keyboard_tab EIDAS 2014/0910 EN

(16) Assurance levels should characterise the degree of confidence in electronic_identification means in establishing the identity of a person, thus providing assurance that the person claiming a particular identity is in fact the person to which that identity was assigned.

  The assurance level depends on the degree of confidence that electronic_identification means provides in claimed or asserted identity of a person taking into account processes (for example, identity proofing and verification, and authentication), management activities (for example, the entity issuing electronic_identification means and the procedure to issue such means) and technical controls implemented.

  Various technical definitions and descriptions of assurance levels exist as the result of Union-funded Large-Scale Pilots, standardisation and international activities.

  In particular, the Large-Scale Pilot STORK and ISO 29115 refer, inter alia, to levels 2, 3 and 4, which should be taken into utmost account in establishing minimum technical requirements, standards and procedures for the assurances levels low, substantial and high within the meaning of this Regulation, while ensuring consistent application of this Regulation in particular with regard to assurance level high related to identity proofing for issuing qualified certificates.

  The requirements established should be technology-neutral.

  It should be possible to achieve the necessary security requirements through different technologies.

(62) In order to ensure the security of qualified electronic_time_stamps, this Regulation should require the use of an advanced electronic_seal or an advanced electronic_signature or of other equivalent methods.

  It is foreseeable that innovation may lead to new technologies that may ensure an equivalent level of security for time stamps.

  Whenever a method other than an advanced electronic_seal or an advanced electronic_signature is used, it should be up to the qualified trust_service provider to demonstrate, in the conformity assessment report, that such a method ensures an equivalent level of security and complies with the obligations set out in this Regulation.