ISO/IEC JTC 1/SC 17/WG 10 - Motor vehicle driver licence and related documents

This document establishes interface specifications for the implementation of a driving licence in association with a mobile device. This document specifies the interface between the mDL and mDL reader and the interface between the mDL reader and the issuing authority infrastructure. This document also enables parties other than the issuing authority (e.g. other issuing authorities, or mDL verifiers in other countries) to: — use a machine to obtain the mDL data; — tie the mDL to the mDL holder; — authenticate the origin of the mDL data; — verify the integrity of the mDL data. The following items are out of scope for this document: — how mDL holder consent to share data is obtained; — requirements on storage of mDL data and mDL private keys.

The purpose of storing IDL data on machine-readable media on the IDL is to: — increase productivity (of data and IDL use), — facilitate electronic data exchange, and — assist in authenticity and integrity validation. This document thus specifies the following: — mandatory and optional machine-readable data; — the logical data structure; — encoding rules for the machine-readable technologies currently supported. To prevent unauthorised access to the data contained on a contactless IC (e.g. by eavesdropping), the privacy of the licence holder is protected via basic access protection requiring a human-readable and/or machine-readable key/password on the IDL to access the data on the PIC (via protected-channel communication). The implementation details of this function are defined in ISO/IEC 18013-3.

This document describes the test methods used for conformity testing, that is methods for determining whether a driving licence can be considered to comply with the requirements of the ISO/IEC 18013 series for: — machine readable technologies (ISO/IEC 18013-2), and — access control, authentication and integrity validation (ISO/IEC 18013-3). The test methods described in this document are based on specifications defined in ISO/IEC 18013-2 and ISO/IEC 18013-3 and underlying normative specifications. This document deals with test methods specific to IDL requirements. Test methods applicable to (smart) cards in general (e.g. those specified in the ISO/IEC 10373 series) are outside the scope of this document. Hence the purpose of this document is to: — provide IDL implementers with requirements for conformity evaluation, — provide IDL issuing authorities with requirements for quality assurance, and — provide test laboratories and test tool providers with test suite requirements.

This document establishes guidelines for the design format and data content of an ISO-compliant driving licence (IDL) in regard to both visual human-readable features and ISO machine-readable technologies. It creates a common basis for international use and mutual recognition of the IDL without impeding individual national/community/regional motor vehicle authorities in taking care of their specific needs. The design approach of the IDL ISO ID-1 size card is to establish a secure domestic driving permit (DDP) for both human verification and machine readability and accompanying booklet with sleeve insert pocket for international use instead of the international driving permit (IDP) paper document (see Annex G). The basic document design premises include: — A minimum common mandatory data element set. — A common layout for ease of recognition. — Minimum security requirements for both human and machine verification. — Interoperability of the machine-readable content. At the discretion of national/community/regional motor vehicle authorities it allows for: — Inclusion of supplementary optional data elements to meet the needs of specific national/community/regional requirements apart from the minimum common mandatory data element set. — Additional document physical security elements at the option of national/community/regional authorities, and facilitates international procurements. — Incorporation of ISO/IEC JTC1/SC17 machine-readable technologies including integrated circuit with contacts and contactless integrated circuit technology, and ISO/IEC JTC1/SC31 1-dimensional / 2-dimensional bar codes, at the option of national/community/regional authorities. — Incorporation of current and future technologies (including biometrics, cryptography, data compression) at the option of national/community/regional authorities. A major benefit of these design premises is that a single card may serve a dual purpose of both a national/community/regional licence as well as an internationally recognized licence. Therefore, one card, in most cases, can replace the need for two documents. Alternatively, those countries that choose to maintain their individual domestic design or not to use Latin characters on their domestic driving licence for example can issue a second card with or without ISO machine-readable technologies. This second card can serve as DDP to be used with the accompanying booklet with sleeve insert pocket for international use instead of the current IDP paper document. This new IDL design yields a document that: — Is more secure from counterfeiting and alteration than the previous DDP and IDP documents. — Allows authorities to verify the authenticity of the document. — Integrates the personal data into a secure ID-1 size medium. — Allows a more reliable identification of the licence holder. — Allows for machine-readable technologies. — Facilitates information exchange and mutual recognition among motor vehicle authorities. — Allows the IDL to serve simultaneously as a DDP and IDP when accompanied by the booklet. Issuing authorities may introduce other functions to an IDL provided that it does not interfere with the driving licence function and the requirements in this document are not compromised.

