Secure online authentication method using mobile id document

Abstract

Abstract A secure online authentication method of a user by a relying party using a mobile ID document uses a secret to consent to a retrieval of a dedicated data field, wherein an access token is generated, including a proof, which is used by the relying party to transmit an access request to the mobile document issuer, trading the token for an authentication document comprising the personal data related to the dedicated data field by the document issuer to the relying party, wherein the proof verification material is extracted from the authentication document and checked to access said personal data and accepting the online authentication of the user. Fig 7 Abstract A secure online authentication method of a user by a relying party using a mobile ID document uses a secret to consent to a retrieval of a dedicated data field, wherein an access token is generated, including a proof, which is used by the relying party to transmit an access request to the mobile document issuer, trading the token for an authentication document comprising the personal data related to the dedicated data field by the document issuer to the relying party, wherein the proof verification material is extracted from the authentication document and checked to access said personal data and accepting the online authentication of the user. Fig 7 20 24 28 71 83 23 D ec 2 02 4 A b s t r a c t 2 0 2 4 2 8 7 1 8 3 2 3 D e c 2 0 2 4 v e r i f i c a t i o n m a t e r i a l i s e x t r a c t e d f r o m t h e a u t h e n t i c a t i o n d o c u m e n t a n d c h e c k e d t o a c c e s s s a i d 6 / 6 F IG . 7 Relying Party Registry / Web Page Backend Blockchain Document Issuer Holder App Holder 28 decryptToken(RP_DEC_KEY, ENC_ENG_STRUCT) 29 checkForProof(ENG_STRUCT) 30 getAttribues(ISOAccessToken) 31 verifyISOAccessToken(ISOAccessToken) 32 createReply(ISOAccessToken) 33 ISO Data 34 extractProofVerificationMaterial 35 verifyProof(PROOF, PROOF_VERIF_MAT) 36 Evaluate ISO Data 37 Finish enrollment 38 redirect enrollment success page FIG. 7 20 24 28 71 83 23 D ec 2 02 4 2 0 2 4 2 8 7 1 8 3 2 3 D e c 2 0 2 4 R e l y i n g P a r t y R e g i s t r y / H o l d e r A p p W e b P a g e B a c k e n d B l o c k c h a i n Document Issuer H o l d e r 28 decryptToken(RP_DEC_KEY, ENC_ENG_STRUCT) 29 checkForProof(ENG_STRUCT) 30 getAttribues(ISOAccessToken) 9 / 9 33 ISO Data 34 extractProofVerificationMaterial 35 verifyProof(PROOF, PROOF_VERIF_MAT) 36 Evaluate ISO Data 37 Finish enrollment 38 redirect enrollment success page

Description

RELATED APPLICATION

[0001] The present application is a divisional application from Australian Patent Application No. 2022231351, the entire disclosure of which is incorporated herein by reference. TECHNICAL FIELD

[0002] The present invention relates to a secure online authentication method using mobile ID document. PRIOR ART

[0003] Mobile ID documents and wallets are designed primarily as convenient and secure physical documents alternatives, mainly bringing convenience to citizens and instant reissuance service to governments. Secure design and relevant standards are setting up a trusted and interoperable domain for historical face-to-face ID verification use cases.

[0004] But at the eve of distancing and preference for online interactions, extending these mobile ID documents to online interactions is a real opportunity to enhance trust and privacy control in this untrusted and risky environment.

[0005] Ecosystem for face to face usage will take off slowly, first with law enforcement and then private sector, but there is an even larger market for online use by any Relying Party (RP).

[0006] ISO 18013-5 defines and enables a personal identification, especially an ISO-compliant driving license which is used within a mobile driving license (mDL) application. A Citizen (called Holder) owns a digital ID document in his mobile wallet, issued by an issuing entity (called Issuer) trusted by the Relying Party (called verifier). This digital document contains civil ID attributes like family name, first name, place of birth, date of birth, address etc. It may also contain entitlement attributes like right to drive a certain class of car, trucks, or boats. Documents also has a validity date attribute. Such a mobile ID document is defined by ISO 18013-5 and possesses appropriate technical attributes to prove it is genuine (not cloned or tampered) by using some signature & active authentication keys.

