An identity verification approach where a trusted provider issues a cryptographic attestation about a user's attributes without transferring the underlying personal data.
Attestation-Based Verification is an identity verification approach where a trusted provider issues a cryptographic attestation (a digitally signed statement) about a user's attributes without transferring the underlying personal data to the requesting service.
For example, instead of sending a copy of a passport to prove age, the user receives an attestation stating "age verified: over 18" signed by a trusted provider.
This approach aligns with data minimization principles (GDPR Article 5(1)(c)), selective disclosure requirements (eIDAS 2.0), and PII-retention prohibitions in US state age verification laws.
France's age verification framework requiring that the website cannot identify the user and the verification provider cannot know which website the user visits.
A Qualified Electronic Attestation of Attributes is a digitally signed statement about a person's attributes (such as age, qualifications, or professional status) issued by a Qualified Trust Service Provider under eIDAS 2.0.
A GDPR principle (Article 5(1)(c)) requiring that personal data collected must be adequate, relevant, and limited to what is necessary.
A cryptographic technique allowing users to share specific attributes from a credential without revealing all information it contains.
