- Verifiable Presentations may be used to combine and present credentials. They can be packaged in such a way that
- the authorship of the data is verifiable. OCI generates a Verifiable Presentation after [[vc-data-model]]
- specification.
+ Verifiable Presentations are used to combine and present credentials. They are packaged in such a way that
+ the ownership of the data is verifiable. OCI generates a Verifiable Presentation after [[vc-data-model]]
+ specification. OCI extends the JWT Encoding and
+ [[RFC7519]] section 4.1 by defining its own optionality and usage guidelines.
Verifiable Presentation Metadata
@@ -913,81 +914,84 @@ Verifiable Presentation Metadata
| Term |
Description |
- Full IRI |
- | jti |
+ `jti` |
- This field represents the id property of the verifiable presentation being generated.
+ A digital wallet MAY include a `jti` field in the JWT payload. This field represents the id property of
+ the Verifiable Presentation.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | iss |
+ `iss` |
- Represents the holder property of the verifiable presentation being generated.
+ A digital wallet SHALL include an iss field in the JWT payload. This field represents the holder property
+ of the Verifiable Presentation and SHALL be the Verifiable Credential's subject DID.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | aud |
+ `aud` |
- Verifiable Presentation Audience. We might include PI_Verification in this field to represent that this VP
- is used in this context
-
- We might include ATP_DSCSA in this field to represent that this VP is used in this context
+ A digital wallet SHALL NOT include an `aud` field in the JWT payload. The recipient's DID of the JWT is
+ not known during presentation generation.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | iat |
+ `iat` |
- Issuance Date of the VP in EPOCH format | Used for determining whether or not the VP is valid by including
- the OCI validity time frame defined in Digital Wallet Conformance Criteria
+ A digital wallet SHALL include an `iat` field in the JWT payload. This field represents the UNIX timestamp
+ of the issuance date of the Verifiable Presentation.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | nbf |
+ `nbf` |
- Issuance Date of the VC in EPOCH format
+ A digital wallet MAY include a `nbf` field in the JWT payload. This field represents the UNIX timestamp
+ of the start date of the Verifiable Presentation's validity.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | exp |
+ `exp` |
- Expiration Date of the VC in EPOCH format
+ A digital wallet SHALL include an `exp` field in the JWT payload. This field represents the UNIX timestamp
+ expiration date of the Verifiable Presentation and SHALL be five minutes later than the issuance date.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | vp |
+ `nonce` |
- Contains the Verifiable Presentation
+ A digital wallet SHALL include a `nonce` field in the JWT payload. This field represents a random value
+ that is used to prevent replay attacks.
|
- https://w3c.github.io/vc-data-model/#jwt-encoding |
- | vp.type |
+ `vp`
+ |
+
+ A digital wallet SHALL include a `vp` object in the JWT payload. This object contains further data of
+ the Verifiable Presentation.
+ |
+
+
+ | `vp.@context` |
- The type property is required and expresses the type of presentation, such as VerifiablePresentation.
+ A digital wallet SHALL include a `@context` field in the `vp` object. This field represents the context
+ of the Verifiable Presentation and SHALL be set to `https://www.w3.org/2018/credentials/v1`.
|
- https://w3c.github.io/vc-data-model/#presentations-0 |
- | vp.verifiableCredential |
+ `vp.type` |
- The VerifiableCredential (including all attributes) that are represented by this VP
+ A digital wallet SHALL include a `type` field in the `vp` object. This field represents the type of
+ the Verifiable Presentation and SHALL be set to `VerifiablePresentation`.
|
- https://w3c.github.io/vc-data-model/#presentations-0 |
- | nonce |
+ `vp.verifiableCredential` |
- Contains the corrUUID for which the VP has been generated for.
+ A digital wallet SHALL include a `verifiableCredential` field in the `vp` object. This field contains
+ the embedded ATP Verifiable Credential.
|
- https://www.iana.org/assignments/jwt/jwt.xhtml |