ºÝºÝߣ

ºÝºÝߣShare a Scribd company logo
ISO mdoc 101
Oliver Terbu (MATTR), Andrew Hughes (FaceTec)
- Work started by ISO/IEC JTC1/SC17 WG10 in 2017
- Being developed by WG10 and WG4
- ISO/IEC 18013-5:2021
- Originally defined for mobile driving license (mDL) + presentation over ¡°local radios¡±
- But mdocs are defined as a digital credential format for any credential types (i.e. doctypes)
- Scope
- mdoc data model (for all mdocs)
- mDL doctype and namespaces
- Transaction protocols for close proximity (attended) use cases (for all mdocs)
- Device engagement
- Device retrieval
- Server retrieval
- Security mechanisms (for all mdocs)
- The mDL PKI and X.509 certificate profiles
- Privacy recommendations (for all mdocs)
- ISO/IEC 18013-7:2024
- Defines online retrieval mechanisms (for all mdocs)
- OpenID4VP
- RestAPI
ISO mobile documents (mdocs)
- ISO/IEC 23220 series (for all mdocs)
- Extracts general concepts and protocols from ISO/IEC 18013-5 and ISO/IEC TS 18013-7
- Remains backwards compatible with ISO/IEC 18013-5 and ISO/IEC TS 18013-7
- Defines how to create specific profiles of mdocs for new document types, e.g., mVRC,
micov, PhotoID, PID
- Adds additional features such as credential holder verification, reader engagement, ¡­
- Several parts of ISO/IEC 23220 are being defined
- 23220-1: Generic system architectures of mobile eID systems
- 23220-2: Common namespaces
- 23220-3: Building blocks for issuance (data structures, backend to backend protocol,
OID4VCI profile, ¡­)
- 23220-4: Building blocks for presentation (close proximity and online)
- 23220-5: Trust models and confidence levels
- 23220-6: Certification of trustworthiness
- 23220-7: Doctype registry
ISO mobile documents (mdocs)
- 2017: Formal New Work Item Proposal acceptance and
launch of the standardization project.
- April 2018: 1st Committee Draft (CD) of ISO/IEC
18013-5 for international ballot/commenting.
- October 2018: 1st mDL interoperability event in
Okayama, Japan, based on the 1st CD draft.
- December 2018: Austroads, AAMVA, and EReg
endorse the international standardization of mDLs at
their Global Summit in Melbourne, Australia.
- March 2019: 2nd CD draft for ballot, incorporating the
learnings from the first test event.
- August 2019: America¡¯s first mDL test event at the
AAMVA AIC, based on the 2nd CD draft.
- November 2019: Australia¡¯s first mDL test event in
Brisbane, Australia, based on the proposed text for the
Draft International Standard (DIS).
- April 2020: Approval of the DIS version of ISO/IEC
18013-5.
- August 2021: Approval of the Final Draft International
Standard version ISO/IEC 18013-5.
- September 2021: Publication of the final International
Standard ISO/IEC 18013-5:2021.
- October 2021: European test event in Rotterdam, The
Netherlands.
- November 2021: American test event in Houston, TX,
USA.
- May 2022: 6th international test event in Louisville, KY,
USA.
- December 2022: 7th international test event in
Brisbane, QLD, Australia.
- August 2023: First online-only event for testing ISO/IEC
TS 18013-7.
- December 2023: 9th in-person international test event
in Paris, France.
- October 2024: Publication of the final Technical
Specification ISO/IEC TS 18013-7:2024.
- October 2024: 10th in-person international test event in
Sydney, Australia.