ISO/IEC TR 19446:2015 is applicable to driving licences which include a microchip and claim compliance to the EU Regulation on driving licences. ISO/IEC TR 19446:2015 proposes: - details that are missing for the implementation of Commission Regulation (EU) No 383/2012 Annex II item 1 ? 10; - the subset of the ISO/IEC 18013‑4:2011 test methods that are applicable to Commission Regulation (EU) No 383/2012 Annex II item 12; - further test methods that are applicable to Commission Regulation (EU) No 383/2012 Annex II item 12; these test methods are due to EU driving licence requirements that are incompatible with ISO/IEC 18013‑2:2008. The following Commission Regulation (EU) No 383/2012 Annex II requirements are out of the scope of this Technical Report: - item 11 extended access restriction ? EAC; - item 13: requirements on the security certificate; - item 14 functional certificate - smart card testing according to the ISO/IEC 10373‑ series.

ISO/IEC 18013-4:2011 specifies the test methods used for conformity testing, that is methods for determining whether a driving licence can be considered to comply with the requirements of ISO/IEC 18013 for: machine readable technologies (ISO/IEC 18013-2), and access control, authentication and integrity validation (ISO/IEC 18013-3). The test methods specified in ISO/IEC 18013-4:2011 are based on specifications defined in ISO/IEC 18013-2 and ISO/IEC 18013-3 and underlying normative specifications. ISO/IEC 18013-4:2011 deals with test methods specific to ISO-compliant driving licence (IDL) requirements. Test methods applicable to (smart) cards in general (e.g. those specified in the ISO/IEC 10373 series) are outside the scope of ISO/IEC 18013-4:2011. Hence, ISO/IEC 18013-4:2011 provides IDL implementers with requirements for conformity evaluation, provides IDL issuing authorities with requirements for quality assurance, and provides test laboratories and test tool providers with test suite requirements.

ISO/IEC 18013-2:2008 establishes guidelines for the content and formatting of data stored on an ISO compliant driving licence (IDL) using machine-readable technologies. It creates a common basis for the international use of IDL data without restricting individual domestic or regional driver licensing authorities from applying their specific data policies. ISO/IEC 18013-2:2008 specifies the following items. Mandatory and optional machine-readable data. Machine-readable IDL data support the following functions (subject in some cases to the inclusion of appropriate optional data elements): confirming the driving privileges of a driver; enabling a link to be established to a driving privilege database; age verification; identity verification; biographical data verification; evidence of residence; biometric authentication; document authentication and validation. The logical data structure. Encoding methods for the following: cases where the memory capacity available to the IDL application does not exceed 5 kB, typically applicable to 2D barcode symbologies, high-coercivity high-density magnetic stripe and limited memory capacity integrated circuits (contactless and those with contacts); integrated circuits (contactless and those with contacts) where the memory capacity available to the IDL application exceeds 5 kB; optical memory.

ISO/IEC 18013-1:2005 establishes the design format and data content of an ISO-compliant driving licence (IDL) with regard to the human-readable (visual) features and the placement of ISO machine-readable technologies on the card. It creates a common basis for international use and mutual recognition of the IDL without restricting individual domestic or regional driver licensing authorities from incorporating their specific needs on the IDL. The intent of the ID-1 sized IDL is to allow one document to serve the purpose of both what is currently known amongst driver licensing authorities as a domestic driving permit and an international driving permit (IDP). Thus the IDL replaces the need for two separate documents. Alternatively, those countries that choose to maintain their individual domestic design can issue a second card (with or without ISO machine-readable technologies), a domestic driving licence (DDL), whilst the IDL serves to replace the current IDP paper document only. ISO/IEC 18013-1:2005 also specifies an explanatory booklet with sleeve insert pocket that may optionally accompany an IDL to facilitate its world wide interpretation when used instead of an IDP. The IDL comprises the following: minimum common mandatory data element set, common layout for ease of recognition, minimum set of security requirements. ISO/IEC 18013-1:2005 allows domestic or regional driver licensing authorities to exercise their own discretion in respect of the following aspects of the IDL in order to meet their specific needs: including supplementary optional data elements (in addition to the minimum common mandatory data element set); incorporating ISO/IEC JTC1/SC17 machine-readable technologies including magnetic stripe, integrated circuit with contacts, contactless integrated circuit or optical memory technology, and ISO/IEC JTC1/SC31 1-dimensional or 2-dimensional bar codes; incorporating current and future technologies (including biometrics, cryptography and data compression); adding physical document security elements (in addition to the mandatory elements). This new IDL design yields a document that is more secure from counterfeiting and alteration than the IDP document; allows authorities to verify the authenticity of the document; integrates the personal data into a secure ID-1 size medium; allows more reliable identification of the licence holder; allows for machine-readable technologies; facilitates information exchange and mutual recognition among driver licensing authorities; allows an ISO/IEC 18013-1:2005 compliant DDL to serve simultaneously as an IDL.