The National Cybersecurity Center of Excellence (NCCoE) has entered into a collaborative research and development agreement (CRADA) with 15 technology providers and industry experts to advance the first use case under its Mobile Driver’s License (mDL) project. The project aims to integrate mDLs into financial services to fulfill customer identification program requirements.
The partners involved include organizations such as the American Association of Motor Vehicle Administrators (AAMVA), California Department of Motor Vehicles, JP Morgan Chase, Microsoft, New York State Department of Motor Vehicles, and Wells Fargo, among others.
Biometrics and digital ID companies participating in the project include IDEMIA, MATTR Limited, iLabs, SpruceID, and the OpenID Foundation. Additional collaborators include the Department of Homeland Security (DHS), Science and Technology Directorate, US Bank, and Block, Inc.
The collaboration is designed to promote the adoption of digital identity standards and best practices by developing reference architectures, workflows, and implementation guides. These resources will help address the cybersecurity, privacy, and usability challenges associated with adopting mDLs in the financial sector.
The NCCoE is a collaborative hub within the U.S. National Institute of Standards and Technology (NIST) that focuses on advancing cybersecurity solutions. It partners with industry, government, and academia to develop practical, interoperable cybersecurity approaches and resources, including reference architectures, guidelines, and best practices.
The organizations selected for the CRADA all responded to a Mobile Driver’s License project notice that was published in the Federal Register on August 29, 2023. Collaborative activities were set to commence once enough letters of interest were received, with a start date no earlier than September 28, 2023.
The project is divided into three main phases: Define, Assemble, and Build. During the Define phase, the scope of work is established with industry collaboration. The Assemble phase involves forming teams of industry organizations, government agencies, and academic institutions. Finally, the Build phase will focus on creating practical modules and prototypes to address cybersecurity challenges.
Source: NIST NCCoE
–
August 20, 2024 – by Cass Kennedy
Follow Us