A QVI Authorized Representative (QAR) is a designated representative of a Qualified vLEI Issuer (QVI) who is specifically authorized to conduct QVI operations with GLEIF, interact with Legal Entities on behalf of the QVI, and manage credential issuance and related governance processes within the vLEI ecosystem.
Execute operational activities related to credential issuance and management
Perform identity verification requirements for issuing QVI vLEI Credentials
Official Abbreviation: QAR
Canonical Source: Draft vLEI Ecosystem Governance Framework Glossary (version 0.9, dated February 7, 2022), published by GLEIF
The term refers to both the designated representative (the person holding authorization) and the role itself within the vLEI governance structure. This dual nature is critical—a QAR is simultaneously an individual identity and a functional role within the credential issuance infrastructure.
Governance Context
Position in vLEI Ecosystem Hierarchy
The QAR occupies a critical intermediary position in the vLEI trust hierarchy:
Implementation Notes
Governance Compliance
QARs must maintain compliance with all vLEI Ecosystem Governance Framework requirements
QARs must participate in Annual vLEI Issuer Qualification processes
QARs must follow documented identity verification procedures for all credential issuances
QARs must maintain audit trails of all credential operations
Multi-Signature Coordination
QARs must coordinate with other QARs to obtain threshold signatures for all QVI operations
QARs must maintain secure communication channels for multi-signature coordination
QARs must ensure witness agreement before considering events stable
QARs must participate in key rotation events for the QVI AID
Identity Verification Best Practices
QARs should conduct identity verification sessions in secure, private environments
QARs should use high-quality video conferencing tools with recording capabilities
QARs should maintain detailed documentation of verification procedures
QARs should follow challenge-response protocols precisely to ensure cryptographic authentication
Credential Lifecycle Management
QARs must monitor credential expiration dates and manage grace periods
QARs must respond promptly to revocation requests from LARs
QARs must ensure all credentials are properly anchored to TEL registries
QARs must publish OOBIs for credential discovery and verification
Security Considerations
QARs must protect their private keys using appropriate key management infrastructure
QARs should use hardware security modules (HSMs) or trusted execution environments (TEEs) for key storage
QARs must maintain secure backup and recovery procedures for keystores
QARs must follow incident response procedures for security events
GLEIF Root of Trust
↓
GLEIF External Delegated AID (GEDA)
↓
Qualified vLEI Issuer (QVI)
↓
QVI Authorized Representative (QAR) ← YOU ARE HERE
↓
Legal Entity vLEI Credentials
↓
Role Credentials (OOR/ECR)
The QAR serves as the operational executor of the QVI's delegated authority. While the QVI organization holds the contractual relationship with GLEIF and the cryptographic authority through its AID (Autonomic Identifier), the QAR is the human representative who performs the actual credential issuance operations.
Relationship to GLEIF Governance
QARs operate under the authority of GLEIF's root governance, which establishes:
Qualification Requirements: QVIs must undergo formal qualification processes (Annual vLEI Issuer Qualification) before their QARs can operate
Delegation Model: QVI AIDs are delegated from GLEIF's GEDA (GLEIF External Delegated AID)
Revocation Authority: GLEIF retains the ability to revoke QVI credentials, which terminates QAR authority
Grace Period Management: QARs must manage a 90-day grace period when QVI credentials approach expiration
Multi-Signature Group Participation
QARs typically participate in multi-signature groups that control the QVI AID. According to the governance framework:
Minimum 2 QARs must form the multi-sig group for a QVI
2-of-N signature threshold is required for QVI operations
QARs must perform OOBI (Out-Of-Band Introduction) exchanges with each other
Challenge-response authentication is required between QARs using KERI protocols
This multi-signature requirement ensures that no single QAR can unilaterally issue credentials, providing operational security and accountability within the QVI organization.
QARs must ensure all issued credentials conform to these schemas and include all required fields.
Conclusion
The QVI Authorized Representative (QAR) role is a critical operational position within the vLEI ecosystem, serving as the human executor of QVI credential issuance authority. QARs bridge the gap between GLEIF's governance requirements and the technical implementation of KERI-based verifiable credentials. Through rigorous identity verification procedures, multi-signature coordination, and adherence to governance frameworks, QARs ensure the integrity and trustworthiness of the vLEI credential ecosystem.