With us you can rely on secure eID services
If, as an identity provider, you wish to offer an electronic identification solution that is also recognized at the European level, you will have to comply with the legal framework of the eIDAS Regulation and have your eID system notified accordingly. The three security levels of low, substantial and high are of crucial importance. They express the level of trust in the identity of the people involved and go hand in hand with increasing security requirements that must be complied with when identifying, authenticating and managing identities.
We can support you in the eID sector in the following ways: In a project-specific workshop, we will go through the relevant test requirements with you, answer any specific questions you may have and prepare you in the best possible way for any upcoming tests or notifications. As part of a gap analysis, we will evaluate the currently achieved security level and inform you about areas where there is still need for optimization. Following a document review and an on-site audit, we will confirm the security level that you have achieved. Furthermore, our training courses will give you a basic insight into the world of eIDAS & ETSI.
Our services in the field of electronic identification
The standards we use to audit:
eIDAS Regulation
Assessment of the requirements set out in Chapter II "Electronic identification" of the eIDAS Regulation.
Implementing Regulation (EU) 2015/1502
Contains the minimum technical specifications and procedures for security levels for electronic identification means.
Your benefits at a glance
- Training your employees with regard to eIDAS: Our training prepares your employees for the examination aspects of the eIDAS Conformity Assessment and turns them into in-house eIDAS.PROFESSIONALs.
- Identification of areas in need of optimization: You will be made aware of existing non-conformities and the potential for specific improvement with regard to the eIDAS-compliant implementation of your eID service, thereby paving the way to successful certification.
- Objective confirmation of your security level: The fact that the security level you have achieved (low, substantial or high) with your eID service has been evaluated and confirmed by an independent third party will serve as proof to customers and regulators.
- Conformity assessment as a gateway to the European market: A successful certification forms the basis for the EU notification of your eID system and therefore opens the door to the European market.
All about trust services
- REMOTE instead of ON-SITE: Possibilities of auditing in times of Corona
- Customer information: Dealing with the Corona virus
-
TÜVIT specifies cybersecurity architecture for On-board Telematics Platform (OTP)
What is electronic identification (eID)?
Electronic identification systems according to eIDAS aim to significantly simplify identification for the cross-border provision of administrative services at the European level. Companies also benefit from these eID systems, as they can be used in a corporate environment. This saves time and effort and makes communication with customers easier. Electronic identification systems have already been introduced in many Member States (such as the online ID function of identity cards in Germany).
The eIDAS Regulation provides for the harmonization of the various national eID systems at the (security) technical level. The Regulation aims to achieve interoperability between those systems. This is ensured by a voluntary notification procedure of the European Commission, in which Member States can have their national systems notified. The eIDAS Regulation regulates the legal framework conditions for mutual recognition. It distinguishes three security levels (Levels of Assurance): "low", "substantial" and "high".
Notified eID systems are recognized across borders and allow access to national administrative services both for citizens of the Member State and for EU citizens of other Member States. To achieve this, the notified eID system used must have a security level equal to or higher than that required for the administrative service.