Overview
ISO/IEC TS 18013-7:2025 is a Technical Specification that extends the ISO-compliant mobile driving licence (mDL) defined in ISO/IEC 18013-5. Its primary purpose is to specify how an mDL can be presented to a reader over the internet, enabling secure remote retrieval and verification of driving-licence data (mdoc). The 2025 edition updates the 2024 version and adds a normative Annex C for Digital Credentials API retrieval.
Key Topics
-
Scope & Objective
- Adds internet-based presentation functionality to the mDL ecosystem while remaining compatible with ISO/IEC 18013-5.
- Design goals include integrity/authenticity verification, selective data release, and confirming binding between person and mDL holder.
-
Data model & encodings
- Reuses data structures and conventions from ISO/IEC 18013-5, including CBOR and CDDL encodings for mdoc payloads.
- mDL implementations must tolerate unknown data fields (no error solely for unknown structures).
-
Data retrieval flows
- Implementations must support at least one retrieval method:
- Device retrieval (device engagement flow using ReaderEngagement and DeviceEngagement structures - see Annex A).
- OID4VP (OpenID for Verifiable Presentations) transmission channel (normative Annex B).
- Digital credentials API retrieval (normative Annex C).
- Uses the mdoc request/response structures from ISO/IEC 18013-5 for data exchange.
-
Engagement & transport
- Device retrieval engagement: reader sends a ReaderEngagement structure; mDL sets up a secure channel and replies with DeviceEngagement.
- Annex A recommends a transmission mechanism for ReaderEngagement (other mechanisms allowed if out-of-band).
-
Security mechanisms
- Focus on confidentiality, integrity, authenticity and selective disclosure.
- Enables verifiers (including those not associated with issuing authority) to validate mDLs and to verify binding to the presenting person.
- References to standards such as X.509 profiles, JWT/JAR, Hybrid Public Key Encryption and OID4VP are included.
Applications
- Governments and issuing authorities updating mobile driving-licence systems for internet presentation.
- Mobile app developers implementing mDL wallets that support remote presentation and selective disclosure.
- mDL reader and verifier vendors (kiosks, law enforcement, service providers) implementing secure remote retrieval channels.
- Identity and access management providers integrating mDL presentation into online services (rental cars, age verification, traffic enforcement).
Related Standards
- ISO/IEC 18013-5 - mobile driving licence application and interface (baseline).
- RFC 5280, RFC 9101, RFC 9180, RFC 9112 - referenced cryptographic and transport profiles.
- OID4VP - OpenID for Verifiable Presentations (used as an optional transmission channel).
- ISO/IEC TR 25219 and OpenID Foundation work (HAIP) - related interoperability profiles.
ISO/IEC TS 18013-7:2025 is essential for stakeholders building interoperable, secure internet-based mDL presentation solutions and for ensuring conformance with international mDL data-exchange and security practices.