A Network Approach to E-identification

The approach to realise this e-ID network is twofold. In the first place, this new e-ID
solution consists of a decentralised 4-party model instead of a centralised 3-party model.
In the e-ID network the issuing of means of authentication and the acquiring (routing)
of these means are separated in two different roles (see figure 1-3). The 4-party model
connects existing means of authentication or keys (e.g. cards, mobile phones, tokens,
passwords) to E-service Providers. This way a level playing field is created in which
various players and solutions can co-exist.
Separated roles in a 4-party network
E-ID today
Netwerk approach to e-ID
End
User
E-service
Provider
End
User
E-service
Provider
End
User
End
User
End
User
E-service
Provider
End
User
E-service
Provider
Auth.
Platform
Auth.
Provider
Routing
Service
By separating the Authentication Provider role from the Routing Service role a 4-party
model is created: this allows scalability of the network
Figure 1-3: In an e-ID network Authentication Provider and Routing Service become separated roles
Secondly, a set of agreements is made that describes and defines the roles of the different
parties in the 4-party model. These agreements that ensure the interoperability of
the network are referred to as a ‘scheme’. Parties that adhere to the scheme can join
the e-ID network. This creates scalability of the network.
7