This repository has been archived on 2026-07-08. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
identity-canon/research/commercial-identity/eidas-eudi-legal-person-wallet.md
tegwick 08361f6fb7 Settle commercial identity nuances with consolidated enums and linking rules
Add commercial-identity-nuance-settlement.md resolving control_basis,
binding_trigger, cross-registry Synonymity strengths, OPI branch modeling,
escrow commitment type, reputation portability, payment edge cases, CRM renewal
rules, Person Account adapters, and eIDAS wallet scope. Update canon, OpenQuestions,
and all commercial-identity source notes.
2026-06-21 23:21:21 +02:00

102 lines
4.8 KiB
Markdown

# eIDAS and EUDI Wallet for Legal Persons
## Source Type
Regulatory framework and industry analysis. EU eIDAS Regulation, eIDAS 2.0 / EUDI
Wallet, European Business Wallet (organizational wallet) initiatives.
## Domain
EU digital identity, qualified trust services, legal person credentials, and
cross-border commercial trust.
## Why This Source Matters
eIDAS bridges **legal identity** and **commercial trust** at EU scale: electronic
signatures, seals, timestamps, and (via EUDI) wallets for natural and **legal
persons** carrying verifiable credentials for B2B and B2G exchange.
## Key Concepts
- **eIDAS**: EU regulation for electronic identification and trust services.
- **eID (electronic identification)**: national schemes with mutual recognition.
- **Qualified trust services**: legally recognized signatures, seals, timestamps, etc.
- **Electronic seal**: legal-entity counterpart to personal e-signature.
- **EUDI Wallet**: European Digital Identity Wallet for citizens (eIDAS 2.0).
- **Organizational / legal person wallet**: extension for companies (EUBW discourse).
- **Verifiable credential (EU context)**: credentials in wallet (licenses, compliance certs).
- **Transient trust**: real-time verified trust between unknown parties via credentials.
- **KYB/KYS**: Know Your Business / Supplier via registry-sourced credentials.
- **Delegation of rights**: organizational members present credentials on behalf of legal person.
- **Authorization chains**: parent-subsidiary credential issuance hierarchies.
## Relevant Terminology
| Term | Source meaning |
| --- | --- |
| eIDAS | EU trust framework regulation. |
| Qualified signature/seal | Highest assurance trust service. |
| Legal person | Company or organization under law. |
| EUDI Wallet | EU digital identity wallet. |
| Organizational wallet | Wallet for legal person credentials. |
| Electronic seal | Entity-level signing mechanism. |
| Trust service provider | TSP issuing qualified services. |
| Verifiable credential | Attested claim in wallet. |
## Modeling Assumptions
- **Natural person and legal person wallets differ materially** — org wallets need
delegation, hierarchy, API integration, higher volume.
- **Legal person acts through representatives** with scoped credentials (aligns with agency law).
- **Qualified services carry legal equivalence** to paper in EU cross-border context.
- **Registry-sourced credentials** (e.g., company register) anchor commercial identity to authority.
- **Commercial binding increases** when seals/signatures and compliance credentials are used.
- **Citizen wallet stack cannot be naively copied** for organizational use cases.
## Identity-Canon Implications
- Legal person wallet maps to **Organization/Legal Entity** + **Commercial Record** +
**Credential** (qualified seal) + **Claim** set.
- Representative presenting org credential maps to **Representation Relationship**
with scoped **Delegation**.
- Registry-issued credential maps to **Claim** with government **Evidence Source**.
- Transient trust maps to **Trust Relationship** established at transaction time with
VC/qualified credential evidence.
- Supports user thesis: commercial credentials make identity **relevant and durable**
to counterparties across borders.
- Pairwise/pseudonymous identity insufficient for qualified seal; commercial binding
requires legal person resolution.
## Terminology Conflicts
- **Legal person (civil law)** vs. **Legal Entity (canon)**: legal person includes natural persons.
- **Digital identity (eIDAS)** vs. **Identity Record**: assured ID vs. directory record.
- **Trust service** vs. **Trust Relationship**: regulatory service vs. canon relationship.
## Candidate Canonical Mappings
| eIDAS/EUDI concept | Candidate canonical concept |
| --- | --- |
| Legal person | Organization / Legal Entity |
| Organizational wallet | Commercial Record + Credential store (Scope) |
| Electronic seal | Credential (entity signing) |
| Qualified certificate | Credential + Assurance Level |
| Member presenter | Natural Person + Representation |
| Registry credential | Claim + authoritative Evidence Source |
| KYB/KYS process | Commercial Relationship onboarding |
| Authorization chain | Delegation + org hierarchy Relationships |
## Open Questions
*(none — settled in `commercial-identity-nuance-settlement.md`)*
## Settled
- Qualified seal → **Credential** `credential_type: qualified_seal` via Representation.
- Org wallet → **Scope** `wallet_scope`, linked to Commercial Record — not Tenant.
## References
- EU eIDAS Regulation — https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation
- EU EUDI Regulation — https://digital-strategy.ec.europa.eu/en/policies/eudi-regulation
- Spherity, EUDI Wallet for legal persons — https://www.spherity.com/post/the-european-busienss-wallet-eubw-and-legal-person-identity-redefining-trust-in-the-eu-s-digital