16.3. Technical References

This section details the technical references, grouped by scope, that are part of the current implementation profile. This section includes international and national standards, draft specifications, architecture references and other relevant technical documents foundational for the interoperability and the compliance with industry standards.

16.3.1. Wallet Architecture and Reference Frameworks

EIDAS-ARF

EUDI Wallet Architecture and Reference Framework (ARF) v3.0.0.

16.3.2. EUDI Wallet Standards and Technical Specifications

EUDI-TS 3

Specification of Wallet Unit Attestations (WUA) used in issuance of PID and Attestations.

EUDI-TS 5

Common Formats and API for Relying Party Registration Information, version 1.5 (2026-08-20). This version aligns the Register data model and API with [CIR2026/1730], which amends [CIR2025/848].

EUDI-TS 10

Data Portability and Download (Export).

EUDI-TS 12

Specification of Strong Customer Authentication (SCA) Implementation with the Wallet.

16.3.3. Infrastructure of Trust

RFC 5280

Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, May 2008.

OID-FED-WALLET

De Marco, G., Hedberg, R., Jones, M.B., Bradley, J., Dzhuvinov, V., "OpenID Federation Wallet Architectures 1.0", October 2024, Draft 03.

OID-FED

Hedberg, R., Jones, M.B., Solberg, A.A., Bradley, J., De Marco, G., Dzhuvinov, V., "OpenID Federation 1.0", February 2026, Final.

OID-FED-SUBORDINATE-EVENTS

De Marco, G., Jones, M.B., "OpenID Federation Subordinate Events Endpoint 1.0", January 2026, Draft 00.

ACME-OIDFED

De Marco, G., Pitman, B., "Automatic Certificate Management Environment (ACME) with OpenID Federation 1.0", December 2025, Draft 00.

ETSI TS 119 461

ETSI TS 119 461 v1.1.1 - Electronic Signatures and Trust Infrastructures (ESI); Policy and security requirements for trust service components providing identity proofing of trust service subjects.

ETSI EN 319 411-1

ETSI EN 319 411-1 v1.5.1 - Electronic Signatures and Trust Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 1: General requirements. IT-Wallet adopts v1.5.1, which does not introduce breaking changes with respect to v1.4.1 referenced by CIR (EU) 2025/848.

ETSI EN 319 411-2

ETSI EN 319 411-2 v2.5.1 - Electronic Signatures and Trust Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 2: Requirements for trust service providers issuing EU qualified certificates.

ETSI TS 119 411-8

ETSI TS 119 411-8 v1.1.1 - Electronic Signatures and Trust Infrastructures (ESI); Policy and security requirements for trust service providers issuing certificates; Part 8: Access certificate policy for EUDI Wallet Relying Parties.

ETSI EN 319 412-1

ETSI EN 319 412-1 v1.7.0 - Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 1: Overview and common data structures.

ETSI EN 319 412-2

ETSI EN 319 412-2 v2.4.1 - Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 2: Certificate profile for certificates issued to natural persons.

ETSI EN 319 412-3

ETSI EN 319 412-3 v1.3.1 - Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons.

ETSI EN 319 412-5

ETSI EN 319 412-5 v2.6.0 (draft) - Electronic Signatures and Trust Infrastructures (ESI); Certificate Profiles; Part 5: QCStatements.

ETSI TS 119 412-6

ETSI TS 119 412-6 v1.2.1 - Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 6: Certificate profile requirements for PID, Wallet, EAA, QEAA, and PSBEAA providers.

ETSI TS 119 475

ETSI TS 119 475 v1.2.1 - Electronic Signatures and Trust Infrastructures (ESI); Relying party attributes supporting EUDI Wallet user's authorisation decisions.

ETSI TS 119 602

ETSI TS 119 602 v1.1.1 - Electronic Signatures and Trust Infrastructures (ESI); Trusted lists; Data model.

ETSI TS 119 612

ETSI TS 119 612 v2.4.1 - Electronic Signatures and Infrastructures (ESI); Trusted Lists.

ETSI TS 119 615

ETSI TS 119 615 v1.3.1 - Electronic Signatures and Trust Infrastructures (ESI); Trusted lists; Procedures for using and interpreting European Union Member States national trusted lists.

