Skip to main content

NL-SYS-02: Vocabulary

NL-SYS-02: Vocabulary

Download PDF (2.4 MB, 29 pages)Read the full text
Cover page of the document, as printed
Document referenceNL-SYS-02
VersionRC1.0
StatusRelease Candidate
Date20/10/206 (as printed on the cover)
Document typeVocabulary
Parent frameworknone
Scheme OwnerKingdom of the Netherlands Minister of Economic Affairs
Certification targetEuropean Digital Identity Wallets and the electronic identification scheme under which they are provided
Primary audienceSystem/Scheme Owner, CABs, EUDI Wallet providers, PID Provider
Secondary audienceEUDI Wallet ecosystem stakeholders
Assurance levelHigh/High
Subsidiary DocumentsNL Certification System Documents
How to read this page

This page summarises the document. Every statement points to the section and page of the authoritative PDF it comes from: click a reference such as §6.1, p. 10 to open that page. If this summary and the PDF differ, the PDF applies.

What this document is​

NL-SYS-02 is the vocabulary of the NL EUDI Wallet Certification System; its document type is "Vocabulary" (§cover, p. 2). Its table of contents lists three parts: “Acronyms and Abbreviations”, “Terms by Category” and “Alphabetical Glossary”; there is no introduction or scope section (§Table of Contents, p. 4). The glossary gives for each term a definition, a “Category:” line and a “Source:” line (§Alphabetical Glossary, p. 9).

Scope and object of certification​

The document does not define an object of certification itself. The cover states the certification target as "European Digital Identity Wallets and the electronic identification scheme under which they are provided" (§cover, p. 2). It defines "Top-level certificate" as a "statement of conformity to European Commission and EDICG in accordance with EU 2024/1183 Article 5d.1. based on the set of certificates, resulted from implementation of all respective certification schemes within PL EUDI Wallet Certification system" (§Alphabetical Glossary, p. 25).

Who it applies to​

The document contains no requirements addressed to any role (§Alphabetical Glossary, p. 9-29). Its cover lists the audience: primary "System/Scheme Owner, CABs, EUDI Wallet providers, PID Provider"; secondary "EUDI Wallet ecosystem stakeholders" (§cover, p. 2). The "Actor" category ("Entities that participate in the EUDI Wallet ecosystem") lists 21 actors: Attestation Provider; Authentic Source; Conformity Assessment Body (CAB); Conformity Assessment Body – Certification Body (CAB-CB); Conformity Assessment Body – Testing Laboratory (ITSEF) (CAB-ITSEF); Device manufacturer; Holder; Identity verification provider (IDVP); Intermediary; National Accreditation Bodies (NAB); Provider of registration certificates; Provider of wallet-relying party access certificates; Public Sector Body; Qualified Electronic Signature Remote Creation Provider; Qualified Trust Service Provider (QTSP); Registrar; Relying Party; User; Verifier; Wallet Provider; Wallet User (§Terms by Category, p. 6).

Contents​

PartTitleContentStart page
—Acronyms and AbbreviationsTwo-column table "Acronym / Full Term", 32 acronyms5
—Terms by CategoryTerms grouped under Actor, Component, Credential, Data, Other, Process, Security, Trust6
—Alphabetical Glossary119 entries, A–W, each with definition, "Category:" and "Source:" (some with "Legal References:", "Also known as:", "Related Terms:")9