Key Activities and Milestones achieved by (Members of)
ISO/IEC JTC1/SC17 WG10 and WG4
mdoc interfaces
mdoc PKI
https://learn.mattr.global/docs/formats/mdocs
- Issuing Authority Certificate
Authority (IACA) certificate
- Root certificate of issuer
- Distributed out-of-band
- Intermediate Certificates
- Not directly supported by
mDL certificate profiles
- Document Signer Certificate
(DSC)
- End-entity certificate that
signs MSOs
- Included in MSO
- Mobile Security Object
(MSO)
- Signed by DSC
https://learn.mattr.global/docs/formats/mdocs
Verified Issuing Authority
Certificate Authority List
(VICAL )
- Published by Digital Trust
Service (DTS) systems to
proxy and simplify trust,
e.g., AAMVA, Austroads
- A list of trusted IACAs for
specific credential types
signed by the VICAL
provider
- Verifier needs to trust
VICAL provider instead of
each issuer individually
mdoc close proximity
presentation flow
¡ñ Holder and verifier engage by scanning a QR code or NFC to
establish an encrypted session to secure a wireless data
transfer protocol (e.g. BLE/WiFi-Aware/NFC)
¡ñ When the session is being or was established, the verifier
sends one or more presentation requests to ask the holder to
present mdocs with specific namespaces/data elements
¡ñ The presentation request optionally uses reader authentication which
allows to authenticate the verifier to the holder
¡ñ The mdoc presentation is then sent via the same secure session to
via the chosen wireless transfer protocol to the verifier
¡ñ Finally, the verifier receives the presentation and verifies mdoc and
issuer data authentication
https://learn.mattr.global/docs/formats/mdocs
mdoc data model (¡°credentials¡±)
- mdoc credentials encoded as CBOR structures
- Described by the following information
- Mobile Security Object (MSO)
- Uses COSE_Sign1
- Signed by issuing authority (DSC)
- Contains document signer certificate (DSC) for issuer
data authentication
- Contains salted hashes of issuer signed
namespaces/data elements to support selective
disclosure and preserve privacy
- Document type (credential type), e.g.,
org.iso.18013.5.1.mdl
- Validity info of the MSO
- Device key for mdoc authentication
- Metadata
- Other authorized keys
- ¡­
- A number of namespaces
- Actual namespace data values
- External to the MSO
- Contains data element identifiers, e.g., firstname and
data element values
https://learn.mattr.global/docs/formats/mdocs
mdoc data model (¡°presentations¡±)
- mdoc presentations encoded as CBOR
structures
- Described by the following information
- Mobile Security Object (MSO)
- Selectively disclosed issuer signed
namespaces, i.e., data element identifiers and
data element values including salts, for issuer
data authentication
- Device auth (COSE_Sign1 or COSE_Mac) for
mdoc authentication to prevent replay
- Optionally, selectively disclosed device signed
namespaces
https://learn.mattr.global/docs/formats/mdocs
mdoc data model
Flight path for mdoc specs
ISO has a formal publication process that includes ongoing maintenance
- Once a standard is published, an amendment (small changes) or revision
(any/all changes) can be started
What are the WGs working on now?
- SC 17/WG 10 is working on revisions for both 18013-5 and 18013-7
- 18013-5 Revision will correct bugs, adds a new device request structure
(origin info, hints from reader to mdoc for how to handle complex doc requests, purpose hints,
conditionality)
- 18013-7 Revision will add support for the W3C browser API in
anticipation of standardization
Still discussing
- On-device holder-credential-binding (aka authorization to present an mdoc)
Expect revised versions in 2025
Why mdocs?
- In addition to properties of other credential formats has the following benefits
- Global ISO standard
- Well-defined end-to-end specification for close-proximity and online transmission of digital
credentials to ensure interoperability
- Battle-tested during a lot of interop events
- Adopted by government use cases
- mDL DHS/TSA pilots in the US
- mDL Australia
- Alignment with ICAO DTC in progress
- Referenced by the EU eIDAS 2.0 Implementing Acts
- ¡­
- NIST and ¡°EU¡±-approved cryptography (NIST curves, Brainpool etc.)
- CBOR is optimized for close-proximity protocols, e.g., parsing of data structures
- Supports selective disclosure
- ¡­
Questions?
Thank you!

