LOGBOOK

HELP

Quiz Entry - updated: 2026.10.22

Which four sub-models make up the eCH-0170 quality model, and what does each one rate?

Authentication (VSA: strength and certification of the authenticator), registration (VSR: identification and handover of the authenticator), governance (VSS: supervision, liability, maturity) and federation (VSF: how the authentication confirmation is passed on).

The eCH-0170 model: four sub-models around the overall trust level, each with its own criteria

* Four sub-models, each rated on its own criteria, together decide the overall trust level. *

Sub-model German abbreviation Rated on
Authentication VSA, Vertrauensstufen der Authentifizierung Strength of the authenticator, its possible certification, re-authentication interval
Registration VSR, Vertrauensstufen der Registrierung How well the person was identified, how the authenticator was handed over, how it is renewed or replaced
Governance VSS, Vertrauensstufen der Steuerung Supervision, liability and maturity of the service provider
Federation VSF, Vertrauensstufen der Föderierung Authenticity, confidentiality protection, transmission form and proof of possession of the authentication confirmation

The split mirrors the life of an identity: you are registered once, you authenticate many times, a provider governs the whole operation, and in a federation the result is forwarded to other services. Each phase can be strong or weak independently, so each gets its own scale.

Go deeper:

  • doc eCH-0170 V2.0.1 — the official summary of the four sub-models (in German).

From Quiz: IAM / Quality of Authentication: Assurance Levels and Identity Proofing | Updated: Oct 22, 2026