“While Estonia has set the gold-standard for secure and user-friendly electronic authentication and digital signatures, the Estonian Wallet MVP is the first step towards the next generation eID.”
Cybernetica has completed a major milestone in the development of the Estonian digital identity wallet. In mid-June Cybernetica handed over the minimum viable product (MVP) of the digital identity wallet solution to the Estonian Information System Authority (RIA).
On the 26th of March 2024 the European Council adopted the (so called) eIDAS 2 regulation, which will make cross-border e-ID in Europe a reality. By 2026, each member state must make a digital identity wallet available to its citizens and accept EUDIWs from other member states. The development of the Estonian digital identity wallet MVP solution is organized by the Estonian Information System Authority (RIA). The work done in Estonia under the four-year framework contract signed with Cybernetica in 2022 has been aimed at achieving the set deadline, but also at pursuing innovation and setting a path in Europe.
The development of the Estonian eID Wallet began with an analysis in late 2023, with the actual app production starting in January 2024. For Cybernetica, the initial works on the wallet topic have been ongoing since early 2022, with most notable works being the wallets’ market study in collaboration with ENISA, preparations for wallet development with SK ID Solutions in the SmartWallet project, and certificate as a platform research with RIA.
The MVP delivered has several key functionalities implemented to replace
physical means of identity proof, such as:
- presenting proof of ID or driver’s licence,
- personal identification data can be issued directly to the wallet app without the need for a physical ID card,
- selective sharing of attributes: for example, specific data needed for each use-case, i.e., one’s name or document ID, without the need to disclose the entire document’s data and thus, enhancing privacy.
Oliver Väärtnõu, CEO of Cybernetica, emphasised the importance of the development: "While Estonia has set the gold-standard for secure and user-friendly electronic authentication and digital signatures, the Estonian Wallet MVP is the first step towards the next generation eID. It will enable a new electronic authentication framework, with stronger privacy guarantees and the introduction of new document types enabling a much broader range of eID use-cases."
“The Wallet MVP project is a prime example of successful cooperation between the ICT sector and government, resulting in an innovative solution that integrates Estonian digital public services with the new eIDAS framework. It has been a pleasure to work with a partner like Cybernetica who shares our vision for a secure and efficient eID ecosystem. This project not only meets regulatory requirements but also sets a new standard in privacy and functionality for our citizens, paving the way for future advancements in digital identity,” said Riho Kurg, eID architect at RIA.
“eIDAS2.0, and the development of wallets in the EU, gives Estonia another opportunity to demonstrate its leadership in the field of digital identity. Most countries, in- and outside of the EU, know the e-Estonia story in our industry, and many are looking to see what Estonia does next,” said Michael Buckland, Head of Digital Identity Technologies at Cybernetica.
In light of recent eIDAS2 regulation launch, some member states – i.e., Belgium – and other providers have begun launching their first iterations of a wallet for end users. Germany is currently running a competition for private sector companies to develop a wallet for their market. Estonia to this date, is among the pioneers of the EUDIW developments.
Cybernetica has been involved in the advancement of the Estonian digital identity ecosystem since 1997. Over two decades, Cybernetica has developed solutions for the Estonian government, completed dozens of consultancies and risk analyses, and performed continuous R&D on the topic. Cybernetica is the inventor of SplitKey technology and the provider of the technology behind Smart-ID.
The Information System Authority (RIA) is a national competence center that shapes and secures the foundations of Estonia’s digital society. It develops and manages the central technological platforms of the digital state and ensures the country's cybersecurity.