An electronic identification ("eID") is a digital solution for proof of identity of citizens or organizations. They can be used to view to access benefits or services provided by government authorities, banks or other companies, for mobile payments, etc. Apart from online authentication and login, many electronic identity services also give users the option to sign electronic documents with a digital signature.
One form of eID is an electronic identification card (eIC), which is a physical identity card that can be used for online and offline personal identification or authentication. The eIC is a smart card in ID-1 format of a regular bank card, with identity information printed on the surface (such as personal details and a photograph) and in an embedded RFID microchip, similar to that in biometric passports. The chip stores the information printed on the card (such as the holder's name and date of birth) and the holder's photo(s). Several photos may be taken from different angles along with different facial expressions, thus allowing the biometric facial recognition systems to measure and analyze the overall structure, shape and proportions of the face. [1] It may also store the holder's fingerprints. The card may be used for online authentication, such as for age verification or for e-government applications. An electronic signature, provided by a private company, may also be stored on the chip.
Countries which currently issue government-issued eIDs include Afghanistan, Bangladesh, Belgium, Bulgaria, Chile, Estonia, Finland, Guatemala, Germany, Iceland, India, Indonesia, Israel, Italy, Latvia, [2] Lithuania, [3] Luxembourg, the Netherlands, Nigeria, Morocco, Pakistan, Peru, Portugal, Poland, Romania, Saudi Arabia, Spain, Slovakia, [4] Malta, and Mauritius. Germany, Uruguay and previously Finland have accepted government issued physical eICs. Norway, Sweden and Finland accept bank-issued eIDs (also known as BankID) for identification by government authorities. There are also an increasing number of countries applying electronic identification for voting (enrollment, issuing voter ID cards, voter identification and authentication, etc.), including those countries using biometric voter registration.
According to the EU electronic identification and trust services (eIDAS) Regulation, described as a pan-European login system, all organizations delivering public digital services in an EU member state shall accept electronic identification from all EU member states from 29 September 2018. [5] [6] [7]
Belgium has been issuing eIDs since 2003, and all identity cards issued since 2004 have been electronic, replacing the previous plastic card. [8]
The eID card contains a chip containing: [9]
At home, the users can use their electronic IDs to log into specific websites (such as Tax-on-web, allowing them to fill in their tax form online). [10] To do this the user needs
When other software (such as an Internet Browser) attempts to read the eID, the users are asked for confirmation for this action, and potentially even for their PIN. [10]
Other applications include signing emails with the user's eID certificate private key. Giving the public key to your recipients allows them to verify your identity.
Although legally Belgian citizens only have to carry an ID from the age of 12, as of March 2009, [11] a "Kids ID" has been introduced for children below this age, on a strictly voluntary basis. This ID, beside containing the usual information, also holds a contact number that people, or the child themselves, can call when they, for example, are in danger or had an accident. The card can be used for electronic identification after the age of six, and it does not contain a signing certificate as minors cannot sign a legally binding document. An important goal of the Kids-ID card is to allow children to join "youth-only" chat sites, using their eID to gain entrance. These sites would essentially block any users above a certain age from gaining access to the chat sessions, effectively blocking out potential pedophiles.
Bulgaria introduced a limited scale proof-of-concept of electronic identity cards, called ЕИК (Eлектронна карта за идентичност), in 2013.
Croatia introduced its electronic identity cards, called e-osobna iskaznica, on 8 June 2015.
Electronic identities in Denmark, issued by banks and the government jointly, is named MitID. The former eID, NemID, was depreciated as of October 2023. MitID authentication allows larger payments in MobilePay - a service used by more than half of the population as of 2017.
The Estonian ID card, issued since 2002, is also used for authentication for Estonia's Internet-based voting system. In February 2007, Estonia was the first country to allow for electronic voting for parliamentary elections. Over 30,000 voters participated in the country's e-election. [12]
At end of 2014 Estonia extended the Estonian ID Card to non-residents. The target of the project is to reach 10 million residents by 2025, which is 8 times more than the Estonian population of 1.3 million.
The Finnish electronic ID [13] was first issued to citizens on 1 December 1999. Electronic identities in Finland are issued by banks. They make it possible to log into Finnish authorities, universities and banks, and to make larger payments using the MobilePay mobile payment service. The mobiilivarmenne is utilizing the mobile phone SIM card for authentication, and is financed by a fee to the mobile network operator for each authentication.
Germany introduced its electronic identity cards, called Personalausweis, in 2010.
