Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 1: General requirements

Note

ETSI technical specification, part 1, specifying a data model for electronic attestations of attributes, qualified or issued by a public body, with four realisations (version 1.2.1).

Summary

Purpose

Technical specification ETSI TS 119 472-1 (version 1.2.1, February 2026) defines the data model of electronic attestations of attributes (EAA) ETSI TS 119 472-1 V1.2.1, § 1 Scope ETSI TS 119 472-1 V1.2.1, History. Its scope begins as follows:

It adds requirements specific to qualified attestations (QEAA) and to attestations issued by or on behalf of a public body responsible for an authentic source (PuB-EAA), and implements this model in four technical forms: SD-JWT VC, ISO/IEC-mdoc, JSON-LD W3C-VC and X.509 attribute certificates ETSI TS 119 472-1 V1.2.1, § 1 Scope. It aims to support Implementing Regulation 2024/2977 ETSI TS 119 472-1 V1.2.1, § 1 Scope.

Who it applies to

• Providers of attestations issued to wallets: their attestations must comply with at least one of the standards of Annex II to Implementing Regulation 2024/2979 Art. 4(1), an annex that makes clauses 2 to 6 of this specification applicable, with adaptations Annex II.
• PID providers, since PID is issued according to clauses 5 (SD-JWT VC) and 6 (ISO/IEC-mdoc) of the specification, as applied by Annex II to Implementing Regulation 2024/2979, with the exception of certain subparagraphs Annex Annex II.
• Wallet providers, whose solutions must support these formats Art. 8.

Key points

• Five data areas: attestation metadata, attested attributes, attribute metadata (selective disclosure), key binding, signature ETSI TS 119 472-1 V1.2.1, § 4.1 Introduction. Semantic areas for EAA.
• Machine-readable category: a QEAA signals that it is qualified; when the implementation uses URIs, this category must be the URN urn:etsi:esi:eaa:eu:qualified ETSI TS 119 472-1 V1.2.1, § 4.2.2.2 Requirements for EU Qualified EAA (QEAA). A PuB-EAA likewise signals its nature; with URIs, this signal must be the URN urn:etsi:esi:eaa:eu:pub ETSI TS 119 472-1 V1.2.1, § 4.2.2.3 Requirements for EU EAA issued by or on behalf of a public body responsible for an authentic source (PuB-EAA).

• Status and lifetime: an attestation may indicate a service for querying its validity status ETSI TS 119 472-1 V1.2.1, § 4.2.11.1 General requirements; a “short-lived” attestation does not need to be checked for revocation ETSI TS 119 472-1 V1.2.1, § 4.2.13 EAA short-lived.
• Selective disclosure: the specification describes the elements that allow only part of the attributes to be revealed (disclosure, disclosure reference, algorithm) ETSI TS 119 472-1 V1.2.1, § 4.4.2.1 Introduction.
• Key binding: an attestation should prove that its holder possesses a given public key; this component may be a public key, a certificate or a reference to one of them, and it is recommended that it be a public key, for security and privacy reasons ETSI TS 119 472-1 V1.2.1, § 4.5 EAA data for key binding.
• Signature: the issuer signs the attestation with its private key, as an AdES signature where the syntax allows; the signing certificate follows the profile of specification ETSI TS 119 412-6 ETSI TS 119 472-1 V1.2.1, § 4.6.1 General requirements ETSI TS 119 412-6 V1.1.1.
• mdoc format: it takes up the structures of standard ISO/IEC 18013-5, extended; a mobile driving licence uses the namespace of that standard, other attestations that of ISO/IEC 23220-2 ETSI TS 119 472-1 V1.2.1, § 6.1 General requirements ISO/IEC 18013-5:2021.

What the implementing act applies, and how

Annex II to Implementing Regulation 2024/2979 makes clauses 2 to 6 of the specification applicable (references, definitions, common model, SD-JWT VC and ISO/IEC-mdoc implementations), subject to adaptations Annex II. Clauses 7 (JSON-LD W3C-VC) and 8 (X.509-AC) are not targeted by this annex Annex II. Among the adaptations:

• for PID, QEAA and PuB-EAA, the status of an attestation only indicates whether or not it is revoked: no suspension, and a revocation is final Annex II;
• no revocation is required for a short-lived attestation issued for 24 hours or less Annex II;
• normative references are updated, for example to specification ETSI TS 119 412-6 for certificate profiles Annex II.

Important clauses

• ETSI TS 119 472-1 V1.2.1, § 1 Scope: scope.
• ETSI TS 119 472-1 V1.2.1, § 4 Semantics of Electronic Attestation of Attributes: common data model.
• ETSI TS 119 472-1 V1.2.1, § 5 Implementation of EAA based on SD-JWT VC: SD-JWT VC implementation.
• ETSI TS 119 472-1 V1.2.1, § 6 Implementation of EAA based on ISO/IEC-mdoc: ISO/IEC-mdoc implementation.
• ETSI TS 119 472-1 V1.2.1, § 7 Implementation of EAA based on W3C Verifiable Credentials (JSON-LD W3C-VC): JSON-LD W3C-VC implementation (not targeted by Annex II to Implementing Regulation 2024/2979).
• ETSI TS 119 472-1 V1.2.1, § 8 Implementation of EAA based on X.509 Attribute Certificates (X.509-AC): X.509-AC implementation (not targeted by Annex II to Implementing Regulation 2024/2979).

Links

• Made mandatory by Annex II to Implementing Regulation 2024/2979, as amended by 2026/1731 Annex II Implementing Regulation (EU) 2026/1731.
• The other parts of the series: presentation to relying parties (part 2) and issuance (part 3) ETSI TS 119 472-1 V1.2.1, Foreword ETSI TS 119 472-2 V1.2.1 ETSI TS 119 472-3 V1.1.1.
• Summary of Implementing Regulation 2024/2977 Implementing Regulation (EU) 2024/2977 — consolidated version of 11/08/2026.
• Learning path: step 3, the European wallet.

ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI TS 119 472-1 V1.2.1. Written by Asphalia.