fix: wallet solution editorials

docs/en/ssi-introduction.rst

@@ -5,7 +5,7 @@
 The Digital Identity Wallet Paradigm
 ++++++++++++++++++++++++++++++++++++
 
-The Digital Identity Wallet Paradigm refers to a new architecture in Identity and Access Management (IAM) that improves the privacy and grants complete control and ownership over the personal data by their owner, the Users.
+The Digital Identity Wallet paradigm refers to a new architecture in Identity and Access Management (IAM) that improves the privacy and grants complete control and ownership over the personal data by their owner, the users.
 Users possess their digital documents and determine to which actors they present these documents, with the ability to revoke the use of said documents, all while maintaining a history of their activities. 
 
 The main difference between this new approach and the traditional IAM infrastructure is that during the presentation phase there are no intermediaries between the Wallet and the Relying Party, while in the SAML2 or OIDC based infrastructure an Identity Provider is always involved, knowing which services a citizen is accessing to.
@@ -19,7 +19,7 @@ The main roles in an Wallet ecosystem are are listed as follow:
  - Holders: individuals who own a Wallet and have control over the digital credentials they can request, acquire, store, and present to verifiers;
  - Verifiable Data Registries: Authorities that publish certificates, attestations, metadata, and schemes needed for allowing the trust establishment between the parties.
 
-In this model, the credential Issuer (e.g., an educational institution) provides digital credentials to the User, who can store them in their digital Wallet.
+In this model, the credential issuer (e.g., an educational institution) provides digital credentials to the user, who can store them in their digital Wallet.
 The Wallet typically comes in the form of an application on the User's mobile phone.
 
 Other key elements that characterize an SSI system include:

docs/en/wallet-attestation.rst

@@ -5,13 +5,16 @@
 Wallet Attestation
 ++++++++++++++++++
 
-Wallet Attestation contains information regarding the security level of the device hosting the Wallet Instance. It primarily certifies the **authenticity**, **integrity**, **security**, **privacy**, and **trustworthiness** of a particular Wallet Instance. The Wallet Attestation MUST contain a Wallet Instance public key.
+Wallet Attestation contains information regarding the security level of the device hosting the Wallet Instance.
+It primarily certifies the **authenticity**, **integrity**, **security**, **privacy**, and **trustworthiness** of a particular Wallet Instance.
+
 
 Requirements
 ------------
 
 The requirements for the Wallet Attestation are defined below:
 
+- The Wallet Attestation MUST contain a Wallet Instance public key.
 - The Wallet Attestation MUST use the signed JSON Web Token (JWT) format;
 - The Wallet Attestation MUST provide all the relevant information to attest to the **integrity** and **security** of the device where the Wallet Instance is installed.
 - The Wallet Attestation MUST be signed by the Wallet Provider that has authority over and is the owner of the Wallet Solution, as specified by the overseeing registration authority. This ensures that the Wallet Attestation uniquely links the Wallet Provider to this particular Wallet Instance.
@@ -32,7 +35,7 @@ The requirements for the Wallet Attestation are defined below:
   - **Local Hybrid WSCD**: The WSCD involves a pluggable internal hardware component within the User's device, such as an *eUICC* that adheres to *GlobalPlatform* standards and supports *JavaCard*.
   - **Remote Hybrid WSCD**: The WSCD involves a local component mixed with a remote service.
 
-- The Wallet Provider MUST offer a set of services, exclusively available to its Wallet Solution instances, for the verification and issuance of Wallet Attestations.
+- The Wallet Provider MUST offer a set of services, exclusively available to its Wallet Solution instances, for the issuance of Wallet Attestations.
 
 .. warning::
   At the current stage, the implementation profile defined in this document supports only the **Local Internal WSCD**. Future versions of this specification MAY include other approaches depending on the required `AAL`.

docs/en/wallet-solution.rst

@@ -5,35 +5,50 @@
 Wallet Solution
 -------------------
 
-The Wallet Solution is a comprehensive product offered by the Wallet Provider to cater to the needs of Users in managing their digital assets securely. It is issued by the Wallet Provider in the form of a mobile app and consists of services and web interfaces for the exchange of data between the Wallet Provider and its Wallet Instances to meet the requirements of the trust model and ensure full respect for the User's privacy, in accordance with national and EU legislation.
+The Wallet Solution is issued by the Wallet Provider in the form of a mobile app and services, such as web interfaces.
 
-The mobile app serves as the primary interface for Users, allowing them to access and interact with their digital Credentials conveniently. These Credentials are a set of data that can uniquely identify a natural or legal person, along with other Qualified and non-qualified Electronic Attestations of Attributes, also known as QEAAs and EAAs respectively, or (Q)EAAs for short[1]. Once a User installs the mobile app on their device, such an installation is referred to as a Wallet Instance for the User.
+The mobile app serves as the primary interface for Users,
+allowing them to hold their Digital Credentials and interact with other participants of the ecosystem,
+such as Credential Issuers and Relying Parties.
 
