ISO/IEC TS 23220-3:2026

Cards and security devices for personal identification — Building blocks for identity management via mobile devices — Part 3: Protocols and services for installation and issuing phase

Scope

This document provides building blocks for mobile eID-System infrastructures and normalizes protocols, interfaces and services for mdoc apps by:

specifying interfaces for data interchange for installing of software in installation phase as well as issuing and deriving of attributes and credentials in issuing phase;
specifying security and data protection mechanisms;
applying privacy-enhancing mechanisms;
specifying discoverability mechanisms.

Mechanisms for updating or revoking of attributes and credentials or mdocs are out of scope of this document and are provided by SA specific protocols.
This document is applicable to entities involved in specifying, architecting, designing, testing, maintaining, administering and operating a mobile eID-System in parts or entirely.