Verifiable Driver's Licenses and ISO-18013-5 (mDL)

Hi all,

As some of you might be aware, ISO-18013-5 (mDL -- Mobile Driver's License[1])
was published as a global ISO standard in September 2021. A number of us in
the W3C CCG and W3C VCWG attempted to ensure that W3C Verifiable Credentials
were supported by the mDL work, but that effort is not reflected in the
finalized ISO mDL standard (and due to the way ISO operates, we are not at
liberty to share any details). There have been increasing concerns related to
the divergence of mDL with W3C Verifiable Credentials[2][3][4][5][6] and to
the market dynamics at play[7][8] around mDL.

In an effort to demonstrate that it is possible to express the entire mDL data
model, Spruce, MATTR, and Digital Bazaar have collaborated on creating an
interoperability test suite for something we're calling the "Verifiable
Driver's License" (temporary name):

http://w3id.org/vdl/interop-reports

The test suite demonstrates that a few things are possible in addition to what
mDL provides:

1. The mDL data model can be expressed cleanly using W3C Verifiable Credentials.

2. The Verifiable Driver's License can be issued and verified today using the
Verifiable Credentials API (mDL does not provide any details on
issuance/verification infrastructure).

3. There is demonstrable interoperability today among at least 3 vendors, and
we expect that to be true among all the vendors that comply with the
Verifiable Credentials API today (we invite all vendors to add their
implementations to the test suite).

4. It is possible to express the vDL as a compact QR Code, thus providing a
"path to paper" (mDL has no path to paper).

5. It is possible to utilize the BBS+ selective disclosure mechanism to
selectively disclose subsets of the Verifiable Driver's License Credential.

6. It is possible to utilize privacy-preserving revocation mechanisms that
don't phone home (utilizing privacy-aware technologies like StatusList2021).

7. The Verifiable Driver's License can be exchanged in online scenarios using
some of the emerging open wallet protocols. There is also support for offline
exchange (via QR Codes and other optical carriers).

All that said, it is also important to understand that the current W3C
Verifiable Credentials ecosystem is not capable of radio transmission of the
Verifiable Driver's License (e.g., at airline security checkpoints or police
traffic stops), and does not currently have the backing of any known
"certified" mDL vendor. This is not a case where there is a clear winner; this
is the start to a concrete public engagement about the future of these
technologies as applied to driving credentials.

CCG Chairs,

Spruce, MATTR, and Digital Bazaar would like to request some time on an
upcoming CCG call to introduce this work item to the group and see if there is
interest in picking it up:

https://github.com/w3c-ccg/community/issues/218

-- manu

[1]https://www.iso.org/standard/69084.html (paywalled)
[2]https://downloads.regulations.gov/DHS-2020-0028-0032/attachment_1.pdf
[3]https://downloads.regulations.gov/DHS-2020-0028-0048/attachment_1.pdf
[4]https://downloads.regulations.gov/DHS-2020-0028-0055/attachment_1.pdf
[5]https://downloads.regulations.gov/DHS-2020-0028-0045/attachment_1.pdf
[6]https://downloads.regulations.gov/DHS-2020-0028-0062/attachment_1.pdf
[7]https://www.cnbc.com/2021/11/14/apple-sticking-taxpayers-with-part-of-the-bill-for-digital-id-rollout.html

[8]https://www.slashgear.com/apple-delays-controversial-iphone-drivers-license-feature-24700470/

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021)
https://www.digitalbazaar.com/

Received on Monday, 29 November 2021 14:55:33 UTC