More Related Content

Similar to ISO mdoc 101 session presented to Internet Identity Workshop IIW (IIWXXXIX) (20)

CPaaS.io Y1 Review Meeting - Platform Architecture
CPaaS.io Y1 Review Meeting - Platform ArchitectureCPaaS.io Y1 Review Meeting - Platform Architecture
CPaaS.io Y1 Review Meeting - Platform Architecture
Stephan Haller
?
OpenID for Verifiable Credentials @ IIW 36
OpenID for Verifiable Credentials @ IIW 36OpenID for Verifiable Credentials @ IIW 36
OpenID for Verifiable Credentials @ IIW 36
Torsten Lodderstedt
?
Lecture 01 {Introduction}.pptx
Lecture 01 {Introduction}.pptxLecture 01 {Introduction}.pptx
Lecture 01 {Introduction}.pptx
SurendraBasnet6
?
Project
ProjectProject
Project
blueash1198
?
Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)
Jorgen Thelin
?
dist-access. access control in distributed systemspdf
dist-access. access control in distributed systemspdfdist-access. access control in distributed systemspdf
dist-access. access control in distributed systemspdf
NohaNagy5
?
OpenID for SSI
OpenID for SSIOpenID for SSI
OpenID for SSI
Torsten Lodderstedt
?
OpenChain Webinar #50 - An Overview of SPDX 3.0
OpenChain Webinar #50 - An Overview of SPDX 3.0OpenChain Webinar #50 - An Overview of SPDX 3.0
OpenChain Webinar #50 - An Overview of SPDX 3.0
Shane Coughlan
?
Technology, Business and Regulation of the Connected Car
Technology, Business and Regulation of the Connected CarTechnology, Business and Regulation of the Connected Car
Technology, Business and Regulation of the Connected Car
mentoresd
?
Distributed Systems: How to connect your real-time applications
Distributed Systems: How to connect your real-time applicationsDistributed Systems: How to connect your real-time applications
Distributed Systems: How to connect your real-time applications
Jaime Martin Losa
?
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric VanderburgNetworking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Eric Vanderburg
?
IoT on azure
IoT on azureIoT on azure
IoT on azure
Joanna Lamch
?
Tta 0081
Tta 0081Tta 0081
Tta 0081
Hai Nguyen
?
9. PA DIM presentation.pdf
9. PA DIM presentation.pdf9. PA DIM presentation.pdf
9. PA DIM presentation.pdf
PROFIBUS and PROFINET InternationaI - PI UK
?
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
IJDKP
?
Towards design strong emergency and COVID-19 authentication scheme in VANET
Towards design strong emergency and COVID-19  authentication scheme in VANETTowards design strong emergency and COVID-19  authentication scheme in VANET
Towards design strong emergency and COVID-19 authentication scheme in VANET
nooriasukmaningtyas
?
The importance of Quality Assurance for ICT Standardization
The importance of Quality Assurance for ICT StandardizationThe importance of Quality Assurance for ICT Standardization
The importance of Quality Assurance for ICT Standardization
Axel Rennoch
?
Internet of Things: an overview
Internet of Things: an overviewInternet of Things: an overview
Internet of Things: an overview
Pascal Bodin
?
Blockchin Architecture on Azure-Part-3
Blockchin Architecture on Azure-Part-3Blockchin Architecture on Azure-Part-3
Blockchin Architecture on Azure-Part-3
Mohammad Asif
?
FIWARE Generic Enablers introduction
FIWARE Generic Enablers introductionFIWARE Generic Enablers introduction
FIWARE Generic Enablers introduction
Miguel Garc¨ªa Gonz¨¢lez
?
CPaaS.io Y1 Review Meeting - Platform Architecture
CPaaS.io Y1 Review Meeting - Platform ArchitectureCPaaS.io Y1 Review Meeting - Platform Architecture
CPaaS.io Y1 Review Meeting - Platform Architecture
Stephan Haller
?
OpenID for Verifiable Credentials @ IIW 36
OpenID for Verifiable Credentials @ IIW 36OpenID for Verifiable Credentials @ IIW 36
OpenID for Verifiable Credentials @ IIW 36
Torsten Lodderstedt
?
