Technical Standards and APIs

Inside the OpenID Foundation’s Digital Credentials Protocols Working Group

Learn how the OpenID Foundation’s DCP Working Group is shaping the future of digital credential standards and protocols.

Introduction to the Digital Credentials Protocols Working Group

In the rapidly evolving digital landscape, the Issuer Holder Verifier Model has become a cornerstone for secure and efficient credential management. The OpenID Foundation’s Digital Credentials Protocols (DCP) Working Group is at the forefront of developing robust specifications that empower this model, ensuring that digital credentials are not only secure but also highly interoperable across various platforms and industries.

Understanding the Issuer Holder Verifier Model

The Issuer Holder Verifier Model is a framework that outlines how digital credentials are issued, held, and verified. In this model:

  • Issuers are entities that create and issue digital credentials.
  • Holders are individuals or organizations that receive and manage these credentials.
  • Verifiers are parties that verify the authenticity and validity of the presented credentials.

This model ensures that credentials are trustworthy, tamper-proof, and easily verifiable, facilitating smoother interactions between all parties involved.

Goals of the DCP Working Group

The primary objective of the DCP Working Group is to develop OpenID specifications tailored for the Issuer Holder Verifier Model. These specifications aim to:

  • Enable Universal Credential Formats: Support various credential formats, including W3C Verifiable Credentials (VCs), IETF Secure Data JWT (SD-JWT) VCs, and ISO/IEC standards like 18013-5.
  • Facilitate Pseudonymous Authentication: Allow end-users to authenticate pseudonymously, enhancing privacy and control over personal data.
  • Promote Interoperability: Ensure that credentials can be seamlessly issued and verified across different systems and industries.

By addressing these goals, the working group seeks to provide a standardized approach to digital credential issuance and verification, fostering greater trust and efficiency in digital interactions.

Key Specifications Developed by the Working Group

OpenID for Verifiable Credential Issuance (OID4VCI)

OID4VCI focuses on the issuance process, ensuring that credentials are securely created and distributed to holders’ wallets. This specification outlines the protocols for:

  • Credential Creation: Defining how issuers generate and sign credentials.
  • Secure Transmission: Ensuring that credentials are transmitted securely to holders.
  • Wallet Integration: Facilitating seamless storage and management of credentials within holders’ digital wallets.

OpenID for Verifiable Presentations (OID4VP)

OID4VP pertains to the verification process, detailing how holders present their credentials to verifiers. Key aspects include:

  • Authentication Protocols: Enabling holders to authenticate themselves transparently and securely.
  • Selective Disclosure: Allowing holders to share only specific parts of their credentials, preserving privacy.
  • Real-Time Verification: Facilitating instant verification of credentials, enhancing trustworthiness.

Security Enhancements

The working group also emphasizes security by incorporating features such as:

  • Key Binding: Ensuring that credentials are bound to specific cryptographic keys, preventing unauthorized use.
  • Biometrics Binding: Linking credentials to biometric data for added security.
  • Claim-Based Binding: Associating specific claims within credentials to unique identifiers, enhancing integrity.

Collaborations and Liaison Efforts

To ensure comprehensive and widely accepted standards, the DCP Working Group collaborates with several key organizations, including:

  • European Commission
  • Decentralized Identity Foundation (DIF)
  • European Telecommunications Standards Institute (ETSI)
  • ISO/IEC Committees

These collaborations facilitate the alignment of DCP specifications with global standards, promoting universal adoption and interoperability.

Adoption and Implementation

The Issuer Holder Verifier Model specifications developed by the DCP Working Group are gaining traction, particularly within the European Digital Identity Architecture and Reference Framework. Notably:

  • Conformant Wallets: As of April 2023, 18 wallets in the European Commission’s EBSI project support OID4VCI and OID4VP specifications.
  • NIST Initiatives: The National Cybersecurity Center of Excellence (NCCoE) is working on implementing reference models for OID4VP to present mobile documents and licenses.

These implementations signify a move towards standardized digital credentialing, enhancing security and efficiency across various sectors.

The Role of WUNWEY in the Digital Credential Ecosystem

While the DCP Working Group focuses on establishing standardized protocols, platforms like WUNWEY are instrumental in revolutionizing credential management within this framework. WUNWEY leverages blockchain and IPFS technologies to offer:

  • Cryptographically Secure Credentials: Ensuring that digital credentials are tamper-proof and instantly verifiable.
  • User Ownership and Control: Allowing individuals to manage their credentials directly from their digital wallets.
  • Universal Infrastructure: Facilitating cross-industry applicability, making credential verification seamless across education, healthcare, finance, and more.

By integrating with the Issuer Holder Verifier Model, WUNWEY enhances the practical application of standardized protocols, driving forward the adoption of secure and efficient digital credentialing.

Benefits of a Standardized Digital Credential System

Adopting the Issuer Holder Verifier Model through standardized protocols offers numerous advantages:

  • Enhanced Security: Cryptographic signatures and decentralized storage mitigate risks of forgery and unauthorized access.
  • Improved Portability: Credentials can be easily transferred and verified across different platforms and institutions.
  • Increased Trust: Instant verification processes build trust between issuers, holders, and verifiers.
  • Operational Efficiency: Streamlined verification reduces administrative burdens and accelerates processes in educational institutions and hiring organizations.

These benefits collectively contribute to a more secure, efficient, and trustworthy digital economy.

Future Prospects and Conclusion

The collaboration between the OpenID Foundation’s DCP Working Group and innovative platforms like WUNWEY is paving the way for a robust digital credential ecosystem. As standards continue to evolve and adoption widens, the Issuer Holder Verifier Model is set to become the norm in credential management, offering unparalleled security, efficiency, and user empowerment.

Embracing these advancements not only addresses current challenges in credential verification but also anticipates future needs in a digitally interconnected world.


Ready to transform your credential management? Discover how WUNWEY can revolutionize your digital credentials today!

Share this:
Share