October 2024 Newsletter

Welcome to the fourth edition of our newsletter, October 2024. We’re excited to share the latest updates on our products, upcoming events, and industry insights with you. 

In this edition, we cover the following:

• Product updates and new features
• Innovation and industry insights
• Upcoming events and webinars
• Closing remarks
• What's next?

Product updates and new features

In October, iGrant.io™ introduced new features and enhancements, focusing on supporting the ISO 18013-5 mDL/mDOC credential format, adopting EWC RFC v2.0 specifications, and enabling Pushed Authorisation Requests (PAR) to enhance the functionality and interoperability of the Data and Organisation Wallet.

Data Wallet

Data Wallet is a decentralised app (dApp) where individuals can securely store and access their personal data as verifiable credentials used in everyday life. It supports various use cases, including online transactions, travel arrangements, managing health records, sharing identity proofs, etc. Each data exchange transaction is auditable, ensuring privacy and accountability. Key product updates this month include:

• Support for ISO 18013-5 mDL/mDOC credential format: This update allows for receiving and storing ISO 18013-5 compliant mobile driver’s licences (mDL) and mobile documents (mDOC) using a remote flow based on OpenID for Verifiable Credential Issuance (OpenID4VCI). It also enables sending presentations using OpenID for Verifiable Presentations (OpenID4VP) standards to verifiers upon a verification request.

• Adoption of EWC RFC v2.0 specifications: Aligning with emerging standards for secure and interoperable credential issuance and verification. Data Wallet now supports the Implementer’s Draft 1 (ID1) version of the OpenID4VCI specification, which is accessible here.

• Support for Pushed Authorisation Requests (PAR): This update enhances the confidentiality, integrity, and authenticity of authorisation requests, particularly for large request payloads. Data Wallet will now perform a discovery process to retrieve the authorisation server's metadata and check for PAR endpoint support, sending a pushed authorisation request if supported.

The latest version of Data Wallet can be downloaded from the links below:

• Appstore (iOS)
• Playstore (Android)

Please contact support@igrant.io with any issues you may have using iGrant.io Data Wallet.

Organisation Wallet

The Organisation Wallet by iGrant.io™ facilitates the issuance and verification of verifiable credentials, following the eIDAS 2.0 framework and incorporating the latest European guidelines for businesses and the public sector. Available as an on-premise solution and Platform-as-a-Service, it supports various credentials, including PID, LPID, EAA, and QEAA. This month’s key feature updates include:

• Support for ISO 18013-5 mDL/mDOC credential format: This format allows for the issuing and verification of ISO 18013-5 compliant mobile driver’s licences (mDL) and mobile documents (mDOC) in a remote flow using OpenID for Verifiable Credentials Issuance (OpenID4VCI) and OpenID for Verifiable Presentations (OpenID4VP). This is further to our existing support for JWT and SD-JWT formats.
• Adoption of EWC RFC v2.0 specifications: Ensures alignment with emerging standards for secure and interoperable credential issuance and verification, with support for the Implementer’s Draft 1 (ID1) version of the OpenID4VCI specification, accessible here.
• Support for Pushed Authorisation Requests (PAR): Enhances authorisation requests' confidentiality, integrity, and authenticity and addresses issues with large request sizes.

You can try our iGrant.io™ Organisation Wallet APIs, or, for enterprise-licensed customers, the Organisation Wallets can be trialled via this link. You can get an API key or access by contacting support@igrant.io.

Data Intermediation Service Providers (DISP)

Under the EU Data Governance Act, our DISP services facilitate secure data exchange among parties, such as organisations (data issuers and verifiers) and individuals. As the first Swedish company registered as a DISP under Article 10 of the DGA, iGrant.io™ is pioneering a trust-driven data-sharing model that connects individuals and businesses. This framework ensures compliance with data protection regulations while upholding rights.

Consent Management

We are honoured that the EU Commission’s recent publication recognises the iGrant.io™ consent management as a citizen empowerment tool that fulfils core consent management requirements. Recognised as a suitable tool for Registered Data Altruism Organisations (RDAOs), iGrant.io addresses essential consent management needs, supporting data altruism across Europe. Read more here.

