Difference between revisions of "Mobile Driver's License"

From MgmtWiki
Jump to: navigation, search
(→‎Full Title)
(→‎Wallet Spread Sheet)
 
(265 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
==Full Title==
 
==Full Title==
 
User in control of a [[Mobile Driver's License]] and other apps that require high assurance control of credentials.
 
User in control of a [[Mobile Driver's License]] and other apps that require high assurance control of credentials.
 +
==Context==
 +
* There remains continued confusion about whether a Driver's License is a card used for identification that should not be revoked for any reason other than fraud or an [[Authorization]] to access some resource (like the public roads) that can be revoked at any time.
 +
* The ISO standard 18013-5 focuses exclusively on the original purpose of the driver's license, the authorization of a person to operate a motor vehicle on the public roads. Anecdotal evidence (from Queensland) is that only about 1 in 50 (2%) of the request to show a driver's license correspond to this original purpose.
 +
* [https://www.scytales.com/post/is-a-universal-digital-driving-licence-around-the-corner iPhone and Android solutions] also have [[NFC]], [[QR Code]], [[Bluetooth]], [[Wifi Aware]] and [[QR Code|Barcode]] readers technology thoroughly functional
 +
* The wiki page [[Smartphone Wireless]] contains information about the various radio bands used by mDL.
 +
===Providers===
 +
Much information about the the inter-relationship among the many players on “How the REAL-ID Act is creating a national ID database” is describe by Edward Hasbrouck.<ref>Edward Hasbrouck, ''How the REAL-ID Act is creating a national ID database'' (2016-02-11) https://papersplease.org/wp/2016/02/11/how-the-real-id-act-is-creating-a-national-id-database/</ref><ref>Edward Hasbrouck, ''Comments on TSA proposal for decentralized nonstandard ID requirements'' (2024-10-14 https://papersplease.org/wp/2024/10/14/comments-on-tsa-proposal-for-decentralized-nonstandard-id-requirements/</ref><blockquote>Requiring a photo ID to board a flight disproportionately affects certain groups, particularly low-income individuals, elderly travelers, people with disabilities, and those from rural areas, who may face challenges in obtaining or renewing an ID. Just as with voting, these individuals may encounter obstacles such as limited access to transportation, the costs associated with obtaining required documents, and logistical issues due to a lack of nearby government facilities. Moreover, the added financial and time burdens of procuring an ID create unnecessary barriers, effectively restricting their ability to travel and diminishing their personal freedom and mobility. For individuals with urgent travel needs, such as visiting family members in emergencies or pursuing job opportunities, these barriers to flying without an ID could have severe social and economic impacts.</blockquote>
 +
(nb. There is actually no federal requirement for a ID to board a plane, which few people understand. However, that can extend security waits to very long delays. This wait time appears to be the club that the TSA useses to get compliance.)
 +
 +
A real mix of enterprises that might be involved in the process:
 +
# Registered application provider = The AID of the mdoc consists of the registered application provider identifier (RID) ('A0 00 00 02 48') followed by the proprietary application identifier extension (PIX) (’04 00’). There is a very short non-normative description of application testing in E.14.2. It is not helpful.
 +
#OpenID Provider (OP) 8.3.3.2.2 configuration information comes from the issuing authority OP in a discover process.
 +
#Master list Provider. The decentralized PKI trust model adopted by the mDL requires a mechanism to distribute and disseminate the set of certification authorities certificates from issuing authorities.
 +
#Technology provider - provide systems and Apps for issuing authorities to issue mDLs. They appear to be entirely controlled by issuing authority, but also work the mDL verifiers to ensure privacy,
 +
 +
===Comparison with VC & DID===
 +
* The primary difference is that the mDL (and the [[EID]] focus on a direct link from the attributes to the real-world entity, while the DID is just a link to a signing key that requires VC's to get to really-world entities.
 +
* From UL https://difdn.slack.com/files/U01M7L5AJQ0/F02FETU43DZ/cs676613_-_digital_credentials_promotion_campaign-white_paper-digital.pdf?origin_team=T4VKPCU00&origin_channel=C4WED8JSH
 +
* Theoretically a [[Mobile Driver's License]] could be encoded as described in wiki page [[Verifiable Cred V1.1 Normative]]. The big difference is the dependance of the mDL on [[Public Key Infrastructure]] (PKI) using [[X.509 Certificate]]s.
 +
 +
==Problems==
 +
State issued driver's licenses in North America have morphed into the default identity credential for residents whether by design or by circumstance. While it might seem to be helpful to try to break the problem down into the original purpose first, that is no longer an option. Even states that seek to create mobile versions of their own driver's licenses need to address the other purposes that existing legislation requires, such as control of alcohol and prescription medicines among many other existing purposes. So this section takes the practical view about what must be supported on day one of the availability of mobile state issued identification documents, aka driver's licenses.
 +
===Privacy===
 +
# States are sovereign, which means that they are not liable for any action where they have not accepted liability. Current practice indicates that mobile driver's licenses will only be available on smart phone apps that are supplied by the state and typically written under contract by in-state vendors. Any impact on these apps can only be enforced if the state's choose to do so. Still the states are wont to accept standards written to address these apps and so it would be good to see such standards approved for use.
 +
# Organizations that accept user private information (aka PII) from the apps may be under state or federal regulations which require meaningful user consent for release. Standards should be written to define what "meaningful user consent" really means.
 +
# The biometric information and signature of the holder is optionally included in the mDL. This is information that should never be released from the person that holds it as is stated in an non-normative appendix. It is meant to be used for activation (C.1.6.4), but that is not described and E.12 says that "the mDL reader may implement biometric comparison of the person presenting the mDL to the portrait." The exact meaning of that last sentence is unclear.
 +
References:
 +
* [https://news.bloomberglaw.com/tech-and-telecom-law/mobile-drivers-licenses-face-privacy-scrutiny-ahead-of-ny-pilot Mobile Driver’s Licenses Face Privacy Scrutiny Ahead of NY Pilot] (2024-02-22) Bloombert Law
 +
* [https://www.biometricupdate.com/202105/aclu-urges-hard-questions-on-mdls-to-protect-digital-id-privacy ACLU urges hard questions on mDLs to protect digital ID privacy ]  (2021-05-19)
 +
* [https://slacker.ro/2020/10/28/privacy-preserving-features-in-the-mobile-driving-license/ Privacy-preserving features in the Mobile Driving License] 2020-10-28 David Zeuthen + 2 (Android Security and Privacy team)
 +
 +
===Authenticity===
 +
# Apps can be created that mimic [[Mobile Driver's License]]s that either fool the user, or are intended to allow the user to fool the acceptor of the data. Where legal obligation exist to check the authenticity of user provided data, it is likely that apps will need to prove their authenticity to the reader.  Specifications for proving authenticity should be written. [https://kantarainitiative.org/download/kantara-mobile-assurance-statement/ Kantara currently has an implementer's draft of such an assurance statement].
 +
# States are likely to require that smartphone apps meet certain criteria and a wont to accept existing specifications rather than write their own.
 +
# Readers of [[Mobile Driver's License]]s were imagined in the [[ISO 18013-5]] standard to be certified. Specifications for the certifications of reader that meet privacy and identity requirements are needed.
 +
# In an ideal world the [[Mobile Driver's License]] would not even respond to requests for data from readers that were not certified.
 +
 +
===User Experience===
 +
* All the examples of issued mobile driver's licenses have focuses on issuing the innocence and perhaps using it to shorten the wait times at airports.
 +
* One exception is a few effort to use the mobile driver's app as a [[Smartphone]] [[Verifier]] device, in particular the LA app can work both ways.
 +
* The following is a use case generator which requires an email address to access. [https://www.mdlconnection.com/mdl-uses/ Download our mDL Use Case Template Today!]
  