[0007] ISO 18013-5 also provides means for holder to deliver “online retrieval tokens” to local ID verifiers via proximity networking, as they may contact the document Issuer backend to collect these user attributes directly from the issuer, probably ‘more up to date’. 2024287183   23 Dec 2024

[0008] User authentication (ensuring holder is the legitimate owner of the provided document) is achieved ‘manually’ by human verifier, based on visual comparison of user face against portrait possibly included in the provided document, after verifier first ensured it is a valid document (signed by a trusted issuer), and that holder proved possession of the associated active authentication key (non-cloned document).

[0009] User is also in control of his privacy as RP explicitly requests ID attributes he needs to have, and user will provide express consent to share these attributes, and nothing else. SUMMARY OF THE INVENTION

[0010] It is noted that in ISO 18013-5 standard, some trust aspects are expected to come from the face-to-face context. In other words, the human verifier must check the portrait against the holder’s face ‘manually’. User also gets confidence on verifier’s identity / role and legitimacy of his claims from the surroundings (e.g. police force car & suit, rental car shop, bank desk, ..)

[0011] It an object of the present invention to replace the manual face matching when unattended. There are face recognition techniques being able to perform such face matching of an image with an image of an official document. It is a further object to address PCs with no cameras or low cost devices as e.g. kiosks and telling machines, i.e. where the camera is not performant enough to provide a face recognition match and or where the processing power of the electronic processor is not capable of doing so.

[0012] A further object comprises mitigating user fear of being matched by a machine.

[0013] If an electronic document is used, e.g. stored on a smart phone, it is possible that several persons, e.g. family members, can be enrolled to a phone, and it is a further object to identify legitimate document owner within this group of enrolled people.

[0014] Based on the above requirements, a sample target use case for this invention which is not possible with the prior art develops as follows:

[0015] User (Holder) is booking a car with online RP service for the first time, and needs to go through enrollment process. By law, online RP must verify driver age, his entitlement to drive and be able to redirect possible fines to driver’s address in case of bad behavior on the road. On the other side, the holder wants to control what ID attributes are shared and securely transmit them in a convenient way, while being sure RP is a ‘trusted RP’, in view of the fact that his official ID attributes comprises further information which are of no relevance in the 2024287183   23 Dec 2024 present case as e.g. height of the user. Finally, RP also wants to keep cost of ID verification low, enhance user adaption and simplify processes to deliver instantaneous service.

[0016] As it is clear from above, the solution of the process comprises on one side the method of authenticating the user. Such authentication is based on an initial enrollment protocol. The present disclosure provides for such a preferred enrollment protocol, but which is independent from the method of authenticating the user, in other words, the advantages of the above target use case can also be achieved with a different enrollment procedure but the enrollment provides further advantages to the present system.

[0017] The present invention first requires an initial online RP registration with an RP registrar, and the holder needs to have opted in to unattended online use. Furthermore the holder’s wallet must be configured to trust the RP registrar. Holder may then engage with registered RPs in a few simple steps and RP can safely trust the resulting holder ID.

[0018] It is, as mentioned above, a further object to provide the holder with obvious trust evidences of the RP which, unlike in F2F usage, cannot be directly collected from the environment (policeman / car rental). This is connected to further advantages of the present approach, e.g. providing an online equivalent of « I see the bar tender in the bar » , mitigation related to the usual online tricks of trying to steal user data (Phishing, Rogue AP, MiTm, ...) and finally, if nevertheless an ID[token] is stolen, to guarantee that a stolen ID[token] cannot be used.

[0019] In other words, the method for unattended online usage of mobile ID documents is an original method of engaging mobile ID documents with online ID verifiers (or kiosks / vending machines not equipped with NFC / BLE / Webcam), while preserving user control and protecting his privacy.

[0020] There is no easy way for a relying party to verify holder ID when not facing him in person, for enrollment, entitlement checks or age verification. For example an online car rental company or a kiosk may need to enroll a new customer with proper ID verification, but also ensure the entitlement to drive mentioned on the driving license is still valid (the customer did not lose his driving rights recently). This process is also usually not satisfactory for customers as they are required to perform complex and painful actions before they are granted access to the service.

