Search

The COVID-19 pandemic helped countries to increase the use of their mobile eID solutions. These are based on traditional identity management systems, which suffer from weaknesses, such as the reliance on a central entity to provide the identity data and the lack of control of the user over her or his data. The introduction of self-sovereign identity (SSI) for e-government systems can strengthen the privacy of the citizens while enabling identification also for the weakest. To successfully initiate SSI, different factors have to be taken into account. In order to have a clear understanding of the challenges, but also lessons learned, we provide an overview of existing solutions and projects and conducted an analysis of their experiences. Based on a taxonomy, we identified strong points, as well as encountered challenges. The contribution of this paper is threefold: First, we enhanced existing taxonomies based on the literature for further evaluations. Second, we analyzed eID solutions for lessons learned. Third, we evaluated more recently started SSI projects in different states of their lifecycle. This led to a comprehensive discussion of the lessons learned and challenges to address, as well as further findings.

The digital identity (or electronic identity) of a person is about being able to prove upon authentication who one is on the Internet, with a certain level of assurance, such as by means of some attributes obtained from a trustworthy Identity Provider. In Europe, the eIDAS Network allows the citizens to authenticate securely with their national credentials and to provide such personal attributes when getting access to Service Providers in a different European country. Although the eIDAS Network is more and more known, its integration with real operational services is still at an initial phase. This paper presents two eIDAS-enabled services, Login with eIDAS and Wi-Fi access with eIDAS, that we have designed, implemented, deployed, and validated at the Politecnico di Torino in Italy. The validation study involved several undergraduate students, who have run the above services with their authentication credentials and platforms and with minimal indications on their usage. The results indicate that the services were beneficial. Several advantages exist both for the users and for the Service Providers, such as resistance to some security attacks and the possibility to adopt the service without prior user registration (e.g. for short meetings, or in public places). However, some students expressed doubts about exploiting their national eID for Wi-Fi access, mainly in connection with usability and privacy issues. We discuss also these concerns, along with advantages and disadvantages of the proposed services.

Security is an absolute necessity for every homeowner so that he can create a sense of security and calm when the house is left to travel by the owner of the house. Poor security makes the house a target for theft. Home security currently used still uses conventional methods. E-KTP (Electronic Identity Card) provided by the government to every citizen has a technology in which there is an RFID chip that can be used as a substitute for conventional door locks. In order for the e-KTP to be able to access the home door, an application needs to be made that can be used on android smartphone. The application makes it easy for homeowners in the E-KTP registration process that can be used to open the door. In addition, the application can send notifications to homeowners if the house is entered by thieves via SMS (Short Message Service) and Call / Call through the SIM800L module which is controlled using an Arduino Nano Microcontroller.

The implementation of e-Government in public services using technology and information currently being implemented in the government sector is an electronic identity card. Implementing the electronic identity card policy is a program to implement the Single Identify Number. Every resident who meets the age requirements only has one identity called the Population Identification Number (NIK) until death. The purpose of this study is to focus on the description process related to the implementation of the Electronic Identity Card Policy at the Minahasa Regency Population and Civil Registration Office, namely How the Mechanism of the Electronic Identity Card Activity Program at the Minahasa Regency Population and Civil Registration Office. The research used is a qualitative descriptive research type. The data collection technique used is a combination of documentation studies. Interviews and observations. The data analysis technique uses an interactive model developed by Miles & Huberman; during the data collection process, three activities are carried out: data reduction, data presentation, and verification. The implementation of the electronic identity card encountered several problems related to service to the community. These problems can be seen in the mechanism for issuing electronic identity cards that do not run optimally as expected by the community. Communication and socialization that has not been appropriately implemented. The ability of employee resources in handling electronic identity cards is not optimal.