 
==Solutions==
 
==Solutions==
Line 6: Line 47:
 
===Android===
 
===Android===
 
* [https://developer.android.com/topic/security/data Android JetPack support for Identity Credential Security] with example code.
 
* [https://developer.android.com/topic/security/data Android JetPack support for Identity Credential Security] with example code.
 +
* [https://slacker.ro/2020/10/28/privacy-preserving-features-in-the-mobile-driving-license/ Privacy Preserving Features in mDL] (2020-10-28) from the Android Security and Privacy team.
 +
* [https://docs.google.com/document/d/14zSZkl9irVknP8cG4U86YCGCR0IQVtiZRR30qQQ6tDk/edit Android Identity Credential] Investigating provisioning compatible with 23220-3 David Zeuthen 2021-05-05
 +
 +
===Apple iOS===
 +
* [https://www.scytales.com/post/ios-nfc-for-mobile-id-and-mobile-driver-license-transactions-fully-supported-by-scytales-ab iOS NFC for Mobile ID and Mobile Driver License transactions fully supported by Scytáles AB]
 +
* [https://www.apple.com/ios/ios-15-preview/ Apple announced availability of mDL in late 2021] on 2021-06-07.
 +
* Also see announcement on 2021-09-01 in the section on state wallets below.
 +
 +
===Testing===
 +
* [https://ims.ul.com/interoperability-mobile-driver-license-mdl-application Interoperability of a Mobile Driver License (mDL) application] UL conformance tests
 +
 +
===Connection Protocols===
 +
The language for defining the mDL is RFC 8610 CDDL. Occurrence is the one oddity. It is (1) one of the characters "?" (optional), "*"  (zero or more), or "+" (one or more) or (2) of the form n*m for min and max. Also "tstr" = text string and "bstr" = byte string, and tdate is something like 1985-04-12T23:20:50.52Z.
 +
* [[Mobile Driver's License with Reader]]
 +
* [[Mobile Driver's License with OIDC]]
 +
* [[Mobile Driver's License with WebAPI]]
 +
 +
===Security===
 +
* [https://ims.ul.com/dangerous-conditions-ahead-navigating-security-issues-mobile-identity Dangerous Conditions Ahead: Navigating Security Issues in Mobile Identity] from UL
 +
* C.1.6.5 purports to explain computer security controls without any regard for Zero trust principles. Somehow the network is considered secure if the router is in a locked closet, but the wifi or BLE will be visible to everyone.
 +
 +
===North America===
 +
* [https://www.biometricupdate.com/202404/us-launches-pki-system-to-make-mobile-drivers-licenses-interoperable-easy-to-use launches PKI system to make mobile driver’s licenses interoperable, easy to use] while the report focuses on the US, the AAMVA DTS (Digital Trust Service) is expected to cover Canada as well. As of 2024-04-16 2 US states have signed up MD & UT.
 +
* [https://www.aamva.org/getmedia/c4fe2a21-91ff-449d-9df3-5a7e33cf3a8e/mDL-Implementation-Guidelines-1-0_2021.pdf Mobile Driver’s License (mDL) Implementation Guidelines Version 1.0] 2021-
 +
* [https://www.aamva.org/mDL-Resources/ AAMVA mDL Resources] including implementations guidelines with extensions to the ISO 18013-5 standard.
 +
 +
===US Federal Regulations===
 +
* [https://www.dhs.gov/sites/default/files/publications/privacy-pia-tsa051-digitalidentitytechnologypilots-january2022.pdf Privacy Impact Assessment] for the Travel Document Checker Automation (2022-01-14) -Digital Identity Technology Pilots DHS Reference No. DHS/TSA/PIA-051.
 +
* [https://www.federalregister.gov/documents/2021/04/19/2021-07957/minimum-standards-for-drivers-licenses-and-identification-cards-acceptable-by-federal-agencies-for Minimum Standards for Driver's Licenses and Identification Cards Acceptable by Federal Agencies for Official Purposes; Mobile Driver's Licenses] Federal Register 2021-04-19
 +
* [https://www.federalregister.gov/documents/2021/09/16/2021-19812/notification-of-document-availability-and-reopening-of-comment-period-on-request-for-information Notification of Document Availability and Reopening of Comment Period on Request for Information: Minimum Standards for Driver's Licenses and Identification Cards Acceptable by Federal Agencies for Official Purposes; Mobile Driver's Licenses] A Proposed Rule by the Homeland Security Department on 09/16/2021 that includes access to ISO 18013-5 via ANSI.
 +
 +
===State Wallets===
 +
This section is focused on implementations in North America at present.
 +
* Maryland rolled out mDLs to smartphone users in 2022.60 The credentials are created by taking a photo of the front and back of their physical driver’s license and a short video of themselves, which is then sent to issuing authorities for verification. When the information is verified, the<ref>Jordan Pascale,''Maryland Launches Digital Version Of Driver’s License On IPhon'' DCist, (2022-05-26) https://dcist.com/story/22/05/26/maryland-digital-drivers-license/</ref> individual may add it to their Google or Apple wallets and, where accepted, use it in place of the physical credential
 +
* [https://www.skyharbor.com/media/PressReleases/2022/03/23/tsa-enables-arizona-residents-to-use-mobile-driver-s-license-or-state-id-for-verification-at-phoenix-sky-harbor-international-airport Phoenix AZ Sky Harbor Airport is accepting the AZ mDL at TSA gates.] 2022-03-23. and [https://www.apple.com/newsroom/2022/03/apple-launches-the-first-drivers-license-and-state-id-in-wallet-with-arizona/ Apple's announcement of that.]
 +
* [https://www.macrumors.com/2021/10/14/florida-digital-id-apple-wallet-app-plans/ Florida will also use Apple Wallet] 2021-10-14 with a current list of all states supporting apple wallet.
 +
* Utah was feature in an [https://www.al.com/news/2021/05/mobile-drivers-licenses-pandemic-gives-boost-as-more-states-move-to-digital-ids.html article on the outlooks for mdl] that reported "Ryan Williams, with the Utah Driver's License Division, displays his cellphone with the pilot version of the state's mobile ID on Wednesday, May 5, 2021, in West Valley City, Utah. In Utah, over 100 people have a pilot version of the state's mobile ID, and that number is expected to grow to 10,000 by year's end. Widespread production is expected to begin at the start of 2022."  Pam Dixon, executive director of the World Privacy Forum was quoted saying “Most people want some kind of a hard token for their identity, but I don’t know how long that will last, I would imagine that at some point, maybe in a generation, maybe less, that people will accept a fully digital system.”
