...
Technology development in hardware and software affect affects the wallets.
‘Consent’ thema should be considered. If the wallet and VC are available, how the wallet can support users to protect them from extra revealing id attributes.
The major and transformative Question is, Is it really needed that a new wallet get developed? Or we could probably develop an entity that could be which is importable to almost every type of wallets? Into identity wallets, currency wallets,smartphone wallet,travel once or etc. And the next Question is , is it really possible without developing wallet? How big is challenging or dependency to other wallets.
One of the advantage of developing our wallet is beneficial aspect of a centralized system. An overview or statistic view of Edu-Credentials or maybe other type of credential.
Another point is, our users are not limited to EU-students. If we just rely on and depend on EUDI-Wallets, it means we exclude a big amount of students, universities and ...Other wallets, could present any edu-credentials which issued by our ecosystem. But edu-credential management is our task. It could be implemented via our wallet. Another technical question here is, whether it should be implemented via our wallet or our integrable agent which introduce wallet APIs? Identity agents are software services that manage all the stuff in the wallet. Agents store, update, retrieve, and delete all the artifacts that a wallet holds.
We should also pay attention to possible competitors or large-scale activities like DC4EU, specially WP7(Integrations and Development) led by SUNET [3]
Opportunities
- We have chance of communication with NRENs and universities which provide us realistic requirements.
In distributed ecosystem, wallets are the strategic points and its provider still has essential role. Because, all sensitive data are partially or completely available for wallet providers. In a holistic view almost, all benefit of a central identity system can transfer to wallet, unless some regulations restrict the availability and access to data. For example: Statistics and analysis of user behavior.
Technically we can implement our wallet but it should split in two parts. Part one, Wallet is basically for us to using any centralized benefit , improve our userbase and rise communication opportunities. Part 2, Every credentials or related service (agents) should be portable (or pluggable )on other wallets as well. Specifically portable and integrable to EU wallet.
- Capable to deliver extra service like translation and legalization of edu-certificates from other countries beyond Europe.
- Statistic aspects of wallet could feed many sectors without revealing users private information. e.g. it could show how many student or employees(gaining micro credential) were graduated in AI and how many in network in last year!
...
Subchapter | Description | Notes relevant to many/most T7 work items |
---|
|
|
|
---|
The work item | a brief description of the topic at hand, map it to "our world". You may get inspiration from the corresponding ToIP description. | (individual) |
Transformative aspects | What will potentially change with respect to our current way of delivering value in general? And what will change with a particular view to our ecosystem? Include a critical review of our existing ecosystem services and the nature of potential impact on them. | - EUDI-Wallet
- New software, hardware technology
- ‘Consent’ thema
- trade of in implementation
- Competition activitiesThe GÉANT community moved in uncharted territory when setting up identity federations. This no longer holds true and we can no longer do things just our way. We have to position ourselves, defend this position and find appropriate partners. This is new.
|
Opportunities | Describe use cases in our ecosystem that could potentially benefit from an emerging DI ecosystem Describe assumptions / requirements towards other players / outcomes etc. to make it deliver value to our ecosystem Describe actions we need to fulfil as a community (ecosystem) to get such value delivered to our ecosystem Might this make it easier for NRENs to participate in the ecosystem with less effort? | - There might be elements in this emerging wallet ecosystem we just can re-use and no longer have to organise ourselves
- The wallet ecosystem might enable us to carry our services to a wider audience, e.g. by linking them to other ecosystems
- We have chance of communication with NRENs and universities which provide us realistic requirements.
- Technically we can implement our wallet but it should split in two parts. Part one, Wallet is basically for us to using any centralized benefit , improve our userbase and rise communication opportunities. Part 2, Every credentials or related service should be portable on other wallets as well. Specifically portable and integrable to EU wallet.
- Capable to deliver extra service like translation and legalization of edu-certificates from other countries beyond Europe.
- Statistic aspects of wallet could feed many sectors without revealing users private information. e.g. it could show how many student or employees(gaining micro credential) were graduated in AI and how many in network in last year!
|
Risks | Describe potential situations or actions of other important stakeholders leading to a failure to deliver value to our ecosystem This could be linked to external developments but also to our inability to fulfil above actions or to get consensus in our own ecosystem | - There are many different type of wallets in various areas. But the major risky could be these
- EUDI
- Opensource wallet (every opensource one attracts trust)
- Competing companies
- GAFAM wallet like Amazon, Google pay, Apple pay
- Device default wallet like Samsung wallet connected to google account
- Security Breaches: One of the primary risks is the potential for security breaches. If your digital ID wallet is compromised, an attacker may gain access to sensitive personal information, such as your driver’s license, passport, or other forms of identification.
- Identity Theft: If a malicious actor gains access to your digital ID wallet, they could use your identity to commit various forms of fraud and identity theft. This could have serious consequences for your financial and personal well-being.
- Data Privacy Concerns: Storing personal identification documents and data in a digital ID wallet means that this information is potentially accessible to service providers and the wallet provider itself. Users must trust these entities to protect their data adequately.
- Loss of Device: If you lose your mobile device or the device containing your digital ID wallet is stolen, there’s a risk that the thief could misuse your digital ID and access your accounts or impersonate you.
- Biometric Data Vulnerabilities: Many digital ID wallets use biometric authentication methods, such as fingerprint or facial recognition. These can be vulnerable to spoofing or hacking if not properly secured.
- Phishing and Social Engineering: Attackers may attempt to trick you into revealing your digital ID wallet credentials through phishing emails, fake websites, or social engineering attacks.
- Incompatibility and Interoperability Issues: Different regions and organizations may use different standards and technologies for digital ID. Compatibility issues could arise if your digital ID wallet is not accepted or recognized by certain entities.
- Regulatory and Legal Issues: The legal framework around digital ID is still evolving in many places. There may be regulatory changes or legal disputes that impact the use and security of digital ID wallets.
- Dependency on Technology: Relying on a digital ID wallet means that you’re dependent on technology and the infrastructure that supports it. Technical issues, outages, or system failures could temporarily prevent you from accessing your digital ID.[4]
- Technical Problems: Technical issues, such as system failures or connectivity issues, can prevent users from accessing their digital wallet accounts, making payments and accessing funds difficult.
- Limited Acceptance: Because digital wallets are not accepted everywhere, users may encounter situations in which they are unable to make payments using their digital wallets.
- Hidden fees: Some digital wallets may charge hidden fees, such as transaction fees, foreign exchange fees, or account maintenance fees. Users should review their digital wallet provider's fee schedule to ensure they understand the charges associated with using the platform. [5]
- No insurance by misusing or mistake. It is more related to currency wallet but for identity there such shortage too.
|
Engagements, projects | Describe (crowdsourced within our group) prior or ongoing activities in our ecosystem relevant to the topic at hand by NRENs and GÉANT | - European Initiatives/projects:
- VC4EU (EU Large Scale Project)
- EBSI Wave 3
- Interregional/global initiatives/projects:
- VC-EDU (lead by MIT, global scope)
- National initiatives/projects:
|
Recommendations | Recommendations towards NRENs (and their community), GÉANT and "the research community" | - elaborate a position towards the wallet ecosystem and derive actions towards achieving or maintaining this positioning
|
...