Agile Portfolio of ID Credentials

Agile Portfolio

of ID Credentials

An inclusive ID credential model

that can nicely scale up to deliver more value to individuals

according to their specific needs & capacities

Introduction

The objective of this document is to introduce the different forms of physical or digital credentials that could be proposed to populations, not imposing systematically one credential form but having an agile portfolio.

These would be adapted to the context and the capacities of each one.

The targeted goals areinclusiveness and costs optimization by offering to all a usable means for identification, while enabling capacity to propose added value with more elaborated ranges of credentials:

Painpoints

Portfolio of ID Credentials

A4 paper certificate free of charge (download and print it on your own)

Allows to verify a unique identity online by doing a 1:1 biometric matchor offlineby manuallycomparing the person’s face with the photo encoded in the QR code.

White PVC card, more robust, free of charge at registration

Allow both online or offline authentication, the physical security features allow to trust authenticity of the document.

The document facilitate and reinforce digital processes thanks to use of QR code and CVV.

It’s has to be an enabler for value-added services.

Polycarbonate card,long term use, with physical security features for offline ID check, enabler for digital services.

The digital credential is stored on the individual's phone (or in other electronic storage ) and can be shared with a third party for verification. Regardless of the container, the data format is a Verifiable Credential

Digital or Mobile Credential, allows 100% smooth interactions, it can be stored in a Digital Wallet.

The mobile companion can host all state interactions, and offer trusted interactions services to its users interacting with third parties: ID authentication, KYC, digital signature, personal datastorage /management /retrieval /sharing.

Mobile Companion, including all identification services, it offer access to state services.

Scalability of ID Credentials portfolio

↑More added value for the citizen

Digital Wallet

Verifical credential andfull fledged state servicesin aMobile Companion

↓Less credential cost

Service operator’s device

VerifiableCredential in aDigital Wallet

A4 paper certificate

Robust & Secured ID card

Verifiable Credential in a secured USB key

Verifiable Credential sharingconsent withfeature phone thanks to USSD

White PVC Card

←More inclusion

More services →

Options for PHYSICAL CREDENTIALS

Be inclusive then have a differentiated

value added card offer

White PVC card design example

Cryptogram containing demographic data and a low resolution photo.

Individual’s portrait

NAME

FIRST NAME

Text indicating to copy to scan the back of the card so it can prevent fraud. This is to be backup by laws and fines.

BIRTH DATE

GENDER

BIRTH PLACE

ISSUANCE DATE

CARD ID NUMBER

IT’S FORBIDDEN TO COPY OR SCAN THAT SIDE

Tokenized version of person Unique Identity number is clearly visible

Paper certificate

The paper certificate would contain the same information as the PVC card.

It would include the photoand a cryptogramcontaining demographic data and a low-resolution photo.

As there is available space on the A4 page, the paper certificate could contain guidelines of use and rules applying.

A part of the certificate could be possible to separate then laminate to make a card from it.

Options for a value added polycarbonate card

Card background has serigraphy and is covered by a secured laminate.

A chip can be included to allow strong authentication and digital signature. It should be contactless.

Ghost picture to defeat photo counterfeit

Cryptogram containing demographic data with additional protected data : verified contact information, emergency information.

Second cryptogram containing the photo in higher definition, possibility to make an automatic match.

Color portrait with photo replacement prevention security feature.

NAME

FIRST NAME

BIRTH DATE

GENDER

Text indicating to copy to scan the back of the card so it can prevent fraud. This is to be backup by laws and fines.

BIRTH PLACE

ISSUANCE DATE

NUMERO DE DOCUMENT

CARD ID NUMBER

IT’S FORBIDDEN TO COPY OR SCAN THAT SIDE

YAC

Bar code and unique card number allowing identification of the document, for traceability, revocation or authenticity investigation.

Tokenized version of person Unique Identity number is clearly visible

Robust card material with lamination.

Enrollment/delivery center number, facilitating logistics. Usable later as an additional security in authentication (banking card VCC like)

Options for DIGITAL CREDENTIALS

For normalizing trusted exchanges of digital data

Normalizing use of Verifiable Credentials

A base verifiable credential will contains thesame information as a QR code printed on cards.

Different versions of the QR code can be generated for different usageby the Digital Wallet or the Mobile Companion to provide more or less information (Contact, Emergency, Zero knowledge information)

A key benefits of verifiable credential is that it is a structured information which can be verified towards its issuer.

