arf-topic-r-user-to-device-authentication

User authentication for a European Digital Identity Wallet is implemented using multi-factor mechanisms like device unlock and wallet-specific factors to meet eIDAS2 and EUDI Wallet compliance requirements. This ensures secure access to digital identity means.

eIDAS2 wallet compliance requires authentication assurance level high. This is achieved by combining knowledge, possession, and inherence factors to securely authenticate users to their digital identity wallets on user devices.

EUDI Wallet authentication requires multi-factor authentication to meet regulatory assurance level high. It combines device-level security such as PIN or biometrics with a wallet-specific factor to validate the user's identity during digital identity presentation.

Cryptographic assets in a digital identity wallet are securely managed through device-level security and strict user session management. This involves handling cryptographic keys within secure environments to comply with European Digital Identity Regulation requirements.

Device biometrics can be used for eIDAS2 high assurance level authentication when combined with additional factors. Implementing multi-factor authentication ensures the digital identity wallet meets the strict security and compliance requirements of the regulation.

Device unlock alone may not meet the high assurance level required by the European Digital Identity Regulation. It must be supplemented with a wallet-specific authentication factor and secure cryptographic asset handling to ensure full compliance.