Lecture 01 {Introduction}.pptx
Lecture 01 {Introduction}.pptxLecture 01 {Introduction}.pptx
Lecture 01 {Introduction}.pptx
SurendraBasnet6
?
Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)Web Services and Devices Profile for Web Services (DPWS)
Web Services and Devices Profile for Web Services (DPWS)
Jorgen Thelin
?
dist-access. access control in distributed systemspdf
dist-access. access control in distributed systemspdfdist-access. access control in distributed systemspdf
dist-access. access control in distributed systemspdf
NohaNagy5
?
OpenChain Webinar #50 - An Overview of SPDX 3.0
OpenChain Webinar #50 - An Overview of SPDX 3.0OpenChain Webinar #50 - An Overview of SPDX 3.0
OpenChain Webinar #50 - An Overview of SPDX 3.0
Shane Coughlan
?
Technology, Business and Regulation of the Connected Car
Technology, Business and Regulation of the Connected CarTechnology, Business and Regulation of the Connected Car
Technology, Business and Regulation of the Connected Car
mentoresd
?
Distributed Systems: How to connect your real-time applications
Distributed Systems: How to connect your real-time applicationsDistributed Systems: How to connect your real-time applications
Distributed Systems: How to connect your real-time applications
Jaime Martin Losa
?
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric VanderburgNetworking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Networking Concepts Lesson 10 part 2 - Security Appendix - Eric Vanderburg
Eric Vanderburg
?
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
FINAL CALL - 7th International Conference on Networks and Security (NSEC 2023)
IJDKP
?
Towards design strong emergency and COVID-19 authentication scheme in VANET
Towards design strong emergency and COVID-19  authentication scheme in VANETTowards design strong emergency and COVID-19  authentication scheme in VANET
Towards design strong emergency and COVID-19 authentication scheme in VANET
nooriasukmaningtyas
?
The importance of Quality Assurance for ICT Standardization
The importance of Quality Assurance for ICT StandardizationThe importance of Quality Assurance for ICT Standardization
The importance of Quality Assurance for ICT Standardization
Axel Rennoch
?
Internet of Things: an overview
Internet of Things: an overviewInternet of Things: an overview
Internet of Things: an overview
Pascal Bodin
?
Blockchin Architecture on Azure-Part-3
Blockchin Architecture on Azure-Part-3Blockchin Architecture on Azure-Part-3
Blockchin Architecture on Azure-Part-3
Mohammad Asif
?

More from Andrew Hughes (7)

Kantara Initiative Consent Receipt Interoperability Demo v4
Kantara Initiative Consent Receipt Interoperability Demo v4Kantara Initiative Consent Receipt Interoperability Demo v4
Kantara Initiative Consent Receipt Interoperability Demo v4
Andrew Hughes
?
Hughes iso-standards-identiverse-2018-06-24 v3
Hughes iso-standards-identiverse-2018-06-24 v3Hughes iso-standards-identiverse-2018-06-24 v3
Hughes iso-standards-identiverse-2018-06-24 v3
Andrew Hughes
?
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Andrew Hughes
?
Kantara trust frameworks 2016 05-08
Kantara trust frameworks 2016 05-08Kantara trust frameworks 2016 05-08
Kantara trust frameworks 2016 05-08
Andrew Hughes
?
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew HughesNSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
Andrew Hughes
?
NSTIC IDESG ID Ecosystem Conceptual Model v02
NSTIC IDESG ID Ecosystem Conceptual Model v02NSTIC IDESG ID Ecosystem Conceptual Model v02
NSTIC IDESG ID Ecosystem Conceptual Model v02
Andrew Hughes
?
A Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
A Conceptual Model for the NSTIC ID Ecosystem - Discussion DraftA Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
A Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
Andrew Hughes
?
Kantara Initiative Consent Receipt Interoperability Demo v4
Kantara Initiative Consent Receipt Interoperability Demo v4Kantara Initiative Consent Receipt Interoperability Demo v4
Kantara Initiative Consent Receipt Interoperability Demo v4
Andrew Hughes
?
