Remote Identity Proofing ANSSI-BSI Joint Release
Publié le Wednesday 20 December 2023
The French National Cybersecurity Agency (ANSSI) and the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik – BSI) have published their sixth joint annual report, which this year focuses on remote identity verification.
The digital transformation is reshaping everyday life, including how individuals’ identities are managed. Across Europe, a growing number of public and private services now rely on digital identification technologies. While remote identity verification offers greater convenience and speed compared to physical verification, it also introduces new security challenges—particularly in the face of repeated and industrial-scale attacks.
The assessment of remote identity verification methods requires consideration of information system security, organisational measures and specific risks associated in particular with presentation and injection attacks. In light of these challenges, it is now essential to assess and ensure the integrity of remote digital identification methods.
Some EU Member States, including France through the PVID certification scheme, have developed assessment frameworks for remote identity verification providers, ensuring their robustness and a high level of trust among users, beneficiaries and regulators. The development of European digital identity wallets, as provided for in the eIDAS Regulation, will require Member States to harmonise the way in which they certify the reliability, security and trustworthiness of remote identity verification solutions.