[0021] This invention proposes a simple and secure method to extend initially anticipated 2024287183   31 Aug 2026 mobile ID documents usage to online interactions, benefiting both user, online RP and possibly issuing government. [0021a] According to a first aspect, the present invention provides a secure online authentication method of a user by a relying party using a mobile ID document; wherein the mobile ID document comprises at least one dedicated data field connected to personal data of the user, cryptographic proof verification material and proof material being encrypted with a secret of the owner of the mobile document, wherein the user is using a mobile communication device, the method comprising the steps of - creating a user engagement structure comprising at least one dedicated data type field by the relying party, - transmitting the user engagement structure by the relying party to the mobile communication device of the user, -consenting to retrieval of the at least one dedicated data field by entering the secret by the user in the mobile communication device, - generating an access token in the mobile communication device, -decrypting the proof material in the mobile communication device using the secret, - generating a proof in the mobile communication device using the proof material, - generating an access engagement structure comprising the access token and the proof inside the mobile communication device, - transmitting the access engagement structure to the relying party, transmitting an access request to a mobile document issuer by the relying party based on the access engagement structure, - trading the access token for an authentication document comprising the at least one personal data related to the at least one dedicated data field by the document issuer to the relying party, - extracting, by one or both of the document issuer and the relying party, the proof verification material from the authentication document and verifying the proof against the proof verification material, -extracting the at least one personal data related to the at least one dedicated data field from the authentication document, and -accepting the online authentication of the user.

[0022] The invention is based on the insight that a secure online authentication method of a user by a relying party using a mobile ID document is possible; when the mobile document comprises at least one dedicated data type field connected to personal data of the user, cryptographic proof material and proof verification material being encrypted with a secret of the owner of the mobile document. In this context the user is the person performing the method using a mobile communication device he has access to (as e.g. via PIN or by biometrics) and it will be visible in the process as an advantage, that if the user is not the document owner, but a different person who has also access to the smartphone of the document owner which acts as wallet for the mobile electronic document, he will not be able to effect the online authentication successfully. In a successful case, it holds user = document owner. 2024287183   31 Aug 2026

[0023] In an embodiment, the method comprises a number of steps starting with creating an user engagement structure comprising at least one dedicated data field by the relying party. This dedicated data field can be as an example the required age of the document owner which is to be known by the relying party, i.e. the vendor or business partner to enter in an agreement. Then follows the step of transmitting said user engagement structure by the relying party to the mobile communication device of the user, who is consenting to retrieval of the at least one dedicated data field by entering the secret by the user in his mobile communication device. Here, it becomes clear that if user <> document owner, he is not abler to provide the secret which is referred in this description also as secret passphrase.

[0024] Then an access token is created in the mobile communication device, proof material in the mobile communication device is decrypted using the secret, and a proof using proof material is generated in the mobile communication device, and all that is used for generating an access engagement structure comprising the access token and the proof inside the mobile communication device, which is then transmitted to the relying party. The transmittal inherently comprises acceptance of retrieval of the at least one dedicated data field through the relying party, since the passphrase is entered beforehand and is part of the creation of said access engagement structure.

[0025] The relying part backend is then transmitting an access request to the mobile document issuer based on the access engagement structure, where the token for an authentication document comprising the at least one personal data related to the at least one dedicated data type field by the document issuer is traded to the relying party. 2024287183   23 Dec 2024

[0026] Then either one or both of the document issuer and the relying party can and shall extract the proof verification material from the authentication document and check the proof, which enables extracting the at least one personal data related to the at least one dedicated data type field from the authentication document and finally allows the relying party to accept the online authentication of the user and thus the underlying business.

[0027] Preferably, transmitting said user engagement structure by the relying party to the mobile communication device of the user comprises transmittal of one or both of a scannable code, especially a QR code, or a deep link URL. If the user is using an external machine, as a kiosk or desktop computer, the display will provide the scannable code which can be taken by the camera of the mobile communication device being the wallet for the user. If on the other side the user uses his mobile communication device, the display can provide a clickable "click here" information for accessing a deep link.

[0028] In a preferred embodiment, consenting to retrieval by entering the secret by the user in his mobile communication device can comprise a manually entered secret or a specific document owner related biometrics check.

[0029] Proof material used in the method is preferably a private key and the proof verification material is a public key from a asymmetric cryptography system.

