EWC RFC002: Present Verifiable Credentials

EWC RFC002: Present Verifiable Credentials is a technical specification that implements the OpenID for Verifiable Presentations (OIDC4VP) workflow for credential verification in the European Digital Identity Wallet ecosystem. This standard defines how digital credentials can be presented and verified between wallet holders and verifying parties in a secure, standardized way.

The specification enables two key presentation flows:

• Same-device verification where credentials are presented directly
• Cross-device verification using request URIs for QR code scanning

Key features include:

• Support for JWT-secured credential presentations
• Direct post response mode for enhanced security
• Standardized presentation definition format
• Flexible credential format handling
• Built-in nonce and state parameters for security

Purpose and Scope:

• Implements standardized credential presentation flows
• Ensures interoperability across European Wallet Ecosystem
• Aligns with ARF (Architecture and Reference Framework) requirements
• Defines secure authorization request/response protocols

Technical Specifications:

• Uses openid4vp:// custom URL scheme
• Supports JWT format for credentials
• Implements direct_post response mode
• Requires presentation_definition conforming to DIF specification
• Supports both by-value and by-reference authorization requests

Implementation Requirements:

1. Must support authorization requests with required parameters:

   • client_id
   • response_type
   • response_uri
   • nonce
   • presentation_definition

2. Must implement authorization responses containing:

   • vp_token
   • presentation_submission
   • state

Security Considerations:

• Mandates direct_post response mode
• Implements JWT validation
• Requires secure public key resolution
• Uses nonce binding for request/response correlation
• Supports cross-device verification flows

Interoperability Features:

• Standardized credential presentation format
• Common protocol for all verifiers
• Compatible with DIF Presentation Exchange
• Supports multiple credential formats
• Flexible public key resolution methods

Current Adoption:

Being implemented across the European Digital Identity Wallet ecosystem as part of the EWC LSP (Large Scale Pilot) initiative