a single piece of such information. Aligned with ARF 3.0.0.

Authentic Source

Public or private entity responsible for a repository/system considered a primary source for Attributes or PID. Aligned with ARF 3.0.0.

Authentic Source Registry

AS Registry

Registry containing Authentic Sources, their declared capabilities, and available claims, used by Credential Issuers to discover and integrate authoritative data providers. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Authentication

Electronic process confirming the identity of a person or the origin/integrity of data. Aligned with ARF 3.0.0.

Certificate Signing Request

Request sent to a CA containing the public key and identifying information for a digital certificate. Not present in ARF 3.0.0.

Certification Process

Process by Conformity Assessment Bodies to certify the Wallet Solution, including periodic technical assessments. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Conformity Assessment Body

Accredited body competent to assess/certify Wallet Solutions or trust service providers. Aligned with ARF 3.0.0.

Credential Issuer

Issuer

Attestation Provider

Organizational Entity providing Digital Credentials to Users (may be PID Provider or (Q)EAA Provider). Aligned with ARF 3.0.0. IT-Wallet merges PID and (Q)EAA Providers under this term.

Critical Assets

Assets (e.g., cryptographic keys) whose loss would seriously impact the Wallet Unit. Aligned with ARF 3.0.0.

Cryptographic Hardware Key Tag

Unique identifier for Cryptographic Hardware Keys, used to access the private key in hardware. Not present in ARF 3.0.0.

Cryptographic Hardware Keys

Key pair generated by the Wallet Instance, valid for its lifetime. Not present in ARF 3.0.0.

Dataset_id

Alphanumeric string defined by the Authentic Source that uniquely identifies a specific dataset relating to an Electronic Attestation of Attributes. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Device Integrity Service

Service by device manufacturers to verify app integrity and secure key storage. Not present in ARF 3.0.0.

Digital Credential

Credential

Signed set of Attributes in a specific format (e.g., mDoc-CBOR, SD-JWT VC), may be PID or (Q)EAA. Not present in ARF 3.0.0.

Digital Credential Catalog

Electronic catalog containing information about the formats and schemes of Digital Credentials, the data contained and the Authentic Sources. The Catalog contains additional information that allows for the establishment of the authenticity and reliability of the information contained therein. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

eIDAS Trusted List

IT-Wallet umbrella for the notified Trusted Lists and Lists of Trusted Entities used in the eIDAS trust services framework. The umbrella covers PID Provider, Wallet Provider, PuB-EAA, and Access CA or Registration Certificate Provider LoTEs. The umbrella also covers Member State QTSP and EAA Provider Trusted Lists discovered through the List of Trusted Lists. Not present under this wording in ARF 3.0.0. The term is specific to IT-Wallet.

Electronic Attestation of Attributes

Digitally verifiable attestation in electronic form, substantiating possession of attributes. Aligned with ARF 3.0.0.

Electronic Attestation of Attributes issued by or on behalf of a public sector body

Public Electronic Attestation of Attributes

Electronic Attestation of Attributes that contains Attributes deriving from a public Authentic Source. Aligned with ARF 3.0.0.

Electronic Attestation of Attributes Provider

Electronic Attestation Provider

Organizational Entity providing EAAs. Aligned with ARF 3.0.0.

Electronic Attestation of Public Interest

Credential of Public Interest

Electronic Attestation of Attributes that contains Attributes intended to certify the release, by the State or other public administrations, of authorizations, certifications, and qualifications. The Attributes may also certify identity and recognition documents and receipts of revenue. The Attributes may assume a fiduciary value and the protection of public faith after issuance or after the entries made on them. The Attributes are also used when they are considered security documents pursuant to Article 2, paragraph 10-bis, Law 13 July 1966, no. 559. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Federation Authority

Public governance entity issuing guidelines, rules, and managing trust lists and participant status. Not present in ARF 3.0.0.