[0030] The secure online authentication method allows the relying party to authenticate the user; but on the other side, the user, if not in presence of a proof of the relying party, it is preferred to add verification steps allowing a secure online authentication process of a relying party for the user. Then the relying party is registered in a relying party registry with at least the following data fields a relying party ID, the name of the relying party, as well as an encryption key and encryption type and a relying party endpoint. Then the above secure online authentication method further comprises within the step of creating the user engagement structure by the relying party, including the relying party ID of the relying party and the endpoint of the relying party backend, before the step of generating the access engagement structure, extracting said data fields from the user engagement structure and accessing the relying party registry by relying party ID, to obtain a relying party endpoint and an encryption key and encryption type of the relying party, after the step of generating the access engagement structure, encrypting the access engagement structure with the type and key of the relying party, accessing the relying party backend's endpoint, and verify the endpoint, and after transmitting the access engagement structure to the relying party, decrypting the access 2024287183   23 Dec 2024 engagement structure with the relying party key and type.

[0031] The further object mentioned above, i.e. mitigating user fear of being matched by a machine can be solved by a secure online authentication method of a relying party for a user using a mobile communication device in a business engagement method comprising the steps of creating an user engagement structure comprising at least one dedicated data field by the relying party, transmitting said user engagement structure by the relying party to the mobile communication device of the user, generating a business engagement structure inside the mobile communication device, transmitting the business engagement structure to the relying party, extracting the at least one personal data related to the at least one dedicated data field from the business engagement structure, accepting (37, 38) the online authentication of the user, wherein the relying party is registered in a relying party registry with at least the following data fields a relying party ID, the name of the relying party, as well as an encryption key and encryption type and a relying party endpoint, wherein the method comprises the further characterizing features of, within the step of creating an user engagement structure by the relying party, including the relying party ID of the relying party and the endpoint of the relying party backend, before the step of generating the business engagement structure, extracting said data fields from the user engagement structure and accessing the relying party registry by relying party ID, to obtain a relying party endpoint and an encryption key and encryption type of the relying party, after the step of generating the business engagement structure, encrypting the business engagement structure with the type and key of the relying party, accessing the relying party backend's endpoint, and verify the endpoint, after transmitting the business engagement structure to the relying party, decrypting the business engagement structure with the relying party key and type.

[0032] In either of the above mentioned secure online authentication method, in a preferred embodiment the relying party endpoint information comprises a TLS certificate thumbprint, and within the step of accessing the relying party backend's endpoint comprises establishing a TLS connection to the endpoint and verify the TLS certificate thumbprint.

[0033] Additionally, after accessing the relying party registry, the relying party's clear name is displayed on the mobile device of the user.

[0034] Further embodiments of the invention are laid down in the dependent claims.

[0035] Mobile ID Documents have all the advantages required as they are issued by trusted parties, stored securely, convenient to use and standardized. But their usage has been defined only for face to face verifications, with the verifier holding a verifying device in close proximity 2024287183   23 Dec 2024 of the holder’s device (BLE, Wifi, NFC). The invention goes beyond these limits and enables a wider range of usages. The present specification brings an innovative and secure solution to enable online & unattended usage of mobile ID documents. The depicted mechanisms provides trust to RPs while preserving the user control over his attributes & privacy.

[0036] In the above general explanation as within the specific description of embodiments, the following definitions are used.

[0037] Holder role:   a citizen holding a digital wallet and at least one digital document (e.g. mDL).

[0038] Digital Wallet: a mobile application provisioned with digital documents in charge of online RP verification in RP registry / BC (Blockchain).

[0039] Registry / BC role:   a directory of validated online RPs a holder may refer to authenticate RP and establish secure exchanges with RP.

[0040] Digital document:    a physical document equivalent, issued by an issuer.

[0041] mDL: a special type of digital document instance, digital equivalent of a physical driver license.

[0042] Issuer role:   A trusted entity vouching for holder attributes (e.g. state).

[0043] RP / verifier role:     an entity willing to verify holder identity face-to-face thanks to a digital document.

[0044] Online RP / verifier role:     an online relying party or unattended system, willing to consume digital documents, e.g. for secure / fast / convenient onboarding or entitlement verification (e.g. driving rights).

[0045] OR role:      i.e. Online Retrieval role a specific mechanism where [online] verifier may exchange a holder-issued token against a digital identity document from the issuer.

[0046] OR token:    a token delivered by the holder to the [online] RP as he may contact the OR endpoint and get access to holder’s ID.

