This document summarizes IdentityNORTH's mobile ID demonstration and ecosystem. It discusses how mobile IDs will be interoperable through standardization bodies like ISO and AAMVA. The mobile ID ecosystem involves an issuing authority provisioning mobile IDs to citizens, which can then be validated and personal data obtained and trusted by service providers. ISO 18013-5 creates trust by having issuers sign data with private keys, encrypting transmissions, and using signer certificates and trust lists of certified certificate authorities.

1. IdentityNORTH
Mobile ID Demonstration

2. Mobile ID is not
an image of an
ID Card or
Driver’s License
Photoshop, Screenshots, Barcode generators, Image
sharing, & the lack of Trusted Screen Environment make
this an expensive mistake someone will make.
2

3. INTEROPERABILITY THROUGH STANDARDIZATION
Interoperability is critical for the success of any Mobile Identity program and the foundation
upon which country and state issued DLs/IDs are accepted across jurisdictional (national and
international) boundaries
GET is an active member and participates
• ISO SC17 Working Group 10 & Task Force 14 Mobile Driver’s License + mID
• ISO18013 – Part 5 - Standard to be published Q1 2020 (and Committee
Drafts Available now)
• AAMVA mDL Working Group- Standards for North America
• ICAO Compliance (Partial 9303)
• Brings Passport interoperability to the driver license world
3
All of this will make it possible to present and authenticate a Mobile
ID across jurisdictional (national and international) boundaries

4. Service Providers (Web)
MOBILE IDENTITY ECOSYSTEM
4
www.getgroupna.com
© Copyright by GET Group 2018
Provision DL/ID
Validate mDL/mID
18013-5
Obtain & Trust Data
OpenID Connect
GET Identity Provider
Issuing Authority
•GET Mobile
Administrator
In-Person Verifier
•GET Mobile Verify
• GET Verifier Toolkit
Citizen Mobile
•GET Mobile ID
• GET mID Toolkit
• GET ePassport Toolkit

5. HOW TRUST IS CREATED IN ISO 18013-5
• Data is signed by the Issuer private key, relayed to the device with Mobile Security Objects
• If the data is tampered with, the signature will not verify (Passive Authentication)
• Active Authentication protocol confirms that mDL is still on the device to which it was originally issued
• All transmissions are Encrypted with session keys unique to those two devices for that transmit event
• A Signer Certificate (CSCA) is made public by the Issuer
• Lists of CSCAs from well-known Issuers can be assembled
• A Trust List is a list of trusted CSCAs signed by the aggregator
5
Issuer Mobile
ID (mDL)
Verifiers
Trust ListsSigner Certs
ISO 18013-5

6. Any Questions?
Scott Vien
Director of Business Development
svien@getgroupna.com
1-617-902-8577
6