eIDAS2.0とEUIDWにみるトラストの検討
2023/11/14@JNSA 電子署名WG/JT2A
株式会社コスモス・コーポレイション
副社長 濱口 総志

Trust of the Products andServices

First of All – “Trust” and Framework• Technology• PKI, VC, DID, DLT• Assessment• TTP、Self-declaration• Standardization• ETSI, CEN, ISO, W3C, IETF, JIS,• Legislation• Legal Certainty

eIDAS, a Framework for Trust
services and eID

eIDAS regulation• Recitle (1) of eIDAS
Building trust in the online environment is key to economic and socialdevelopment. Lack of trust, in particular because of a perceived lack oflegal certainty, makes consumers, businesses and public authorities
hesitate to carry out transactions electronically and to adopt newservices.
（和訳）
オンライン環境における信頼の構築は経済と社会の発展の鍵である。信頼の欠如、特に法的安定性の欠如が消費者、企業、公的機関に電子取引や新たなサービスの採用を躊躇させている。

eSignature Directive - eIDAS
eSignature DirectiveeIDAS regulation

Scopeelectronic Signature

Trust Services (eSig, eSeal, Timestamp,QWAC, eDelivery, Validation, Preservation)+ eID

Defines

Simple, Advanced and Qualified+ Uniform legal requirements and legal
value for Trust services.
+ Three eID assurance levels andnotification scheme.

eIDAS Assessment framework

Source: ETSI(https://www.etsi.org/)

Standardization for eIDAS

Source: ETSI(https://www.etsi.org/)

Standardization for eIDAS

From eIDAS to eIDAS2.0

eIDAS - eIDAS2.0
eIDAS regulation

eIDAS 2.0

Scope

Trust Services (eSig, eSeal, Timestamp,QWAC, eDelivery, Validation,Preservation) + eID

Trust Services (+eLedger, eArchive, eAA,management of rQSCD) + eID and DIW

Defines+ Uniform legal requirements and legal
value for Trust services.
+ Three eID assurance levels andnotification scheme.

+ Uniform Technical requirements.
+ Introduction of DIW.
+ requirements to Platform(Browsers andMobile phone)Perspective 1:Trust services in eIDAS andeIDAS2.0
New Trust Services• Electronic Attestation of Attribute• Electronic Archive• Electronic Ledger• Management of rQSCD
Is eIDAS successful?
Do we need legislation for these trust services too?

Perspective 2：EU and Platform
Digital Service Act
Objective

To enable competition by making it To enable transparency, user
easier for new platforms to entersafety, and platform accountability
the market

eIDAS2.0 and Platform• Trust Anchor• QWAC, Root Store, Trusted List, VDR• Identity WalletDigital Market Act• SE, TEE and Platform

Does it matter?
• The Japan Times: Apple CEO Tim Cook conveyed concern over App
Store curbs in meet with Kishida

Source from X(https://twitter.com)
Source from MIC(https://www.soumu.go.jp/)

EUDIW?

Cryptographic keys management system
Embedded Secure Element or Trusted
Execution Environment
reliance on an external device (SecureElements / Smart Cards), anda backend (remote Hardware SecurityModule).

Source: ARF (https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/)

Perspective 3: VC and eIDAS
NameDefined asStateThe Trust Service Providers (TSP) must be a statevalidated identity issuers or EV SSL issuers.
- For participant, if the legalAddress.country is inEEA, valid state identity issuers are eiDAS ones.
- Gaia-X Association may also be a valid TSP for
Gaia-X Association members.

eiDAS

Issuers of Qualified Certificate for Electronic
Signature as defined in eIDAS Regulation (EU) No
910/2014(homepage: https://esignature.ec.europa.eu/efda/tl-browser/#/screen/home)(machine: https://ec.europa.eu/tools/lotl/eulotl.xml)

EV SSL

Extended Validation (EV) Secure Sockets Layer (SSL)
certificate issuers are considered to be temporarily
valid Trust Service Providers.
(homepage: https://wiki.mozilla.org/CA/Included_Certificates)(machine: https://ccadbpublic.secure.force.com/mozilla/IncludedCACertifica
teReportPEMCSV)

registration During the pilot phase, the Gaia-X Association
NumberIssu nominated itself as a valid Trust Anchorerunder https://notary.gaia-x.eu

Sessions of the day• Mr. Olivier Delos (S)• Expert & Consultant for Trust services, Mutual recognition• Legal aspect• Mr. Nick Pope

• Vice chair of ETSI ESI• Standardization• Mr. Joerg Lenz

• Head of Marketing of Namirial (QTSP)• Market view as QTSP

• Mr. Boris Goranov• CEO of Ubiqu (Solution provider of DIW and QSCD)• Secure implementation of DIW