The European Commission has asked the European Union Cybersecurity Agency (ENISA) to develop a candidate scheme for cybersecurity certification of EU Digital Identity (EUDI) wallets.
This request is part of a broader request to provide support for authentication of digital identity wallets.
ENISA will provide uniform requirements for authentication to help EU member states establish national authentication schemes. The agency will participate in the development of implementing acts that will establish a list of reference standards, where appropriate, along with specifications and procedures for safeguarding security and privacy. The EC has also asked ENISA to begin the process of launching a cybersecurity scheme for EUDI wallets and the digital identities they hold, with reference to the Cybersecurity Act.
The European Digital Identity Framework came into force in May, and EU member states are required to start offering EUDI wallets within two years of adopting the implementing act.
“The certification of the EU Digital Identity Wallet is key to making the wallet concept work,” said Christiane Kirketerp de Villon, Acting Director for Digital Society, Trust and Cybersecurity at the European Commission. “The certification ensures that the EUDI wallet is secure and that users’ privacy and personal data are protected. It also ensures that citizens can use their national digital wallets across the EU.”
The EU finished gathering comments on its cybersecurity certification scheme earlier this month, and the feedback it received made it clear that certification standards will be closely monitored, including how they limit the over-sharing of consumer data.
According to the announcement, existing and upcoming certification schemes will be taken into account by ENISA, such as the European Cybersecurity Certification Scheme based on Common Criteria and the draft European Certification Scheme for Cloud Services.
Commenting on the EUDI Wallet cybersecurity certification scheme, ENISA Executive Director Juhan Lepassaar said: “ENISA supports the European Commission and the Member States in developing cybersecurity controls in the field of digital identity and ensuring their timely implementation across the EU. The digital wallet will contribute to the digital maturity of the EU and enhance cybersecurity and privacy for citizens.”
ENISA already supports the eIDAS Expert Group and the Certification Subgroup and will cooperate with Member States and stakeholders on certification projects. A special working group will be set up and will work in coordination with the European Cybersecurity Certification Group.
Clues as to what the proposed authentication scheme might look like may be found in the recommendations made by ENISA for EUDI wallets in its Digital Identity Standards report last July. Meanwhile, EUDI wallet pilots are underway and will certainly have an impact on the development of authentication schemes as well.
Article Topics
Authentication | Cybersecurity | Digital ID | Digital Wallets | ENISA | EU Digital ID Wallet
Latest Biometric News
September 24, 2024 3:53 PM EDT
A new Europol report titled “AI and Policing” examines how artificial intelligence, and in particular facial recognition technology, can be used to…
September 24, 2024 1:29 PM EDT
The Republican National Committee and the North Carolina Republican Party are opposing the University of North Carolina at Chapel Hill’s decision to allow digital IDs for students…
September 24, 2024, 12:30 PM EDT
ComplyCube has recently integrated with the American Association of Motor Vehicle Administrators (AAMVA) and the UK Driver Licensing Agency.
September 24, 2024 12:22 PM EDT
Companies looking to integrate software and services to serve the separate but related roles in digital identity and access management…
September 24, 2024, 9:07 a.m. EDT
Two digital identity experts working with the United Nations Development Programme (UNDP) have called on the Malawi government, private companies and government agencies to…
September 24, 2024 8:38 AM EDT
Veridos worked with Credence ID to design an identity verification device, the VeriCHECK M500+, that can support digital credentials and more.
