Overview#
Verified_claims is an extension to OpenID Connect to ensure that Relying Parties cannot mix up verified and unverified Claims and incidentally process unverified Claims as Verified Claims.verified_claims are defined as Verified Claims about an End-User, typical a Natural Person, where those Claims were Bound to a particular Digital Identity in the course of an Identity Verification process.Verified Data Representation#
Verified Data Representation and meaning of verified_claims in detail. A machine-readable syntax definition is given as JSON schema{ "$schema": "http://json-schema.org/draft-07/schema#", "definitions":{ "qes":{ "type":"object", "properties":{ "type":{ "type":"string", "enum":[ "qes" ] }, "issuer":{ "type":"string" }, "serial_number":{ "type":"string" }, "created_at":{ "type":"string", "format":"date" } }, "required": ["type","issuer","serial_number","issued_at"] }, "utility_bill":{ "type":"object", "properties":{ "type":{ "type":"string", "enum":[ "utility_bill" ] }, "provider":{ "type":"object", "properties":{ "name":{ "type":"string" }, "country":{ "type":"string" }, "region":{ "type":"string" }, "street_address":{ "type":"string" } } }, "date":{ "type":"string" } }, "required": ["type","provider","date"] }, "id_document":{ "type":"object", "properties":{ "type":{ "type":"string", "enum":[ "id_document" ] }, "method":{ "type":"string", "enum":["pipp","sripp","eid"] }, "verifier":{ "type":"object", "properties":{ "organization":{ "type":"string" }, "txn":{ "type":"string" } } }, "time":{ "type":"string", "format":"time" }, "document":{ "type":"object", "properties":{ "type":{ "type":"string", "enum":[ "idcard", "passport", "driving_permit", "de_idcard_foreigners", "de_emergency_idcard", "de_erp", "de_erp_replacement_idcard", "de_idcard_refugees", "de_idcard_apatrids", "de_certificate_of_suspension_of_deportation", "de_permission_to_reside", "de_replacement_idcard", "jp_drivers_license", "jp_residency_card_for_foreigner", "jp_individual_number_card", "jp_permanent_residency_card_for_foreigner", "jp_health_insurance_card", "jp_residency_card" ] }, "number":{ "type":"string" }, "issuer":{ "type":"object", "properties":{ "name":{ "type":"string" }, "country":{ "type":"string" } } }, "date_of_issuance":{ "type":"string", "format":"date" }, "date_of_expiry":{ "type":"string", "format":"date" } } } }, "required":[ "type", "method", "document" ] } }, "type":"object", "properties":{ "verified_claims":{ "type":"object", "properties":{ "verification":{ "type":"object", "properties":{ "trust_framework":{ "type":"string", "enum":[ "de_aml", "eidas_ial_substantial", "eidas_ial_hig", "nist_800_63A_ial_2", "nist_800_63A_ial_3", "jp_aml", "jp_mpiupa" ] }, "time":{ "type":"string", "format":"time" }, "verification_process":{ "type":"string" }, "evidence":{ "type":"array", "minItems": 1, "items":{ "oneOf":[ { "$ref":"#/definitions/id_document" }, { "$ref":"#/definitions/utility_bill" }, { "$ref":"#/definitions/qes" } ] } } }, "required":["trust_framework"], "additionalProperties": false }, "claims":{ "type":"object", "minProperties": 1 } }, "required":["verification","claims"], "additionalProperties": false }, "txn": {"type": "string"} }, "required":["verified_claims"] }More Information#
There might be more information for this subject on one of the following:- [#1] - OpenID Connect for Identity Assurance 1.0
- based on information obtained 2019-08-19