Signed product records
R8.4Is there a signed record of what the product is, by a party bound to the seller or the brand?
- Why it matters
- A signed record proves how the product was described.
- What Lens looks for
- We looked for a signed record of what a product is, such as a digital product passport, from you or the brand.
- Where it sits
- Product · Check 3 of 4
- Needed for
- No stage needs it. It counts toward its group.
- Builds on
- Identifiers that lead somewhere R8.3
- Needed by
- Product versions on record R8.5
- Usually fixed by
- Outside vendor · Weeks
What to do
Publish product passports signed by the seller or the brand owner.
Product
Exactly what is sold?
The definition
- Definition
- A product record is a W3C VC 2.0 Digital Product Passport (its first context VC 2.0's, its types VerifiableCredential and a product passport type), secured with COSE (VC-JOSE-COSE: cty application/vc) or with JOSE (a compact JWS, typ vc+jwt), found through a dpp link (the IANA link relation) on the product page the probe reads, as an HTML link element or an HTTP Link header, or through a schema.org hasDigitalProductPassport on a product in its structured data. Its issuer's key is resolved from a did:web document or a did:key. The sample for this rung is the products of the pages the probe read, because a catalog item carries no standard link to its passport. A record found through a GS1 linkset or an EU Digital Product Passport data carrier counts once the gs1 step reads one.
- Passes when
- The record's signature verifies with its issuer's key, which its DID document lists for assertion; the issuer is bound to the seller's origin (a did:web on its host or registrable domain, or a DID the origin's DID configuration links); the record is current and names no status list this version does not read; its subject is the sampled product (the same GTIN, the same identifier path on the seller's host, or the same SKU); its name equals the product's after normalisation; and where it links the product's image with a digest (Integra's product-registration profile always does), the image served there hashes to it. At least
identifierSharePercent(90)% of the products the probe looked up a record for, and at least one, meet it; the report states that sample's size. - Decided by
- A rule
- Evidence
- The product page; the record; the issuer's DID document; the DID configuration; the image
- Steps
- product, wellknown
- Made as
- anon