ANSSI and BSI issue a joint release on remote identity proofing

The French National Cybersecurity Agency (ANSSI) and the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik – BSI) publish their 6th joint annual release, which focuses on remote identity proofing.

Publish the 20 December 2023 Updated 05 January 2024

Digital transformation entails a broad range of effects on our daily life, including on people's identities. Across Europe, an increasing number of public and private services are accessible through digital identification technologies. Remote identity proofing is more convenient and faster than physical verification. However, it raises new security challenges with regard to these potentially repeated and industrialised attacks.

The evaluation of remote identity proofing methods requires to consider the security of information systems, organisational measures as well as specific risks associated, in particular, with presentation and injection attacks. In light of the challenges at stake, it is now critical to evaluate and guarantee the integrity of electronic identification means.

Some EU Member States, including France with PVID certification, have elaborated evaluation schemes of remote identity verification providers to ensure their robustness and that they meet the level of confidence expected by users, beneficiaries and regulators. The development of European digital identity wallets under the eIDAS regulation will require Member States to harmonise the way in which they certify that remote identity verification solutions are reliable, secure and trustworthy.

To find out more about this publication, click on the link below:

You want to (re)discover the previous editions: 2022 / 2021 / 2020 / 2019 / 2018