Netherlands - Generic Functions for data exchange Implementation Guide, published by Stichting Nuts. This guide is not an authorized publication; it is the continuous build for version 0.3.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/nuts-foundation/nl-generic-functions-ig/ and changes regularly. See the Directory of published versions

Credential Catalog

Credential Catalog

This section describes the various types of verifiable credentials used in the authentication framework. Each credential type represents a specific set of claims about an entity within the healthcare ecosystem.

Credentials defined here use identifiers that are specified by the Generic Function Identification.

Profile

Unless specified otherwise, every credential uses the following Verifiable Credential traits:

• Data model: W3C Verifiable Credentials Data Model 1.1
• Proof type: JWT
• Signature algorithm: ES256, RS256 or PS256
• Revocation method: Bitstring Status List v1.0
• Proof of Possession: presenter is holder: the identifier of the presenter must equal the credential subject identifier.

HealthcareProviderRoleTypeCredential

The HealthcareProviderRoleTypeCredential is a verifiable credential that establishes the category or type of healthcare services, that a provider organization is authorized to offer (e.g., hospital, general practice, pharmacy, home care).

Issuer: A trusted authority responsible for governing and issuing the attribute (e.g., Vektis). Subject: The healthcare provider organization, identified by their DID. Status: trial use

Attributes

Non-normative example:

{
  "@context": [
    "https://www.w3.org/2018/credentials/v1"
  ],
  "type": [
    "VerifiableCredential",
    "HealthcareProviderRoleTypeCredential"
  ],
  "credentialSubject": {
    "id": "did:web:wallet.example.com",
    "roleCodeNL": "A1"
  },
  "issuer": "did:web:issuer.example.com",
  "issuanceDate": "2025-12-01T12:00:00Z"
}

Example use cases:

• Data holders that check consent using Mitz, need to determine the role of the requesting organization and provide this as input to the Mitz closed question.