Digitale Identitäten
Lorène Slous
Referentin Digitale Identitäten & Vertrauensdienste
Bitkom e.V.
Die eIDAS-Verordnung
Nr. 910/2014
Die eIDAS-Verordnung (EU) Nr. 910/2014 bildet seit 2016 die Grundlage für elektronische Identifizierung und Vertrauensdienste in Europa. Sie stellt sicher, dass elektronische Signaturen, Siegel, Zeitstempel, Zustelldienste und Website-Zertifikate denselben Rechtsstatus wie papierbasierte Verfahren haben. Damit wurde ein europäischer Rahmen geschaffen, auf dessen Basis europäische harmonisierte Normen (u.a. bei ETSI) entwickelt wurden, um Sicherheit, Interoperabilität und Konformitätsbewertung von Vertrauensdienstanbietern – und der durch die eÍDAS 2.0 eingeführten Wallet-Provider und Relying Parties – zu gewährleisten.
Nr. 2024/1183 (Novellierung der 910/2014)
Mit der Verordnung Nr. 2024/1183 (eIDAS 2.0 als Novellierung der 910/2014) wird dieser Rahmen aktualisiert: Kernstück ist die EUDI-Wallet, die es Bürgerinnen, Bürgern und Unternehmen ermöglicht, digitale Identitätsdaten und qualifizierte Attribute sicher zu speichern und grenzüberschreitend einzusetzen. Durch die Aktualisierung und die Einführung neuer Standards sowie eine konsequentere Referenzierung dieser Normen in verbindlichen Durchführungsrechtsakten werden bestehende Inkonsistenzen zwischen den Mitgliedsstaaten ausgeglichen. Dadurch werden elektronische Interaktionen zwischen Unternehmen, Bürgerinnen und Bürgern sowie Behörden vereinfacht, interoperabel und zugleich sicherer gestaltet.
Timeline eIDAS
Generelle eIDAS Standards
ETSI EN 319 401
| Name | Electronic Signatures and Infrastructures (ESI); General Policy Requirements for Trust Service Providers |
| Beschreibung | Extrem bedeutsam, da die Basiskonformität von Vertrauensdiensten zu eIDAS 2024 gemäß Art 19 nachgewiesen werden kann. Ist auch im ISO 27 ff ISMS anwendbar, berücksichtigt auch die NIS2 Anforderungen |
ETSI EN 319 403-1
| Name | Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment - Requirements for conformity assessment bodies assessing Trust Service Providers |
| Beschreibung | Detaillierte Vorgaben für die Certification Audit Bodies auf Basis von ISO 17065, insbesondere zur Qualifikation und Arbeitsweise der Auditoren |
ETSI TS 119 403-3
| Name | Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment; Part 3: Additional requirements for conformity assessment bodies assessing EU qualified trust service providers |
| Beschreibung | Zusätzliche Anforderungen an die Auditoren, die für QTSP-Zertifizierungen gelten. |
ETSI TS 119 612
| Name | Electronic Signatures and Infrastructures (ESI); Trusted Lists |
| Beschreibung | Basis für den eIDAS Vertrauensraum in Form einer signierten XML-Datei aller in einem EU-Land zugelassen TSP-Dienste, diese Listen werden in einer List-of-Lists zusammengefasst. Wird aktuell für TSP außerhalb der EU geöffnet. |
Weitere Standards unter dem eIDAS
| ETSI SR 019 020 | The framework for standardization of signatures; Standards for AdES digital signatures in mobile and distributed environment |
| ETSI TR 103 684 | Electronic Signatures and Infrastructures (ESI); Global Acceptance of EU Trust Services |
| ETSI TR 119 000 | Electronic Signatures and Infrastructures (ESI); The framework for standardization of signatures: overview |
| ETSI TR 119 001 | Electronic Signatures and Infrastructures (ESI); The framework for standardization of signatures; Definitions and abbreviations |
| ETSI TR 119 400 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for trust service providers supporting digital signatures and related services |
| ETSI TS 119 403-2 | Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment; Part 2: Additional requirements for Conformity Assessment Bodies auditing Trust Service Providers that issue Publicly-Trusted Certificates |
| ETSI TS 119 600 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for trust service status lists providers |
| ETSI TS 119 614-1 | Electronic Signatures and Infrastructures (ESI); Testing Conformance and Interoperability of Trusted Lists; Part 1: Specifications for testing conformance of XML representation of Trusted Lists |