In Iceland, electronic IDs (Icelandic: Rafræn skilríki) are extensively used by the public and private sector today and were first introduced in 2008. The most widely used version today is on a mobile phone - with the authentication key held on a SIM card. In Iceland 95% of the eligible population (13 years or older) has an active eID, including 75% of over 75s. Icelandic eID holders used their eID more than 20 times a month in 2021. [14]
During enrollment, users create a PIN. Each time they need to identify, verify or sign something online, a prompt via flash SMS is initiated and the PIN code is validated. Today this system is used by all banks, government services (island.is portal), healthcare, eductation, document signing and over 300 private companies using for customer page logins (linked to the Icelandic ID no.). Since the only thing to remember is one's PIN code and their phone, it is very prevalent, and works as a sort of single-sign-on service. They are administered by Auðkenni hf., which was initially created by a consortium of banks but is now owned by the government. [15]
The first form of the system in 2008 was a special smartcard with an EMV chip, paired with a smartcard reader on the client's computer. The smartcard was first introduced in late 2008 for employees of government departments, large companies and the healthcare system. It was rolled out to all departments and companies handling sensitive data. [16] It was also possible to store one's eID on a debit card. In November 2013 the SIM card implementation for mobile phones was introduced, which led to a much quicker take-up of eIDs due to its ease of use. [17] By 2014, 40% of Icelanders were using eIDs. [18]
Indonesia introduced its electronic identity cards, called e-KTP. It was trialed in six areas in 2009 and launched nationwide in 2011. [19] [20]
Italy introduced its electronic identity cards, called Carta d'Identità Elettronica (in Italy identified with the acronym CIE), to replace the paper-based ID card in Italy. Since 4 July 2016, Italy is in the process of renewing all ID cards to electronic ID cards.
eID and eSignature service provider in Latvia is called eParaksts
Since 12 February 2014, Malta is in the process of renewing all ID cards to electronic ID cards.
Electronic identities in Netherlands are called DigiD and Netherlands is currently developing an eID scheme.
Electronic identities in Norway issued by banks are called BankID (different than Sweden's BankID). They make it possible to log into Norwegian authorities, universities and banks, and to make larger payments using the Vipps mobile payment service, used by more than half of the population as of 2017. The Norwegian BankID på mobil service is utilizing the mobile phone SIM card for authentication, and is financed by a fee to the mobile network operator for each authentication.
Since 25 May 2023, Romanians are able to use their national ID to sign up to the RoEID application which allows them to access public servcies [21]
Electronic identity cards in Spain are called DNIe and have been issued since 2006.
SwissID, [22] developed by SwissSign, [23] is a certified digital ID in Switzerland offered since 2017 (2010–17 as SuisseID). As a base for a new Federal Act on Electronic Identification Services (e-ID Act), [24] an eID-concept had been developed by the authorities, yet experts criticized its technology part. [25] The law was accepted by the Swiss parliament on 29 September 2019. It would have updated current legislation and would have continued to allow private companies or public organizations to issue eIDs if certified by a new federal authority. However, an optional referendum called for a public vote on this issue in the weeks until Sunday, [26] 7 March 2021. [27] The vote resulted in 35.6% Yes and 64.4% No, rejecting the proposed new law. [28]
SwissSign might develop the SwissID further, to make it compatible with future E-ID regulations. [29]
The most widespread electronic identification in Sweden is issued by banks and called BankID. The BankID may be in the form of a certificate file on disk, on card or on smart phones. The latter (Swedish mobile BankID service) was used by 84 percent of the Swedish population in 2019. [30] A Mobile BankID login does not require a fee since the service is provided by banks rather than mobile operators. It can be used both for authentication within various apps and web services on the same smart phone, and also for web pages on other devices. It also supports fingerprint and face recognition authentication on compatible iOS and Android devices.
Electronic IDs are used for secure web login to Swedish authorities, banks, health centers (allowing people to see their medical records and prescriptions and book doctors visits), and companies such as pharmacies. Mobile BankID also allows the Swish mobile payment service, utilized by 78 percent of the Swedish population in 2019, at first mainly for payments between individuals. [31] BankID was previously used for university applications and admissions, but this was prohibited by Swedbank since universities utilized the system for distribution of their own student logins. Increasingly, BankID is used as an added security for signing contracts. [32]
Afghanistan issued its first electronic ID (e-ID) card on 3 May 2018. Afghan President Ashraf Ghani was the first to receive the card. Afghan President was accompanied by First Lady Rula Ghani, his VP, Head of Afghan Senate, Head of Afghan Parliament, Chief Justice and other senior government officials, and they also received their cards. [33] As of January 2021, approximately 1.7 million Afghan citizens have obtained their e-ID cards. [34]
Costa Rica plans to introduce facial recognition data into its national identification card. [35]
Guatemala introduced its electronic identity card called DPI (Documento Personal de Identificación) in August 2010.
Indonesian electronic ID was trialed in six areas in 2009 and launched nationwide in 2011. [36] [37]
Electronic identity cards in Israel have been issued since July 2013.
