Overview
ISO/IEC 18013-5:2021 defines international interface specifications for implementing an ISO-compliant driving licence (IDL) as a mobile driving licence (mDL) application. Published by ISO/IEC, this standard provides requirements for interactions between the mDL (stored on a mobile device), the mDL reader, and the issuing authority’s infrastructure. By establishing these protocols, ISO/IEC 18013-5:2021 facilitates secure, interoperable, and reliable use of driving licences in digital, mobile formats, supporting global harmonization and cross-border verification.
The standard focuses on enabling automatic retrieval, verification, and authentication of driving licence data held on a mobile device, without dictating the specific technologies used for data storage or user consent mechanisms. This approach ensures flexibility and adaptability for issuing and verifying authorities worldwide.
Key Topics
- Interface Specifications: The standard details interface protocols between mDLs, mDL readers, and issuing authority infrastructure, allowing seamless interaction and data exchange.
- Data Model: Outlines an extensible data model for mDLs, supporting individual data elements that can be requested and delivered independently.
- Data Exchange Methods: Describes procedures for data engagement-initialization, device engagement, and data retrieval-using multiple technologies:
- NFC (Near Field Communication)
- BLE (Bluetooth Low Energy)
- Wi-Fi Aware
- QR Codes
- WebAPI and OpenID Connect (OIDC)
- Security and Authentication: Specifies mechanisms for:
- Verifying data origin and integrity,
- Ensuring data is linked to the rightful holder,
- Protecting against forgery via cryptographic signatures,
- Supporting session encryption and mutual device authentication.
- International Interoperability: Ensures mDLs can be authenticated, verified, and utilized across different countries and by third-party verifiers.
- Selective Data Release: mDL holders can control which data elements are shared during verification.
Applications
ISO/IEC 18013-5:2021 is critical in the following contexts:
- Digital Transformation of Driving Licences: Enables governments and licensing authorities to issue ISO-compliant, secure mobile driving licences.
- Law Enforcement & Identity Checking: Supports roadside and remote verification without needing physical licence handover, increasing convenience and security.
- Cross-Border Verification: Allows verifiers in other jurisdictions (including other countries) to confidently read, authenticate, and validate mDL data.
- Broader Mobile Identity Use Cases: The interface specifications and protocols can also be applied to other mobile identity documents, facilitating seamless digital identity verification.
- Access Control: Useful for organizations needing to confirm legal driving privileges or identity without manual document handling.
Practical Benefits
- Enhanced Security: Robust authentication and data integrity mechanisms help prevent identity fraud.
- User Control: Individuals retain control over which information is released.
- Convenience: Enables contactless, paperless verification-ideal for travel, rentals, and regulated services.
- Future-Proofing: Designed for evolvability; additional data elements and technologies can be supported as innovations emerge.
Related Standards
Implementation and conformance with ISO/IEC 18013-5:2021 may reference or interact with:
- ISO/IEC 18013 Series:
- Part 1: Physical characteristics and basic data set
- Part 2: Machine-readable technologies
- Part 3: Access control, authentication, and integrity validation
- Part 4: Test methods
- ISO/IEC 7816 Series: Integrated circuit cards
- ISO/IEC 18004: QR Code bar code symbology specification
- ISO/IEC 19785-3: Common Biometric Exchange Formats Framework
- RFC 7515 and RFC 7519: JSON Web Signature (JWS) and JSON Web Token (JWT)
- NFC Forum Technical Specifications: For device engagement via NFC
- Other cryptography and identity standards: Such as TLS, CBOR, OIDC, and certificate management protocols
Summary
ISO/IEC 18013-5:2021 delivers a crucial foundation for the secure, flexible, and globally interoperable use of mobile driving licences. Its focus on strong data integrity, authentication, and privacy supports digital transformation in personal identification, enabling reliable verification worldwide and across sectors.