What is Trusted ThingID?

Trusted ThingID is an enterprise trust, identity, resolution, assurance and evidence architecture for products and connected things. It extends DPP journeys; it is not a replacement for official DPP identifiers or the EU DPP Registry.

Is TTID an official EU DPP identifier?

No. TTID is modeled as a resolver/correlation/alias and assurance extension. Official identifiers remain authoritative in their applicable schemes.

Does Trusted ThingID replace the EU DPP Registry?

No. The registry is modeled outside the Mobile-ID platform boundary as an external authoritative service.

Does a DPP prove ownership?

Not by itself in this architecture. Ownership, custody and delegation are separate evidence-backed relationships with their own sources and dispute handling.

Is blockchain mandatory?

No. The architecture is off-chain by design. Optional anchoring can be introduced only when justified, and it does not store full DPPs, personal data, telemetry or private keys.

What is Device Assurance L0–L3?

A risk/capability-selected ladder: L0 passive carrier; L1 signed data authenticity; L2 device certificate/hardware-bound key; L3 secure boot/runtime attestation.

How should an enterprise start?

Start with product-group applicability, authoritative identifiers, required data/disclosure, external integrations, evidence needs and a narrow pilot with acceptance criteria.

TRUSTED THING IDENTITY SERVICESERVICE REFERENCE

A service that can be understood, integrated, operated and audited.

Trusted ThingID combines actor identity, authority, thing resolution, policy, evidence and service operations while preserving external systems of record.

SERVICE NORTH STAR

Verified actor → verified authority → verifiable thing → governed action → auditable evidence.

Public DPP access can remain anonymous; identity-first controls apply to privileged, restricted or state-changing operations.

01IDENTIFY ACTORHuman / credential

02VERIFY
ORGANISATIONLegal entity

03VERIFY AUTHORITYRole · mandate · assurance

04RESOLVE THINGOfficial identifier · resolver · DPP

05APPLY POLICYPurpose · AuthZ · disclosure

06PERFORM ACTIONGoverned state transition

07GENERATE EVIDENCEAudit · trusted time · provenance

ACCESS MODES

Identity is proportional to risk and action.

Do not turn a public DPP viewer into an unnecessary identity gate.

PUBLIC

Public / low-risk access

Scan a public carrier, resolve the official identifier and view public DPP fields without unnecessary login.

No identity by default
Data minimisation
Authority-qualified source data

CONTROLLED

Privileged operation

Authenticate the actor and organisation, verify role/mandate, resolve the thing, apply policy and record evidence.

Identity assurance
Mandate & purpose
State/evidence control

BOUNDARY

External authority preserved

Connectors integrate government, registry, manufacturer and trust-provider systems without transferring their legal authority into Trusted ThingID.

FOUR SERVICE PLANES

A service model that explains who acts, what is acted upon, what is allowed and how it is proven.

Architecture remains deep, but the public story is service-operational.

Identity & Authority Plane

Human, organisation, authentication, assurance, role, mandate, purpose and disclosure context.

Thing Trust Plane

Official identifier, resolver, DPP, ownership/custody context and optional device assurance.

Service & Transaction Plane

Policy decision, permitted business action, governed state transition and external-authority interaction.

Evidence & Operations Plane

Evidence, audit, monitoring, incident handling, continuity, support and service assurance.