Hughes iso-standards-identiverse-2018-06-24 v3
Hughes iso-standards-identiverse-2018-06-24 v3Hughes iso-standards-identiverse-2018-06-24 v3
Hughes iso-standards-identiverse-2018-06-24 v3
Andrew Hughes
?
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Digital Identity Landscape for Vancouver IAM Meetup 2017 12-19
Andrew Hughes
?
Kantara trust frameworks 2016 05-08
Kantara trust frameworks 2016 05-08Kantara trust frameworks 2016 05-08
Kantara trust frameworks 2016 05-08
Andrew Hughes
?
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew HughesNSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
NSTIC ID Ecosystem - A Conceptual Model v03 - Andrew Hughes
Andrew Hughes
?
NSTIC IDESG ID Ecosystem Conceptual Model v02
NSTIC IDESG ID Ecosystem Conceptual Model v02NSTIC IDESG ID Ecosystem Conceptual Model v02
NSTIC IDESG ID Ecosystem Conceptual Model v02
Andrew Hughes
?
A Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
A Conceptual Model for the NSTIC ID Ecosystem - Discussion DraftA Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
A Conceptual Model for the NSTIC ID Ecosystem - Discussion Draft
Andrew Hughes
?

Recently uploaded (20)

UiPath Automation Developer Associate Training Series 2025 - Session 2
UiPath Automation Developer Associate Training Series 2025 - Session 2UiPath Automation Developer Associate Training Series 2025 - Session 2
UiPath Automation Developer Associate Training Series 2025 - Session 2
DianaGray10
?
Integrated Operating Window - A Gateway to PM
Integrated Operating Window - A Gateway to PMIntegrated Operating Window - A Gateway to PM
Integrated Operating Window - A Gateway to PM
Farhan Tariq
?
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
ScyllaDB
?
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
Safe Software
?
Early Adopter's Guide to AI Moderation (Preview)
Early Adopter's Guide to AI Moderation (Preview)Early Adopter's Guide to AI Moderation (Preview)
Early Adopter's Guide to AI Moderation (Preview)
nick896721
?
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarterQ4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
MariaBarbaraPaglinaw
?
Computational Photography: How Technology is Changing Way We Capture the World
Computational Photography: How Technology is Changing Way We Capture the WorldComputational Photography: How Technology is Changing Way We Capture the World
Computational Photography: How Technology is Changing Way We Capture the World
HusseinMalikMammadli
?
The Future of Repair: Transparent and Incremental by Botond De?nes
The Future of Repair: Transparent and Incremental by Botond De?nesThe Future of Repair: Transparent and Incremental by Botond De?nes
The Future of Repair: Transparent and Incremental by Botond De?nes
ScyllaDB
?
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
Tsuyoshi Hirayama
?
DevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdfDevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdf
Justin Reock
?
Gojek Clone Multi-Service Super App.pptx
Gojek Clone Multi-Service Super App.pptxGojek Clone Multi-Service Super App.pptx
Gojek Clone Multi-Service Super App.pptx
V3cube
?
EaseUS Partition Master Crack 2025 + Serial Key
EaseUS Partition Master Crack 2025 + Serial KeyEaseUS Partition Master Crack 2025 + Serial Key
EaseUS Partition Master Crack 2025 + Serial Key
kherorpacca127
?
Both Feet on the Ground - Generative Artificial Intelligence
Both Feet on the Ground - Generative Artificial IntelligenceBoth Feet on the Ground - Generative Artificial Intelligence
Both Feet on the Ground - Generative Artificial Intelligence
Pete Nieminen
?
Brave Browser Crack 1.45.133 Activated 2025
Brave Browser Crack 1.45.133 Activated 2025Brave Browser Crack 1.45.133 Activated 2025
Brave Browser Crack 1.45.133 Activated 2025
kherorpacca00126
?
L01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardnessL01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardness
RostislavDaniel
?
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
ScyllaDB
?
Transform Your Future with Front-End Development Training
Transform Your Future with Front-End Development TrainingTransform Your Future with Front-End Development Training
Transform Your Future with Front-End Development Training
Vtechlabs
?
