Glossary 

Physical Document
A document refers to a credential issued in physical form and held by a user, such as a driver license, firearm license, or identity card. A Physical Document is identified by a document number (documentId) associated with this specific physical document at the time it was issued. It is often used during the identity proofing operation as evidence for determining Level of Assurance and as a source of attributes for Digital Credential issuance. A Physical Document is not required for Direct Issuance, where trusted, pre-verified attributes are provided directly by the Issuer.

Credential
Credential is the logical representation of an identity document or entitlement in the DC Platform. It groups all device-bound Digital Credentials representing the same document or entitlement. Each Credential is identified by a unique credentialId, assigned during initial issuance. A single credential may be provisioned to multiple devices, resulting in multiple Digital Credentials with different midUid values. Each Credential is also associated with a documentId. During remote document-based enrollment, documentId identifies the Physical Document used for enrollment. During Direct Issuance, the Issuer must provide a unique documentId, even when the Credential is not based on an existing Physical Document.

Digital Credential
A Digital Credential is a tamper-resistant, verifiable assertion of a person's identity and, where applicable, associated privileges. It is held in a digital wallet on a person's device, cryptographically bound to that device, and digitally signed by the issuing authority and verifiable.
A specific device-bound instance of the credential is referred to as a deviceCredential, or Digital Credential. Each Digital Credential is identified by a unique midUid, assigned by the Digital Credential Platform. One midUid corresponds to exactly one Digital Credential provisioned to one device.
As the Digital Credential Platform supports registering the same Digital Credential on multiple devices, a single credentialId may be associated with multiple midUid values, one for each device on which the credential is provisioned.

Datagroup
A datagroup is a binary bundle that represents a credential. It typically contains:

• user identity attributes,
• optional privilege attributes,
• a device authentication public key,
• an Issuer digital signature traceable to a trusted Issuer.

An example of such a structure is the ISO 23220-4 PhotoID mDoc.

Digital Wallet
A digital wallet is a container for digital credentials. A user can have the multiple credentials enrolled in one wallet simultaneously.
The DC platform supports the following digital wallets for digital credentials:

• IDEMIA iD Wallet
• Customer-branded iD Wallet Application
• Customer Application embedding the DC Mobile SDK

State
represents the current lifecycle status of a credential or a deviceCredential. As a general principle, the state of a credential and the states of its associated deviceCredentials are expected to be consistent. However, the platform provides flexibility that allows certain state changes to be applied to an individual deviceCredential without changing the state of the parent credential. For example, a specific deviceCredential may be suspended while the credential itself remains unchanged. Any state change applied at the credential level automatically propagates to all associated deviceCredentials, updating their states accordingly.

Credential vs. deviceCredential State Definitions.

Digital identifiers :  

This table provides a description of each digital identifier