ID2020 AllianceTechnical Requirements + Certification Mark

Identification Lifecycle

Registration

Verification

AuthenticationAuthorization

�3

Persistent:Lives with you from life to deathPersonal:Unique to you and you onlyPortable:Accessible anywhere you happen to be (across services)Private:Only you can give permission to use data

If implemented thoughtfully, digital identity can empower individuals and serve as critical digital infrastructure

Health:Unique ID enables health tracking (i.e. digital immunization card and portable EMR)Financial Inclusion:Enables CBTs and digital payments, could facilitate eKYCSocial Protection:May reduce leakages and enable better targeting of intended beneficiariesMobility and Migration:May remove barriers to cross-border migration

Good Digital Identity

Today

Digital Tools

Employment

Health

Financial Services

Education

Government

EducationFinancial Services

Gov’tHealth

Portable, User-Centric IdentitySiloed, Non-Portable Identity

Employment

Digital Tools

Technical requirements: tech-agnostic, outcomes-based guidelines on “good” IDCertification mark: recognizing integrated solutions that meet technical requirements

Our certification mark incentivizes the development of good digital identity technology, making it easier to confidently navigate procurement.

Product DifferentiationCompanies can demonstrate their adherence to the highest ethical standards by certifying their products as ID2020 compliant

Easier AdoptionThe certification mark provides valuable shorthand for organizations looking to implement digital identity systems.

Drives Convergence on Technical StandardsConvergence yields meaningful interoperability and therefore more value for end users

Race to the TopAs certified products gain distinction in the marketplace, the entire market shifts towards good digital ID

Certification Mark

Technical RequirementsID2020 Technical Requirements: V1.0 Please email info@id2020.org with any comments or questions - we’d love to hear from you.

Requirement Commentary

1 APPLICABILITY

1.1 Must be useful in both physical, offline and online scenarios.

Must take into account of, but not limited to the following:

1. Power may not be available to support identity transaction(s)

2. Wired or wireless data or cellular services may not be available to complete identity transaction(s)

3. Service requestor may not have a portable device

4. Service provider may have limited IT infrastructure

1.2 Must be resilient / usable in “rugged” environments.

Field equipment must be able to sustain long-term use in rugged environments for periods of time that exceed any pilot phase for example multiple years beyond implementation.

1.3 Must be cost effective across all aspects of the identity lifecycle.

Where the identity lifecycle is defined as: 1. Identity Proofing 2. Issuance 3. Authentication 4. Authorization 5. ID management (including Recovery)

1.4 Must be easy for end-users to use throughout the identity lifecycle and require minimal user education

A human-centric design should be adopted.

1.5 Must be easy to implement by the Relying Party and have a clear explanation of cost as well as implications for the use of digital identity.

The Relying Party should be able to easily implement due to open standards, open APIs, and commonly available skills (for example OIDC and OAuth). The cost of implementation should be clearly defined for a Relying Party as well as the level of trust that can be placed in assertions of identity based on either legal or trust frameworks (for example).

1.6 Must be easy for implementing agents to use

A human-centric design should be adopted.

Certification Mark

Active Certification Use-Cases

Digital Health ID for Health Services Sector, Bangladesh• Partners: Government of Bangladesh; Gavi, the Vaccine Alliance• Use: ID2020 supports drafting RFI; partners leveraging certification process to

evaluate identity service providers; ID2020 providing ongoing programmatic and technical guidance

Ongoing Provider-focused Market Shaping • Partners: 17 technology providers• Use: ID2020 offers ongoing guidance to providers in ID ecosystem on how to

“get to good.” Currently reviewing 17 providers for certification. Providers report: enhanced offerings and greater visibility in community.

Active ID2020 Pilots

Improving LPG subsidy delivery in Indonesia• Partners: Everest, TNP2K• Technology: blockchain and

biometrics

Enhancing healthcare treatment and livelihood programs in Mae La Camp • Partners: IRC, iRespond• Technology: Iris-scanning

biometrics with Hyperledger Indy distributed ledger technology

How can NGOs, governments, corporations leverage certification mark?

Solicitation• Embed ID2020 certification process into RFI/RFP process, ID2020 acts as

external evaluator of respondents• Work with ID2020 to craft RFI/RFP in accordance with technical requirements

Evaluation• ID2020 Secretariat evaluates responses using certification process• ID2020 Secretariat works with procuring organization to offer ongoing guidance

(technical, programmatic) throughout the procurement process

Selection• Partner organization selects provider based in part on ID2020 evaluation and/or

guidance

ID2020 AllianceConclusion