---
# System prepended metadata

title: 09.08.2021 Risk Assessment Meeting Notes
tags: [risk assessment]

---

# 09.08.2021 Risk Assessment Meeting Notes
###### tags: `risk assessment`

## Agenda
System model so far
Verification process
List of data/attributes for every Use case
New developments

### System Model
responsible entities:
- not sure, who takes on responsibility for systems
- risk delegated to service providers
- no damages can be determined yet
data: goes over process/workflow boundaries
- PIN eID Card
- eID Card data
- tcTokenURL
- redirectURL
- eID Authentication data
- eID Athentication Code
#### Hotel use case as an example?
unclear if webservice or device that scans identity might be used


### Verification Process
Use phase
- Identify and Authenticate
    - DIDCom authcrypt based to identitfy peer
    - CBase credentials within the message, or both for MFA
- Authorize
    - verifiable credential based, varies with issuer, use case related
#### Diagrams to be provided by jolocom

### List of data/attributes for every Use case
who takes on legal responsibility?