Convener: Bruce Nash
Notes-taker(s): Francisco Corella
Tags for the session - technology discussed/ideas considered:
Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:
The session surveyed nationwide identity schemes in several countries.
In Norway, banks issue PKI credentials that are used by 80% of the adult population for online authentication to commercial and government sites. They are data, not physical cards.
Banks also issue credentials in Denmark.
In Estonia, the government issues credentials to its citizens and to foreigners. A foreigner can apply for an e-resident credential without visiting the country.
In the UK commercial identity providers are authorized by the government to issue credentials. Attributes are asserted by citizens and verified by the government with yes/no answers. But enrollment is cumbersome and the system is not widely used.
In Spain the government issues chip cards that can be used online for multiple purposes using card readers.
In the US and Canada, government relying parties use private sector identity providers. A broker is used to hide identity providers and relying parties from each other.
The EU is working on a EU-wide identity system called STORK, which should be ready in 2016 or 2017.