[0047] Registrar role: a trusted entity performing RP verification and provisioning RP information in RP registry. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Preferred embodiments of the invention are described in the following with reference to the drawings, which are for the purpose of illustrating the present preferred embodiments of the invention and not for the purpose of limiting the same. In the drawings,

[0049] Fig. 1 shows RP Registration steps within a secure online authentication using mobile ID Document;

[0050] Fig. 2 shows an example of an RP REGISTRY;

[0051] Fig. 3 shows User Registration steps within a secure online authentication using 2024287183   23 Dec 2024 mobile ID Document;

[0052] Fig. 4 shows initial engagement steps of the online usage of a method for unattended online usage of mobile ID documents;

[0053] Fig. 5 shows further RP trust and look up steps of the online usage of a method for unattended online usage of mobile ID documents;

[0054] Fig. 6 shows further user consent and ISO token transfer steps of the online usage of a method for unattended online usage of mobile ID documents;

[0055] Fig. 7 shows further core data exchange steps of the online usage of a method for unattended online usage of mobile ID documents; DESCRIPTION OF PREFERRED EMBODIMENTS

[0056] Fig. 1 shows RP Registration steps within a secure online authentication using mobile ID Document between a relying party (RP), a RP registrar and independent from the registrar an RP registry and / or RP blockchain.

[0057] The relying party starts registration 101 transmitting business legal name and proof of incorporation to the RP registrar. The RP registrar sets a state 102 for the registration as KYC PENDING for know your customer registration is pending and sends a relying party identifier RP ID 103 to the RP.

[0058] The KYC process 104 is running within the RP registrar until the RP registrar is capable to set the state 105 to the completion of the KWY step which happens when the RP is transmitting RP ID information 106 to the RP registrar who checks it and sends back the current state 107.

[0059] In order to finish registration 108, the RP sends a user verifiable RP endpoint proof like a TLS CERT THUMBPRINT and RP ENC KEY to the RP registrar. The RP registrar is setting the state 109 of this relying party to enabled and publishes 110 the RP INFO in the RP Registry, which is confirmed 110 by the registry which is then confirmed 112 to the RP.

[0060] Fig. 2 shows possible data included in the RP Registry as RP ID. The data can be the RP_NAME, the RP_TLS_CERT_THUMBPRINT and the RP_ENC:KEY&TYPE.

[0061] Fig. 3 shows user registration steps within a secure online authentication using mobile ID Document.

[0062] The user as a person enters in contact with e.g. a governmental registration officer with 2024287183   23 Dec 2024 the request 201 to register a digital document for him. The present use case starts from the assumption that the user responds 203 "yes" on the officer's question 202 if he would like to use online services. Then the user is required 204 to provide 205 a passphrase. Said passphrase is a cornerstone of the method of the present invention.

[0063] The governmental registration officer contacts the document issuer electronically and transmits 206 the passphrase as part of the enrolment proceedings on behalf of the user.

[0064] The document issuer internally aggregates the document data 207, creates cryptographic proof material 208 together with proof verification material and encrypts 209 cryptographic proof material with said passphrase of the user. He then issues 210 the document and pushes 211 the document into the digital wallet of the holder.

[0065] The acknowledgement is sent 212 back to the document issuer, then sent it back 213 to the registration officer, which is transferred 214 as last step to the holder.

[0066] The issued document contains the Proof Material encrypted with the user passphrase as well as the Proof Verification Material signed by the issuer. The entry of the Passphrase will be required for the wallet to decrypt this Proof Material and use it to generate Authentication Proof. The RP will verify Authentication Proof thanks to associated Proof Verification Material.

[0067] Fig. 4 shows engagement steps of the online usage of a method for unattended online usage of mobile ID documents.

[0068] The holder having access to his holder app is visiting 1 a web page of a service or goods provider. Here, since initial reference is made to an mDL and a use case where specific elements have to be provided and authenticated, it is assumed that the provider is a car rental service.

[0069] The web site of the car rental service answers the request displaying 2 service information as car rental information (model, start rental time, included or optional services and costs etc.). The holder makes his choice 3 on the web site and transmits with his request specific information. The web page contacts 4 the relying party backend to generate engagement structure.

[0070] The relying backend automatically generates 5 the engagement structure, It encodes 6 this as a digital information as e.g. a QR code or a clickable deep link for a mobile only 2024287183   23 Dec 2024 experience. The digital code is transferred 7 back to the web page and displayed 8 as e.g. QR code or URL to the holder.

[0071] Fig. 5 shows further RP trust and look up steps of the online usage of a method for unattended online usage of mobile ID documents.