Key points​

  • The glossary has 119 entries (counted as "Source:" lines on pp.9–29); 118 carry a category: Actor 21, Component 14, Credential 21, Data 8, Other 5, Process 16, Security 13, Trust 20; "Mobile security object (MSO)" has no category line (§Alphabetical Glossary, p. 9-29; p. 18).
  • The acronym list has 32 entries: CA, CAB, CAB-CB, CAB-ITSEF, CP, EAA, FAR, FRR, HSM, IDVP, LoA, LoA "High", LoA "Substantial", LoIP, MCD, MSO, NAB, PID, PKI, QEAA, QES, QSCD, QTSP, SAAO, SA-Application, TOE, WSCA, WSCD, WUA, WUTA, WUVA, eID means (§Acronyms and Abbreviations, p. 5).
  • Category descriptions: Actor "Entities that participate in the EUDI Wallet ecosystem"; Component "Technical components of the EUDI Wallet architecture"; Credential "Types of credentials and attestations"; Process "Processes and operations in the wallet lifecycle"; Security "Security-related concepts and mechanisms"; Trust "Trust framework and infrastructure concepts"; Data and Other have no description (§Terms by Category, p. 6-8).
  • Sources cited in the glossary include: CEN TS 18098 (sections 3.x); Architecture Reference Framework (ARF); European Digital Identity Regulation (eIDAS 2.0); CIR 2024/2977, 2024/2979, 2024/2982; Commission Implementing Regulation 2024/2981 art. 2(7) (risk register); EN ISO/IEC 15408-1; EN ISO/IEC 17065, 3.12; "Adopted from PN-EN 17025, 3.6"; EN 17640:2022+ A1:2026, 3.22; ISO/IEC 18013-5; EU Regulation 2014/910 art. 8; EU 2024/1183 Article 5d.1 (§Alphabetical Glossary, p. 9-29).
  • CAB: "A conformity assessment body as defined in Article 2, point 13, of Regulation (EC) No 765/2008, which is accredited in accordance with that Regulation as competent to carry out conformity assessment" (§Alphabetical Glossary, p. 12).
  • CAB-CB: "third-party conformity assessment body that issues and manages certificates" (EN ISO/IEC 17065, 3.12) (§Alphabetical Glossary, p. 12).
  • CAB-ITSEF: "conformity assessment body that performs testing or evaluation activities" (Adopted from PN-EN 17025, 3.6) (§Alphabetical Glossary, p. 13).
  • NAB: "A body that performs accreditation with authority derived from a Member State under Regulation (EC) No 765/2008" (§Alphabetical Glossary, p. 19).
  • Wallet Provider: "A natural or legal person kto provides Wallet Solutions" (CIR 2024/2979, Article 2(9)) (§Alphabetical Glossary, p. 27).
  • Wallet Solution, Wallet Unit, Wallet Instance, WSCA, WSCD, WUA, critical assets and Relying Party are sourced from CIR 2024/2977 (§Alphabetical Glossary, p. 13, 23, 27-28).
  • Composite TOE: "part of a composite product being subject to composite TOE evaluation" (EN 17640:2022+ A1:2026, 3.22) (§Alphabetical Glossary, p. 12).
  • risk register: "record of information relevant to the certification process about identified risks" (Commission Implementing Regulation 2024/2981, art. 2(7)) (§Alphabetical Glossary, p. 23).
  • Notification: "The act of transferring information to the European Commission" (§Alphabetical Glossary, p. 19).
  • Keystore: hardware-backed repository for non-critical cryptographic assets; "Critical cryptographic assets are generated, stored, and used in a WSCA/WSCD" (§Alphabetical Glossary, p. 17).
  • mdoc App "corresponds to the Wallet Instance (and not the Wallet Unit)" in the context of the source document (§Alphabetical Glossary, p. 18).
  • "Also known as" entries: Electronic attestation of attributes issued by or on behalf of a public sector body — "PuB-EAA"; Provider of wallet-relying party access certificates — "Access CA, Access Certificate Authority"; wallet — "EUDI wallet" (§Alphabetical Glossary, p. 14, 21, 27).
  • "Legal References" entries: CAB — "Article 2, Regulation (EU) 765/2008"; NAB — "Regulation (EU) 765/2008" (§Alphabetical Glossary, p. 12, 19). "Related Terms": QSCD (Qualified Electronic Signature Creation Device) — "Qualified Electronic Signature" (§Alphabetical Glossary, p. 22).