 +
* [https://www.apple.com/newsroom/2021/09/apple-announces-first-states-to-adopt-drivers-licenses-and-state-ids-in-wallet/ Apple announces first states signed up to adopt driver’s licenses and state IDs in Apple Wallet] 2021-09-01 Arizona, Connecticut, Georgia, Iowa, Kentucky, Maryland, Oklahoma, and Utah are among the first states to bring state IDs and driver’s licenses in Wallet to their residents
 +
* [https://www.wdel.com/news/a-delaware-mobile-id-is-now-a-reality/article_b2089148-80f8-11eb-b913-4b1d47d47021.html A Delaware mobile ID is now a reality] 2021-03-10 The app requires users to capture and upload their physical ID as well as a live selfie to compare against the individual’s file with the Delaware DMV. According to state officials, security features, including strong encryption standards, help fight identity theft. "You don't need passwords or usernames because it's based on your biometrics," said DMV spokesperson Marinah Carver. "You cannot use your mobile ID without inputting either your face or your fingerprint. "We're not sharing that data with anyone else, and it can't be accessed through a third party."  In addition to safety, Carver said a contactless ID as part of a digital wallet is also a healthier option in a post-COVID world. The program is voluntary and optional and by law. A person is still required to carry their physical credential as applicable for age and identity verification.  "You can try it for a bit," said Carver. "If it's not for you, you can opt back out. It's certainly not a replacement at this time to your physical credential." Carver said the mobile ID has not yet been accepted in a law enforcement setting. The [https://dmv.de.gov/mobileID/ DVM] offers apps on Apple and Android stores. It allows both a straight scan of the back of the card, or a privacy preserving one of the bar codes only from the physical care or a QR code. At the user's discretion.
 +
* [https://iowadot.gov/mvd/Mobile-ID Iowa Mobile ID] mID is [https://www.johnsoncitypress.com/idemia-mobile-id-for-iowa-dot-passes-uls-mdl-conformity-assessment/article_733dd8f0-e519-57ec-bfa9-4f4c6efd4a84.html reported by IDEMIA to be the first with UL certification] 2021-03-11.
 +
* [https://mycolorado.state.co.us/ Award-winning myColorado™ App Offers Residents a Contactless Digital ID] Colorado is the first state in the nation to offer residents the option to electronically transmit digital identification, vehicle registration and proof of insurance to law enforcement. They require the state trooper to show you a QR code first. Interestingly the feature has been extended to allow the phone's camera to scan the QR code, which indicates that the URL just sends the data from the DMV to the trooper's computer. After that the user has the option to give the cop what she wants, or dig out the paper version of all 3 documents. The business use of the mDL is a simple display of the back of the physical DL on the screen of the phone so the merchants can scan the 2d barcode in the same way as with the physical DL. It appears that Colorado was involved in app development at some level. Users add their identification in the myColorado app by taking a selfie with the in-app camera as well as a photo of their physical driver’s license or state ID. Several authentication points, including the selfie, the physical card’s bar code and the resident’s phone number are then verified against Division of Motor Vehicles records. The state government is using an identity verification and management platform from Ping Identity Holding Corp., which is based in Denver. The development of Colorado’s digital-ID application started in early 2019 and has cost about $800,000. Much of the effort has involved interacting with state agencies and merchants on features and adoption. Theresa Szczurek has been Colorado’s chief information officer since January 2020. “We discovered that proof of identification without carrying the wallet was really the killer app,” said Ms. Szczurek, who was chief executive of Radish Systems LLC for nine years before becoming state CIO in January. Radish, based in Boulder, Colo., sells software that integrates visuals into phone calls.
 +
* [https://www.pingidentity.com/en/company/blog/posts/2019/mycolorado-mobile-app-identity-services-powered-by-ping-identity.html Identity Services for myColorado™ Mobile App Powered by Ping Identity] report from PING dated 2019-11-12.
 +
* [https://gcn.com/articles/2021/05/07/la-wallet-digital-vaccination-record.aspx Louisiana adds vaccine status to digital driver’s License App] 2021-05-07
 +
* [https://www.nbcnews.com/mach/science/what-new-digital-driver-s-licenses-mean-motorists-police-ncna875576 NBC News reports] that Calvin Fabre, president of [https://envoc.com/work/portfolio/la-wallet Envoc, a software firm in Baton Rouge, Louisiana], that helped develop a [https://lawallet.com/ mobile app to display digital driver's licenses in Louisiana], said most drivers under 40 won't go back home if they forget their plastic license — "but if they forget their phone, they always turn around." It looks like Envoc programs in .NET and Xamarin.
 +
* [https://www.govtech.com/news/Digital-Drivers-License-Pilot-Comes-to-Wyoming.html Wyoming is piloting a digital driver's license} base on Gemalto technology. (2017-10-05) for only 100 people. The app isn’t connected to the Internet, so there’s virtually no risk of someone tracking a user’s whereabouts or personal information based on when they open the license, said Steve Purdy, Gemalto’s vice president of state government programs. In order to enter the app, people have to enter a five-digit password or use fingerprint identification. “All it does is show your photo and whether or not you’re 21,” Purdy said. Gemalto provides the existing card license to WY.
