CONTEXT
Individual Identity
How the human is authenticated and what identity assurance is available.
IDENTITY & AUTHORITYSERVICE REFERENCE
Trust starts with the actor.
Before a privileged or state-changing operation, Trusted ThingID can evaluate identity, organisation, assurance, role, mandate, purpose and disclosure policy.
IDENTITY CONTEXT
Who is acting, for whom and with what authority?
Public low-risk DPP access is explicitly separated from privileged operations.
CONTEXT
Organisation Identity
Which legal or business entity the actor represents.
POLICY
Representation & Mandate
Who may act for whom, for which purpose and during which validity period.
RISK-BASED
Assurance & Step-up
Authentication strength is selected by action risk and deployment profile.
DECISION
Authorization
Authentication success does not imply permission to act.
DISCLOSURE
Field-level Disclosure
The composed view includes only fields allowed by policy, role, purpose and authority.
PRIVILEGED FLOW
Authentication is only the beginning.
A successful login never grants unrestricted data or state-changing rights.
01IDENTIFY ACTORHuman /
credential
02VERIFY ORGANISATIONLegal
entity
03VERIFY AUTHORITYRole · mandate
· assurance
04RESOLVE THINGOfficial
identifier · resolver · DPP
05APPLY POLICYPurpose · AuthZ ·
disclosure
06PERFORM ACTIONGoverned state
transition
07GENERATE EVIDENCEAudit ·
trusted time · provenance