Field Device Management Market Report 2030 - TechSci Research
Field Device Management Market Report 2030 - TechSci ResearchField Device Management Market Report 2030 - TechSci Research
Field Device Management Market Report 2030 - TechSci Research
Vipin Mishra
?
UiPath Agentic Automation Capabilities and Opportunities
UiPath Agentic Automation Capabilities and OpportunitiesUiPath Agentic Automation Capabilities and Opportunities
UiPath Agentic Automation Capabilities and Opportunities
DianaGray10
?
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramentoAIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
Alessandro Bogliolo
?
UiPath Automation Developer Associate Training Series 2025 - Session 2
UiPath Automation Developer Associate Training Series 2025 - Session 2UiPath Automation Developer Associate Training Series 2025 - Session 2
UiPath Automation Developer Associate Training Series 2025 - Session 2
DianaGray10
?
Integrated Operating Window - A Gateway to PM
Integrated Operating Window - A Gateway to PMIntegrated Operating Window - A Gateway to PM
Integrated Operating Window - A Gateway to PM
Farhan Tariq
?
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
30B Images and Counting: Scaling Canva's Content-Understanding Pipelines by K...
ScyllaDB
?
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
[Webinar] Scaling Made Simple: Getting Started with No-Code Web Apps
Safe Software
?
Early Adopter's Guide to AI Moderation (Preview)
Early Adopter's Guide to AI Moderation (Preview)Early Adopter's Guide to AI Moderation (Preview)
Early Adopter's Guide to AI Moderation (Preview)
nick896721
?
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarterQ4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
Q4_TLE-7-Lesson-6-Week-6.pptx 4th quarter
MariaBarbaraPaglinaw
?
Computational Photography: How Technology is Changing Way We Capture the World
Computational Photography: How Technology is Changing Way We Capture the WorldComputational Photography: How Technology is Changing Way We Capture the World
Computational Photography: How Technology is Changing Way We Capture the World
HusseinMalikMammadli
?
The Future of Repair: Transparent and Incremental by Botond De?nes
The Future of Repair: Transparent and Incremental by Botond De?nesThe Future of Repair: Transparent and Incremental by Botond De?nes
The Future of Repair: Transparent and Incremental by Botond De?nes
ScyllaDB
?
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
DAO UTokyo 2025 DLT mass adoption case studies IBM Tsuyoshi Hirayama (ƽɽÒã)
Tsuyoshi Hirayama
?
DevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdfDevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdf
Justin Reock
?
Gojek Clone Multi-Service Super App.pptx
Gojek Clone Multi-Service Super App.pptxGojek Clone Multi-Service Super App.pptx
Gojek Clone Multi-Service Super App.pptx
V3cube
?
EaseUS Partition Master Crack 2025 + Serial Key
EaseUS Partition Master Crack 2025 + Serial KeyEaseUS Partition Master Crack 2025 + Serial Key
EaseUS Partition Master Crack 2025 + Serial Key
kherorpacca127
?
Both Feet on the Ground - Generative Artificial Intelligence
Both Feet on the Ground - Generative Artificial IntelligenceBoth Feet on the Ground - Generative Artificial Intelligence
Both Feet on the Ground - Generative Artificial Intelligence
Pete Nieminen
?
Brave Browser Crack 1.45.133 Activated 2025
Brave Browser Crack 1.45.133 Activated 2025Brave Browser Crack 1.45.133 Activated 2025
Brave Browser Crack 1.45.133 Activated 2025
kherorpacca00126
?
L01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardnessL01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardness
RostislavDaniel
?
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
How Discord Indexes Trillions of Messages: Scaling Search Infrastructure by V...
ScyllaDB
?
Transform Your Future with Front-End Development Training
Transform Your Future with Front-End Development TrainingTransform Your Future with Front-End Development Training
Transform Your Future with Front-End Development Training
Vtechlabs
?
