EIDASVault: 欧盟数字身份官方规范、QSCD 硬件级高密保与抗量子跨境信任认证体系

EIDASVault Trust Service Architecture & QSCD Silicon Topology

Common Criteria EN 419 221-5 compliant HSM, eIDAS 2.0 wallet bridge, and QTSP signing engine

Central System: Qualified Signature Core - EN 419 221-5 QSCD Engine

Cryptographic Nodes

• Qualified HSM Enclave
• EUDIW Wallet Bridge
• Post-Quantum QES Signer
• Qualified Timestamp Authority
• Long-Term Validation Engine

Architectural Layers & Protocols

• Hardware QSCD Boundary (Common Criteria EAL4+ / Protection Profile EN 419 221-5): Ensuring sole control of signing keys and physical tamper resistance under European law.
• eIDAS 2.0 EUDIW Integration (OpenID4VP / ISO/IEC 18013-5 Mobile Driving Licence): Issuing and verifying Person Identification Data (PID) and Qualified Electronic Attestations of Attributes (QEAA).
• Post-Quantum Signature Generation (FIPS 204 ML-DSA & FIPS 205 SLH-DSA): Creating legally binding Qualified Electronic Signatures (QES) with equivalent legal effect to handwritten signatures.
• Long-Term Archive & Preservation (PAdES / CAdES LTA (Long-Term Availability)): Ensuring electronic signatures and legal documents remain verifiable for 30+ years using quantum-safe timestamps.

Key Metrics: eIDAS 2.0 (European Regulatory Target) | EN 419 221-5 (QSCD Protection Profile) | QES Grade (Legal Signature Equivalence) | 30+ Years (LTA Archive Longevity)