[0072] After the initial steps as explained in connection with Fig. 4 the holder opens 9 his app, which when opened 10, is used to scan 11 said QR code. The holder app extracts 12 the RP ID and performs 13 a lookup in the RP CACHE. If he does not find it, he asks 14 for the engagement info from the registry, which looks up 15 the relying party's RP ID and sends back 16 the relying party information to the holder app which writes 17 the RP INFO to be able to find directly the info when performing next time the lookup step 13 with this (mobile) electronic device.

[0073] The holder app displays 18 RP NAME as well as the RP ATTR LIST and prompts the user / holder for consent. The RP ATTR LIST comprises the RP clear name, the RP TLS CERT THUMBPRINT as well as the RP_ENC_KEY and RP_ENC_KEY_TYPE.

[0074] Fig. 6 shows further user consent and ISO token transfer steps of the online usage of a method for unattended online usage of mobile ID documents.

[0075] The user signalizes consent 19a with entering the passphrase in the holder app, triggering the generation 19b of the ISO Access token, decrypt 19c the proof material with the passphrase, generate 19d a proof and uses it to generate 20 an engagement data structure comprising the ISO Access token and the proof. Said engagement data structure is directly encrypted 21 with the RP ENC KEY based on the RP ENC KEY TYPE.

[0076] The holder app then establishes 22 an TLS channel with the RP URL known from the QR code which is acknowledged 23 as TLS ENDPOINT CERT from the relying party backend. The holder app verifies 24 the TLS_ENDPOINT_CERT with the RP TLS CERT THUMBPRINT and sends 25, if the verification is positive, the encrypted engagement structure ENC ENG STRUCT, encompassing the ISO Access token and the PROOF. The relying party backend sends back 26 an received and processed information which is indicating 27 the processing step.

[0077] Fig. 7 shows further core data exchange steps of the online usage of a method for unattended online usage of mobile ID documents. These steps are executed by the relying party backend while the user / holder is awaiting the result. Initially, the relying party backend is 2024287183   23 Dec 2024 decrypting 28 the encrypted engagement structure using the RP DEC KEY which is usually the public key of the private-public key pair. Then the ISO Access Token is used 30 with the document issuer to obtain the ISO Data. Therefore, the document issuer verifies 31 the ISO Access token and creates 32, if correct, a reply on the ISO Access token.

[0078] This reply is sent back 33 as ISO Data containing the requested attributes as well as, optionally, proof verification material, comprising the PUB KEY. In this case, the extraction 34 of proof verification material as well as the verification 35 of proof is performed within the relying backend. It is also possible that this proof verification is performed at the document issuer. Then the ISO Data is provided together with the proof verification result.

[0079] This, however, does not hinder the relying backend to also effect the verification, so verification happens at both instances.

[0080] The relying party backend evaluates 36 the ISO data necessary for concluding in the commercial exchange, here finishing 37 the enrolment for the car rental and redirecting 38 the enrolment success page on the web page.

[0081] The above procedure is now described in a different wording using the identical drawings.

[0082] Within the initial opt in to unattended online use of mobile document as shown in Fig. 3, holder registers for digital wallet and mobile document during issuers enrollment procedure. During the enrollment, the holder consents 3 to online usage service and is asked 4 to create a passphrase 5. The passphrase is only known to the documents specific holder being a person and not stored anywhere online. During issuance an OTP seed is encrypted with the passphrase and stored inside the document.

[0083] The Initial Online RP registration is explained in connection with Fig. 1 and 2. Online RP (ONLINE RP) starts 101 registration with an online RP directory (RP DIRECTORY), operated by a trusted online RP registrar (RP REGISTRAR) using a verification process similar to a CA: ONLINE RP provides verifiable information like business incorporation name (RP_NAME), TLS certificate attached to his online token collection endpoint (TLS CERT THUMBPRINT), and a key for tokens encryption (RP ENC KEY). After proper data verifications, RP REGISTRAR delivers 103 a unique RP ID (uuid) to ONLINE RP. Note RP REGISTRAR role could be handled by a document issuer, a verifier manufacturer or a fully independent entity. 2024287183   23 Dec 2024

[0084] The Initial trust configuration on holder’s wallet app (HOLDER APP) is shown in connection with Fig. 4. During manufacturing or later via a controlled process, RP REGISTRAR is added to the HOLDER APP trust store, as RP REGISTRAR may be trusted by holder’s wallet to deliver trusted data about registered online RPs. This may for example     be     achieved     by     storing     RP_REGISTRAR’s     certificate (REGISTRAR TLS CERTIFICATE) and internet address (REGISTRAR ENDPOINT). It is noted that HOLDER APP may be provisioned with multiple trusted RP REGISTRARS.

