Mr. Säuberli, how satisfied are you with the design of the new e-ID?
The introduction of the e-ID is a major step in the digital transformation of Switzerland. It provides a solid basis for the secure, digital verification of identities. As it is such an important building block, it is essential that we work together to identify the requirements, and decide on the details of implementation and any further development. Trusted infrastructures are very complex, so it is important that the team brings a variety of skills together. The project was developed with great foresight by the federal government, under the leadership of the Swiss Federal Office of Justice. Data protection and security concerns were taken very seriously from the outset and taken into account in the design. I am happy with the design and even happier now we have a definitive starting point for the project. The e-ID is a prime example of how we should approach complex federal projects in the future.
Can you see any weaknesses? Are there any aspects you think should have been designed differently?
Although we are now dealing with very advanced issues like cryptography and security, every technological solution is always a compromise between user-friendliness and security requirements. Until now, for example, it has been difficult to balance data-saving sharing of attributes and the need for correlation. There has been progress in this area, which can be taken into account. That’s why it is important to keep implementation arrangements flexible, so that we can make continuous and systematic improvements.
“The implementation of the e-ID must remain flexible to enable continuous improvements.”– Daniel Säuberli, President of DIDAS
Some people are concerned about over-identification — consumers will have to prove their identity online for everyday transactions, which is not the case at present. The federal government wants to introduce a blacklist to deal with this. What does that mean?
The ability to share information in a dataminimizing way is an outstanding feature of the future e-ID. It means I will be able to ensure that only the data I actively release as the holder of the e-ID is shared. Trust infrastructure does not prevent users from being completely anonymous or adopting a pseudonym, although attributes or parts of attributes are checked for authenticity. This is not possible with the current physical identity card. When I show it, I disclose all the information it contains. But if a provider in the digital or physical realm submits a proof request seeking information from the e-ID for example, when verifying the minimum age for a certain service and the information is not required for the transaction, I can report them.These kinds of self-regulating mechanisms are very important to the ecosystem, and they should be embedded in governance. And so should clear countermeasures in the event of abuse.
Can you explain the vision of the trust architecture behind the new e-ID?
The vision is to create a secure and futureproof digital ecosystem that provides added value to all stakeholders. Thanks to the e-ID, identity can be verified via trust infrastructure, but the infrastructure can also be used to verify various digital credentials and authentic data packages. For example, proof of vaccination, a doctor’s prescription, a delivery note or proof of assets from the bank can be made electronically verifiable to automate processes or to protect data. The ecosystem must be developed by fostering innovation and creating a knowledge environment that supports businesses and enables experimentation. We haven’t gone far enough yet.
To what extent has the architecture been defined, and to what extent are you as an association involved in the design process?
Like all the other stakeholders, DIDAS is involved in shaping digital trust infrastructure via the federal government’s consultation meetings, but as a think tank, it has also established itself as a center of excellence for trust infrastructure. We are closely involved with standardizing the content of level 1 – 3 sectoral ecosystems. To ensure that the needs of all stakeholders are taken into account, we closely monitor how the structures are developed and provide input.
“The e-ID will also make it possible to be anonymous or adopt a pseudonym. In the emerging ecosystem, self-regulating mechanisms are important for governance, and there should be clear countermeasures in the event of abuse.”– Daniel Säuberli, President of DIDAS
How is DIDAS involved with the development of trust architecture?
We are working with various stakeholders to lay the foundations for a digital ecosystem that promotes trust and security in the digital world. Take portability and interoperability, for example: Verifiable credentials such as the e-ID can be used in a decentralized way across different systems and platforms, which makes it easier to integrate them into new and existing systems. This promotes compatibility between the technology used by the federal government and the private sector and also the “once-only” principle. In other words, the principle of only having to record certain information once, so that it can be shared repeatedly in a verifiable manner and checked by a trusted verifier.
Could e-voting be part of trust architecture at some point?
Like identification, elections and votes need to be easily accessible and barrier-free for all population groups, both digitally and physically. I believe e-voting generally has the potential to simplify and modernize the process. It could lead to higher voter turnout, especially among the younger generation. Trust infrastructure and verifiable credentials could play a role here, for example in verifying identity, votes and voter eligibility.
“The e-ID can be used in a decentralized way via different systems and platforms. This promotes compatibility and flexibility between the technology used by the federal government and the private sector, and helps introduce the ‘once-only’ principle.”– Daniel Säuberli, President of DIDAS
And what about digital signature services? Could these be integrated into e-ID architecture?
Digital signature services are a logical extension of the digital identity infrastructure. It is or the market to decide whether these are delivered by third-party providers or by the federal government. As an active user, what I would like to see is the user-friendly integration of signature services into my business and personal processes.
The e-ID is also likely to be recognized by the EU. How do you see interoperability with other jurisdictions, particularly with regard to the eIDAS Regulation?
Interoperability with the EU and other jurisdictions is crucial to allow the e-ID and other digital credentials to be sustainable in the longer term. For example, eIDAS does not differentiate between the identification of natural persons and legal entities, whereas the e-ID Act only covers natural persons. We need to find ways to ensure that functions and technology are interoperable and meet the high data protection requirements of the Swiss infrastructure. We have good solutions, but they need to be continuously refined.
What about the possibility of obtaining an e-ID without a physical identity check? Are there digital onboarding options?
Yes, there are. There will be a digital onboarding process that enables instant comparison of the passport photo details stored by Fedpol with the data collected during e-ID onboarding. The e-ID team has issued a call for tender for this. As far as I know, e-IDs will also be issued by the passport office. The e-ID is always issued to the federal wallet and, if necessary, to other electronic wallets in parallel.