Kazakhstan introduced its electronic identity cards in 2009.
Mauritius has had electronic identity cards since 2013.
Mexico had an intent to develop an official electronic biometric ID card for all youngsters under the age of 18 years and was called the Personal Identity Card (Record of Minors), which included the data verified on the birth certificate, including the names of the legal ascendant(s), a unique key of the Population Registry (CURP), a biometric facial recognition photograph, a scan of all 10 fingerprints, and an iris scan registration. [38]
General Multi-purpose Electronic Identity Cards are issued by the National Identity Management Commission (NIMC), a Federal Government agency under the Presidency. The NeID Card complies with ICAO standard 9303, ISO standard 7816–4., as well as GVCP for the MasterCard-supported payment applet. NIMC plans to issue 50m multilayer-polycarbonate cards, the first set being contact only, but also dual-interface with DESFire Emulation in the near future.
Pakistan officially began its nationwide Computerized National Identity Card (CNIC) distribution in 2002, with over 89.5 x CNICs issued by 2012. [39] In October 2012, the National Database and Registration Authority (NADRA) introduced the smart national identity card (SNIC), which contains a data chip and 36 security features. The SNIC complies with ICAO standard 9303 and ISO standard 7816–4. The SNIC can be used for both offline and online identification, voting, pension disbursement, social and financial inclusion programmes and other services. [40] [41] NADRA aims to replace all 89.5 million CNICs with SNICs by 2020.
Serbia has its first trustful and reliable electronic identity since June 2019. The first reliable service provider is The Office for IT and eGovernment, through which citizens and residents of Serbia can access services on eGovernment Portal and eHealth portal. [42] [43] [44] The electronic identification offers two levels of security, first basic level with authentication of only user name and password, and medium level of two-factor of authentication. [45]
Since on 1 January 2016, Sri Lanka is in the process of developing a Smart Card based RFID E-National Identity Card which will replace the obsolete 'Laminated Type' cards by storing the holders information on a chip that can be read by banks, offices etc. thereby reducing the need to have documentation of these informations physically by storing in the cloud.
In Turkey the e-Government (e-Devlet) Gateway is a largely scaled Internet site that provides access to all public services from a single point. The purpose of the Gateway is to present public services to the citizens, enterprises and public institutions effectively and efficiently with information and communication technologies. [46]
Uruguay has had electronic identity cards since 2015. The Uruguayan eID has a private key that allows to digitally sign documents, and has the user fingerprint stored in order to allow to verify the identity. It is also a valid travel document in some South American countries. As of 2017 the old laminated ID coexists with the new eID.
Electronic identification can also be attributed to the manufacturing sector, where the technology of electronic identification is transferred to individual parts or components within a manufacturing facility in order to track, and identify these parts to enhance manufacturing efficiency. This can also be referred to location detection technologies within the Fourth Industrial Revolution.
A smart card (SC), chip card, or integrated circuit card, is a card used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit (IC) chip. Many smart cards include a pattern of metal contacts to electrically connect to the internal chip. Others are contactless, and some are both. Smart cards can provide personal identification, authentication, data storage, and application processing. Applications include identification, financial, public transit, computer security, schools, and healthcare. Smart cards may provide strong security authentication for single sign-on (SSO) within organizations. Numerous nations have deployed smart cards throughout their populations.
An identity document is any document that may be used to prove a person's identity. If issued in a small, standard credit card size form, it is usually called an identity card, or passport card. Some countries issue formal identity documents, as national identification cards that may be compulsory or non-compulsory, while others may require identity verification using regional identification or informal documents. When the identity document incorporates a person's photograph, it may be called photo ID.
The National Database & Registration Authority (NADRA) is an independent and autonomous agency under the control of the Interior Secretary of Pakistan that regulates Government Databases and statistically manages the sensitive registration database of all the National Citizens of Pakistan. Lieutenant General Muhammad Munir Afsar serves as Chairman of National Database and Registration Authority (NADRA) Pakistan.
Gemalto was an international digital security company providing software applications, secure personal devices such as smart cards and tokens, e-wallets and managed services. It was formed in June 2006 by the merger of two companies, Axalto and Gemplus International. Gemalto N.V.'s revenue in 2018 was €2.969 billion.
Mobile identity is a development of online authentication and digital signatures, where the SIM card of one's mobile phone works as an identity tool. Mobile identity enables legally binding authentication and transaction signing for online banking, payment confirmation, corporate services, and consuming online content. The user's certificates are maintained on the telecom operator's SIM card and in order to use them, the user has to enter a personal, secret PIN code. When using mobile identity, no separate card reader is needed, as the phone itself already performs both functions.
