AuthorizedServiceProvider SD-JWT VC Schema

Claims (17)

SD-JWT VC Type Metadata (IETF draft-ietf-oauth-sd-jwt-vc)

{
  "vct": "eu.we-build:authorizedserviceprovider:1",
  "name": "AuthorizedServiceProvider SD-JWT VC Schema",
  "description": "Schema for the Authorized Service Provider Attestation encoded as SD-JWT VC, based on the WE BUILD Attestation Rulebook for attestations of type Authorized Service Provider (Use Case SC5, eInvoicing) and draft-ietf-oauth-sd-jwt-vc",
  "display": [
    {
      "locale": "en-US",
      "name": "AuthorizedServiceProvider",
      "description": "Schema for the Authorized Service Provider Attestation encoded as SD-JWT VC, based on the WE BUILD Attestation Rulebook for attestations of type Authorized Service Provider (Use Case SC5, eInvoicing) and draft-ietf-oauth-sd-jwt-vc"
    }
  ],
  "claims": [
    {
      "path": [
        "trust_anchor_url"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Trust Anchor Url"
        }
      ],
      "description": "URL at which a machine-readable version of the trust anchor used for verifying the attestation can be found or looked up. Optional metadata; for this EAA, trust is anchored in the issuer's EBWOID per Chapter 5 of the Rulebook."
    },
    {
      "path": [
        "authorized_service_provider",
        "legal_name"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Legal Name"
        }
      ],
      "description": "Registered legal name of the Service Provider."
    },
    {
      "path": [
        "authorized_service_provider",
        "legal_id"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Legal Id"
        }
      ],
      "description": "Unique legal-person identifier (EUID) of the Service Provider."
    },
    {
      "path": [
        "authorized_service_provider",
        "peppol_ap_id"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Peppol Ap Id"
        }
      ],
      "description": "Identifier of the Service Provider's Peppol Access Point (CN of the AP certificate, e.g. 'POP000123')."
    },
    {
      "path": [
        "authorized_service_provider"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorized Service Provider"
        }
      ],
      "description": "The Service Provider / Access Point (Peppol corner C2 or C3) being mandated — the holder/subject. Mandatory. MAY be selectively disclosable.",
      "mandatory": true,
      "sd": "always"
    },
    {
      "path": [
        "authorization_scope"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorization Scope"
        }
      ],
      "description": "One or more authorised operations per the code list in Section 2.8 of the Rulebook. SHALL contain at least one value. Mandatory. MAY be selectively disclosable.",
      "mandatory": true,
      "sd": "always"
    },
    {
      "path": [
        "authorization_valid_until"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorization Valid Until"
        }
      ],
      "description": "Date until which the authorization is valid (business validity, distinct from the technical exp claim). Optional. MAY be selectively disclosable.",
      "sd": "always"
    },
    {
      "path": [
        "tax_reporting_member_state"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Tax Reporting Member State"
        }
      ],
      "description": "ISO 3166-1 alpha-2 code of the Member State for which the provider is authorised to perform tax reporting. Conditional: SHALL be present if and only if authorization_scope contains 'vida:tax_report' (integrity rule IR-ASP-02). MAY be selectively disclosable.",
      "sd": "always"
    },
    {
      "path": [
        "attestation_legal_category"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Attestation Legal Category"
        }
      ],
      "description": "Legal category of this attestation under eIDAS 2. For the Authorized Service Provider attestation this SHALL be 'EAA' (self-issued by the authorising company). NOT selectively disclosable.",
      "mandatory": true,
      "sd": "always"
    },
    {
      "path": [
        "cryptographically_bound_to"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Cryptographically Bound To"
        }
      ],
      "description": "vct of the attestation on the same Wallet Unit to which this attestation is cryptographically bound (the Service Provider's EBWOID). RECOMMENDED per ARB_28. NOT selectively disclosable.",
      "sd": "always"
    },
    {
      "path": [
        "schema_version"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Schema Version"
        }
      ],
      "description": "Version of the Authorized Service Provider attestation schema used. Optional metadata."
    },
    {
      "path": [
        "authorizing_company",
        "legal_id"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Legal Id"
        }
      ],
      "description": "Unique legal-person identifier (EUID) of the company, sourced from its EBWOID."
    },
    {
      "path": [
        "authorizing_company",
        "peppol_id"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Peppol Id"
        }
      ],
      "description": "Peppol participant identifier of the company (scheme:value)."
    },
    {
      "path": [
        "authorizing_company",
        "legal_name"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Legal Name"
        }
      ],
      "description": "Registered legal name of the authorising company."
    },
    {
      "path": [
        "authorizing_company"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorizing Company"
        }
      ],
      "description": "The authorising company (Peppol corner C1 or C4) issuing the mandate. Mandatory. MAY be selectively disclosable.",
      "mandatory": true,
      "sd": "always"
    },
    {
      "path": [
        "authorization_valid_from"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorization Valid From"
        }
      ],
      "description": "Date from which the authorization is valid (RFC 3339 full-date). SHALL NOT be later than authorization_valid_until when present. Mandatory. MAY be selectively disclosable.",
      "mandatory": true,
      "sd": "always"
    },
    {
      "path": [
        "authorization_reference"
      ],
      "display": [
        {
          "locale": "en-US",
          "label": "Authorization Reference"
        }
      ],
      "description": "Company-internal reference for the service agreement underlying the mandate. Optional. MUST be selectively disclosable (SD claim).",
      "sd": "always"
    }
  ]
}