Belgium and Portugal eID schemes pre-notified under eIDAS
European Commission, 2018
In May 2018, Belgium and Portugal announced the pre-notification of their national electronic identification (eID) schemes, extending the list of national eIDs soon to be available for cross-border use in Europe.
Regulation (EU) N°910/2014 on electronic identification and trust services for electronic transactions in the internal market (known as the eIDAS Regulation) foresees that if an Member State offers an online public service to citizens or businesses for which access is granted based on an electronic identification scheme, then they must also recognise the notified eIDs of other Member States by 29 September 2018. Pre-notification is the first of three steps introduced by the eIDAS Regulation. Six months prior to the indented notification date, Member States share amongst themselves information relating to their proposed eID schemes, including:
- A description of the solution, information about the identity provider and the estimated level of assurance, explanation about the liability regime and responsibility of the different authorities; and
- A description of the procedure to obtain and revoke an eID and a description of the online authentication process.
The information shared by Member States provides input for the peer review process, allowing the eID scheme to be assessed against the quality and security requirements laid out by the eIDAS Regulation.
On 28 May 2018, Belgium has pre-notified its electronic ID card and its National Electronic Identity Card (Citizen eCard) and Electronic Resident Card (Foreigner eCard). Belgium has been one of the pioneers in the field of electronic identification in Europe by replacing old paper-based ID document with a smartcard containing identification and signature certificates to all its citizen since 2004. Belgium has notably participated to several European pilots, including STORK 2.0, supporting the use of eID for accessing online services across borders (eHealth, eBanking, eGov4Business). In the latest version of the card, two specific certificates are integrated to the chip and it can be used using a 4-digit pincode to authenticate persons older than 6 years old and to sign (non-repudiation certificate) for persons older than 18 years old. Since 2014, the National Electronic Identity Card replaces the Health card (SIS card) for accessing healthcare services in Belgium.
Belgian National Electronic Identity Card
On 30 May 2018, Portugal has pre-notified three eID schemes: the national eID card (Cartão de Cidadão - CC), the mobile eID solution (Chave Móvel Digital - CMD) and the Professional Attributes Certification System (Sistema de Certificação de Atributos Profissionais - SCAP). The Cartão do Cidadão is a smartcard based eID combining four identification numbers (i.e. fiscal, social, health and civil ID), replacing five other paper-based ID cards. It is compulsory for all Portuguese citizens as of the age of 20 days. A complementary authentication possibility has been introduced with the mobile-ID solution Chave Móvel Digital (Digital Mobile Key). It is available to Portuguese and foreign nationals aged 16 years or older. Activation of CMD consists of a security code received by SMS or by email, which is combined with a mobile phone number or email address and a PIN code. The system requires users to have previously identified themselves at a government agency, with a valid ID. The third scheme - SCAP - serves to authenticate the functions that the owner (natural person) of a Portuguese national eID card (CC) or mobile eID (CMD) perform in society as qualified professional and/or the powers and capacities in the context of a public/private company. Portugal has also been an early contributor to the development of the use of electronic identification for accessing cross border services via a participation to the eSENS project and STORK 2.0.
Portuguese national eID card (Cartão de Cidadão)
Both countries have requested their eID schemes to be peer reviewed by other Member States as of July. This process is expected to take three months.
The German eID scheme (cf. Germany’s notification last September) has already been notified and currently five Member States (Italy, Spain, Luxembourg, Estonia and Croatia) eID schemes are undergoing a peer review. The pre-notification of Belgium and Portugal should therefore lead to at least eight notified eID schemes by the end of 2018. For a full status about pre-notified and notified eID schemes, please consult this overview page.
CEF eID primarily supports the Member States in the roll-out of the eIDAS Network (the technical infrastructure which connects national eID schemes). The Connecting Europe Facility (CEF) eID Building Block is a set of services (including software, documentation, training and support) provided by the European Commission and endorsed by the Member States, which helps public administrations and private Service Providers to extend the use of their online services to citizens from other European countries.
This page has no comments.