| ETSI TS 119 615 | Electronic Signatures and Infrastructures (ESI); Trusted lists; Procedures for using and interpreting European Union Member States national trusted lists |
Zertifikate für elektronische Signaturen und Siegel
ETSI EN 319 411-1
| Name | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 1: General requirements |
| Beschreibung | Wichtig für alle TSP die Zertifikate ausstellen, definiert auch die Anforderungen an das Sicherheitsniveau NCP+ zur Aufnahme in die Adobe AATL. |
ETSI EN 319 411-2
| Name | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 2: Requirements for trust service providers issuing EU qualified certificates |
| Beschreibung | Alle zusätzlichen Anforderungen für QTSP, insbesondere in Bezug auf Signaturschlüssel der QCA. |
ETSI EN 319 412-1
| Name | Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 1: Overview and common data structures |
| Beschreibung | Maßgeblich für die Interoperabilität der Zertifikatsinhalte, auch in Bezug auf die Kennung der Identizierungssysteme, VAT/TAX/NTR/LEI etc. |
ETSI TS 119 312
| Name | Electronic Signatures and Infrastructures (ESI); Cryptographic Suites |
| Beschreibung | Bildet eine Schnittmenge aus SOGIS und NIST Vorgaben zur praktischen Anwendbarkeit der Algorithmen. |
Weitere Standards zu elektronischen Signaturen & Siegeln
Zertifikate für elektronische Signaturen und Siegel
| ETSI EN 319 412-2 | Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 2: Certificate profile for certificates issued to natural persons |
| ETSI EN 319 412-3 | Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons |
| ETSI EN 319 412-5 | Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 5: QCStatements |
| ETSI TR 119 411-4 | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 4: Checklist supporting audit of TSP against ETSI EN 319 411-1 or ETSI EN 319 411-2 |
| ETSI TS 119 172-1 | Electronic Signatures and Infrastructures (ESI); Signature Policies; Part 1: Building blocks and table of contents for human readable signature policy documents |
| ETSI TS 119 172-4 | Electronic Signatures and Infrastructures (ESI); Signature Policies; Part 4: Signature applicability rules (validation policy) for European qualified electronic signatures/seals using trusted lists |
Signatur-/Siegel-Formate
| ETSI EN 319 122-1 | Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures |
| ETSI EN 319 132-1 | Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 1: Building blocks and XAdES baseline signatures |
| ETSI EN 319 142-1 | Electronic Signatures and Infrastructures (ESI); PAdES digital signatures; Part 1: Building blocks and PAdES baseline signatures |
| ETSI EN 319 162-1 | Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC); Part 1: Building blocks and ASiC baseline containers |
| ETSI EN 319 162-2 | Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC); Part 2: Additional ASiC containers |
| ETSI TS 103 171 | Electronic Signatures and Infrastructures (ESI); XAdES Baseline Profile |
| ETSI TS 103 172 | Electronic Signatures and Infrastructures (ESI); PAdES Baseline Profile |
| ETSI TS 103 173 | Electronic Signatures and Infrastructures (ESI); CAdES Baseline Profile |
| ETSI TS 103 174 | Electronic Signatures and Infrastructures (ESI); ASiC Baseline Profile |
| ETSI TS 119 182-1 | Electronic Signatures and Infrastructures (ESI); JAdES digital signatures; Part 1: Building blocks and JAdES baseline signatures |
Erstellung digitaler Signaturen
| CEN EN 419 211-1 | Protection profiles for secure signature creation device — Part 1: Overview |
| CEN EN 419 211-2 | Protection profiles for secure signature creation device — Part 2: Device with key generation |
| CEN EN 419 211-3 | Protection profiles for secure signature creation device — Part 3: Device with key import |
| CEN EN 419 211-4 | Protection profiles for secure signature creation device — Part 3: Device with key import |