Federation Registry

Registry component of the IT-Wallet Registry Infrastructure that maintains the authoritative list of trusted entities participating in the federation, including their federation metadata, endpoints, and public keys. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Holder

Person or entity that receives, manages, and presents Digital Credentials via the Wallet Instance. Similar with ARF 3.0.0. ARF uses this term only in Wallet-to-Wallet interactions while Holder Wallet Unit in other cases.

Holder Key Binding

Ability of the Holder to prove possession of the private key attested by a Trusted Third Party. Not present in ARF 3.0.0.

Identity and Access Management

Framework for managing digital identities and access to information. Not present in ARF 3.0.0.

Identity Matching

Process by which a Relying Party establishes that the person identification attributes presented in a transaction refer to the same natural person. Not present in ARF 2.7.3. The term is specific to IT-Wallet.

Identity Reconciliation

Process by which a Relying Party, after successful identity matching, links that natural person to a previous User session or stored User record. Not present in ARF 2.7.3. The term is specific to IT-Wallet.

Intermediate Entity

Intermediary

OpenID Federation Intermediate

Intermediate Entity as defined in OID-FED Section 1.2 within the OpenID Federation Trust Chain between a Trust Anchor and Leaf entities. The Intermediate Entity publishes its own Entity Configuration. The Intermediate Entity issues Subordinate Statements for its affiliated Relying Parties. Within the IT-Wallet trust infrastructure, the Trust Anchor registers the Intermediate Entity with a specific trust_mark_type. That registration enables the Wallet Instance to identify and display to the User that the requesting Relying Party operates through a recognized Intermediary. Not present in ARF 3.0.0 as a federation role. The ARF term Intermediary is the Relying Party Intermediary of Topic 52. This federation role is conceptually distinct from a Relying Party Intermediary under the European Digital Identity framework (EU_2024_1183, Article 5b(8)). In the implementation profile described by these technical specifications, a Relying Party Intermediary is also implemented as an OpenID Federation Intermediate Entity.

IT-Wallet ID

Electronic Attestation of Person Identification Data

An Electronic Attestation of Attributes (EAA) that contains identification data of a natural person and is issued with national scope only. The terms IT-Wallet ID and Electronic Attestation of Person Identification Data of national scope refer to the same national EAA. The qualifier «national scope» distinguishes this EAA from the EUDI Person Identification Data (PID), which is a set of data under the European Digital Identity framework and is not an EAA. It enables User authentication and identification towards Relying Parties operating within the national jurisdiction. It does not constitute a PID under EU_2024_1183 / EU_2024/2977. It is distinct from the EUDI PID and from a National Identity Provider or national eID scheme (for example CieID / SPID). The term National EID is not a synonym for IT-Wallet ID. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

IT-Wallet System

Set of Technical Solutions implementing the Italian Digital Wallet System. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

IT-Wallet System Register

Register of entities participating in the IT-Wallet System. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Key Attestation

KA

A type of Wallet Unit Attestation that attests the certification and properties of a WSCA/WSCD or Keystore available to the Wallet Unit. The Key Attestation contains one or more public keys. The corresponding private keys are generated by and stored in that WSCA/WSCD or Keystore. For the PID at Level of Assurance High, the Key Attestation describes the WSCA and the Remote WSCD (remote HSM). For other device-bound Digital Credentials, the Key Attestation describes the properties of the Keystore as attested by the OEM Key Attestation APIs. It is issued by the Wallet Provider. Aligned with ARF 3.0.0 Topic 9 and Technical Specification 3.