 +
* [https://www.blogto.com/tech/2020/10/ontario-phones-physical-id/ Ontario program] with potential to eliminate our need to carry around physical health cards, driver's licenses and other forms of provincially-issued ID.  blogTO (2020-11)
 +
 +
===Wallet Spread Sheet===
 +
 +
 +
{|border="1" padding="2" width="799px"
 +
| State || Code || Provider || ISO || Notes
 +
|-
 +
|Federal || US ||  || TSA-yes || there is no national ID process but lots of agencies that issue and verifier Identifiers
 +
|-
 +
| ALABAMA|| AL|| Idemia || ||  eID - [https://abc3340.com/news/local/alabamas-digital-drivers-license-what-you-need-to-know has been around since 2015 w/o much use]
 +
|-
 +
|ALASKA ||AK|| || ||
 +
|-
 +
|AMERICAN SAMOA||AS|| || ||
 +
|-
 +
|[https://azdot.gov/motor-vehicles/driver-services/mobile-id ARIZONA] ||AZ ||2020 Idemia on Apple || yes || MID 2021-03 - accepted by TSA at Sky Harbor 2022-03-23 [https://na.idemia.com/dmv/mobile-id/ mobile ID app]
 +
|-
 +
|ARKANSAS||AR || || || authorized Digital copy for $10
 +
|-
 +
|CALIFORNIA || CA ||[https://www.dmv.ca.gov/portal/ca-dmv-wallet/ own app] that's [https://blog.spruceid.com/spruceid-partners-with-ca-dmv-on-mdl/ dev @ Spruce] +apple, Goog||yes + VC, TrueAge||2023 [https://cdt.ca.gov/digitalid/ California’s Digital ID Project] rolled out early 2024 FREE to all that have a state ID record - 3 separate creds MDOC, VC, TrueAGE [https://www.gov.ca.gov/2024/08/15/california-ids-coming-soon-in-apple-wallet-and-google-wallet/ 2024-08-18 Governor adds Apple & Google apps]
 +
|-
 +
|COLORADO || CO || Thales pilot|| not at first ||2021[https://mycolorado.gov/colorado-digital-id myColorado] is a state-sponsored app that offers proof of identification, age, and address within the state. By 2022-10 they included Apple (ISO?)
 +
|-
 +
|CONNECTICUT || CT|| || || Connecticut is working with Apple to develop virtual IDs 2022
 +
|-
 +
|DELAWARE || DE || Idemia || yes ||2022 MID - holder MUST be able to present physical card on request
 +
|-
 +
|DISTRICT OF COLUMBIA|| DC|| || ||
 +
|-
 +
|FEDERATED STATES OF MICRONESIA||FM|| || ||
 +
|-
 +
|FLORIDA || FL || [https://www.thalesgroup.com/en/markets/digital-identity-and-security/government/driving-licence/digital-driver-license Thales] || ||2021 - but then suspended Apple Wallet - Ron Hurtibise South Florida Sun Sentinel 2023-04-02 ** 2024-07-10 Cancelled existing vendor - new one next year
 +
|-
 +
|GEORGIA || GA||  Apl Goog Sam ||yes || 2023 [https://www.iphonelife.com/content/how-to-add-drivers-license-to-apple-wallet Apple Wallet] and [https://dds.georgia.gov/georgia-licenseid/ga-digital-drivers-license TSA acceptance (2023-05-18)]  free 2024 [https://dds.georgia.gov/georgia-licenseid/ga-digital-id Google added]
 +
|-
 +
|GUAM || GU|| || ||
 +
|-
 +
|HAWAII || HI|| Apple|| yes|| 2024-08 [https://hidot.hawaii.gov/highways/mobile-driver-license/ Your Hawaiʻi driver’s license and state ID. Terminal 1 Makai Checkpoint of the Daniel K. Inouye International Airport, now accepts the mDL]
 +
|-
 +
|IDAHO || ID|| || ||
 +
|-
 +
|ILLINOIS || IL|| || || 2025 [https://www.ilga.gov/legislation/billstatus.asp?DocNum=4592&GAID=17&GA=103&DocTypeID=HB&LegID=151903&SessionID=112 Current Bill  2024-05]
 +
|-
 +
|INDIANA || IN|| || ||
 +
|-
 +
| IOWA || IA ||Iowa Mobile ID app by Idemia ||2921 || 2023-08-29 '''with TSAPreCheck''' can present ID on phone when departing from @fly_CID and @dsmairport = Apple later
 +
|-
 +
|KANSAS || KS|| || ||
 +
|-
 +
|KENTUCKY || KY|| || || Apple later 2022
 +
|-
 +
|LOUISIANA || LA|| home-grown both holder and verifier ||claims yes ||2018 LA Wallet cost user $6 + fee on verification - very high penetration of market- includes VAX status
 +
|-
 +
|MAINE || ME|| || ||
 +
|-
 +
|MARSHALL ISLANDS || MH|| || ||
 +
|-
 +
|MARYLAND || MD|| Thales on Apl Goog Sam ||AAMVA 2024.04 ||2022 free - [https://www.theverge.com/2022/12/15/23510774/google-digital-state-id-cards-android-13-wallet-app-maryland 2022-12-15 testing with Google] 2024-06-24 [https://www.mdot.maryland.gov/tso/pages/newsroomdetails.aspx?newsId=805&PageId=38&utm_source=hs_email added Samsung] only use appears to be in two large airports - 200,000 downloads
 +
|-
 +
|MASSACHUSETTS || MA|| || ||
 +
|-
 +
|MICHIGAN || MI|| || || 2023
 +
|-
 +
|MINNESOTA || MN|| || ||
 +
|-
 +
|MISSISSIPPI || MS|| Idemia Apple Goog|| || https://www.driverservicebureau.dps.ms.gov/mobile-id/ Apple later
 +
|-
 +
|MISSOURI || MO|| || || 2023 [https://idscan.net/state-digital-id/missouri-mdl-goes-live/ released app and then withdrew it] status unclear 2024-09
 +
|-
 +
|MONTANA || MT|| || || 2025
 +
|-
 +
||NEBRASKA || NE|| || ||
 +
|-
 +
|NEVADA || NV|| || ||
 +
|-
 +
|NEW HAMPSHIRE || NH|| || ||
 +
|-
 +
|NEW JERSEY || NJ|| || || 2025
 +
|-
 +
|NEW MEXICO || NM|| || ||
 +
|-
 +
|NEW YORK || NY|| Idemia ||yes || 2024 [https://www.biometricupdate.com/202406/new-york-launches-idemia-backed-mdl-for-verification-at-tsa-checkpoints 2024-06-11] digital version of a state-issued driver license, learner permit or ID on a smartphone.” Governor says the optional ID means New Yorkers will be able to quickly display their IDs and enjoy enhanced security
 +
|-
 +
|NORTH CAROLINA || NC|| || || 2025  2024-06-21 [https://www.cbs17.com/news/north-carolina-news/could-your-drivers-license-be-stored-in-your-phone-nc-looks-at-moving-to-digital-ids/amp/ Introduces a bill]
 +
|-
 +
|NORTH DAKOTA || ND|| || || 2025
 +
|-
 +
|NORTHERN MARIANA ISLANDS || MP|| || ||
 +
|-
 +
|OHIO || OH|| Apl|| yes|| 2024 [https://mail.google.com/mail/u/0/#inbox/FMfcgzGrbHnhdQPkFQjBkCFzBwxJtjWR?projector=1&messagePartId=0.1 Legislation introduced 22-09-27] apple available 2024-07-31 accepted by TSA
 +
|-
 +
|OKLAHOMA || OK || Idemia || yes || 2022 - scans CARD - Apple later
 +
|-
 +
|OREGON || OR|| || ||
 +
|-
 +
|PALAU || PW|| || ||
 +
|-
 +
|PENNSYLVANIA || PA|| || ||
 +
|-
 +
|PUERTO RICO || PR|| || || Apple later
 +
|-
 +