| CEN EN 419 211-5 | Protection profiles for secure signature creation device — Part 4: Extension for device with key generation and trusted channel to certificate generation application |
| CEN EN 419 211-6 | Protection profiles for secure signature creation device — Part 6: Extension for device with key import and trusted channel to signature creation application |
| CEN EN 419 221-5 | Protection Profiles for TSP Cryptographic Modules - Part 5 - Cryptographic Module for Trust Services |
| CEN EN 419 241-1 | Trustworthy Systems Supporting Server Signing Part 1: General System Security Requirements, |
| CEN EN 419 241-2 | Trustworthy Systems Supporting Server Signing Part 2: Protection Profile for QSCD for Server Signing |
| ETSI EN 319 102-1 | Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation |
| ETSI TR 119 100 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for signature creation and validation |
| ETSI TS 119 101 | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for applications for signature creation and signature validation |
| ETSI TS 119 300 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for cryptographic suites |
| ETSI TS 119 431-1 | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for trust service providers; Part 1: TSP service components operating a remote QSCD / SCDev |
| ETSI TS 119 431-2 | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for trust service providers; Part 2: TSP service components supporting AdES digital signature creation |
| ETSI TS 119 432 | Electronic Signatures and Infrastructures (ESI); Protocols for remote digital signature creation |
Kryptografische Suiten
| CEN EN 419 211-1 | Protection profiles for secure signature creation device — Part 1: Overview |
| CEN EN 419 211-2 | Protection profiles for secure signature creation device — Part 2: Device with key generation |
| CEN EN 419 211-3 | Protection profiles for secure signature creation device — Part 3: Device with key import |
| CEN EN 419 211-4 | Protection profiles for secure signature creation device — Part 3: Device with key import |
| CEN EN 419 211-5 | Protection profiles for secure signature creation device — Part 4: Extension for device with key generation and trusted channel to certificate generation application |
| CEN EN 419 211-6 | Protection profiles for secure signature creation device — Part 6: Extension for device with key import and trusted channel to signature creation application |
| CEN EN 419 221-5 | Protection Profiles for TSP Cryptographic Modules - Part 5 - Cryptographic Module for Trust Services |
| CEN EN 419 241-1 | Trustworthy Systems Supporting Server Signing Part 1: General System Security Requirements, |
| CEN EN 419 241-2 | Trustworthy Systems Supporting Server Signing Part 2: Protection Profile for QSCD for Server Signing |
| ETSI TS 119 300 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for cryptographic suites |
| ETSI TS 119 312 | Electronic Signatures and Infrastructures (ESI); Cryptographic Suites |
Erstellung qualifizierter elektronischer Zeitstempel
ETSI EN 319 421
| Name | Electronic Signatures and Infrastructures (ESI); Policy and Security Requirements for Trust Service Providers issuing Time-Stamps |
| Beschreibung | - |
ETSI EN 319 422
| Name | Electronic Signatures and Infrastructures (ESI); Time-stamping protocol and time-stamp token profiles |
| Beschreibung | - |
Validierung qualifizierter elektronischer Signaturen, Siegel und Zeitstempel
Wichtigste Standards
| ETSI EN 319 102-1 | Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation |
| ETSI TR 119 100 | Electronic Signatures and Infrastructures (ESI); Guidance on the use of standards for signature creation and validation |
| ETSI TS 119 101 | Electronic Signatures and Infrastructures (ESI); Policy and security requirements for applications for signature creation and signature validation |
| ETSI TS 119 102-2 | Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 2: Signature Validation Report |
| ETSI TS 119 441 | Electronic Signatures and Infrastructures (ESI); Policy requirements for TSP providing signature validation services |
