Certification as an HSP
A Holder Service Provider (HSP) is a specific role within the UK DVS trust framework that enables users to store and reuse their digital identity and attribute information. Here's what defines an HSP:
User-facing storage and management
An HSP provides devices, services, software, or apps that enable users to collect, store, view, manage, and share their identity and attribute information securely. The HSP ensures data integrity but cannot create new information unless it also operates as an IDSP or ASP.
Diverse holder service types
HSPs take many forms beyond traditional digital wallets. They can include reusable digital identity systems, personal online data stores, personal data vaults, or community-based services like data co-operatives that host information for multiple users.
Account functionality
HSPs typically provide user interfaces that allow consistent access and management of stored information. This includes provider support for identity recovery, fraud response, and remote management capabilities.
Flexible integration patterns
Relying parties can connect directly with holder services to access user information, or intermediary parties can facilitate the information exchange process.
Multiple roles possible
If an HSP also performs identity verification (not just storage), it operates as an Identity Service Provider. If it creates new attributes from held information, it also functions as an Attribute Service Provider.
If you're looking for reusable identity solutions
As a user, an HSP that appears on the DVS register provides you with secure, user-controlled storage for your digital identity and attributes, enabling seamless reuse across multiple services.
User control
HSPs give you full control over your identity and attribute information, i.e. what's stored, when it's shared, and who receives it.
Reusable credentials
Store verified identity and attributes once, then reuse them across multiple services without repeating verification processes.
Secure storage
Certified HSPs protect your information from unauthorised changes while ensuring it remains accessible when you need it.