Swiss e-ID (swiyu)
People in Switzerland may present the state e-ID from the swiyu wallet. secuveri verifies it as an OpenID4VP 1.0 verifier: a signed request, the issuer's did:webvh log, the federal trust registry, the credential's revocation status, and the holder binding (the wallet signs this very request with the key the e-ID was issued to). Two workflow options use it. Under Identity Document, Accept the Swiss e-ID offers it in the document picker for Switzerland: the e-ID replaces the document photos, and a liveness selfie is matched against the e-ID portrait, as FINMA RS 2016/7 Rz 44.1–44.4 asks for this route. It needs Liveness Check and Face Match; add Proof of Address for the address check, since the e-ID carries no address. Under Age Estimation, Accept the Swiss e-ID (age only) lets the person prove their age instead of the selfie: only age_over_18 (or age_over_16 / age_over_65 for that minimum age) is requested, nothing else, and no selfie is taken.
| Field | Meaning |
|---|---|
identification_method | swiss_eid (e-ID in place of the document), swiss_eid_age (only the age attribute; nobody is identified), reusable_credential, face_check, nfc, document, or null. Also in the webhook. |
swiss_eid.mode | identity or age |
swiss_eid.beta, notice | true with the notice "Beta credential — not a proof of identity" while secuveri verifies against the swiyu public beta. The webhook carries swiss_eid_beta: true. |
swiss_eid.issuer, trust_source, credential_type, credential_status | Who issued the credential, how the issuer was trusted (registry or static), its type and its status (VALID) |
swiss_eid.holder_binding | true: the presentation was signed by the holder's key for this request |
swiss_eid.failure_reasons | Why earlier presentations were refused: SWISS_EID_CREDENTIAL_INVALID, SWISS_EID_EXPIRED, SWISS_EID_REVOKED, SWISS_EID_UNTRUSTED_ISSUER, SWISS_EID_HOLDER_BINDING_FAILED, SWISS_EID_MISSING_ATTRIBUTES, SWISS_EID_TRUST_UNAVAILABLE, SWISS_EID_DECLINED, SWISS_EID_REQUEST_EXPIRED. The person may try again or use a document. |
age_check | For the age-only use: { "method": "swiss_eid", "attribute": "age_over_18", "passed": true, "beta": … } |
A selfie that does not match the e-ID portrait rejects the verification with outcome_reason SWISS_EID_PORTRAIT_MISMATCH; a false age attribute with SWISS_EID_AGE_NOT_MET. The full report adds swiss_eid_process, the record of the route: credential valid, trusted issuer, holder binding, liveness, portrait match and how the address was established. The disclosed attributes stay in the full report only and are deleted with the other personal data; the signed result and webhooks never carry them.