ETSI EN 319 102-1

ETSI EN 319 102-1 v1.4.1 - Electronic Signatures and Trust Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation.

ETSI EN 319 132-1

ETSI EN 319 132-1 v1.3.1 - Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 1: Building blocks and XAdES baseline signatures.

ETSI TS 119 182-1

ETSI TS 119 182-1 v1.2.1 - Electronic Signatures and Infrastructures (ESI); JAdES digital signatures; Part 1: Building blocks and JAdES baseline signatures.

16.3.4. Digital Credential Data Format

SD-JWT-VC

  1. Terbu, D.Fett, B. Campbell, "SD-JWT-based Verifiable Credentials (SD-JWT VC)", November 2025, Draft 13.

ETSI TS 119 472-1

ETSI TS 119 472-1 v1.2.1 - Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 1: General requirements.

ISO18013-5

ISO/IEC 18013-5 2020. Information technology — Personal identification — ISO-compliant driving license — Part 5: Mobile driving license (mDL) application.

ISO-IEC-23220-2

ISO/IEC TS 23220-2. Cards and security devices for personal identification — Building blocks for identity management via mobile devices — Part 2: Data objects and encoding rules for generic eID systems.

16.3.5. Digital Credential Issuance

OpenID4VCI

Lodderstedt, T., Yasuda, K., Looker, T., Bastian, P., "OpenID for Verifiable Credential Issuance 1.0", September 2025.

OPENID4VC-HAIP

  1. Yasuda, Lodderstedt, T., Bormann, C., Heenan, J., "OpenID4VC High Assurance Interoperability Profile 1.0", December 2025, Final Specification.

OAUTH-ATTESTATION-CLIENT-AUTH

Looker, T., Bastian, P., Bormann, C., "OAuth 2.0 Attestation-Based Client Authentication", September 2025, Draft 7.

OAUTH-MULT-RESP-TYPE

de Medeiros, B., Scurtescu, M., Tarjan, P., Jones, M., "OAuth 2.0 Multiple Response Type Encoding Practices", February 2014.

ETSI TS 119 472-3

ETSI TS 119 472-3 v1.1.1 - Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 3: Profiles for issuance of EAA or PID.

16.3.6. Digital Credential Presentation

OpenID4VP

Terbu, O., Lodderstedt, T., Yasuda, K., Fett, D., Heenan, J., "OpenID for Verifiable Presentations 1.0", July 2025.

OAuthCrossDeviceSec

Kasselman, P., Fett, D., Skokan, F., "Cross-Device Flows: Security Best Current Practice", July 2024, Draft 8.

OPENID4VC-HAIP

  1. Yasuda, Lodderstedt, T., Bormann, C., Heenan, J., "OpenID4VC High Assurance Interoperability Profile 1.0", December 2025, Final Specification.

ISO18013-5

ISO/IEC 18013-5 2020. Information technology — Personal identification — ISO-compliant driving license — Part 5: Mobile driving license (mDL) application.

OIDC-RP-Metadata

Jones, M.B., Hedberg, R., Bradley, J., Skokan, F., "OpenID Connect Relying Party Metadata Choices 1.0", March 2026.

ETSI TS 119 472-2

ETSI TS 119 472-2 v1.2.1 - Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 2: Profiles for EAA/PID Presentations to Relying Party.

16.3.7. Digital Credential Revocation Check Mechanisms

TOKEN-STATUS-LIST

Looker, T., Bastian, P., Bormann, C., "Token Status List (TSL)", June 2026, Draft 21.

16.3.8. National Data Interoperability Platform Specifications

MODI

"Linee Guida sull'interoperabilità tecnica delle Pubbliche Amministrazioni", November 2023, Version 1.2.

PDND

"Linee Guida sull'infrastruttura tecnologica della Piattaforma Digitale Nazionale Dati per l'interoperabilità dei sistemi informativi e delle basi di dati", June 2025, Version 2.0.

OAS3

OpenAPI 3.0 API Specification.

16.3.9. National Digital Identity Platform Specifications

SPID/CIE-OpenID-Connect-Specifications

SPID/CIE OpenID Connect.

16.3.10. Security and Protection Profiles

UNI CEI EN ISO/IEC 27001:2024

Information security, cybersecurity and privacy protection — Information security management systems — Requirement