Key Attestation APIs (OEM)

A device manufacturer's attestation mechanism that confirms whether cryptographic keys are stored securely in a hardware-backed Keystore. Examples include Android Key Attestation API for Android devices and Apple DeviceCheck for iOS devices. These APIs attest the properties of the Keystore (key generation environment, hardware binding, device security level) and are used by the Wallet Provider to issue a Key Attestation. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Keystore

A hardware-backed secure storage environment provided by the device OEM for the generation, storage, and use of cryptographic keys. On Android devices, the Keystore relies on the Trusted Execution Environment (TEE) or Strongbox. On iOS devices, the Keystore is based on the Secure Enclave. The Keystore is the default cryptographic storage mechanism for all Wallet Instance operations and Digital Credentials. The properties of the Keystore are attested through the OEM Key Attestation APIs. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Level of Assurance

In the Union electronic identification framework, levels of assurance express the degree of confidence in the correctness of the identification of natural or legal persons. Levels of assurance also express the possibility to rely on electronic identification means. For notified electronic identification schemes, EIDAS (as amended, including the European Digital Identity Framework codified by EU_2024_1183) defines the levels low, substantial, and high. In these Technical Specifications, LoA is also used for minimum assurance requirements applying to User authentication, Wallet Instance context, and Digital Credential reliability (including catalog metadata such as minimum Level of Assurance). These uses follow applicable Union law, national implementation of notified schemes, and the rules on European Digital Identity Wallets and Person Identification Data (PID) (including Commission Implementing Regulation (EU) 2024/2979 where relevant). Not present under this wording in ARF 3.0.0. The wording is aligned with the eIDAS and EUDI Wallet legal framework.

List of Trusted Entities

LoTE

Machine-readable list of entities recognised as trustworthy within a given approval scheme for a specific scope or purpose. The list is consumed during trust evaluation together with the Trust Anchors in ServiceDigitalIdentity (ETSI TS 119 602). The European Commission compiles LoTEs for PID Providers, Wallet Providers, PuB-EAA Providers, Providers of WRPAC and Providers of WRPRC (EIDAS-ARF Topic 31). Aligned with ARF 3.0.0.

Member State Trusted List Provider

MS TLP

Organizational Entity designated by a Member State to compile, sign, and publish national Trusted Lists (for example, QTSP Trusted Lists and EAA Provider Trusted Lists). The Member State Trusted List Provider notifies their locations to the European Commission. Aligned with ARF 3.0.0 Topic 31.

Metadata

Digital artifact with information about an Organizational Entity (endpoints, public keys, etc.). Not present in ARF 3.0.0.

National Accreditation Bodies

Bodies performing accreditation under authority from a Member State. Aligned with ARF 3.0.0.

National Identity Provider

Organizational Entity providing preexisting notified electronic identification means used for User authentication (for example CieID / SPID), as distinct from the wallet-held IT-Wallet ID Credential. Not present in ARF 3.0.0.

National Trust Anchor

Organizational Entity designated at national level to act as the root of trust for the federation. The National Trust Anchor operates the national PKI. The National Trust Anchor publishes authoritative Trusted Lists and federation metadata for subordinate entities (for example, Intermediaries and Leaves). Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Notification Process

Process for transferring information to the EC and inclusion in the Trusted List. Aligned with ARF 3.0.0.

Object_id

Alphanumeric string defined by the Authentic Source that uniquely identifies a specific instance of an Electronic Attestation of Attributes associated with a particular User. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Organizational Entity

Legal person (organization or public entity) recognized to operate a role in the IT-Wallet ecosystem. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Person Identification Data

PID

A set of data that is issued in accordance with Union or national law. The set enables the establishment of the identity of a natural or legal person, or of a natural person representing another natural person or a legal person. Aligned with ARF 3.0.0 / EU_2024_1183. In these Technical Specifications, references to issuance, presentation, or revocation of a PID denote the technical PID (the signed data structure containing Person Identification Data) as used in the ARF.

PID Provider

Provider of Person Identification Data

Natural or legal person responsible for issuing and revoking the Person Identification Data. The PID Provider ensures that the Person Identification Data of a User is cryptographically bound to a Wallet Unit. Aligned with ARF 3.0.0.

Policy Language

Formal language for defining security, privacy, and identity management policies. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Primary Actors

Entities implementing Technical Solutions for the IT-Wallet System. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Pseudonym

Alternative identifier for privacy/anonymity, allowing authentication/authorization. Aligned with ARF 3.0.0.

Qualified Electronic Attestation of Attributes

Digitally verifiable attestation issued by a QTSP, substantiating possession of attributes. Aligned with ARF 3.0.0.