This study aims to determine the implementation of the strategy for implementing Electronic Identity Cards (e-KTP) in Mamasa Regency and the efforts made in implementing Electronic Identity Cards (e-KTP) in Mamasa Regency. This research used qualitative methods and the type of data collection used document review, interviews and observation. The results of the study show that the standard procedures for implementing Electronic KTP 2011 are through strategic programs in the form of organizational structures on behalf of regency and sub-district working groups, socialization, program implementers (HR), provision of facilities and infrastructure and population mobilization. Of these activities 44.30% have been realized with various obstacles, including slow distribution of equipment from the center and only one functioning, damaged equipment, and inaccessibility of some residents due to delays in mobile registration which are expected to be an alternative.

Quick Response (QR) codes are widely used due to their versatility and low deployment cost. However, the existing QR code standard is ineffective for security-critical applications (e.g., electronic identity management) as the stored information can be easily exposed to unauthorized parties. Moreover, it does not provide sufficient storage capacity to employ robust encryption schemes for complex access control and authentication. In this paper, we present a novel approach of employing encrypted multi-layer QR codes, MurQRI (pronounced “Mercury”), for secure user authentication and fine-grained access control in various domains (e.g., airport and hospital). MurQRI is designed to store up to 45 kilobytes of data and protect the stored information via biometric authentication and encryption. To support fine-grained access control, we employ attribute-based encryption. We also introduce real-world applications where MurQRI can be used effectively and discuss possible methods to enhance security.

In this article, we present a list of 51 technical requirements for a new Peru’s national electronic identity (eID) card, grouped on four categories: general, card, hardware (subdivided into the antenna, chip, and memory), and software (subdivided into the operating system, applications, middleware, and complements). Their definition was based on features of the current eID card, the existing international standards, and the current state of technology. Their relevance was validated by RENIEC specialist personnel, and their usefulness was validated in practice, being the base of an international public tender for the acquisition of three million cards.

Elektroniczne dowody osobiste są wprowadzone w większości europejskich krajów. Polska planuje wprowadzić e-Dowód w pierwszym kwartale 2019 r. Prace nad elektronicznym dowodem osobistym trwają już ponad 10 lat, a pierwszym impulsem do ich rozpoczęcia stało się wprowadzenie paszportów biometrycznych. Nowy dowód ma posiadać warstwy graficzną i elektroniczną – zakres danych w obu warstwach będzie tożsamy. W koncepcji „e-Dowód – kontynuacja projektu pl.ID i realizacja powiązanych projektów” wskazano, że nie przewiduje się rozszerzenia zakresu danych w dowodzie elektronicznym w stosunku do danych znajdujących się w obecnych dowodach osobistych. Artykuł przedstawia najważniejsze pojęcia związane z dowodami osobistymi, proces ich wdrażania w Polsce oraz analizuje obecne prace podejmowane nad wprowadzeniem e-Dowodu w Polsce.

As compared with traditional paper-based versions and the standard username-password login to e-Government services, the new electronic identity and travel documents have made on-site electronic and on-line authentication of citizen more comfortable and secure.The biometric passport was introduced in Hungary in 2006. A decade later the electronic identity card (eID) was implemented. The reason for the improvement of such documents is twofold: enhancing security features and performing new functions. The development is certainly welcome, but it also generates new types of risks, with which governments and citizens must take into account.In this paper, I will first analyze the most widespread technologies of data storage cards from the passive elements to the chipcards, including the biometric passport. The objective is to provide an overview of the technical development as a background to my paper. I will then proceed to an analysis of the relevant EU and national legal background, data elements, data protection and the functions (ePASS, eID, eSIGN) of the new Hungarian and German identity card, as well as the security risks and protection properties of the eID-type documents. The paper concludes with a summary of the lessons learned from and the risks involved in the current solutions in Hungary and Germany.

