W3C home > Mailing lists > Public > public-credentials@w3.org > November 2021

RE: Verifiable Driver's Licenses and ISO-18013-5 (mDL)

From: Michael Herman (Trusted Digital Web) <mwherman@parallelspace.net>
Date: Mon, 29 Nov 2021 18:05:10 +0000
To: Manu Sporny <msporny@digitalbazaar.com>, W3C Credentials CG <public-credentials@w3.org>
Message-ID: <MWHPR1301MB209470C21122E0CE600F348DC3669@MWHPR1301MB2094.namprd13.prod.outlook.com>
As with all past standards (ad-hoc, defacto, or otherwise), an #EmbraceAndExtend strategy is often the most useful approach.

Reference: https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish


-----Original Message-----
From: Manu Sporny <msporny@digitalbazaar.com> 
Sent: Monday, November 29, 2021 9:55 AM
To: W3C Credentials CG <public-credentials@w3.org>
Subject: Verifiable Driver's Licenses and ISO-18013-5 (mDL)

Hi all,

As some of you might be aware, ISO-18013-5 (mDL -- Mobile Driver's License[1]) was published as a global ISO standard in September 2021. A number of us in the W3C CCG and W3C VCWG attempted to ensure that W3C Verifiable Credentials were supported by the mDL work, but that effort is not reflected in the finalized ISO mDL standard (and due to the way ISO operates, we are not at liberty to share any details). There have been increasing concerns related to the divergence of mDL with W3C Verifiable Credentials[2][3][4][5][6] and to the market dynamics at play[7][8] around mDL.

In an effort to demonstrate that it is possible to express the entire mDL data model, Spruce, MATTR, and Digital Bazaar have collaborated on creating an interoperability test suite for something we're calling the "Verifiable Driver's License" (temporary name):

http://w3id.org/vdl/interop-reports


The test suite demonstrates that a few things are possible in addition to what mDL provides:

1. The mDL data model can be expressed cleanly using W3C Verifiable Credentials.

2. The Verifiable Driver's License can be issued and verified today using the Verifiable Credentials API (mDL does not provide any details on issuance/verification infrastructure).

3. There is demonstrable interoperability today among at least 3 vendors, and we expect that to be true among all the vendors that comply with the Verifiable Credentials API today (we invite all vendors to add their implementations to the test suite).

4. It is possible to express the vDL as a compact QR Code, thus providing a "path to paper" (mDL has no path to paper).

5. It is possible to utilize the BBS+ selective disclosure mechanism to selectively disclose subsets of the Verifiable Driver's License Credential.

6. It is possible to utilize privacy-preserving revocation mechanisms that don't phone home (utilizing privacy-aware technologies like StatusList2021).

7. The Verifiable Driver's License can be exchanged in online scenarios using some of the emerging open wallet protocols. There is also support for offline exchange (via QR Codes and other optical carriers).

All that said, it is also important to understand that the current W3C Verifiable Credentials ecosystem is not capable of radio transmission of the Verifiable Driver's License (e.g., at airline security checkpoints or police traffic stops), and does not currently have the backing of any known "certified" mDL vendor. This is not a case where there is a clear winner; this is the start to a concrete public engagement about the future of these technologies as applied to driving credentials.

CCG Chairs,

Spruce, MATTR, and Digital Bazaar would like to request some time on an upcoming CCG call to introduce this work item to the group and see if there is interest in picking it up:

https://github.com/w3c-ccg/community/issues/218


-- manu

[1]https://www.iso.org/standard/69084.html (paywalled) [2]https://downloads.regulations.gov/DHS-2020-0028-0032/attachment_1.pdf

[3]https://downloads.regulations.gov/DHS-2020-0028-0048/attachment_1.pdf

[4]https://downloads.regulations.gov/DHS-2020-0028-0055/attachment_1.pdf

[5]https://downloads.regulations.gov/DHS-2020-0028-0045/attachment_1.pdf

[6]https://downloads.regulations.gov/DHS-2020-0028-0062/attachment_1.pdf

[7]https://www.cnbc.com/2021/11/14/apple-sticking-taxpayers-with-part-of-the-bill-for-digital-id-rollout.html


[8]https://www.slashgear.com/apple-delays-controversial-iphone-drivers-license-feature-24700470/


--
Manu Sporny - https://www.linkedin.com/in/manusporny/

Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021) https://www.digitalbazaar.com/



Received on Monday, 29 November 2021 18:05:28 UTC

This archive was generated by hypermail 2.4.0 : Thursday, 24 March 2022 20:25:24 UTC