|RHODE ISLAND || RI|| || ||
 +
|-
 +
|SOUTH CAROLINA|| SC|| || ||
 +
|-
 +
|SOUTH DAKOTA || SD|| || ||
 +
|-
 +
|TENNESSEE || TN || || || 2025  HB556 in 2015 - RFP 2020-12
 +
|-
 +
|TEXAS || TX|| || ||
 +
|-
 +
|UTAH || UT|| [https://getgroupna.com/solutions/mobileid/ GET] & [https://www.scytales.com/ Scytales]|| AAMVA 2024.04 ||2021 Apple later - [https://dpsnews.utah.gov/select-utah-state-liquor-store-locations-to-begin-accepting-mobile-drivers-licenses-to-confirm-legal-age-for-alcohol-purchases/ test mdl in Alcohol purchases] You can use it at Salt Lake Airport (SLC) when TSA PreCheck verifies your identity (2023-03-01) [https://www.biometricupdate.com/companies/facetec-inc FaceTec]
 +
|-
 +
|VERMONT || VT|| || ||
 +
|-
 +
|VIRGIN ISLANDS || VI|| || ||
 +
|-
 +
|VIRGINIA || VA|| home grown || || 2024 [https://www.dmv.virginia.gov/licenses-ids/mobile-id avail. early 2024 already works with TSA]
 +
|-
 +
|WASHINGTON || WA|| || || [https://www.geekwire.com/2023/new-bill-aims-to-allow-digital-drivers-licenses-in-washington-state/ bill aims to allow digital driver’s licenses in Washington state] 2023-01 = [https://idscan.net/state-digital-id/washington-mobile-drivers-licenses-soon-to-come/ (DOL) is actively assessing technical infrastructure to maximize interoperability, utility, and privacy protection for mDLs]
 +
|-
 +
|WEST VIRGINIA || WV|| || || 2025
 +
|-
 +
|WISCONSIN || WI|| || ||
 +
|-
 +
|WYOMING || WY|| Thales pilot || || 2025
 +
|-
 +
|Province/Territory || code
 +
|-
 +
|ALBERTA || AB|| || ||
 +
|-
 +
|BRITISH COLUMBIA || BC|| || || Issued VC for personal ID and court records - little impact
 +
|-
 +
|MANITOBA || MB|| || ||
 +
|-
 +
|NEW BRUNSWICK || NB|| || ||
 +
|-
 +
|NOVA SCOTIA || NS|| || ||
 +
|-
 +
|NEWFOUNDLAND || NF|| || ||
 +
|-
 +
|NORTHWEST TERRITORIES || NT|| || ||
 +
|-
 +
|ONTARIO || ON|| || || [https://www.blogto.com/tech/2020/10/ontario-phones-physical-id/ Announced future plans]
 +
|-
 +
|PRINCE EDWARD ISLAND || PE|| || ||
 +
|-
 +
|QUEBEC || QC|| || ||
 +
|-
 +
|SASKATCHEWAN || SK|| || ||
 +
|-
 +
|YUKON ||YT|| || ||
 +
|-
 +
| Australia || AU || || mDL VICAL available || [https://www.innovationaus.com/all-govts-to-adopt-digital-licence-standards/ The states have an agreement for mDL] 2024-01-25 [https://www.uber.com/en-AU/blog/digital-drivers-licences-alcohol-drop-offs/ Uber accepts mDL for proof of age and presence of person ordering the goods.] * [https://beta.nationaldts.com.au/ the have a root VICAL cert that includes other countries already]
 +
|-
 +
|[https://www.nsw.gov.au/projects/digital-driver-licence New South Wales] ||NSW||thales || ||3.9 million opt-in to mDL 2022 [https://blog.dvuln.com/blogs/servicensw-digital-superbad But Problems detected early] Also [https://news.ycombinator.com/item?id=21471091 lots of blog chatter about apple & google]
 +
|-
 +
|EU|| || || || dreaming with EIDAS 2.0 and EUDIW in 2024 sked for 2026
 +
|-
 +
|Austria|| AT ||Youniqx ID AG || || can download [https://www.oesterreich.gv.at/eausweise.html eAusausweis app] since 2022 and present only within Austria during roadside checks- do not need physical card with you 2024-09 380K activated
 +
|-
 +
|China || || || || 24-11-11 Select cities in mainland China have already implemented the change to digital ID documents.
 +
|-
 +
|Switzerland || || || || [https://github.com/e-id-admin/open-source-community/blob/main/tech-roadmap/tech-roadmap.md published on GitHub] Mid 2024 Decentralized Identifiers (DIDs) v1.0 according to W3C DID Method: did:tdw
 +
|-
 +
|Moldova || || || ||24-06-14 released [https://www.biometricupdate.com/202406/moldovas-first-digital-id-app-sees-24k-downloads-in-five-days EVO ID app]  driver’s licenses and registrations, the app contains the government electronic payment module MPay and a document verification module.
 +
|-
 +
|Honk Kong|| || || || 2024-11-11 [https://www.biometricupdate.com/202411/mobile-drivers-licenses-to-launch-in-hong-kong-in-2025 Mobile driver’s licenses to launch in Hong Kong in 2025]
 +
|-
 +
|Indonesia|| || || || Government Mandated ID with mDL among other licenses
 +
|-
 +
|New Zealand|| || || ||  2024-06 in Beta mode, asking for your help in testing the app and to provide feedback. [https://www.nzta.govt.nz/_click?d=eyJpZCI6MzI4MzMsInR5cGUiOiJwYWdlIiwidGFncyI6W10sInF1ZXJ5IjoiYmV0YSIsInJlcXVlc3RJZCI6IlJjcFVnLVZxU0plWDQtNUkyd0piSHciLCJkb2N1bWVudElkIjoic2lsdmVyc3RyaXBlX2Ntc19tb2RlbF9zaXRldHJlZV8zMjgzMyIsImVuZ2luZU5hbWUiOiJuenRhMi1wcm9kLW1haW4tc2l0ZSJ9 Information on how to download and take] part in testing the app
 +
|-
 +
|Morocco || || || ||The Moroccan national identity card (Arabic: البطاقة الوطنية للتعريف, Standard Moroccan Tamazight: ⵜⴽⴰⵕⴹⴰ ⵜⴰⵏⴰⵎⵓⵔⵜ, French: carte nationale d'identité; CNI) is the biometric identity document for Moroccan citizens consisting of an electronic ID-1 smart card with identifying information
 +
|-
 +
|North Macedonia||MK || || || 2024-11-01 [https://www.biometricupdate.com/202411/north-macedonia-launching-digital-id-wallet-mdl North Macedonia launching digital ID wallet, mDL]
 +
|-
 +
|Singapore|| ID
 +
|-
 +
|Ukraine || || || ||22-12-09 First implementation to not require a plastic card as well
 +
|}
 +
 +
===User Problems===
 +
Q indicates a question from a real user.
 +
# Q Why is there no way to validate [scan] the QR code I was given?
 +
# Navigating to Apple Store from Google on a PC hangs.
 +
# At a minimum your mobile phone number is known to the State DMV/MID.
 +
# The Idemia apps scan the physical card and allow the user to display the front or the bar code from the back of the card. (Not part of ISO as of 2022.)
 +
# The current process is a long back and forth (user facing / verifier facing) process. (not the tap and go experience expected.)
 +
## Open the Mobile ID app.
 +
## Go to the "Me"/home screen.
 +
## Tap the "Share" icon next to "Generate privacy code."
 +
## Present the QR code for scanning to initiate the connection with the verifying device.
 +
## Accept (or Decline) the request to share information under "IDs."
  