Purpose In this paper, using values of individuals in a Swedish health-care organization, electronic identity management objectives related to security are defined. Design/methodology/approach By using value-focused thinking, eliciting values from interviews of three groups of health-care staff’s objective hierarchies for three stakeholder groups are identified and defined. Objective hierarchies allow comparison across multiple stakeholder groups such that strategic objectives for identity management can be compared and contrasted. Findings This qualitative investigation, which used value-focused thinking, revealed 94 subobjectives, grouped into 12 fundamental and 14 means objectives, which are essential for developing measures that address potential value conflicts in a health-care organization around electronic identity management. The objectives developed in this study are grounded socioorganizationally and provide a way forward in developing measures aimed to reducing potential conflicts at a policy level. Originality/value In a final synthesis, congruence (or lack thereof) in the electronic identity management approach for a Swedish health organization is suggested. This also creates a foundation to evaluate and weight different objectives for strategic decision management.

Seeing the condition of today's society, there are still many complaints in terms of services they get from the government about the low quality of current services. As the spearhead to carry out direct services to the public should each district and government officials to have the capability in carrying out their duties as set by government agencies. Likewise with the subdistrict of Medan Belawan is expected to further improve  the  quality  of  the  performance  of  the  apparatus  as to  which  has been  set  by  the government in the service of society. In this case the formulation of the problem is how the procedure for obtaining the Electronic ID card in District Office District of Medan Belawan. The purpose of this study was to determine how the service procedure specified in the management of Electronic Identity Card at the District Office District of Medan Belawan. The method in this research is qualitative by using observation technique, interview and documentation. Based on these results and continue to analyze the data obtained, then the result is evaluation of Electronic Identity Card service procedures at the District Office District of Medan Belawan be quite good. Can be seen with Electronic ID card service provided is in accordance with the procedure for obtaining a KTP Electronics, but only time in the administration which is not in accordance with standard operating procedures.

The European Union (EU) Regulation 910/2014 on electronic IDentification, Authentication, and trust Services (eIDAS) for electronic transactions in the internal market went into effect on 29 September 2018, meaning that EU Member States are required to recognize the electronic identities issued in the countries that have notified their eID schemes. Technically speaking, a unified interoperability platform&mdash, named eIDAS infrastructure&mdash, has been set up to connect the EU countries&rsquo, national eID schemes to allow a person to authenticate in their home EU country when getting access to services provided by an eIDAS-enabled Service Provider (SP) in another EU country. The eIDAS infrastructure allows the transfer of authentication requests and responses back and forth between its nodes, transporting basic attributes about a person, e.g., name, surname, date of birth, and a so-called eIDAS identifier. However, to build new eIDAS-enabled services in specific domains, additional attributes are needed. We describe our approach to retrieve and transport new attributes through the eIDAS infrastructure, and we detail their exploitation in a selected set of academic services. First, we describe the definition and the support for the additional attributes in the eIDAS nodes. We then present a solution for their retrieval from our university. Finally, we detail the design, implementation, and installation of two eIDAS-enabled academic services at our university: the eRegistration in the Erasmus student exchange program and the Login facility with national eIDs on the university portal.

This paper explores the path followed by Uruguay in the consolidation of a digital identification framework. The main objective followed by the regulatory entity was to provide legal equivalence between physical presence and digital identification as well as compatibility with international standards. The essay will serve as an input for other countries looking for upgrading their electronic signature framework.

The usage of the face recognition system is various, one of which is to identify missing people. Cases of missing persons can usually happen to people who do not carry an identity card, such as people with mental disorders. Identity cards have some information, namely name, address, date of birth, and a photo ID of a face. This information has stored at the civil registry office, which is an Indonesian government agency. Therefore to solve this problem, we use a photo ID as a dataset to identify someone’s identity. Photo ID as a dataset has age progressing factors in facial recognition systems. Several previous studies have discussed age progressing factors. Previous research used MORPH, CACD, and FGNET datasets. The dataset has several photos of faces consisting of various age levels for the same subject, but it is different from the photo ID that we use. For the training data process, we only use one data, namely a photo ID used to recognize faces at this point. Therefore we use the pre-trained VGGFace2 model, and then, fine-tuning the data during the training process, we use AM-Softmax loss as a loss function. Then the classification is done using SVM. The method we use than compared with the Moustafa method, which also uses a pre-trained model. The results we obtained have a better accuracy performance of 0.9351 compared to the Moustafa method of 0.733

