The Future Digital Identity Landscape in Europe Stefane Mouille/Detlef Houdeau World eID Congress, 27th of Sep. 2017, Marseille, France

The Voice of the Smart Security Industry About us: A non-profit association located in Brussels and representing the smart security industry since 1995. We advocate the use of Smart Secure Devices and smart security solutions to enhance the usability of digital services while protecting privacy and combatting fraud. About our members: Our Members are manufacturers of smart cards, semiconductors, biometric products and systems, academics, laboratories and associations.

Eurosmart members Associate members

Smart security: an innovative and dynamic industry Worldwide Secure elements shipments - 2016 and 2017 forecasts (Millions of units, source: Eurosmart, May 2017): WW shipments forecast 2015 2016 2017f 2016 vs 2015 % growth 2017f vs 2016 % growth Telecom 5,300* 5,450* 5,550 3% 2% Financial services 2,850 2,900 3,000 Government - Healthcare 410 460 510 12% 11% Device manufacturers 310 330 390 7% 18% Others** 450 470 490 4% Total 9,320 9,610 9,940 *Source SIMAlliance **Others include Transport, PayTV and physical and logical access cards.

Current eID status in Europe Digital Single Market : eGovernment, Electronic Identification and Trusted Services. European Commission has regulated electronic identification and trust services for electronic transactions (eIDAS, EC/910/2014) and Privacy (GDPR). Beginning of 2017: in Europe 31 States were issuing eID-Cards. This is the highest number in one continent. More than 200 Million eIDs are in the field. Europe has more than 19 years knowledge on eID in the public sector, with Finland starting CY1999. Year 2020: More than 250 million eID-cards will be held by citizens and around 30 million e-Residence Permits by 3rd country nationals and EU citizens. European Commission and Member States spent more than €100 Million for technical interoperability along eID, eHealth, eSignature and eServices.

Roll Outs in chronological order Country Roll out start eID eSignature eMRTD-function Finland 1999 voluntary Estonia 2002 mandatory Belgium 2003 Austria 2004 Sweden 2005 yes Spain 2006 yes (2016) (Norway) Italy Netherlands N/A (Serbia) 2007 Portugal (Albania) 2008 Lichtenstein ( ) not member of the EU

Roll Outs in chronological order Country Roll out start eID eSignature eMRTD-function (Monaco) 2009 mandatory voluntary yes Lithuania (Switzerland) Germany 2010 mandatory (2017) (yes) Latvia 2012 Czech Republic 2013 Ireland (Bosnia) Romania 2014 (Kosovo) Malta Slowakia Luxembourg 2015

Roll Outs in chronological order Country Roll out start eID eSignature eMRTD-function Croatia 2015 mandatory voluntary Russia (Turkey) yes Hungary 2016 (Ukraine) What would come next? Belgium, Next Gen, 2018. Netherlands, Next Gen, 2018. Czech Repubic, 2018 (change from voluntary to mandatory). Austria, Next Gen, 2019. Romania, 2019. Belarus, 2019. Bulgaria, 2019. ( ) not member of the EU

Various Card Designs

Other initiatives beyond eIDAS Industry driven: Smart Phones w/ NFC, BLE, PKI-SIM, iSIM, eSIM etc. GSMA Mobile Connect. (Secure) QR Code. FIDO-token. Government driven: e.g. France Connect. Bank driven: e.g. Bank-ID. What will be the future evolution of electronic identification, authentication and signatures? What will be the driving force or forces for Digital Identity?

Eurosmart thinking Trusted Digital Identity and Privacy are Fundamental Rights for all European Citizens and Service Providers. The future will create several Digital Identity companion concepts with different form factors and device supports, but the “Root of the Digital Identity” will remain the official electronic document issued by European Member States, as it is today with the Know Your Customer (KYC) regulation. You can download “Future Digital Identity Landscape in Europe” on www.eurosmart.com

Future requirements of Digital Identity Freedom to travel physically and in web and cloud. Voluntary access and possibility to access to means providing security and warranties to the individuals acting as citizens, users, consumers and to service providers. Personal Data and Privacy protection by default. ICAO-standard moves more and more into ID1-Cards. EC fosters electronic Residence Permits for EU citizens. Pseudonymous authentication and signature shall be an option open to all.

Conclusion The “Root of Digital Identity” is and will be provided by Member States and the eIDAS, and “Know Your Customer” Regulations are confirming this strategic aspect. The Root of Digital Identity may be coming from various eID documents: National eID, eDriving License or ePassport, depending on the Member States’ business processes. Europe has a strong Digital Identity strategy as per the Digital Single Market Strategy, and has to promote European values for the wealth of European citizens, Member States and the economy. The smart security industry is supporting this strategy by promoting the European Values in more than 130 countries.