 
==References==
 
==References==
 +
<references />
 +
===Other Material===
 +
* [https://upgradedpoints.com/travel/digital-drivers-licenses/ Everything You Need To Know About Digital Driver’s Licenses (2023)]
 +
* [https://www.statista.com/statistics/198029/total-number-of-us-licensed-drivers-by-state/ Number of driver's licenses per state.]
 
* [https://wiki.idesg.org/wiki/index.php/Mobile_Driver%27s_License#References IDESG / Kantara wiki on mDL]
 
* [https://wiki.idesg.org/wiki/index.php/Mobile_Driver%27s_License#References IDESG / Kantara wiki on mDL]
−
* [https://www.securityinformed.com/news/get-group-north-america-mobile-administrator-co-9039-ga-co-1563270353-ga-npr.1565961407.html Get Group]
+
* [[Mobile Driver's License Presentation]] maps [[ISO 18013-5]] wallet presentation to [https://identity.foundation/presentation-exchange/spec/v1.0.0/ DIF Presentation Exchange].
 +
* [https://www.securityinformed.com/news/get-group-north-america-mobile-administrator-co-9039-ga-co-1563270353-ga-npr.1565961407.html Get Group] works with Scytáles AB (see link above under apple).
 
* [https://getgroupna.com/solutions/mobileid/ GET Group Mobile Driver's License]
 
* [https://getgroupna.com/solutions/mobileid/ GET Group Mobile Driver's License]
 +
* [https://www.securetechalliance.org/wp-content/uploads/Mobile-Drivers-License-WP-FINAL-Update-March-2020-4.pdf The Mobile Driver’s License (mDL) and Ecosystem] Secure Technology Alliance 2020-03
 +
* Also see the wiki page [[MDL Considered Harmful]] for a list of some of the challenges faces by the mDL.
  
 
[[Category: Glossary]]
 
[[Category: Glossary]]
 +
[[Category: Profile]]
 
[[Category: Identifier]]
 
[[Category: Identifier]]
 +
[[Category: Mobile]]
 +
[[Category: Credential]]
 +
[[Category: Legislation]]

Latest revision as of 08:29, 14 November 2024

Full Title

User in control of a Mobile Driver's License and other apps that require high assurance control of credentials.

Context

  • There remains continued confusion about whether a Driver's License is a card used for identification that should not be revoked for any reason other than fraud or an Authorization to access some resource (like the public roads) that can be revoked at any time.
  • The ISO standard 18013-5 focuses exclusively on the original purpose of the driver's license, the authorization of a person to operate a motor vehicle on the public roads. Anecdotal evidence (from Queensland) is that only about 1 in 50 (2%) of the request to show a driver's license correspond to this original purpose.
  • iPhone and Android solutions also have NFC, QR Code, Bluetooth, Wifi Aware and Barcode readers technology thoroughly functional
  • The wiki page Smartphone Wireless contains information about the various radio bands used by mDL.

Providers

Much information about the the inter-relationship among the many players on “How the REAL-ID Act is creating a national ID database” is describe by Edward Hasbrouck.[1][2]
Requiring a photo ID to board a flight disproportionately affects certain groups, particularly low-income individuals, elderly travelers, people with disabilities, and those from rural areas, who may face challenges in obtaining or renewing an ID. Just as with voting, these individuals may encounter obstacles such as limited access to transportation, the costs associated with obtaining required documents, and logistical issues due to a lack of nearby government facilities. Moreover, the added financial and time burdens of procuring an ID create unnecessary barriers, effectively restricting their ability to travel and diminishing their personal freedom and mobility. For individuals with urgent travel needs, such as visiting family members in emergencies or pursuing job opportunities, these barriers to flying without an ID could have severe social and economic impacts.

(nb. There is actually no federal requirement for a ID to board a plane, which few people understand. However, that can extend security waits to very long delays. This wait time appears to be the club that the TSA useses to get compliance.)

A real mix of enterprises that might be involved in the process:

  1. Registered application provider = The AID of the mdoc consists of the registered application provider identifier (RID) ('A0 00 00 02 48') followed by the proprietary application identifier extension (PIX) (’04 00’). There is a very short non-normative description of application testing in E.14.2. It is not helpful.
  2. OpenID Provider (OP) 8.3.3.2.2 configuration information comes from the issuing authority OP in a discover process.
  3. Master list Provider. The decentralized PKI trust model adopted by the mDL requires a mechanism to distribute and disseminate the set of certification authorities certificates from issuing authorities.
  4. Technology provider - provide systems and Apps for issuing authorities to issue mDLs. They appear to be entirely controlled by issuing authority, but also work the mDL verifiers to ensure privacy,

Comparison with VC & DID

Problems

State issued driver's licenses in North America have morphed into the default identity credential for residents whether by design or by circumstance. While it might seem to be helpful to try to break the problem down into the original purpose first, that is no longer an option. Even states that seek to create mobile versions of their own driver's licenses need to address the other purposes that existing legislation requires, such as control of alcohol and prescription medicines among many other existing purposes. So this section takes the practical view about what must be supported on day one of the availability of mobile state issued identification documents, aka driver's licenses.

Privacy

  1. States are sovereign, which means that they are not liable for any action where they have not accepted liability. Current practice indicates that mobile driver's licenses will only be available on smart phone apps that are supplied by the state and typically written under contract by in-state vendors. Any impact on these apps can only be enforced if the state's choose to do so. Still the states are wont to accept standards written to address these apps and so it would be good to see such standards approved for use.
  2. Organizations that accept user private information (aka PII) from the apps may be under state or federal regulations which require meaningful user consent for release. Standards should be written to define what "meaningful user consent" really means.
  3. The biometric information and signature of the holder is optionally included in the mDL. This is information that should never be released from the person that holds it as is stated in an non-normative appendix. It is meant to be used for activation (C.1.6.4), but that is not described and E.12 says that "the mDL reader may implement biometric comparison of the person presenting the mDL to the portrait." The exact meaning of that last sentence is unclear.

References:

Authenticity

  1. Apps can be created that mimic Mobile Driver's Licenses that either fool the user, or are intended to allow the user to fool the acceptor of the data. Where legal obligation exist to check the authenticity of user provided data, it is likely that apps will need to prove their authenticity to the reader. Specifications for proving authenticity should be written. Kantara currently has an implementer's draft of such an assurance statement.
  2. States are likely to require that smartphone apps meet certain criteria and a wont to accept existing specifications rather than write their own.
  3. Readers of Mobile Driver's Licenses were imagined in the ISO 18013-5 standard to be certified. Specifications for the certifications of reader that meet privacy and identity requirements are needed.
  4. In an ideal world the Mobile Driver's License would not even respond to requests for data from readers that were not certified.

User Experience

  • All the examples of issued mobile driver's licenses have focuses on issuing the innocence and perhaps using it to shorten the wait times at airports.
  • One exception is a few effort to use the mobile driver's app as a Smartphone Verifier device, in particular the LA app can work both ways.
  • The following is a use case generator which requires an email address to access. Download our mDL Use Case Template Today!