Field Device Management Market Report 2030 - TechSci Research
Field Device Management Market Report 2030 - TechSci ResearchField Device Management Market Report 2030 - TechSci Research
Field Device Management Market Report 2030 - TechSci Research
Vipin Mishra
?
UiPath Agentic Automation Capabilities and Opportunities
UiPath Agentic Automation Capabilities and OpportunitiesUiPath Agentic Automation Capabilities and Opportunities
UiPath Agentic Automation Capabilities and Opportunities
DianaGray10
?
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramentoAIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
AIXMOOC 2.3 - Modelli di reti neurali con esperimenti di addestramento
Alessandro Bogliolo
?

ISO mdoc 101 session presented to Internet Identity Workshop IIW (IIWXXXIX)

  • 1. ISO mdoc 101 Oliver Terbu (MATTR), Andrew Hughes (FaceTec)
  • 2. - Work started by ISO/IEC JTC1/SC17 WG10 in 2017 - Being developed by WG10 and WG4 - ISO/IEC 18013-5:2021 - Originally defined for mobile driving license (mDL) + presentation over ¡°local radios¡± - But mdocs are defined as a digital credential format for any credential types (i.e. doctypes) - Scope - mdoc data model (for all mdocs) - mDL doctype and namespaces - Transaction protocols for close proximity (attended) use cases (for all mdocs) - Device engagement - Device retrieval - Server retrieval - Security mechanisms (for all mdocs) - The mDL PKI and X.509 certificate profiles - Privacy recommendations (for all mdocs) - ISO/IEC 18013-7:2024 - Defines online retrieval mechanisms (for all mdocs) - OpenID4VP - RestAPI ISO mobile documents (mdocs)
  • 3. - ISO/IEC 23220 series (for all mdocs) - Extracts general concepts and protocols from ISO/IEC 18013-5 and ISO/IEC TS 18013-7 - Remains backwards compatible with ISO/IEC 18013-5 and ISO/IEC TS 18013-7 - Defines how to create specific profiles of mdocs for new document types, e.g., mVRC, micov, PhotoID, PID - Adds additional features such as credential holder verification, reader engagement, ¡­ - Several parts of ISO/IEC 23220 are being defined - 23220-1: Generic system architectures of mobile eID systems - 23220-2: Common namespaces - 23220-3: Building blocks for issuance (data structures, backend to backend protocol, OID4VCI profile, ¡­) - 23220-4: Building blocks for presentation (close proximity and online) - 23220-5: Trust models and confidence levels - 23220-6: Certification of trustworthiness - 23220-7: Doctype registry ISO mobile documents (mdocs)
  • 4. - 2017: Formal New Work Item Proposal acceptance and launch of the standardization project. - April 2018: 1st Committee Draft (CD) of ISO/IEC 18013-5 for international ballot/commenting. - October 2018: 1st mDL interoperability event in Okayama, Japan, based on the 1st CD draft. - December 2018: Austroads, AAMVA, and EReg endorse the international standardization of mDLs at their Global Summit in Melbourne, Australia. - March 2019: 2nd CD draft for ballot, incorporating the learnings from the first test event. - August 2019: America¡¯s first mDL test event at the AAMVA AIC, based on the 2nd CD draft. - November 2019: Australia¡¯s first mDL test event in Brisbane, Australia, based on the proposed text for the Draft International Standard (DIS). - April 2020: Approval of the DIS version of ISO/IEC 18013-5. - August 2021: Approval of the Final Draft International Standard version ISO/IEC 18013-5. - September 2021: Publication of the final International Standard ISO/IEC 18013-5:2021. - October 2021: European test event in Rotterdam, The Netherlands. - November 2021: American test event in Houston, TX, USA. - May 2022: 6th international test event in Louisville, KY, USA. - December 2022: 7th international test event in Brisbane, QLD, Australia. - August 2023: First online-only event for testing ISO/IEC TS 18013-7. - December 2023: 9th in-person international test event in Paris, France. - October 2024: Publication of the final Technical Specification ISO/IEC TS 18013-7:2024. - October 2024: 10th in-person international test event in Sydney, Australia. Key Activities and Milestones achieved by (Members of) ISO/IEC JTC1/SC17 WG10 and WG4
