Electronic identification is the process of using data in electronic form to identify individuals or legal entities. This data is unique to each individual.
The Evrotrust electronic identification scheme is a comprehensive system that allows individuals and legal entities through their mobile application to confirm their identity to banks, insurance companies, and other private individuals, as well as to the state, in order to be granted electronic access to services.
Electronic identification is the digital alternative of the identity card – a special electronic document issued by Evrotrust and signed with the user's electronic signature, which contains and authenticates his unique identity data.
The identification data of natural persons can be the names, social security numbers, permanent address, date of birth, place of birth, and others, which are required by the country to which the user is identified. The data for identification of legal entities are: name (company), EIC, registered office, management address, representative persons, etc. This data is contained in the electronic identification tool.
eIDAS is a normative act with the greatest legal force, which contains the regulatory framework for the electronic identification of individuals, legal entities, and trust services in Europe. eIDAS guarantees the security of the national schemes created by the EU member states, their recognition in the European Union, and the recognition of the authentication services provided by the qualified trust service providers.
Each member state of the European Union has the right to create its own electronic identification schemes. In some countries, such as the Czech Republic and the Netherlands, electronic identification schemes are entirely built by the state, while in others, such as Bulgaria, private companies have been given the right to also build electronic identification schemes. An example of this is Evrotrust.
Notification is a process in which one member state of the European Union notifies the other members that a given scheme is national and will be used as mandatory for all public online services. The European Commission assesses the scheme's security and compliance level through a special body - the Co-operation Network. In it, all representatives of the member states conduct an audit of the notified scheme and whether it meets the "substantial" and "high" assurance levels. Upon successful notification, the notified scheme becomes automatically recognized in the other EU member states, and through it, all public services from all other member states can be accessible.
The non-notified identification scheme is only recognized within the territory of one EU member state. In Bulgaria, non-notified identification schemes are: PIK of NOI, PIK of NRA, PIK of NHIF, and Borica. The notified identification scheme is recognized on the territory of all EU member states for the needs of public online services.
The eID scheme of Evrotrust is available to all European Union citizens, enabling them to verify their identity and access public services across all EU-member states.
No. Notified schemes are recognized by law in the territory of the European Union, but also accepted in many other countries outside the EU. For example, North Macedonia, Albania, Kosovo, Moldova, Ukraine, etc.
One of the most important features of electronic identification is the level of trust or assurance it provides. This is the level of security at which it is guaranteed that the user's identification has been done correctly. There are three levels of assurance - low, substantial, and high.
• Low level of assurance
This level of assurance is based on verifying a single or small group of credentials, such as verifying a user's name and address. It can be used for services that do not require a particularly high level of security. Commonly used models at this level of assurance are sending confirmation emails that do not provide strong confidence in the user's identity.
• Substantial level of assurance
This level of assurance requires the user to personally present himself to the issuer of the electronic identification means, who will authenticate his identity. It can be used for more sensitive e-services like financial or e-government services. Technologies such as smart cards, USB tokens, or other physical devices that can connect to a computer are used to provide greater confidence in the user's identity.
• High level of assurance
This level of assurance requires a high degree of verification of the user's credentials, such as biometric verification or verification of data from two different authenticators or a primary data source (e.g., a government registry). User identification often involves two-factor and multi-channel technologies that provide very strong confidence in the user's identity. It can be used for the most sensitive electronic services, such as healthcare, electronic voting, or high-value financial transactions.
Yes! In May 2023, Evrotrust's electronic identification scheme was verified by the European Commission as meeting the requirements of eIDAS. Based on this verification, the Council of Ministers of the Republic of Bulgaria adopted a Decision on 23rd of May 2023, recognizing the Evrotrust scheme as a national scheme and instructing the Minister of e-Government to notify it. The notification procedure was completed on 5th of July 2023 and the Evrotrust scheme was published in the Official Journal of the European Communities. This entitles Bulgarian and European citizens to obtain electronic access to all public services in the EU through Evrotrust. The status of the Evrotrust eID scheme is available from the official EU list of notified schemes.
Evrotrust's electronic identification scheme covers "substantial" and "high" assurance levels.
For what services can electronic identification schemes be used? Electronic identification schemes can be used for public and private services. You can view the list of announced public services of the Republic of Bulgaria here. When electronic identification schemes are notified, they are mandatory for all public services provided by public authorities in EU Member States. Their use in the private sector for the needs of private electronic services is voluntary.
If a scheme is notified, it is cross-border recognized in the EU, even for private services. Private businesses are free to use notified as well as other identification schemes of their choice, as long as certain restrictions do not apply to the particular type of service, such as financial services.
Because Evrotrust is a notified eID scheme and also a service that rests on EU-wide recognized qualified trust services. In this way, it meets the requirements of the legislation governing measures against money laundering (anti-money laundering), know-your-customer, and know-your-business. The recognition derives from Art. 13, para. 1 of the 5th Directive on measures against money laundering, which has been transposed by all EU member states.
The full list of Evrotrust-supported countries can be found here. Currently, the service is activated and available to citizens of over 60 nationalities, but this figure is constantly increasing, and the accessibility of the service is expanding. The service is also available to Bulgarian legal entities who wish to access the online public services provided by the public authorities of the EU member states.
The advantages of Evrotrust over other electronic identification schemes are as follows:
• Evrotrust's eID scheme provides fully remote registration of individuals and legal entities without physical presence and with maximum security.
• The Evrotrust scheme is used entirely through a mobile smart device, making it accessible to everyone.
• The Evrotrust scheme covers levels of assurance "substantial" and "high", making it one of the most secure electronic identification solutions in the EU.
• Evrotrust's eID is the first eID scheme that enables the electronic identification of individuals and legal entities.
• The Evrotrust scheme allows it to be used by citizens of 60 different countries, including those outside of the EU. Most other national schemes can only be used by nationals of the country from which the scheme originates.
• The Evrotrust scheme is notified and recognized in the EU for the needs of financial institutions and all other industry sectors that apply anti-money laundering measures .
• The Evrotrust scheme is recognized as a national scheme of the Republic of Bulgaria and is mandatory for all public services throughout the EU and other countries that recognize EU schemes.
• The Evrotrust scheme provides a simplified user experience and an easy-to-use mobile application that does not require any special user knowledge or skills.
• The Evrotrust scheme provides the so-called SDK integration to mobile apps that create a seamless user experience and provides ease of access.
• By using the Evrotrust eID scheme, our clients also have access to Evrotrust's qualified trust services for a complete digital transformation. Thus, it is used not only for electronic identification but also for qualified electronic signatures, qualified electronic seals, qualified timestamps, qualified registered electronic mail, and others.