Qualified Electronic Attestation of Attributes Provider

Organizational Entity providing QEAAs. Aligned with ARF 3.0.0.

Qualified Electronic Signature Provider

Trust Service Provider issuing Qualified Electronic Signature certificates. Aligned with ARF 3.0.0.

Registration Authority

Registrar

Party responsible for registering Organizational Entities by issuing Trust Assertions. Aligned with ARF 3.0.0.

Registration Certificate

Data object indicating the attributes the Relying Party has registered to request from Users. Aligned with ARF 3.0.0.

Registration Certificate Provider

Provider of Registration Certificates

Reg. Cert. Provider

Provider of WRPRC

Legal person mandated by a Member State to issue Wallet-Relying Party Registration Certificates to Wallet-Relying Parties registered in that Member State. In the EUDIW Trust Framework it is the Provider of WRPRC. It issues those certificates automatically once the Entity has a valid registration in the Register and a valid WRPAC. Aligned with ARF 3.0.0.

Registration Process

Process for verifying eligibility and compliance of Organizational Entities. Aligned with ARF 3.0.0.

Relying Party

Entity relying on electronic identification or Trust Service from a Wallet Instance. Aligned with ARF 3.0.0.

Relying Party Instance

Verifier App

Specific deployment of a Relying Party application or device. Aligned with ARF 3.0.0.

Relying Party Intermediary

Organizational Entity that acts on behalf of one or more Relying Parties to provide Technical Solutions for connecting to Wallet Instances and for User authentication or verification of Electronic Attestations. In Union law (EU_2024_1183, Article 5b(8)), intermediaries acting on behalf of Relying Parties are deemed to be Relying Parties for registration and authentication towards European Digital Identity Wallets. That article prohibits storing data about the content of the transaction between the Wallet User and the intermediated Relying Party. High-level requirements for Wallet Relying Party registration, including intermediaries, minimum registration data, transparency, and common authentication mechanisms towards Wallets, are discussed in the EUDI Wallet Architecture and Reference Framework (ARF Topic 52). In an intermediated EUDIW presentation the Intermediary authenticates with its WRPAC. IT-Wallet specifies onboarding to the national trust framework, metadata, and technical controls that implement these obligations together with applicable national implementing measures. Aligned with ARF 3.0.0 Topic 52.

Relying Party Provider Backend

Remote infrastructure with server-side components managed by a Relying Party Solution provider. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Relying Party Service

Wallet-Relying Party Service

Service of a Wallet-Relying Party, registered separately from that entity's other services and distinguished by its identifier and trade name. Encoded in EUDI-TS 5 as WalletRelyingPartyService. Aligned with Section 3.11.2 of the EIDAS-ARF.

Relying Party Solution

Product (software/hardware/cloud) enabling Credential presentations in various contexts. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Selective Disclosure

Functionality enabling the User to submit a subset of Digital Credentials Data. Aligned with ARF 3.0.0.

Self-Sovereign Identity

Approach giving individuals control over their digital identity information. Not present in ARF 3.0.0.

Signal (Signal Hub)

A digital signal propagated through the PDND Signal Hub. It is used by Authentic Sources to notify Credential Issuers about updates to statuses and/or information within a domain managed by the Authentic Source itself.

Signal Hub

The PDND platform managed by the PDND Manager which enables collection and distribution of Signals. It consists of two PDND e-Services: Signal Collection and Signal Distribution.

Supervision Process

Process by a Supervisory Body to review and ensure proper functioning of the Wallet Provider and others. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Technical Solutions

Hardware/software systems and services implemented by Wallet Solution Providers, PID Provider, etc. Not present in ARF 3.0.0. The term is specific to IT-Wallet.

Technical Specifications

Specifications providing technical architecture, implementation framework, and design requirements. Aligned with ARF 3.0.0.

Technical validity

Interval during which the encoded attestation and its signature are valid. In SD-JWT VC it is expressed by nbf and exp. In mdoc it is expressed by validFrom and validUntil.

