2026

II

Attestation proves facts about records. Registration proves facts about data transmission.

┌────────┐         ┌─────────┐         ┌─────────┐
│        ├────────►│ Carrier │────────►│         │
│        │  issue  └─────────┘ present │         │
│        │                             │         │
│ Origin │                             │Addressee│
│        │                             │         │
│        │ submit  ┌─────────┐ deliver │         │
│        ├────────►│ Courier │────────►│         │
└────────┘         └─────────┘         └─────────┘

In Attestation, the origin issues data to a carrier, which its holder presents to an addressee. Attestation binds, authentication confirms: interaction with the carrier convinces the addressee of facts about the original records.

In Registration, the origin submits data to a courier, which ensures delivery to the addressee and registers what happened: dispatch and receipt. Either the origin or the addressee can operate the courier, but an independent courier prevents either side from unilaterally controlling the evidence.

These patterns correspond to the two trust services for sharing data across organisational boundaries: electronic attestations of attributes (EAA) and electronic registered delivery (ERD).

The proposed European Business Wallets make both accessible through a common infrastructure, together with EU-wide discovery. Many bilateral data-sharing APIs could therefore be replaced by attestations and registered delivery.

Building National Certification Schemes for the EUDI Wallet

See you next week in Brussels? Speaking at the EU Cyber Acts Conference in a panel on EU Digital Identity Wallet certification, sharing the implementer’s perspective from Cleverbase.

I

LayerAttestationAuthenticatesInteractivePortable
1Assurance bindingSecurityRemote attestationEvaluation certificate
2Capability bindingEndpointProof of possessionPublic key certificate
3Attribute bindingClaimFederated assertionDigital credential