Solutions

Android

Apple iOS

Testing

Connection Protocols

The language for defining the mDL is RFC 8610 CDDL. Occurrence is the one oddity. It is (1) one of the characters "?" (optional), "*" (zero or more), or "+" (one or more) or (2) of the form n*m for min and max. Also "tstr" = text string and "bstr" = byte string, and tdate is something like 1985-04-12T23:20:50.52Z.

Security

North America

US Federal Regulations

State Wallets

This section is focused on implementations in North America at present.

  • Maryland rolled out mDLs to smartphone users in 2022.60 The credentials are created by taking a photo of the front and back of their physical driver’s license and a short video of themselves, which is then sent to issuing authorities for verification. When the information is verified, the[3] individual may add it to their Google or Apple wallets and, where accepted, use it in place of the physical credential
  • Phoenix AZ Sky Harbor Airport is accepting the AZ mDL at TSA gates. 2022-03-23. and Apple's announcement of that.
  • Florida will also use Apple Wallet 2021-10-14 with a current list of all states supporting apple wallet.
  • Utah was feature in an article on the outlooks for mdl that reported "Ryan Williams, with the Utah Driver's License Division, displays his cellphone with the pilot version of the state's mobile ID on Wednesday, May 5, 2021, in West Valley City, Utah. In Utah, over 100 people have a pilot version of the state's mobile ID, and that number is expected to grow to 10,000 by year's end. Widespread production is expected to begin at the start of 2022." Pam Dixon, executive director of the World Privacy Forum was quoted saying “Most people want some kind of a hard token for their identity, but I don’t know how long that will last, I would imagine that at some point, maybe in a generation, maybe less, that people will accept a fully digital system.”
  • Apple announces first states signed up to adopt driver’s licenses and state IDs in Apple Wallet 2021-09-01 Arizona, Connecticut, Georgia, Iowa, Kentucky, Maryland, Oklahoma, and Utah are among the first states to bring state IDs and driver’s licenses in Wallet to their residents
  • A Delaware mobile ID is now a reality 2021-03-10 The app requires users to capture and upload their physical ID as well as a live selfie to compare against the individual’s file with the Delaware DMV. According to state officials, security features, including strong encryption standards, help fight identity theft. "You don't need passwords or usernames because it's based on your biometrics," said DMV spokesperson Marinah Carver. "You cannot use your mobile ID without inputting either your face or your fingerprint. "We're not sharing that data with anyone else, and it can't be accessed through a third party." In addition to safety, Carver said a contactless ID as part of a digital wallet is also a healthier option in a post-COVID world. The program is voluntary and optional and by law. A person is still required to carry their physical credential as applicable for age and identity verification. "You can try it for a bit," said Carver. "If it's not for you, you can opt back out. It's certainly not a replacement at this time to your physical credential." Carver said the mobile ID has not yet been accepted in a law enforcement setting. The DVM offers apps on Apple and Android stores. It allows both a straight scan of the back of the card, or a privacy preserving one of the bar codes only from the physical care or a QR code. At the user's discretion.
  • Iowa Mobile ID mID is reported by IDEMIA to be the first with UL certification 2021-03-11.
  • Award-winning myColorado™ App Offers Residents a Contactless Digital ID Colorado is the first state in the nation to offer residents the option to electronically transmit digital identification, vehicle registration and proof of insurance to law enforcement. They require the state trooper to show you a QR code first. Interestingly the feature has been extended to allow the phone's camera to scan the QR code, which indicates that the URL just sends the data from the DMV to the trooper's computer. After that the user has the option to give the cop what she wants, or dig out the paper version of all 3 documents. The business use of the mDL is a simple display of the back of the physical DL on the screen of the phone so the merchants can scan the 2d barcode in the same way as with the physical DL. It appears that Colorado was involved in app development at some level. Users add their identification in the myColorado app by taking a selfie with the in-app camera as well as a photo of their physical driver’s license or state ID. Several authentication points, including the selfie, the physical card’s bar code and the resident’s phone number are then verified against Division of Motor Vehicles records. The state government is using an identity verification and management platform from Ping Identity Holding Corp., which is based in Denver. The development of Colorado’s digital-ID application started in early 2019 and has cost about $800,000. Much of the effort has involved interacting with state agencies and merchants on features and adoption. Theresa Szczurek has been Colorado’s chief information officer since January 2020. “We discovered that proof of identification without carrying the wallet was really the killer app,” said Ms. Szczurek, who was chief executive of Radish Systems LLC for nine years before becoming state CIO in January. Radish, based in Boulder, Colo., sells software that integrates visuals into phone calls.
  • Identity Services for myColorado™ Mobile App Powered by Ping Identity report from PING dated 2019-11-12.
  • Louisiana adds vaccine status to digital driver’s License App 2021-05-07
  • NBC News reports that Calvin Fabre, president of Envoc, a software firm in Baton Rouge, Louisiana, that helped develop a mobile app to display digital driver's licenses in Louisiana, said most drivers under 40 won't go back home if they forget their plastic license — "but if they forget their phone, they always turn around." It looks like Envoc programs in .NET and Xamarin.
  • [https://www.govtech.com/news/Digital-Drivers-License-Pilot-Comes-to-Wyoming.html Wyoming is piloting a digital driver's license} base on Gemalto technology. (2017-10-05) for only 100 people. The app isn’t connected to the Internet, so there’s virtually no risk of someone tracking a user’s whereabouts or personal information based on when they open the license, said Steve Purdy, Gemalto’s vice president of state government programs. In order to enter the app, people have to enter a five-digit password or use fingerprint identification. “All it does is show your photo and whether or not you’re 21,” Purdy said. Gemalto provides the existing card license to WY.
  • Ontario program with potential to eliminate our need to carry around physical health cards, driver's licenses and other forms of provincially-issued ID. blogTO (2020-11)

