Mobile-ID · Digital Trust
ISO/IEC 27001 · FIDO2 · OpenID — View scope
Signing

Multiple Signing Routes. One Integrated Experience.

Abstract VNeID/RS-HUB and Passkey/Trusted SIC routes from business applications through a unified orchestration layer.

ROUTE MODEL

Different trust routes. Consistent integration.

ROUTE A

VNeID / RS-HUB

VNeID-linked signing journey with applicable CA/RSSP.

Explore →
ROUTE B

Passkey / Trusted SIC

Passwordless authentication/authorization inside the signing journey.

Explore →
CONTROL

GoPaperless Orchestration

Policy, route, provider, state and evidence abstraction.

Explore →
COMMON OUTPUT

A unified transaction model.

Regardless of route, the business application should receive normalized state, result and evidence.

Reference architecture
Document and policy

Version • signer • authority

VNeID / RS-HUB

Applicable identity and signing service route

GoPaperless Agent

Desktop application handoff

REST API

Asynchronous transaction integration

Trusted SIC

Transaction-bound authorization

CA / RSSP

Signature creation with the applicable key and certificate

Verification and evidence

Output • state • correlation

SIGNING ROUTE MODEL

One “Sign” button can hide several different trust routes

Mobile-ID Sign keeps policy, credential, provider and channel separate so a business application does not hard-code every CA/RSSP or user journey.

If the table is wider than its frame, scroll horizontally to see all columns; use arrow keys when the table region has focus.

One “Sign” button can hide several different trust routes
FactorDecision question
ChannelMobile, desktop Agent or API?
Identity contextWhich VNeID/session/profile context is permitted?
AuthorizationHow does the user approve the transaction content?
CredentialWhich credential/certificate is eligible?
ProviderWhich CA/RSSP is allowed by policy?
FallbackMay the route/provider change on failure?
EvidenceWhat result and audit context must return?
Policy first

Fallback is not allowed merely because another route is technically reachable when policy/assurance does not allow it.

Search Mobile-ID Sign

Local search inside the offline package.