[0085] A typical use of the solution is explained in connection with Fig. 4pp. Holder engages with an ONLINE RP service, e.g. from his laptop or kiosk, and reaches a step (e.g. enrollment or validation of a transaction) where ONLINE RP requires proof of holder identity and up to date entitlements which will be provided e.g. through a web page by generating 4 an engagement structure comprising these items. User may be offered several techniques to provide such proof, and selects to most convenient: ‘use his mobile wallet’

[0086] ONLINE RP will then generate 6, transmit 7 and display 8 an online sharing structure as a QR code format (RP_QR_CODE) on user’s web page or kiosk screen. This RP QR CODE contains enough information for the user to verify ONLINE RP identity and engage in attributes sharing safely. But as QR codes payload is limited to ensure it is easily captured by holder’s device camera, RP QR CODE will and can usually contain a specific structure with following limited set of attributes: -       Protocol identifier & version -     RP_ID -      RP ATTR LIST (List of required attributes as defined in ISO 18013-5) -     RP TLS ENDPOINT (short URL holder wallet must connect to and transmit encrypted OR token, possibly containing RP transaction ID).

[0087] Beside a QR code any easily usable code by a mobile wallet, usually a smart phone with a camera can be used. It can also be a deep link which is e.g. transmitted to the holder app via a wireless means as Bluetooth or other NFC technologies. QR code on the other side can be any digital code also comprising colours, having a different shape and other features.

[0088] Holder scans 11 the QR code with his HOLDER APP containing at least one relevant digital ID document. RP_QR_CODE content will be parsed and checked by the HOLDER APP. Granted protocol identifier and version matches the expected format, HOLDER APP then contacts one of his trusted RP REGISTRAR and submits 14 RP ID. 2024287183   23 Dec 2024

[0089] RP REGISTRAR will return a structure containing verified online RP information (REGISTRAR RP INFO) and HOLDER APP may use to ensure online RP is genuine. Details of REGISTRAR RP INFO can be as follow: -     RP NAME (meaningful company name user may check against the current interacted RP) -     RP TLS CERT THUMBPRINT (registered certificated for OR token submission TLS endpoint) -     RP ENC KEY TYPE (Applicative encryption key type RSA / ECC / AES256) -      RP ENC KEY (key for applicative encryption)

[0090] It is noted that RP REGISTRAR may contact another RP REGISTRAR to get and forward the REGISTRAR RP INFO.

[0091] HOLDER APP displays the returned RP NAME to holder. Holder consents to proceed with the displayed online RP NAME id sharing. HOLDER APP extracts the list of requested attributes RP ATTR LIST and prompts 18 holder to get his consent to share. Holder is prompted 19a for his online passphrase to consent to share these attributes with ONLINE RP. HOLDER_APP generates 19b an ISO 18013-5 compliant OR token (OR_TOKEN). HOLDER APP decrypts 25 OTP seed and generates OTP.

[0092] HOLDER_APP encrypts the OR_TOKEN and OTP as ENC_OR_TOKEN using the .received RP_ENC_KEY and RP_ENC_KEY_TYPE.

[0093] HOLDER APP connects 22 to RP TLS ENDPOINT and ensures TLS certificate thumbprint matches the received RP_TLS_CERT_THUMBPRINT in addition to usual certificate chain verifications. HOLDER APP then transmits the ENC OR TOKEN to ONLINE RP. Finally, ONLINE RP decrypts 28 the ENC OR TOKEN with its decryption key (RP_DEC_KEY) matching RP_ENC_KEY and ONLINE_RP verifies existence of OTP. ONLINE RP uses decrypted OR TOKEN and OTP together to request user attributes from issuer OR endpoint.

[0094] OR endpoint verifies 35 OTP associated to identified HOLDER APP and document.

