By Konstantinos Noussias, Trust Services Director
When a customer proves their identity online, the organization receiving that information also needs to be identifiable and accountable. The European Digital Identity Wallet, or EUDI Wallet, brings this question into everyday activities such as accessing services, sharing credentials and signing agreements.
Under the European Digital Identity framework, the Wallet enables users to present verified identity information and electronic attestations of attributes, with control over what they share. It also supports qualified electronic signatures. An appropriate attestation could prove an age threshold or professional qualification, reducing the need to circulate complete identity documents.
The security benefit depends on how the entire interaction is implemented. A business needs to assess the authenticity and validity of the information it receives. The user needs to know which organisation is requesting information and what it intends to do with it. Relying party authentication, registered purposes and selective disclosure support this reciprocal trust.
ADACOM is positioning its EUDI Wallet offering around two complementary roles: Qualified Trust Service Provider and Relying Party Intermediary. Together, they connect trust services with the integration organisations need to use Wallet credentials.
As a QTSP, ADACOM brings established expertise in qualified certificates, remote electronic signatures and protected cryptographic operations. These capabilities provide a foundation for integrating qualified signing into Wallet journeys. Qualified electronic attestations of attributes offer a further avenue for extending the portfolio, subject to the qualification requirements for that service. Such attestations can provide verifiable evidence of specific attributes, drawing on appropriate authoritative information.
The intermediary role addresses the receiving organisation’s integration needs. A Relying Party Intermediary interacts with Wallets on behalf of businesses or public bodies that need particular user attributes. It can perform agreed verification checks and pass the resulting information to their applications. Organisations can therefore integrate Wallet credentials into existing customer journeys.
For ADACOM, this means combining protocol integration with controls over certificate use, credential verification and data handling. The service should support the organisation’s registered purposes and request only the relevant attributes. Its operation must also respect a defining privacy requirement, an intermediary must not retain transaction content. Simplifying integration therefore requires careful engineering of processing, forwarding and deletion.
Consider a customer entering into a service agreement. They present the necessary identity attributes through their Wallet. An intermediary performs the agreed checks and forwards the information to the service provider. If the agreement requires a qualified signature, the customer can use an integrated qualified signing service. The organisation remains responsible for its business decisions and applicable sector obligations.
This creates a practical cybersecurity objective, to reduce unnecessary handling of identity documents while maintaining clear evidence of who supplied the information and whether it can be relied upon. Organisations preparing for adoption should examine their data requirements and registration needs, then test verification and signing flows within their existing services.
Users also have an active role. They should review who is requesting their data and which attributes they are approving for disclosure, and use official Wallet distribution channels. For this Cybersecurity Awareness Month, ADACOM’s message is that secure Wallet adoption requires trustworthy services behind each interaction. This combination can help businesses verify customer information and complete transactions with less unnecessary data exposure.