Trust

Confidence in the security, reliability, and integrity of entities and their actions. Not present in ARF 3.0.0.

Trust Attestation

Electronic attestation of compliance with the regulatory framework, cryptographically verifiable. Not present in ARF 3.0.0.

Trust Evaluation

Process of verifying trustworthiness of registered Organizational Entities. Not present in ARF 3.0.0.

Trust Framework

Legally enforceable set of rules and agreements for a multi-party system. Not present in ARF 3.0.0.

Trust Layer

Architectural component enabling participants to establish trust. Not present in ARF 3.0.0.

Trust Model

Collection of rules ensuring legitimacy of components/entities in the IT-Wallet ecosystem. Not present in ARF 3.0.0.

Trust Relationship

Reliable relationship between Organizational Entities after Trust Evaluation. Not present in ARF 3.0.0.

Trusted List

List that provides information about the status and the status history of the trust services from trust service providers regarding compliance with the applicable requirements (ETSI TS 119 612). Aligned with ARF 3.0.0.

User

Natural or legal person using trust services or electronic identification means. Aligned with ARF 3.0.0.

Verifier

Credential Verifier

A person or entity using a Relying Party Instance. Similar with ARF 3.0.0. ARF uses this term only in Wallet-to-Wallet interactions.

Wallet Instance

Application installed on a User's device, part of the Wallet Unit, providing user interfaces. Aligned with ARF 3.0.0.

Wallet Instance Attestation

Wallet Attestation

WIA

A type of Wallet Unit Attestation that attests the integrity and authenticity of a Wallet Instance. The Wallet Instance Attestation carries a revocation reference for the Wallet Instance and information about the Wallet Solution. It is issued by the Wallet Provider. Aligned with ARF 3.0.0 Topic 9.

Wallet Provider

Organizational Entity responsible for management and provisioning of a Wallet Solution. Aligned with ARF 3.0.0.

Wallet Provider Backend

The part of a Wallet Solution that is operated by the Wallet Provider. The Wallet Provider Backend offers Users support with their Wallet Units and performs essential maintenance. The Wallet Provider Backend issues Key Attestations and Wallet Instance Attestations to the Wallet Unit. Aligned with ARF 3.0.0.

Wallet Secure Cryptographic Application

Application managing critical assets using cryptographic functions provided by the WSCD. In IT-Wallet, the WSCA is used exclusively for the issuance and management of the PID at Level of Assurance High, operating within a Remote WSCD based on a remote Hardware Security Module (remote HSM). Aligned with ARF 3.0.0.

Wallet Secure Cryptographic Device

Tamper-resistant device providing a secure hardware environment for the WSCA to generate and protect critical assets. In IT-Wallet, the WSCD is implemented as a Remote WSCD, i.e., a remote Hardware Security Module (remote HSM) operated server-side, and is used exclusively for PID issuance and management at Level of Assurance High. Aligned with ARF 3.0.0.

Wallet Solution

Set of Technical Solutions for the proper functioning of Wallet Instances. Aligned with ARF 3.0.0.

Wallet Unit

Unique configuration of a Wallet Solution for an individual User, including security features. Aligned with ARF 3.0.0.

Wallet Unit Attestation

WUA

Data object that describes the components of the Wallet Unit or allows authentication and validation of those components. The ARF defines two subtypes: the Wallet Instance Attestation and the Key Attestation (EIDAS-ARF Topic 9). Aligned with ARF 3.0.0.

Wallet-Relying Party

Relying Party that intends to rely upon Wallet Units for the provision of public or private services by means of digital interaction. Within IT-Wallet it covers the Credential Issuers (the PID Provider and the Attestation Providers) and the Relying Parties together with the Relying Party Intermediaries. Aligned with ARF 3.0.0.

Note

For any term not present in ARF 3.0.0, the IT-Wallet definition is provided as authoritative for the Italian context.