[0095] If OTP was valid, OR prepares reply with attributes as e.g. defined in ISO 18013-5. The advantages are inter alia that ONLINE RP can be sure holder was authenticated and actually holding the provided document and HOLDER did not communicate his portrait to ONLINE_RP or the other way round. The ONLINE RP does not necessarily have a camera or computation 2024287183   23 Dec 2024 power to verify such a portrait image. Therefore, an easy and fast solution for citizens to leverage their mobile ID documents everywhere (face 2 face, kiosks, online). An enhanced confidence & trust is provided for RPs (better compliance, cheaper enrollment / compliance process, better enrollment & service usage & success rate, lower risks of frauds on documents). More usage contexts and unified user experience across services and it is a privacy preserving process for citizens. 2024287183   23 Dec 2024 LIST OF REFERENCE SIGNS 1 browse to the providers equipment 2 display car rental information, goods or services information 3 select car and enrolment data with digital document 4 creation of engagement structure data fields 5 creation of engagement structure filled with data 6 encode as QR-code or other direct wallet usable information, visible or to be transmitted by near field technology 7 transmit QR code to web page 8 display QR code on web page 9 open app 10 acknowledge open up step 11 scan QR code 12 extract RP ID 13 find RP INFO for RP IN 14 requesting Rp ID info from registry 15 Lookup relaying to relying party 16 rely party information 17 write (RP ID, RP INFO) to RP CACHE 18 retransmit RP retrieved data for consent 19a transmits consent phrase 19b generate ISO Access token 19c decrypt material with passphrase 19d generate proof 20 generate engagement structure with ISO token and PROOF 21 encrypt engagement structure 22 establish TLS channel 23 receive TLS_ENDPOINT_CERT 24 verify endpoint 25 post token ENC_ENG__STRUCT 26 transmit received information 27 indicate processing to user 28 decrypt token 29 check for proof 30 get attributes from ISO token 31 verify data from ISO token 32 create reply of verification 2024287183   23 Dec 2024 33         ISO data transferred 34         extract proof verification 35         verify proof 36        evaluate ISO data 37        finish enrolment 38         redirect and inform holder of success 101        start registration 102        set state 103       transmit RP ID 104      KYC process 105       set state of a completed KYC process 106      check RP ID 107       answer with current state 108      finish registration with TLS CERT THUMBPRINT and RP ENC KEY 109       set state as enabled 110       publish RP INFO 111        confirmation to RP registrar 112        showing the mobile registration is finished 201        register digital document 202       ask whether to use online services 203       answer yes on the answer about use of online services 204       a passphrase is requested 205       the passphrase is transmitted 206       enrolment with Online services using this passphrase 207       aggregate document data 208       generate cryptographic proof material 209       encrypt proofing material with the passphrase 210       issue the document 211       push document 212       reporting success 213       reporting success 214       end of enrolment process

Claims

1. Secure online authentication method of a user by a relying party using a mobile ID document; wherein the mobile ID document comprises at least one dedicated data field connected to personal data of the user, cryptographic proof verification material and proof material being encrypted with a secret of the owner of the mobile document, wherein the user is using a mobile communication device, the method comprising the steps of-      creating a user engagement structure comprising at least one dedicated data type fieldby the relying party,-      transmitting the user engagement structure by the relying party to the mobilecommunication device of the user,-      consenting to retrieval of the at least one dedicated data field by entering the secret bythe user in the mobile communication device,-      generating an access token in the mobile communication device,-      decrypting the proof material in the mobile communication device using the secret,-      generating a proof in the mobile communication device using the proof material,-      generating an access engagement structure comprising the access token and the proofinside the mobile communication device,-      transmitting the access engagement structure to the relying party,-      transmitting an access request to a mobile document issuer by the relying party basedon the access engagement structure,-      trading the access token for an authentication document comprising the at least onepersonal data related to the at least one dedicated data field by the document issuer to the relying party,-      extracting, by one or both of the document issuer and the relying party, the proofverification material from the authentication document and verifying the proof against the proof verification material,-      extracting the at least one personal data related to the at least one dedicated data fieldfrom the authentication document, and-      accepting the online authentication of the user.

2. Secure online authentication method according to claim 1, wherein transmitting theuserengagement structure by the relying party to the mobile communication device of the user comprises transmittal of one or both of a scannable code, especially a QR code, or a deep link URL.

3. Secure online authentication method according to claim 1 or 2, wherein consenting toretrieval by entering the secret by the user in the mobile communication device can comprise2024287183   31 Aug 2026a manually entered secret or a specific document owner related biometrics check.

4. Secure online authentication method according to any one of claims 1 to 2, wherein,within the step of generating a proof in the mobile communication device using the proof material, the proof material is a private key and the proof verification material is a public key from an asymmetric cryptography system.

Images