8. Digital Credential Flows

Digital Credential Flows Table of Contents

• 8.1. Digital Credential Issuance
  • 8.1.1. Credential Issuance High-Level Flows
    • 8.1.1.1. High-Level PID flow
    • 8.1.1.2. High-Level (Q)EAA flow
  • 8.1.2. Credential Issuance Low-Level Flows
    • 8.1.2.1. Low-Level Issuance Flow
    • 8.1.2.2. Refresh Token Flow
    • 8.1.2.3. Re-Issuance Flow
  • 8.1.3. eID Substantial Authentication with MRTD Verification for PID Issuance
    • 8.1.3.1. Design Principles
    • 8.1.3.2. System Architecture
    • 8.1.3.3. High-Level Flow
    • 8.1.3.4. Session Management
    • 8.1.3.5. Low-Level Flow
    • 8.1.3.6. Error Management
    • 8.1.3.7. Security Considerations
    • 8.1.3.8. Implementation Considerations
• 8.2. Digital Credential Presentation
  • 8.2.1. Remote Flow
    • 8.2.1.1. Authorization Request
    • 8.2.1.2. Request URI Request
    • 8.2.1.3. Request URI Response
    • 8.2.1.4. Authorization Response
    • 8.2.1.5. Relying Party Response
    • 8.2.1.6. Status Endpoint
    • 8.2.1.7. Redirect URI
  • 8.2.2. Proximity Flow
    • 8.2.2.1. DeviceEngagement over QR Code
    • 8.2.2.2. DeviceEngagement over NFC
    • 8.2.2.3. SessionEstablishment over BLE
    • 8.2.2.4. SessionData over BLE
    • 8.2.2.5. SessionEstablishment over NFC
    • 8.2.2.6. SessionData over NFC
    • 8.2.2.7. Device Engagement