The digital wallet developed by GRADIANT will support the decentralized identity model defined by EBSI, within the use case known as the European Self-Sovereign Identity Framework (ESSIF).
Specifically, this user digital wallet will be a mobile application capable of securely requesting, storing, and presenting verifiable identity credentials, enabling users to identify and authenticate themselves against online services provided by the entities participating in the project as end-user providers.
On the other hand, corporate or organizational wallets will consist of a service that can be used by entities to act either as identity issuers or identity verifiers, depending on the use case. As identity issuers, project participants will be able to issue verifiable identity credentials to users who wish to register through the digital wallet. As identity verifiers, they will be able to validate the credentials presented by the user and decide whether to grant access to the online services they wish to consume.
Furthermore, securing the digital wallet is of critical importance. In particular, for corporate wallets, a key management solution will be implemented using cloud-based HSMs to securely handle key lifecycle operations (generation, storage, revocation, and renewal), as well as the necessary signing and verification processes. In this way, cryptographic keys will always remain within the secure HSM environment.
For user wallets, Trusted Execution Environments (TEEs) on mobile devices will be used to protect both cryptographic keys and credentials.