  • 6. mdoc PKI https://learn.mattr.global/docs/formats/mdocs - Issuing Authority Certificate Authority (IACA) certificate - Root certificate of issuer - Distributed out-of-band - Intermediate Certificates - Not directly supported by mDL certificate profiles - Document Signer Certificate (DSC) - End-entity certificate that signs MSOs - Included in MSO - Mobile Security Object (MSO) - Signed by DSC
  • 7. https://learn.mattr.global/docs/formats/mdocs Verified Issuing Authority Certificate Authority List (VICAL ) - Published by Digital Trust Service (DTS) systems to proxy and simplify trust, e.g., AAMVA, Austroads - A list of trusted IACAs for specific credential types signed by the VICAL provider - Verifier needs to trust VICAL provider instead of each issuer individually
  • 9. ¡ñ Holder and verifier engage by scanning a QR code or NFC to establish an encrypted session to secure a wireless data transfer protocol (e.g. BLE/WiFi-Aware/NFC) ¡ñ When the session is being or was established, the verifier sends one or more presentation requests to ask the holder to present mdocs with specific namespaces/data elements ¡ñ The presentation request optionally uses reader authentication which allows to authenticate the verifier to the holder ¡ñ The mdoc presentation is then sent via the same secure session to via the chosen wireless transfer protocol to the verifier ¡ñ Finally, the verifier receives the presentation and verifies mdoc and issuer data authentication https://learn.mattr.global/docs/formats/mdocs
  • 10. mdoc data model (¡°credentials¡±) - mdoc credentials encoded as CBOR structures - Described by the following information - Mobile Security Object (MSO) - Uses COSE_Sign1 - Signed by issuing authority (DSC) - Contains document signer certificate (DSC) for issuer data authentication - Contains salted hashes of issuer signed namespaces/data elements to support selective disclosure and preserve privacy - Document type (credential type), e.g., org.iso.18013.5.1.mdl - Validity info of the MSO - Device key for mdoc authentication - Metadata - Other authorized keys - ¡­ - A number of namespaces - Actual namespace data values - External to the MSO - Contains data element identifiers, e.g., firstname and data element values https://learn.mattr.global/docs/formats/mdocs
  • 11. mdoc data model (¡°presentations¡±) - mdoc presentations encoded as CBOR structures - Described by the following information - Mobile Security Object (MSO) - Selectively disclosed issuer signed namespaces, i.e., data element identifiers and data element values including salts, for issuer data authentication - Device auth (COSE_Sign1 or COSE_Mac) for mdoc authentication to prevent replay - Optionally, selectively disclosed device signed namespaces https://learn.mattr.global/docs/formats/mdocs
  • 13. Flight path for mdoc specs ISO has a formal publication process that includes ongoing maintenance - Once a standard is published, an amendment (small changes) or revision (any/all changes) can be started What are the WGs working on now? - SC 17/WG 10 is working on revisions for both 18013-5 and 18013-7 - 18013-5 Revision will correct bugs, adds a new device request structure (origin info, hints from reader to mdoc for how to handle complex doc requests, purpose hints, conditionality) - 18013-7 Revision will add support for the W3C browser API in anticipation of standardization Still discussing - On-device holder-credential-binding (aka authorization to present an mdoc) Expect revised versions in 2025
  • 14. Why mdocs? - In addition to properties of other credential formats has the following benefits - Global ISO standard - Well-defined end-to-end specification for close-proximity and online transmission of digital credentials to ensure interoperability - Battle-tested during a lot of interop events - Adopted by government use cases - mDL DHS/TSA pilots in the US - mDL Australia - Alignment with ICAO DTC in progress - Referenced by the EU eIDAS 2.0 Implementing Acts - ¡­ - NIST and ¡°EU¡±-approved cryptography (NIST curves, Brainpool etc.) - CBOR is optimized for close-proximity protocols, e.g., parsing of data structures - Supports selective disclosure - ¡­