Below are the main defined terms and definitions related to User Experience aspects:

Authentication Button

The Engagement Button that enables the User to access the Authentication process and use the services provided by Verifiers.

Brand Identity

Collection of visual, verbal, and strategic elements that a service, a product or an entity uses to present itself to the User and to distinguish itself from others.

Brand Manual

Document defining the rules and standards for the correct and consistent use of a Brand’s distinctive elements, including visual, verbal, and application-related aspects, across different Touchpoints.

Call To Action

A clear and direct suggestion that encourages users to take a specific action. It can be a button, a link, or another element guiding the user toward a particular goal.

Catalog

Section of the Wallet Instance that lists the Credential types that the Wallet Solution offers and from which the User starts issuance.

Detailed View

Extended display mode of the Digital Credentials, showing all the Attributes included.

Discovery Page

It's the page of the Touchpoint of the Relying Party where the User lands to access their authenticated area, and it has the goal to show the User all the Authentication methods available.

Engagement Button

Interactive element of the Interface that allows the User to trigger a process (e.g. to Authenticate, to request the issuance of a Digital Credential, etc.).

Interaction Model

A set of characteristics that define how the User interacts with the Interface of one or multiple Touchpoints in order to complete a task or operation and achieve a specific goal.

Interface

The set of graphic, typographical and interactive elements through which the User interacts with the Touchpoint(s) responsible for the delivery of a product or service, in compliance with [GL_DESIGN].

Preview View

Compact visualization mode of the Digital Credential that allows it to be recognized and distinguished in a list of Electronic Attestations thanks to the presence of minimum data or elements.

Selection Page

The Selection Page is the page of the Touchpoint of the Relying Party or of a third party offering a Credential Offer. On that page, the User can see all the Wallet Solutions available in the IT-Wallet System Register and can select which Wallet Solution continues Authentication, presentation, or issuance.

Service Model

Set of interactions between actors and touchpoints necessary for service delivery and fruition.

Touchpoint

Point of contact (digital and not) between the User and the product or service.

Trust Mark

A graphic element that gives evidence of the participation of the Primary Actors in the IT-Wallet System and thus guarantees adherence to its standards.

User Experience

The set of people's perceptions and reactions resulting from the use and/or expectation of use of a product, system or service. Aligned with ISO 9241-210:2010.

Visual Identity

Coherent set of graphic and typographic elements that visually represent a product or service and make it distinguishable and recognizable.

16.1.1. Acronyms

Below are the main acronyms used in the document:

Acronym	Description
AAL	Authenticator Assurance Level, as defined in the NIST CSRC glossary.
ANPR	Anagrafe Nazionale della Popolazione Residente (Italian National Registry of the Resident Population)
API	Application Programming Interface
ARF HLR	EUDI Wallet Architecture and Reference Framework High Level Requirements
CAB	Conformity Assessment Body
CIE	Carta di Identità Elettronica (National Electronic Identity Card)
EAA	Electronic Attestation of Attributes
EUMS TL	European Union Member State Trusted List (national Trusted List under Article 22 of eIDAS)
IAM	Identity and Access Management
LoA	Level of Assurance
LOTL	List of Trusted Lists
LoTE	List of Trusted Entities
NAB	National Accreditation Body
OID4VP	OpenID for Verifiable Presentation
OJEU	Official Journal of the European Union
PDND	Piattaforma Digitale Nazionale Dati (National Digital Data Platform)
PID	Person Identification Data
PII	Personally Identifiable Information
QEAA	Qualified Electronic Attestation of Attributes
Pub-EAA	Electronic Attestation of Attributes issued by or on behalf of a public sector body
SSI	Self Sovereign Identity
VC	Verifiable Credential
VP	Verifiable Presentation
KA	Key Attestation
WIA	Wallet Instance Attestation
WRPAC	Wallet-Relying Party Access Certificate
WRPRC	Wallet-Relying Party Registration Certificate
WSCA	Wallet Secure Cryptographic Application
WSCD	Wallet Secure Cryptographic Device
WUA	Wallet Unit Attestation