Every OSP runs its own installation of the Dataspace Management. The CSP runs the central core services and provides trust.
flowchart LR
person(["Person<br/>EUDI Wallet"])
bw(["Company<br/>Business Wallet"])
subgraph osp["Installation of an OSP"]
ui["Dataspace Management UI"]
svc["Dataspace Management Service<br/>(modules C1 to C12)"]
iam["Portal IAM<br/>(Keycloak, C2-M5)"]
ebw["EBW-Connector<br/>(C5-M1)"]
end
subgraph csp["Core service provider (CSP)"]
core["Core services<br/>trust list, BPN, BDRS, discovery"]
cspopt["Optional: issuer,<br/>dataspace wallet"]
end
issuer["Issuer<br/>(own or the CSP's)"]
wallet["Dataspace wallets<br/>(IdentityHub, SAP DIV, ...)"]
person --> ui
ui --> svc
ui --> iam
iam --> ebw
ebw --> person
ebw --> bw
svc --> iam
svc -- "C3-M2 CSP Connection" --> core
svc -- "C4-M1 Credentials" --> issuer
svc -- "C4-M2 Wallet Interface" --> wallet
issuer -.-> cspopt
wallet -.-> cspopt
| Neighbour | Interface |
|---|---|
| People (applicants, company administrators, OSP staff) | Dataspace Management UI, signed in with the EUDI Wallet through the Portal IAM and the EBW-Connector |
| Core services of the CSP | OSP–CSP interface, called only by C3-M2 CSP Connection |
| Issuers | Issuance and revocation of BPN and membership credentials, called by C4-M1 Credentials |
| Dataspace wallets | Wallet per company and wallet accounts for technical users, called by C4-M2 Dataspace Wallet Interface |
| Third-party applications | The same HTTP interfaces as the UI (OpenAPI per module) |
.../events), never WebSockets and never polling./api/<module>, e.g. /api/c1-m2 (FRAMEWORK 4.1).private_key_jwt with the signing key of the OSP.This work is licensed under the CC-BY-4.0.