How does an ASPSP/TPP to check the validity/status of a Certificate AFTER cert has been Issued: For QWAC For QSEAL How does an ASPSP/TPP check the signature of a Certificate AFTER cert has been Issued: For QWAC For QSEAL NOTE: Previous Commentary and Queries for eIDAS Certificates are further noted below from various EU forums, with different ways of addressing, however these are supplementary background considerations to the Key Questions as above, which are the primary request. Use Cases for Common Secure Communications & Identity, under PSD2 PSU establishes secure communications with TPP: Secure Communications via Internet Browser Certificate Used? Protocols Used? Certificate Data Used? PSU establishes secure communications with ASPSP: Secure Communications for Internet Browser Certificate Used? Protocols Used? Certificate Data Used? TPP establishes secure communications with ASPSP: Secure Communication via APIs Certificate Used? Protocols Used? Data Used? Use of PKI or other Security? ASPSP establishes secure communications with TPP: Secure Communication via APIs Certificate Used? Protocols Used? Data Used? Use of PKI or other Security? [E] TPP provides PSD2 Identity to ASPSP: Proof of Regulatory Identity under PSD2 - Certificate Used? - Protocols Used? - How to Proof Ownership/identity? - Data Elements & Locations? - Certificate Status Checking and Policies? - Assurance and Liability? [F] ASPSP provides PSD2 Identity to TPP: Proof of Regulatory Identity under PSD2 - Certificate Used? - Protocols Used? - How to Proof Ownership/identity? - Data Elements & Locations? - Certificate Status Checking and Policies?
How does an ASPSP/TPP to check the validity/status of a Certificate AFTER cert has been Issued: For QWAC For QSEAL How does an ASPSP/TPP check the signature of a Certificate AFTER cert has been Issued: For QWAC For QSEAL NOTE: Previous Commentary and Queries for eIDAS Certificates are further noted below from various EU forums, with different ways of addressing, however these are supplementary background considerations to the Key Questions as above, which are the primary request. Use Cases for Common Secure Communications & Identity, under PSD2 PSU establishes secure communications with TPP: Secure Communications via Internet Browser Certificate Used? Protocols Used? Certificate Data Used? PSU establishes secure communications with ASPSP: Secure Communications for Internet Browser Certificate Used? Protocols Used? Certificate Data Used? TPP establishes secure communications with ASPSP: Secure Communication via APIs Certificate Used? Protocols Used? Data Used? Use of PKI or other Security? ASPSP establishes secure communications with TPP: Secure Communication via APIs Certificate Used? Protocols Used? Data Used? Use of PKI or other Security? [E] TPP provides PSD2 Identity to ASPSP: Proof of Regulatory Identity under PSD2 - Certificate Used? - Protocols Used? - How to Proof Ownership/identity? - Data Elements & Locations? - Certificate Status Checking and Policies? - Assurance and Liability? [F] ASPSP provides PSD2 Identity to TPP: Proof of Regulatory Identity under PSD2 - Certificate Used? - Protocols Used? - How to Proof Ownership/identity? - Data Elements & Locations? - Certificate Status Checking and Policies?
ESI(17)000116_ERPB_Experts_Contribution_on_Certificate_Use_Cases.docx