Wallet Spread Sheet

State Code Provider ISO Notes
Federal US TSA-yes there is no national ID process but lots of agencies that issue and verifier Identifiers
ALABAMA AL Idemia eID - has been around since 2015 w/o much use
ALASKA AK
AMERICAN SAMOA AS
ARIZONA AZ 2020 Idemia on Apple yes MID 2021-03 - accepted by TSA at Sky Harbor 2022-03-23 mobile ID app
ARKANSAS AR authorized Digital copy for $10
CALIFORNIA CA own app that's dev @ Spruce +apple, Goog yes + VC, TrueAge 2023 California’s Digital ID Project rolled out early 2024 FREE to all that have a state ID record - 3 separate creds MDOC, VC, TrueAGE 2024-08-18 Governor adds Apple & Google apps
COLORADO CO Thales pilot not at first 2021myColorado is a state-sponsored app that offers proof of identification, age, and address within the state. By 2022-10 they included Apple (ISO?)
CONNECTICUT CT Connecticut is working with Apple to develop virtual IDs 2022
DELAWARE DE Idemia yes 2022 MID - holder MUST be able to present physical card on request
DISTRICT OF COLUMBIA DC
FEDERATED STATES OF MICRONESIA FM
FLORIDA FL Thales 2021 - but then suspended Apple Wallet - Ron Hurtibise South Florida Sun Sentinel 2023-04-02 ** 2024-07-10 Cancelled existing vendor - new one next year
GEORGIA GA Apl Goog Sam yes 2023 Apple Wallet and TSA acceptance (2023-05-18) free 2024 Google added
GUAM GU
HAWAII HI Apple yes 2024-08 Your Hawaiʻi driver’s license and state ID. Terminal 1 Makai Checkpoint of the Daniel K. Inouye International Airport, now accepts the mDL
IDAHO ID
ILLINOIS IL 2025 Current Bill 2024-05
INDIANA IN
IOWA IA Iowa Mobile ID app by Idemia 2921 2023-08-29 with TSAPreCheck can present ID on phone when departing from @fly_CID and @dsmairport = Apple later
KANSAS KS
KENTUCKY KY Apple later 2022
LOUISIANA LA home-grown both holder and verifier claims yes 2018 LA Wallet cost user $6 + fee on verification - very high penetration of market- includes VAX status
MAINE ME
MARSHALL ISLANDS MH
MARYLAND MD Thales on Apl Goog Sam AAMVA 2024.04 2022 free - 2022-12-15 testing with Google 2024-06-24 added Samsung only use appears to be in two large airports - 200,000 downloads
MASSACHUSETTS MA
MICHIGAN MI 2023
MINNESOTA MN
MISSISSIPPI MS Idemia Apple Goog https://www.driverservicebureau.dps.ms.gov/mobile-id/ Apple later
MISSOURI MO 2023 released app and then withdrew it status unclear 2024-09
MONTANA MT 2025
NEBRASKA NE
NEVADA NV
NEW HAMPSHIRE NH
NEW JERSEY NJ 2025
NEW MEXICO NM
NEW YORK NY Idemia yes 2024 2024-06-11 digital version of a state-issued driver license, learner permit or ID on a smartphone.” Governor says the optional ID means New Yorkers will be able to quickly display their IDs and enjoy enhanced security
NORTH CAROLINA NC 2025 2024-06-21 Introduces a bill
NORTH DAKOTA ND 2025
NORTHERN MARIANA ISLANDS MP
OHIO OH Apl yes 2024 Legislation introduced 22-09-27 apple available 2024-07-31 accepted by TSA
OKLAHOMA OK Idemia yes 2022 - scans CARD - Apple later
OREGON OR
PALAU PW
PENNSYLVANIA PA
PUERTO RICO PR Apple later
RHODE ISLAND RI
SOUTH CAROLINA SC
SOUTH DAKOTA SD
TENNESSEE TN 2025 HB556 in 2015 - RFP 2020-12
TEXAS TX
UTAH UT GET & Scytales AAMVA 2024.04 2021 Apple later - test mdl in Alcohol purchases You can use it at Salt Lake Airport (SLC) when TSA PreCheck verifies your identity (2023-03-01) FaceTec
VERMONT VT
VIRGIN ISLANDS VI
VIRGINIA VA home grown 2024 avail. early 2024 already works with TSA
WASHINGTON WA bill aims to allow digital driver’s licenses in Washington state 2023-01 = (DOL) is actively assessing technical infrastructure to maximize interoperability, utility, and privacy protection for mDLs
WEST VIRGINIA WV 2025
WISCONSIN WI
WYOMING WY Thales pilot 2025
Province/Territory code
ALBERTA AB
BRITISH COLUMBIA BC Issued VC for personal ID and court records - little impact
MANITOBA MB
NEW BRUNSWICK NB
NOVA SCOTIA NS
NEWFOUNDLAND NF
NORTHWEST TERRITORIES NT
ONTARIO ON Announced future plans
PRINCE EDWARD ISLAND PE
QUEBEC QC
SASKATCHEWAN SK
YUKON YT
Australia AU mDL VICAL available The states have an agreement for mDL 2024-01-25 Uber accepts mDL for proof of age and presence of person ordering the goods. * the have a root VICAL cert that includes other countries already
New South Wales NSW thales 3.9 million opt-in to mDL 2022 But Problems detected early Also lots of blog chatter about apple & google
EU dreaming with EIDAS 2.0 and EUDIW in 2024 sked for 2026
Austria AT Youniqx ID AG can download eAusausweis app since 2022 and present only within Austria during roadside checks- do not need physical card with you 2024-09 380K activated
China 24-11-11 Select cities in mainland China have already implemented the change to digital ID documents.
Switzerland published on GitHub Mid 2024 Decentralized Identifiers (DIDs) v1.0 according to W3C DID Method: did:tdw
Moldova 24-06-14 released EVO ID app driver’s licenses and registrations, the app contains the government electronic payment module MPay and a document verification module.
Honk Kong 2024-11-11 Mobile driver’s licenses to launch in Hong Kong in 2025
Indonesia Government Mandated ID with mDL among other licenses
New Zealand 2024-06 in Beta mode, asking for your help in testing the app and to provide feedback. Information on how to download and take part in testing the app
Morocco The Moroccan national identity card (Arabic: البطاقة الوطنية للتعريف, Standard Moroccan Tamazight: ⵜⴽⴰⵕⴹⴰ ⵜⴰⵏⴰⵎⵓⵔⵜ, French: carte nationale d'identité; CNI) is the biometric identity document for Moroccan citizens consisting of an electronic ID-1 smart card with identifying information
North Macedonia MK 2024-11-01 North Macedonia launching digital ID wallet, mDL
Singapore ID
Ukraine 22-12-09 First implementation to not require a plastic card as well

User Problems

Q indicates a question from a real user.

  1. Q Why is there no way to validate [scan] the QR code I was given?
  2. Navigating to Apple Store from Google on a PC hangs.
  3. At a minimum your mobile phone number is known to the State DMV/MID.
  4. The Idemia apps scan the physical card and allow the user to display the front or the bar code from the back of the card. (Not part of ISO as of 2022.)
  5. The current process is a long back and forth (user facing / verifier facing) process. (not the tap and go experience expected.)
    1. Open the Mobile ID app.
    2. Go to the "Me"/home screen.
    3. Tap the "Share" icon next to "Generate privacy code."
    4. Present the QR code for scanning to initiate the connection with the verifying device.
    5. Accept (or Decline) the request to share information under "IDs."

References

  1. ↑ Edward Hasbrouck, How the REAL-ID Act is creating a national ID database (2016-02-11) https://papersplease.org/wp/2016/02/11/how-the-real-id-act-is-creating-a-national-id-database/
  2. ↑ Edward Hasbrouck, Comments on TSA proposal for decentralized nonstandard ID requirements (2024-10-14 https://papersplease.org/wp/2024/10/14/comments-on-tsa-proposal-for-decentralized-nonstandard-id-requirements/
  3. ↑ Jordan Pascale,Maryland Launches Digital Version Of Driver’s License On IPhon DCist, (2022-05-26) https://dcist.com/story/22/05/26/maryland-digital-drivers-license/

Other Material

Retrieved from "http://tcwiki.azurewebsites.net/index.php?title=Mobile_Driver%27s_License&oldid=22374"