Certification as an ASP
An Attribute Service Provider (ASP) is a specific role within the UK DVS trust framework that manages user attributes - verified information about individuals. Here's what defines an ASP:
Attribute lifecycle management
An ASP handles the collection, creation, verification, and sharing of user attributes - pieces of information that describe something about a person, such as qualifications, financial status, or contact details.
Quality assurance and sharing
ASPs can share attributes with relying parties, identity service providers, and holder service providers, but must first confirm user understanding and assess attribute quality to ensure recipients can trust the information.
Flexible service delivery
An ASP doesn't need to perform every step of the attribute process itself. It can work with component service providers or third-party specialists for specific parts of collection, creation, checking, or sharing.
Diverse attribute sources
Attributes can come from public sector documents (passports, driving licences), private sector data (bank balances, credit scores), certified digital identities, or validation services that confirm attribute authenticity.
Digital credential creation
ASPs may collect and package attributes into digital credentials, creating portable, verifiable records of user information.
Multiple roles possible
If an ASP stores and enables reuse of attributes for users, it also operates as a Holder Service Provider under the framework.
If you're consuming verified attributes
As a relying party, an ASP that appears on the DVS register provides you with independently certified, quality-assured attributes that meet government standards for security, privacy, and reliability.
Verified attributes
ASPs on the DVS register provide independently certified, quality-assured user attributes that you can trust for decision-making.
Attribute transparency
Certified ASPs assess and communicate the quality of attributes, helping you understand their provenance and reliability.
Standards compliance
ASPs follow strict operational, security, and privacy standards for collecting, creating, checking, and sharing user attributes.