| ETSI TS 119 442 | Electronic Signatures and Infrastructures (ESI); Protocol profiles for trust service providers providing AdES digital signature validation services |
Aufbewahrung von (qualifizierten) elektronischen Signaturen, Siegeln und Zeitstempeln
ETSI SR 019 510
| Name | Electronic Signatures and Infrastructures (ESI); Scoping study and framework for standardization of long-term data preservation services, including preservation of/with digital signatures |
| Beschreibung | Technischer Report über bestehende Lösungen zur Bewahrung |
ETSI TS 119 512
| Name | Electronic Signatures and Infrastructures (ESI); Protocols for trust service providers providing long-term data preservation services |
| Beschreibung | Technische Anforderungen an (QTSP für Bewahrung |
Archivierung
CEN TS 18170
| Name | Functional requirements for the electronic archiving service |
| Beschreibung | Anforderungen an QTSP für Archiving |
Qualifizierte Attributsbestätigungen
Wichtigste Standards
| ETSI TS 119 471 | Policy and Security requirements for Providers of Electronic Attestation of Attribute Services |
| ETSI TS 119 472-1 | Profiles for EAA - General requirements |
Verwaltung sicherer Signaturerstellungseinheiten
In Arbeit: Weitere Informationen folgen in Kürze
Verteiltes Register
Wichtigste Standards
| FprCEN/TS 18264 | Policy and Security Requirements on Trust Services on Electronic Ledger |
| ETSI GR PDL 001 | Permissioned Distributed Ledger (PDL); Landscape of Standards and Technologies |
| ETSI GR PDL 017 | Permissioned Distributed Ledger (PDL); Application of PDL to Amended Regulation 910/2014 (eIDAS 2) Qualified Trust Services |
| ETSI GR PDL 019 | PDL Services for Decentralized Identity and Trust Management |
Zustelldienste
ETSI EN 319 532-4
| Name | Electronic Signatures and Infrastructures (ESI); Registered Electronic Mail (REM) Services; Part 4: Interoperability profiles |
| Beschreibung | Wichtige Norm für europaweit interoperable Zustelldienste. |
Weitere Standards
| ETSI EN 319 522-2 | Electronic Signatures and Infrastructures (ESI); Electronic Registered Delivery Services; Part 2: Semantic contents |
| ETSI EN 319 522-3 | Electronic Signatures and Infrastructures (ESI); Electronic Registered Delivery Services; Part 3: Formats |
| ETSI TS 119 524 | Electronic Signatures and Infrastructures (ESI); Testing Conformance and Interoperability of Electronic Registered Delivery Services; Part 1: Testing conformance |
EUDI Wallet
In Arbeit: Weitere Informationen folgen in Kürze
Allgemeine elektronische Vertrauensdienste nach eIDAS 2.0
Wichtigste Standards
| ETSI EN 319 478 | Specification of interfaces related to Authentic Sources |
| ETSI TS 119 411-8 | EUDI Wallet Relying Party Access Certificate Policy and Profile requirements |
| ETSI TS 119 411-9 | ETSI TS 119 411-9 - Requirements on a Certificate Transparency (CT) Ecosystem to make the issuing of certificates transparent and verifiable |
| ETSI TS 119 412-6 | Certificate Profiles and for Public Sector Issuing |
| ETSI TS 119 462 | Wallet interfaces for trust services and signing Wallet interfaces for trust services and signing |
| ETSI TS 119 472-2 | Profiles for EAA/PID Presentation to Relying Party |
| ETSI TS 119 472-3 | Profiles for EAA/PID Issuance |
| ETSI TS 119 475 | Relying party authorisations for access to EUDI Wallet |
| ETSI TS 119 479-2 | Processing trusted lists and trusted list content |
| ETSI TS 119 479-3 | Support for EAA within AdES signatures |
Weitere Standards
| ETSI TR 103 684 | Electronic Signatures and Infrastructures (ESI); Global Acceptance of EU Trust Services |
| ETSI TR 119 404 | Electronic Signatures and Infrastructures (ESI); NIS2 and its impact on eIDAS standards |
| ETSI TR 119 476 | Electronic Signatures and Trust Infrastructures (ESI); Analysis of selective disclosure and zero-knowledge proofs applied to Electronic Attestation of Attributes |
| ETSI TR 119 520-1 | Electronic Signatures and Trust Infrastructures (ESI); Framework of ERDS/REM standards; Part 1: New (Q)ERDS/(Q)ERDSP standardization rationalized framework |