The Estonian identity card is a mandatory identity document for citizens of Estonia. In addition to regular identification of a person, an ID-card can also be used for establishing one's identity in electronic environment and for giving one's digital signature. Within Europe as well as French overseas territories, Georgia and Tunisia the Estonian ID-card can be used by the citizens of Estonia as a travel document.
The Icelandic identification number is the Icelandic national identification number. It is widely used to identify individuals and organisations in Iceland.
The Indonesian identity card, is a compulsory identity card for Indonesian citizens and residents with a valid resident permit. The card is issued upon reaching the age of 17 or upon marriage. For Indonesian citizens, the card is valid for life. For non-Indonesian citizens, it is valid for as long as their residency permit allows. Since 2011, the Indonesian government has issued an electronic version of the card, known as the e-KTP, which contains an embedded microchip.
The Finnish identity card is one of two official identity documents in Finland, the other being the Finnish passport. Any citizen or resident can get an identification card. Finnish citizens will get indication of citizenship on the card. It is available as an electronic ID card, which enables logging into certain services on the Internet, local computers or adding digital signatures into LibreOffice ODF documents or creating DigiDoc formatted containers that also allows encryption during content transfer. ID card is applied at a police station and it is issued by the police.
The Ghana Card is the national Identity card that is issued by the Ghanaian authorities to Ghanaian citizens – both resident and non-resident, legal and permanent residents of foreign nationals. It is proof of identity, citizenship and residence of the holder. The current version is in ID1 format and biometric. It is issued by the National Identification Authority of Ghana and Regarded as a property of the country as such. In July 2023, through the initiative of the Vice President, Dr. Mahamudu Bawumia, new card numbers were issued to newborn babies as part of pilot program to incorporate newborn babies unto the database.
The Lebanese identity card is a compulsory Identity document issued to citizens of the Republic of Lebanon by the police on behalf of the Lebanese Ministry of Interior or in Lebanese embassies/consulates (abroad) free of charge. It is proof of identity, citizenship and residence of the Lebanese citizens.
National identity cards are identity documents issued to citizens of most European Union and European Economic Area (EEA) member states, with the exception of Denmark and Ireland. As a new common identity card model replaced the various formats in use from 2 August 2021, recently issued ID cards are harmonized across the EEA, while older ID cards are currently being phased out according to Regulation (EU) 2019/1157.
A campus credential, more commonly known as a campus card or a campus ID card is an identification document certifying the status of students, faculty, staff or other constituents as members of the institutional community and eligible for access to services and resources. Campus credentials are typically valid for the duration of a student's enrollment or an employee's service.
The Norwegian identity card, commonly referred to as the national identity card in Norway, is a non-compulsory biometric identity document issued since 30 November 2020. It is one of two official identity documents issued by the Norwegian Police Service, the other being the Norwegian passport. It is only issued to Norwegian citizens, and may indicate citizenship so that it can be used as a travel document facilitating freedom of movement within the European Free Trade Association and the European Economic Area. For travel within the Nordic countries no identity documentation is legally required for Nordic citizens due to the Nordic Passport Union.
Digital identity is used in Australia by residents to validate who they are over digital media, such as over the Internet.
BankID is an electronic identification system in Sweden. With a usage rate of 94% among smartphone users, it is the single largest such service in Sweden by a large margin, and is administered by Finansiell ID-Teknik BID AB that is owned by several Swedish and Scandinavian banks. In 2022, Bank-id had about 8.4 million active users and was supported by over 6000 web services. Only individuals with a Swedish personal identity number can acquire Bank-id.
A mobile driving licence is a mobile app that replaces a physical driver's license. An International Organization for Standardization (ISO) standard for the mobile driving licence was approved on August 18, 2021 and published on 30 September 2021.
Google Wallet is a digital wallet platform developed by Google. It is available for the Android, Wear OS, and Fitbit OS operating systems, and was announced on May 11, 2022, at the 2022 Google I/O keynote. It began rolling out on Android smartphones on July 18, 2022.
Samsung Wallet is a digital wallet platform developed by Samsung. It is available for the Samsung Galaxy-exclusive One UI Android operating system, and was announced on February 9, 2022, at the February 2022 Samsung Unpacked event. It combines both Samsung Pay and Samsung Pass.
The Icelandic identity card, is a voluntary identity document issued by Registers Iceland since 12 April 1965. It is one of three official identity documents issued by the Icelandic Government, along with the Icelandic passport and Icelandic driving licence. It is only issued to Icelandic citizens regardless of age and may indicate citizenship, so that it can be used as a travel document facilitating freedom of movement within the European Free Trade Association and the rest of the European Economic Area. For travel within the Nordic countries no identity documentation is legally required for Nordic citizens due to the Nordic Passport Union.