Remote Identity Proofing for EUDI Wallet Onboarding : Strengthening Assurance Against Evolving Threats

The European Digital Identity (EUDI) Wallet is set to transform how EU citizens interact with digital services by providing a secure, user-controlled identity framework. One of the central activities of this initiative is the onboarding process, in which the verified Personal Identification Data (PID) are issued and installed to the user’s EUDI-Wallet.

To ensure trust and security, for all existing and upcoming services and applications involving the EUDI-Wallet with their PIDs, onboarding procedures must meet Level of Assurance (LoA) High, as required by eIDAS. As a trustworthy onboarding method to the EUDI-Wallet, national eID systems must always be considered, especially if they are already notified for the LoA High.

However, among the different methods that are under discussion to achieve this assurance, another pathway is through evaluated and certified remote identity proofing processes. While this offers convenience, it also introduces serious technical and security challenges—especially when video-based methods are used for biometric and document verification.

As a follow-up to the BSI-ANSSI Joint Release of December 2023 that presented the general threat models, this document aims at presenting the progress made since the last paper and identify gaps that affect the reliability of video-based remote identity proofing.