This study aims at finding the truth and the inclusion of words of believers in the electronic identity card, especially followers of Parmalim in the city of Medan even though the religious column on their electronic KTP is blank or a sign (-). The research method used in this study is normative juridical, which uses a library study on Population Administration Law to the 2016 Constitutional Court Number and Constitutional Court Decision Number 97 / PUU-XVI / 2016 in Medan City. The research result is that the civil rights of the trustees, namely the right to social security, have easy access to population documents such as electronic ID cards, family cards, marriage certificates and birth certificates for Parmalim in the city of Medan. May have access to work, can access rights to social security, can access population documents such as electronic ID cards, family cards, marriage certificates and birth certificates. Likewise, the applicant's children may apply for a job even though the religious column on the electronic KTP is marked with a strip or (-).

Electronic identification services (eIDs) have become strategic services in the global governance of online societies. In this article, we argue that eIDs are sociotechnical constructs that also have political-economic dimensions. In the European context, governmental and corporate efforts to develop eIDs are shaped by legal EU frameworks, which are almost exclusively focussed on technical and legal interoperability, such as the European Interoperability Framework (EIF) and the European Interoperability Reference Architecture (EIRA). Public concerns such as privacy, security, user empowerment and control over one’s personal information prompts developers to propose a decentralized, attribute-based system governed on a nonprofit, nonstate basis (DAN-eID). To illustrate our argument, we explore a single emerging eID system (IRMA; acronym for I Reveal My Attributes) that is developing in a national context (The Netherlands). We argue that developing eIDs requires more than engineering ingenuity and legal compliance; as sociotechnical and political-economic constructs, they involve negotiation of conflicting social and political values.

The implementation of the service of making E-KTP (Electronic Identity Card) in some areas has problems such as data filling, fingerprint recording, retina, photo taking, the reason for blank E-KTP blanks and the bureaucratic structure of E-KTP publishing is often problematic because of the server system . Government agencies in the Pagar Merbau District Head Office do not know specifically the level of community satisfaction in managing the E-KTP. SPK application is used in decision making. The SPK application uses a flexible, interactive, and adaptable CBIS (Computer Based Information System) developed to support solutions to specific, unstructured management problems. The Analytical Hierarchy Process (AHP) method is a method of decision making in solving multicriteria problems. From the AHP calculation, the final result is obtained with the condition that if the value is ≥ 0.4, then the information is Satisfactory Service if

The EU Regulation 910/2014 on electronic identification and trusted services for electronic transactions in the internal market, known also as eIDAS Regulation, will become effective on 29 September 2018. By that date, each EU Member State is required to recognize the electronic identities of other EU Member States that have notified their electronic identification (eID) schemes. From the technical point of view, intensive efforts are being spent to effectively connect the various national eID schemes in a unified interoperability architecture, the eIDAS infrastructure.This paper describes our proposal to integrate academic attributes into the eIDAS infrastructure, as part of the ’’eID for University’’ project (in short eID4U). This project aims to support the practical implementation of the eIDAS Regulation in a selected set of academic services at the universities participating in the project. The objective is to enhance the eIDAS infrastructure with support for academic attributes and to design and implement a set of eIDAS-enabled academic e-services, like the Registration in some study programmes (e.g. Erasmus student exchange programme) or the Login facility (with national eIDs) on a foreign university’s web portal.

教育电子身份认证系统涵盖了以e2ID提供认证服务的教育应用系统日常运行的方方面面，因而保障其安全、稳定地运行显得尤为重要。本文分析了教育电子身份认证系统存在的各种安全隐患，从管理和技术两方面提出了保障教育电子身份认证系统安全、稳定运行的安全策略。 The authentication system of educational electronic identity covers various aspects in daily oper-ations of educational application system in which authentication is served by e2ID. Therefore, its security assurance and steady operation are extremely important. This paper analyzes a variety of security risks in the educational electronic identity authentication system, and puts forward safety strategies from both the management and technical measures.

