AAMVA Special Alert – ISO Publishes mDL Over the Internet Standard

10/15/2024

On October 7, 2024, the International Organization for Standardization (ISO) published TS 18013-7, which standardizes how the public can use a mobile driver license (mDL) to authenticate identity over the internet. This specification details how a relying party can establish a secure connection over the internet with an mDL holder through which they can authenticate identity data shared by the holder. This new standard builds on the capabilities of the mDL previously standardized in ISO/IEC 18013-5 and may be purchased at the ANSI webstore.

The previously published 18013-5 standard established interface specifications for the implementation of a driver license in association with a mobile device for in-person use. This document specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure, and enables parties other than the issuing authority (e.g., other issuing authorities and mDL verifiers in the U.S., Canada, and other countries) to:
  • use a machine to obtain the mDL data,
  • tie the mDL to the mDL holder,
  • authenticate the origin of the mDL data, and
  • verify the integrity of the mDL data.

Many states have implemented, or are implementing, this standard providing for safe, secure, privacy respecting, and interoperable solutions.

AAMVA’s Mobile Driver’s License Implementation Guidelines, Version 1.3, document is the North American companion to the ISO standard and will soon be updated to reflect the published TS 18013-7 standard.
 

For questions about AAMVA's identity resources, please contact Mike McCaskill, AAMVA's Vice President for Identity Management Programs and Services. To view all of our best practices and resources, click here.