What does each sub-model require at each overall trust level in the eCH-0170 summary model?
Level 1: one factor, self-declared data, no supervision or liability, signed confirmation. Level 2: 2FA/MFA, data checked with the subject online, limited liability, confidentiality protection. Level 3: HW-MFA, strong checking, supervision and liability, confidentiality. Level 4: certified HW-MFA, state-recognised evidence with biometric check, supervision by an accredited body with liability and contractual penalties, holder-of-key.
| Level | VSA | VSR | VSS | VSF |
|---|---|---|---|---|
| 1 No or minimal trust | One factor | Data self-declared, not checked | No supervision, no liability | Origin and integrity verifiable (signature) |
| 2 Low trust | 2FA or MFA | Data checked, subject online | Limited liability | Confidentiality protection |
| 3 Substantial trust | HW-MFA | Strong checking | Supervision, liability | Confidentiality protection |
| 4 High trust | Certified HW-MFA | State-recognised evidence, biometric features checked | Supervision by an accredited body, liability and contractual penalties | Holder-of-key |
Reading down any column shows the same pattern: each level adds one decisive ingredient. For authentication it is a second factor, then hardware, then certification. For registration: checking, then strong checking, then biometrics against state evidence. For governance: liability, then external supervision, then accredited supervision with penalties. For federation: signature, then confidentiality, then binding to the holder.
Go deeper:
eCH-0170 V2.0.1 — the overview table of the four sub-models and their composition into four levels (in German).