This document describes the security assessment of the Parental Consent/Control solutions developed in the context of the EUConsent project. The purpose of the assessment was to provide a review of the security posture of the ecosystem and solution architecture, as well, as to identify potential weaknesses in its design.
This security assessment covers the design of the Parental Consent/Control solution of the EUConsent project. The major building blocks that make up the solution are:
- User’s device
- Service Provider (SP)
- Parental Consent Providers (PCP)
- Age Verification Providers (AVP)
- eIDAS node network
- Identity Providers (IDP)
During the assessment, the focus was on the functional and technical security of the first 3 building blocks. A separate IT security assessment was done for the AVP’s (D3.5). As the solution is only integrating the eIDAS node network as provided and connected IDP’s that have been formally reviewed under the eIDAS regulation, these components were out of scope for this assessment.
Find out more details from the report, download the document using the dedicated button.