The article summarizes the regional differences in the usage of the terms of the bureaucratic apparatus basing on the analysis of electronica IDs in the twenty countries where Spanish is the primary language.

Because of the Schaffhausen population’s needs regarding more flexibility of authorities, an augmented importance of online services and increases in (cyber) security awareness, the e-government committee (eGov-Kernteam) of the Canton of Schaffhausen decided to pilot the electronic identity Schaffhauser eID+ to ultimately allow for efficient and effective Smart Government processes.* The aim of this practice article is to show how the Canton of Schaffhausen adopted a co-design approach to introduce its electronic identity and to set out key findings regarding the introduction of a technology-based public service innovation. Based on the strategic approach of a ‘testing laboratory’, co-design methodology was used through conducting usability tests and semi-structured interviews with selected individuals. The optimization suggestions collected were subsequently evaluated and reintegrated. Furthermore, the collected data were used to analyze the acceptance of the Schaffhauser eID+. This piloting procedure in cooperation with citizens unites several advantages: modest budgets, rapid and more targeted product changes and, in the sense of co-design, positive spillovers with regard to acceptance and legitimacy. In reference to Smart Government and to ensure ongoing civic participation, the co-design approach should also be considered in the further development of any E-ID or Smart Government project.

There has been a substantial interest among scholars in digital platforms and their governance. This paper proposes a different perspective on the phenomenon, by providing observations on non-focal firms’ dependencies to external platforms. Using the case study results of Finnish firms’ utilization of a monopolistic BankID authentication platform, we describe the platform ecosystem and its transformation on organizational and technology aspects. We show how legislation can transform the roles and relations between ecosystem participants and lead to the long-time dominant legacy platform weakening. Our study extends existing research on platforms and contributes new knowledge about the enforced adoption of the platform by heterogeneous organizations. These findings have important managerial implications, as they inform how non-focal firms can understand the use of existing and coming digital platforms.

The implementation of a RFID system is discussed in this study, for the division of the offices and furniture of an Italian company that is a leader in the furniture industry. This system allowed for a type of "electronic identity card" to ensure the authenticity of products and their traceability. Through Business Process Re-Engineering (BPR) methods, the "AS IS" and "TO BE" scenarios obtained as a result of the proposed changes are analysed. In particular, two production phases are analysed in this work: the sewing and inventory. The differences between the "AS IS" and "TO BE" systems are analysed to highlight the improvement obtained using the RFID system. An analysis of the management and implementation costs of new scenarios is developed.

The concepts of electronic identity (eID) and electronic signature (e-Signature) are crucial enablers of e-government solutions in Europe. The present heterogeneity of national e-government infrastructures in Europe raises serious challenges. The country-specific nature of infrastructure components prevents an easy reuse of country-specific components in other countries. We propose a solution, that facilitates the deployment and integration or third-party components into existing national e-government infrastructures. We demonstrate the feasibility of our proposal by means of a concrete implementation. Evaluation results obtained are promising and show the proposed solution's potential to leverage the adoption of eID and e-Signature solutions in Europe.

In order to effectively promote classic reading and guide students to read classics recommended by scholars, this paper constructs an innovation platform of ‘Classic Reading’ teaching system based on reading credit. According to the requirements of innovation, teaching reformation and actual needs of students, this innovation platform designs five modules, including user security-login module, book management module, reading-report module, system management module and teaching activities module. For the online part, this platform implements the ‘Happy Reading’ network teaching platform, including user security-login through electronic identity (eID), visualization of book information, online writing, submission, reviewing, publishing and socializing comments of reading-report, statistical analysis and other practical functions. Offline, the platform continuously optimizes book list to ensure the quality of classic reading, and sets reviewing standards to ensure the quality of reading-reports. In the meanwhile, with the help of students' organizations, the platform carries out activities like ‘Readers Sloan’, ‘Reading Star’ and many other colorful activities. The combination of online and offline parts provides a reliable, convenient, interactive and efficient teaching system. It has been proved that this platform has significantly improved teaching quality and efficiency, and enhanced students' comprehensive quality, especially for students in science and engineering colleges.