Indeed the chain of trust ensured by Verifiable Credentials allows to verify information with the preceding data source including up to the initial event of identity declaration.

PASSPORT

Certificate of live birth issued by Delivery Doctor

Birth Certificate Delivered by Civil Registration officer

Unique ID Registration card issued by the Government

Mobile Companion setup with National Digital ID issued by the Government

eDocument issued

by the Ministry

of Interior

Options for MOBILE FORMS OF ID

Be inclusive in the form of wallet,

and scale services if technology is accessible.

Inclusive options of Digital Wallet

OPTION 1

OPTION 2

OPTION 3

Cloud Wallet

MobileWallet

Cards with QR code

Cloud Wallet

2G/SMS/USSD

3G/4G/5G/WIFI

2G/SMS/USSD

Operator’s tablet (Agent)

Applicant wallet (Secure storage)

A polyvalent solution for low setup country

A cost effective ANDROID TABLETwould nicely make the job for multiple cases.

It should have:

That tablet would belong to the operator of the services provider.

Professional can afford a deviceand a data subscription.

Cloud Wallet

We need to avoid to use multiple solutions to adapt to different context

One solution to meet the different low setup case(No device or low-line)

Once identified, this solution should then been re-designed on the standpoint of the different contexts.

Cards with QR code

2G/SMS/USSD

3G/4G/5G/WIFI

Operator’s tablet (Agent)

Applicant wallet (Secure storage)

Citizens portal & Mobile companion

Some reference implementations of Mobile Companions

Singapore / SingPass

MOSIP/Inji

Ukraine / Diia

Nigeria / NIMC MWS

ID Credentials Issuance system

Flexible, cost-effective and mutualizable.

ID Credential Issuance system

ISSUANCE

Card issuance request should be made using the Mobile Companionor on the Government’sCitizen portal.

Citizen could express preference for theID credential form then the ID system would delegate the printingto one of the ID credentials issuing partner.

For Digital forms, they should be stored in individual’s personal data safeand/or exported to its device(s)

Mobile ID

Issuance Platform

ID Card

Digital Wallet

ID Credential

Building an Agile Issuance system

The ID system should separate functions of generatingdocumentdata to printed, document layoutand document issuing.

The issuing systems would receive verifiable credentials from the National ID system, that would be auditable in future.

A formattingmodule would prepare the credential format.

Several issuance system would consume issuance request from the National ID.

This would allow decentralized and delegated card printing also mutualization of card printing systems.

Credential Issuing

System

A

National

ID

system

Document

Layout Preparation

Printing tasks

depot

Credential Issuing

System

B

Easy & flexible dispatch of printing by using ‘pooling’

Waiting for receiving cards to print for centers 1, 2 et 3

Stations of printing centers 1, 2 and 3

Cards waiting for impression

Printing cards for center 1, 2 and 3

National

ID

System

Waiting for cards for center 4

Stations of printing center 4

Printing cards for center 4

Waiting for card for HQ in capital city

Request to prepare card layout

PDF file

Stati

Capital city HQ printing stations pool

Printing cards for HQ

Layout preparation system

Listening for emergency cards printing

Each printing request is associated to its enrolment center to facilitate further card delivery.

Emergency card dedicated printer

Printing of emergency cards

Biometric cards authentication use cases online/offline

Match 1:1 Fingerprint

ATTESTATION

D'ENRÔLEMENT BIOMÉTRIQUE

Biometric

card

ONLINE

NOM ______________________

Identifier for

+

PRÉNOM ___________________

DATE DE NAISSANCE

✅

NUI [Optionnel]

IDENTIFICATION

KEYS

for access

to Services

✅

✅

IDVS

Biometric

card

OFFLINE

Match 1:1 Fingerprint

Identification Card

Ensure Uniqueness and Authenticity of

✅

NUI

Health

Secured

VISUAL verification

Social Protection

Vérification portrait signé

NOM

PRENOM

Education

Cette carte d’Identité biométrique multi-service offre des capacités d’interactions numérique avec les services publics ou privées notamment: l’authentification, l’identification biométrique et la signature numérique.

Rendez-vous sur le site suivant pour connaitres les services:

https//carte-cni.gouv.mg

DATE DE NAISSANCE

GENRE

Banks / MNOs

✅

LIEU DE NAISSANCE

DATE D’EMISSION

NUMERO DE DOCUMENT

NUI

IL EST INTERDIT DE COPIER OU DE SCANNER LE DOS DE CETTE CARTE.

YAC

Call for action

Whish to know more ID Cards ?

> Please let us know