-By supporting the mobile app, the Wallet Provider plays a vital role in ensuring the security and reliability of the entire Wallet Solution, as it is responsible for issuing the Wallet Attestation, which is a cryptographic proof that allows the evaluation of the authenticity and integrity of the Wallet Instance.
+These Credentials are a set of data that can uniquely identify a natural or legal person,
+along with other Qualified and non-qualified Electronic Attestations of Attributes,
+also known as QEAAs and EAAs respectively, or (Q)EAAs for short[1]. 
 
-The Wallet Provider MUST offer a RESTful set of services for issuing the Wallet Attestations.
+Once a User installs the mobile app on their device, such an installation is referred to as a Wallet Instance for the User.
+
+By supporting the mobile app, the Wallet Provider enusers the security and reliability of the entire Wallet Solution,
+as it is responsible for issuing the Wallet Attestation,
+which is a cryptographic proof about the authenticity and integrity of the Wallet Instance.
 
 Requirements
 ^^^^^^^^^^^^
 
-This section lists the essential requirements that must be met by the Wallet Solution to ensure its functionality, security, and compliance with relevant standards and regulations.
+This section lists the requirements that are be met by Wallet Providers and Wallet Solutions.
 
- - **Trustworthiness within the Wallet ecosystem**: the Wallet Instance MUST establish trust and reliability within the Wallet ecosystem.
- - **Compliance with Provider specifications for obtaining PID and (Q)EAA**: the Wallet Instance MUST adhere to the specifications set by Providers for obtaining Personal Identification (PID) and (Q)EAAs.
- - **Support for Android and iOS operating systems**: the Wallet Instance MUST be compatible and functional on both Android and iOS operating systems and available on the Play Store and App Store, respectively.
- - **Verification of device ownership by the User**: the Wallet Instance MUST provide a mechanism to verify the User's actual possession and full control of their personal device.
+ - The Wallet Provider MUST offer a RESTful set of services for issuing the Wallet Attestations.
+ - The Wallet Instance MUST periodically reestablish trust with its Wallet Provider.
+ - The Wallet Instance MUST establish trust with other participants of the Wallet ecosystem, such as Credential Issers and Relying Parties.
+ - The Wallet Solutions MUST adhere to the specifications set by this document for obtaining Personal Identification (PID) and (Q)EAAs.
+ - The Wallet Instance MUST be compatible and functional on both Android and iOS operating systems and available on the Play Store and App Store, respectively.
+ - The Wallet Instance MUST provide a mechanism to verify the User's actual possession and full control of their personal device.
 
 Wallet Instance
 ^^^^^^^^^^^^^^^
-The Wallet Instance serves as a unique and secure device for authenticating the User within the Wallet ecosystem. It establishes a strong and reliable mechanism for the User to engage in various digital transactions in a secure and privacy-preserving manner.
+The Wallet Instance serves as a unique and secure device for authenticating the User within the Wallet ecosystem.
+It establishes a strong and reliable mechanism for the User to engage in various digital transactions in a secure and privacy-preserving manner.
 
-The Wallet Instance establishes trust within the Wallet ecosystem by consistently presenting a Wallet Attestation during interactions with other ecosystem actors such as PID Providers, (Q)EAA Providers, and Relying Parties. These verifiable attestations, provided by the Wallet Provider, serve to authenticate the Wallet Instance itself, ensuring its reliability when engaging with other ecosystem actors.
+The Wallet Instance allows other entities within the ecosystem to establish trust with it, by consistently
+presenting a Wallet Attestation during interactions with PID Providers,
+(Q)EAA Providers, and Relying Parties. These verifiable attestations, provided by the Wallet Provider,
+serve to authenticate the Wallet Instance itself, ensuring its reliability when engaging with other ecosystem actors.
 
 To guarantee the utmost security, these cryptographic keys MUST be securely stored within the WSCD, which MAY be internal (device's Trusted Execution Environment (TEE)[3]), external, or hybrid. This ensures that only the User can access them, thus preventing unauthorized usage or tampering. For more detailed information, please refer to the `Wallet Attestation section`_ and the `Trust Model section`_ of this document.
 
 Wallet Instance Lifecycle
 ^^^^^^^^^^^^^^^^^^^^^^^^^
-The Wallet Instance has three distinct states: Operational, Valid, and Deactivated. Each state represents a specific functional status and determines the actions that can be performed[2].
+The Wallet Instance has three distinct states: Operational, Valid, and Deactivated.
+Each state represents a specific functional status and determines the actions that can be performed[2].
 
 Initialization Process
 ~~~~~~~~~~~~~~~~~~~~~~