#57 - eIDAS 2.0 & the EU Digital Identity Wallet [Part 2] (with Dr. André Kudra)
Jul 28, 2023
auto_awesome
Dr. André Kudra, CIO of esatus AG, discusses the success of eIDAS 1.0 and the purpose of eIDAS 2.0. He explores the future of existing EU-based digital ID systems and the interoperability goals of eIDAS 2.0. The podcast also discusses the choice of formats and protocols for mobile driving licenses and decentralized identity. Dr. Kudra highlights the role of regulatory bodies and the Open Wallet Foundation in creating the European Identity Wallet. The integration of payment functionalities into identity wallets and misconceptions surrounding blockchain in digital identity are also explored. The podcast concludes by discussing the large-scale pilots and the potential of decentralized identity.
EIDAS 2.0 aims to improve interoperability and technology adoption for digital identity systems in the EU.
The Eudential Identity Wallet introduces a comprehensive approach to digital identities by including various data attributes.
The governance and technical implementation of EIDAS 2.0 play crucial roles in achieving interoperability and reliability.
Deep dives
Existing Digital Identity Systems in the European Union
There are various existing digital identity systems in countries within the European Union, such as Italy with SPID, Belgium with its me, and Estonia with EID. However, the success of these systems has varied across different member states. For example, Italy's SPID has gained popularity with over 20 million users, while other countries, like Germany, have seen limited success with their digital identity systems. The lack of uniformity in implementation and interoperability has been a major challenge for EIDAS 1.0. The intention of EIDAS 2.0 is to address these issues and create an interoperable electronic identity system across EU member states.
Challenges Faced by EIDIS 1.0
EIDIS 1.0, the previous version of the electronic identity system, faced challenges in achieving its goals. Different member states took different approaches to implementation, leading to inconsistent results. For example, Italy's SPID was a successful case, but Germany's EID implementation faced obstacles such as lack of awareness and limited usage points. Interoperability across member states was not effectively achieved, and not all states had an electronic notified EID scheme. These challenges prompted the revision and development of EIDIS 2.0 to address these shortcomings and improve the overall interoperability and success of the system.
EIDIS 2.0 and the Eudential Identity Wallet
EIDIS 2.0 aims to create an interoperable and reliable electronic identity system within the European Union. It introduces the concept of the Eudential Identity Wallet, which serves as a technical incarnation of the EIDIS 2.0 legal framework. The Eudential Identity Wallet not only focuses on identification but also enables the inclusion of various data attributes associated with individuals, such as educational diplomas, driver's licenses, memberships, and tickets. This ecosystem approach aims to fuel the digitalization of processes in both public and private sectors, where digital identities are essential. By extending the capabilities of the Eudential Identity Wallet to other data items, EIDIS 2.0 aims to bridge the gap and promote digital transformation in various domains.
Transitioning Existing Digital ID Systems to EIDIS 2.0
The transition of existing digital identity systems in countries like Italy, Estonia, and the Nordic countries towards EIDIS 2.0 is not about starting anew but rather building upon the existing systems. The goal is to layer the new Eudential Identity Wallet ecosystem on top of the existing national EID schemes. The data for the usage identity wallet will be derived from the existing schemes, ensuring a smooth transition. While uniformity of identity-proofing processes across nation states is important, the origin of the data in the wallet will be the different national EID systems. The intention is to maintain the existing schemes while ensuring interoperability through a unified layer in the usage identity wallet.
Prescriptive Governance and Technical Implementation in EIDIS 2.0
The governance and technical implementation aspects of EIDIS 2.0 are essential factors for achieving interoperability and reliability. Prescriptive guidelines and standards are crucial in ensuring uniformity in identity-proofing processes, semantic consistency, and secure handling of data. While the ARF (Architecture and Reference Framework) provides guidance, there are still areas that need clarification, such as the role of trusted lists, security requirements, and verifiable data registries. The challenge lies in finding the right level of prescriptiveness to ensure interoperability while allowing flexibility for technical implementations. The outcomes of ongoing discussions, including the Trilog process, and the involvement of standardization bodies like ETSI, will shape the final technical specifications and governance framework of EIDIS 2.0.
Dr. André Kudra is the CIO of esatus AG, a consultancy and technology company specialized in InfoSec and with a strong footprint in Self-Sovereign Identity (SSI). André is a tenacious advocate of decentralization, complexity reduction and Self-Sovereign Identity. He has been in information security since the start of the millennium. He is tech-savvy despite business degrees, and an author, collaborator, multiplier. Dr. André Kudra is a board member of TeleTrusT (IT Security Association Germany) for which he chairs the “Blockchain” and “Secure Platform” working groups. Global outreach includes being a Trustee of the Sovrin Foundation, a Steering Committee member of the Trust over IP (ToIP) Foundation and co-founder of the MyData Literacy Thematic Group.
The full list of topics discussed between André and I in this podcast include:
Success of eIDAS 1.0 and the Purpose of eIDAS 2.0 - whether eIDAS 1.0 was successful in enabling digital ID systems and what eIDAS 2.0 aims to correct.
eIDAS 2.0 and Interoperability - does eIDAS 2.0 aims to improve interoperability and technology adoption, and is the EU digital ID wallet architecture reference framework (ARF) an extension of this effort?
Future of Existing EU-based Digital ID Systems - what will happen to existing digital ID systems like those in Italy and Estonia, and whether they will transition to support eIDAS 2.0 or need to build a second system.
Importance of Identity Proofing Uniformity - the importance of uniformity in identity proofing processes across nation states and whether this has been a contentious topic under previous eIDAS legislation.
Prescriptive Governance and Technology Recommendations - if it's better for the ecosystem to have more prescriptive governance and whether the technology recommendations are too prescriptive or not enough.
Key Decisions in the ARF Document - the key decisions made in the RF document and what was left unclear.
Negative Sentiment Around Blockchains or DLTs - why there might be a negative sentiment around blockchains or DLTs in the digital identity space.
Separation of Aries from the Hyperledger Foundation - would it make sense for Aries to be separated from the Hyperledger Foundation given its potential as an open agent.
EU’s Four Large-Scale Pilots - updates on the different large-scale pilots and their impact on technical and governance specifications.
Learnings from Large-Scale Pilots - learnings from the large-scale pilots, particularly from non-government bodies, and whether there's a shift in mentality among these entities around digital credentials.