Mobile Driver's License Criteria: Difference between revisions

From IDESG Wiki
Jump to navigation Jump to search
Line 5: Line 5:
* The issuance of ISO 18013-5 for a [[Mobile Driver's License]] an increasing level of trials towards getting driver's licenses installed on [[Smartphone]]s.
* The issuance of ISO 18013-5 for a [[Mobile Driver's License]] an increasing level of trials towards getting driver's licenses installed on [[Smartphone]]s.
* The US [https://www.govinfo.gov/content/pkg/FR-2021-04-19/pdf/2021-07957.pdf Office of Strategy, Policy and Planns, of the Department of Homeland Security (DHS) has issued a RFC] for security standards and requirements to enable Federal agencies to accept them if compliant with the REAL ID. Comments are due by 2021-06-18.
* The US [https://www.govinfo.gov/content/pkg/FR-2021-04-19/pdf/2021-07957.pdf Office of Strategy, Policy and Planns, of the Department of Homeland Security (DHS) has issued a RFC] for security standards and requirements to enable Federal agencies to accept them if compliant with the REAL ID. Comments are due by 2021-06-18.
**This includes comments relating to the economic, privacy, security, environmental, energy, or federalism impacts that might result from a future
rulemaking based on input received as
a result of this RFI
* Also see the companion document on [[Mobile Driver's License]] for a view that includes issues like privacy and consent, which are not addressed here.
* Also see the companion document on [[Mobile Driver's License]] for a view that includes issues like privacy and consent, which are not addressed here.
* [https://www.allstate.com/tools-and-resources/car-insurance/electronic-insurance-card.aspx There are 49 states that accept driver's license on smartphones] for some purposes.
* [https://www.allstate.com/tools-and-resources/car-insurance/electronic-insurance-card.aspx There are 49 states that accept driver's license on smartphones] for some purposes.

Revision as of 19:48, 19 April 2021

Full Title or Meme

The Mobile Driver's License Criteria for a high level of Identity and Authentication Assurance.

Context

rulemaking based on input received as a result of this RFI

Actors

  1. Holder - the subject of the Mobile Driver's License
  2. Reader - a device that can read and verify the mDL, which is presumably hosted in a native smart phone app
  3. Issuing Authority - typically a state motor vehicle agency.
  4. Trust Authority - some sort of wide ranging list of valid participators - not well defined at this point.
  • Caution on terms. mDL and mDL app get conflated in the specs. The full mDL is seldom/never released by the app to the reader/verifier.
  • Compare there terms Verifiable Credential and Presentation Exchange from the DIF folk. The VC (like the mDL or mdoc) may be in the smartphone, but only a part is "presented" to the reader.

Use Cases

Problems

  • REAL ID has yet to approve a single state's Mobile Driver's License (mDL) for Federal access.
  • Supply Chain for components of the mDL has not been a part of existing criteria, but needs to be included based on the Solar Winds attack of government and commercial access.

Comments

References