The electronic chip of the Estonian ID card is widely used in Estonia to identify the cardholder to a machine. For example, the electronic ID card can be used to collect rewards in customer loyalty programs, authenticate to public printers and self-checkout machines in libraries, and even unlock doors and gain access to restricted areas. This paper studies the security aspects of using the Estonian ID card for this purpose. The paper shows that the way the ID card is currently being used provides little to no assurance to the terminal about the identity of the cardholder. To demonstrate this, an ID card emulator is built, which emulates the electronic chip of the Estonian ID card as much as possible and is able to successfully impersonate the real ID card to the terminals deployed in practice. The exact mechanisms used by the terminals to authenticate the ID card are studied and possible security improvements for the Estonian ID card are discussed.

As more and more governments have embarked on the e-government path, providing digital interaction with its citizens has boosted the demand for trusted electronic identity solutions that can ensure an official match between an online identity and a physical one. Along with this trend, the affordability and diffusion of mobile devices has translated into a strong push for governments to diversify e-ID channels by developing digital identification on mobile devices also known as Mobile e-ID. Mobile e-ID offers citizens legally binding identification, authentication and qualified electronic signatures and it has been already successfully implemented by some countries at a nation-wide scale. Extant research has investigated mobile e-ID from a technical oriented perspective focusing on potential deployment models, however little is known about the challenges a country is facing in making mID adopted by a wider number of users/ citizens. Addressing this, I run a case study on Republic of Moldova’s nationwide mobile e-ID solution to investigate the barriers to Mobile e-ID. Accordingly, I identify 18 barriers which are organised into 5 categories.

In this chapter, we discuss e-ID cards and e-Passports . A number of countries have introduced electronic identity documents, and some other countries are planning the introduction. The reasons generally are requirements for a more secure and automated identification and additional functions such as e-Government. In October 2006 the United States required biometric enabled electronic passports for the Visa Waiver countries. The European Commission set the implementation time frame so that all member states had to implement the facial image requirements by 2006. These decisions led to worldwide introductions of e-Passports . With mandating the Supplemental Access Control (SAC) protocol in 2014, the European Union meanwhile introduced the third generation of electronic passports.

There are many systems that provide users with an electronic identity (eID) to sign documents or authenticate to online services (e.g. governmental eIDs, OpenID). However, current solutions lack in providing proper techniques to use them as regular ID cards that digitally authenticate their holders to another physical person in the real world. We envision a fully mobile eID which provides such functionality in a privacy-preserving manner, fulfills requirements for governmental identities with high security demands (such as driving licenses, or passports) and can be used in the private domain (e.g. as loyalty cards). In this paper, we present potential use cases for such a flexible and privacy-preserving mobile eID and discuss the concept of privacy-preserving attribute queries. Furthermore, we formalize necessary functional, mobile, security, and privacy requirements, and present a brief overview of potential techniques to cover all of them.

Authentication is an important aspect of e-government applications, as in many cases the identity of a citizen has to be established before provision of a service. Germany is among the countries that have established an electronic identification and authentication infrastructure, based on an electronic identity card. The card enables both local and remote authentication to service providers and authorities. While privacy-enhancing technologies have been used to a large extent in its design and there are no known attacks on its security protocols, the eID card has been harshly criticized. Less than a third of the citizens requesting an identity card choose to activate the eID function. Using the example of Germany, this chapter discusses whether the establishment of an electronic authentication infrastructure makes sense and presents possible reasons for the German eID card's lack of success. In addition, the author considers electronic signatures and their integration in an electronic authentication infrastructure.