Requirements in this document​

None. The document contains no requirements and no numbered paragraphs.

  • No NL document is referenced in the body; the cover lists "Subsidiary Documents: NL Certification System Documents" (§cover, p. 2).
  • Standards and specifications cited as sources: CEN TS 18098; Architecture Reference Framework (ARF); EN ISO/IEC 15408-1; EN ISO/IEC 17065; PN-EN 17025; EN 17640:2022+ A1:2026; ISO/IEC 18013-5 (and ISO/IEC 18013-5:2021 in definitions); RFC 5914 (Trust Anchor note) (§Alphabetical Glossary, p. 9-29).
  • EU legal acts cited: European Digital Identity Regulation (eIDAS 2.0) incl. Annex II, Annex V, Annex VII, Article 45f; EU Regulation 2014/910 art. 8; EU 2024/1183 Article 5d.1; CIR 2024/2977; CIR 2024/2979; CIR 2024/2982; Commission Implementing Regulation 2024/2981 art. 2(7); Regulation (EC/EU) 765/2008 (§Alphabetical Glossary, p. 9-29).

Notes on this draft​

  • Cover date reads "20/10/206" (§cover, p. 2); the cover page and history table give 2026-10-20 (§cover, p. 1, 3).
  • In "Terms by Category" several bullets merge multiple terms, e.g. "Holder Wallet Unit Keystore mdoc App", "Knowledge-based authentication factor mdoc", "Qualified Electronic Attestation of Attributes (QEAA) user account", "False accept rate (FAR) False reject rate (FRR) mdoc App capability descriptor (MCD)", "Provisioning Selective Disclosure strong User authentication user binding", "access certificate assurance (evaluation) assurance (identity proofing) Attestation Revocation List Attestation Rulebook", "Trust Framework Trusted List wallet" (visible as such in the rendered PDF) (§Terms by Category, p. 6-8).
  • In the glossary, "Device key" and "risk register" are printed without a separate heading, inline with their definitions ("Device key mdoc authentication key"; "risk register record of information…"); "Category: Component" for "Wallet Solution" and "Wallet Unit" is printed inline at the end of the definition (§Alphabetical Glossary, p. 13, 23, 28).
  • "Top-level certificate" refers to the "PL EUDI Wallet Certification system" (§Alphabetical Glossary, p. 25).
  • "Wallet Provider" definition contains "kto provides" (§Alphabetical Glossary, p. 27).
  • "Relying Party" is defined as "A Relying Party that intends to rely upon Wallet Units…" (§Alphabetical Glossary, p. 23).
  • Two entries use the acronym QSCD with different terms and sources: "Qualified Electronic Signature Creation Device (QSCD)" (eIDAS 2.0, Annex II; category Security) and "Qualified signature creation device (QSCD)" (CEN TS 18098, 3.45; category Component) (§Alphabetical Glossary, p. 22).
  • "Wallet Unit Validity Attestation (WUVA)" ends "demonstrating that the Wallet Provider vouches for the security" (sentence ends there) (§Alphabetical Glossary, p. 28).
  • "On-boarding" Note 1 refers to "the processes described in 7.2.1", which is not part of this document (§Alphabetical Glossary, p. 19).
  • The glossary has no entry for System Owner, Scheme Owner or EDICG (EDICG is used in the “Top-level certificate” definition); only one glossary entry (“risk register”) cites CIR 2024/2981 as its source (§Alphabetical Glossary, p. 9-29; p. 23; p. 25). (Cross-reference: NL-SYS-01 states that “NL-SYS-02 incorporates all definitions from Article 2 of CIR (EU) 2024/2981 and adds relevant terms and their definitions, if necessary” (NL-SYS-01 §7.1.1, p. 28).)
  • Acronyms used in definitions but not in the acronym list include PuB-EAA, ARF, MRTD, OEM (§Alphabetical Glossary, p. 10-14).

Sources​