Gankpo threat model.

Journey security depends on the protected assets, authorised actors, devices, keys and external services involved. A detailed model is defined for each deployment.

Threats considered

• document modification or substitution;
• impersonation of an issuer, requester or holder;
• theft, copying or unauthorised use of a key;
• replay of a request or evidence outside its context;
• unavailability or staleness of a status source.

Assumptions and limits

Cryptography does not replace authority governance, device protection or the quality of initial identification. Applicable assumptions are documented with the selected architecture.