デジタルIDエンクレーブ＆eIDAS 2.0適合トラストモジュール

主権的ID発行、追跡不能なゼロ知識クレデンシャル提示、暗号化電子属性証明のための専用ハードウェアセキュリティモジュールを設計します。

IdHSM Identity Enclave Architecture

Cryptographic Enclave: Sovereign Identity Enclave — CC EAL6+ / ARF High LoA Core

Hardware Security Nodes & Co-Processors

SD-JWT-VC Hash & Salt Engine
BLS12-381 / BBS+ Pairing Core
ISO/IEC 18013-5 mDL Engine
W3C DID Key Custody Vault
Hardware StatusList2021 Signer

Architectural Layers & Silicon Defenses

Layer 1: Secure Element & Attestation Root (Silicon PUF / CC EAL6+ Microcontroller): Anchoring sovereign identity master seeds to physically unclonable functions with anti-cloning guarantees.
Layer 2: Zero-Knowledge & Pairing Co-Processor (Hardware Multi-Scalar Multiplication / BLS): Accelerating elliptic curve pairings over BLS12-381 and BN254 curves for instant zero-knowledge proof generation.
Layer 3: Sovereign Credential Lifecycle Engine (SD-JWT-VC / ISO 18013-5 / OpenID4VCI): Formatting and cryptographically signing verifiable credentials and selective disclosure attribute attestations.
Layer 4: European Digital Identity Gateway (eIDAS 2.0 ARF v1.4 / ETSI EN 319 411): Interfacing with European Union Digital Identity (EUDI) wallets and Qualified Trust Service Providers.

Cryptographic Telemetry & Compliance: LoA High (eIDAS 2.0 Trust Level) | < 2.8 ms (BBS+ Proof Verification) | 100% (Unlinkable Presentations) | EAL6+ (Common Criteria Certification)

主権的デジタルIDとプライバシーのためのハードウェア信頼の基点

Digital identity ecosystems require mathematical guarantees of privacy, non-traceability, and cryptographic authenticity. IdHSM bridges qualified trust service providers (QTSPs) and citizen identity wallets through Common Criteria certified hardware enclaves that enforce selective disclosure and unlinkability at the silicon level.

Core Engineering Areas

eIDAS 2.0 ARF Qualified Identity Enclave — Engineering qualified trust service hardware modules compliant with EU Regulation 2024/1183 and the European Digital Identity Wallet architecture.
W3C DID & ZKP Hardware Attestation — Hardware acceleration of zero-knowledge proofs, selective disclosure credentials, and decentralized identifier key management.
ISO/IEC 18013-5 Mobile Driving License Security — Silicon security architecture for mobile driving licenses (mDL) and digital credentials supporting proximity and remote verification.

Technical Publications

Related Cluster Architecture Specifications

HSMCrypt — FIPS 140-3 Level 4 Cryptographic Engines, PKCS#11 Architecture & Hardware Root of Trust
AgenticHSM — Autonomous AI Agent Root of Trust, Secure Execution Enclaves & Model Tool Signing
ApiHSM — Cryptographic API Gateways, REST/gRPC PKCS#11 Microservices & Cloud-Native Key Enclaves
AssetHSM — Institutional Digital Asset Hardware Custody, Multi-Party MPC-HSM Hybrid & Cold Storage