The Joint Research Centre’s report, "The landscape of consent management tools - A data altruism perspective," highlights GovStack and ISO 27560-compliant consent management by iGrant.io™ to offer fully open-source solutions compliant with ISO 27560 and GovStack specifications.

Here are the resources to learn more about consent management: 

♦ Quick video

♦ Overview

♦ OpenSource Code Repository and docs

♦ ISO27560 standards for consent receipts

♦ Consent BB Govstack specifications

Innovation and industry insights

Launch of IT data wallets for Italian citizens

Italy is pioneering the launch of its digital wallet, the IT Wallet, ahead of the EU’s 2026 digital identity mandate. From 23 October 2024, an initial 50,000 users will securely store digital versions of documents such as driver’s licences, health cards, and European disability cards, expanding to over 1 million users by November's end.

Integrated into the IO app, it builds on Italy’s digital identity initiatives, including the CIE (Electronic Identity Card). The Trento province will lead testing and participate in the EU's large-scale consortium pilots. This strategic initiative, involving partners like PagoPA and the Department for Digital Transformation, represents a substantial step towards reducing bureaucracy and enhancing accessibility across public and private services.

SPRIN-D drives Germany's EUDI Wallet development

Germany is advancing its national EUDI Wallet to store data securely and official documents on smartphones, allowing citizens to verify their identities in various contexts. This initiative aligns with EU Regulation eIDAS 2.0 for a unified digital identity framework.

Led by SPRIN-D in collaboration with the Federal Ministry of the Interior, the wallet’s development emphasises transparency and inclusivity by inviting public input on ideas, concepts, and code, ensuring a secure solution meeting diverse citizen needs.

Upcoming events and webinars

The EU Digital Identity Wallet Consortium (EWC), an initiative co-financed by the European Commission, is all set to bring together the members at an upcoming EWC second General Assembly in Madrid, Spain, on October 30 and 31st. As an LSP beneficiary, iGrant.io™ will participate in the Payment Tokenization panel moderated by Visa. 

The event will gather participants from 27 countries, including 140 consortium members and key players operating in the identity, payment, and travel space, to implement wallets that meet the diverse needs of European citizens and organisations. Simplifying processes and user experience will increase trust and data quality for relying parties and protect privacy when sharing data digitally.

Closing remarks

Thank you for being a valued part of our community. We hope you find these updates informative and engaging. As we continue to innovate and expand our offerings or insights, we look forward to sharing more exciting developments with you in the coming months.

Stay tuned, stay engaged, and let’s shape the future of digital identities together. Follow us on LinkedIn or X. 

Are you interested in what we do? Learn more 👉 www.igrant.io. For further queries, contact us ✉️ info@igrant.io

What's next?

• EWC payment pilots: Building on the EWC’s published Payment Implementation Guides (IGs) and RFCs, the first iteration of the payment pilot is now underway. This pilot engages selected stakeholders across the ecosystem, including a merchant, a bank, a payment network provider, an ACS provider, and iGrant.io™ , as the wallet provider. EWC payment RFCs and implementation guides are accessible at EWC Payment RFCs on GitHub.

• Bolagsverket (LPID issuance and Organisation Wallet capability prototyping): Phase 2 of prototyping with Bolagsverket (EWC) is set to conclude in November. The initial demonstration of LPID issuance will be showcased at the EWC General Assembly on 31 October 2024.

• EBSI-Vector project: In the EBSI-Vector project, iGrant.io™ is building a data exchange ecosystem with EBSI as the trust anchor. iGrant.io wallets successfully test interoperability with other wallet providers, such as Triveria, to support company credentials and LPIDs.

• CRANE prototype phase 02 completion: The phase 2 activities for the CRANE prototype have been successfully concluded, as confirmed by EU Commission stakeholders. The CRANE decentralised health data space features an open data marketplace alongside the MyHealthEnabler app for self-monitoring. This is powered by iGrant.io™ data intermediation services, which include digital wallets and consent management functionalities.