2018 International Bank for Reconstitution and Development/The World Bank
1818 H Street, NW, Washington, D.C., 20433
Telephone: 202-473-1000; Internet: worldbank
Some Rights Reserved
This work is a product of the staf of The World Bank with external contributions. The fndings, interpretations,
and conclusions expressed in this work do not necessarily refect the views of The World Bank, its Board of
Executive Directors, or the governments they represent. The World Bank does not guarantee the accuracy
of the data included in this work. The boundaries, colors, denominations, and other information shown on
any map in this work do not imply any judgment on the part of The World Bank concerning the legal status
of any territory or the endorsement or acceptance of such boundaries.
Nothing herein shall constitute or be considered to be a limitation upon or waiver of the privileges and
immunities of The World Bank, or of any participating organization to which such privileges and immunities
may apply, all of which are specifcally reserved.
Rights and Permission
This work is available under the Creative Commons Attribution 3.0 IGO license (CC BY 3.0 IGO) http://
creativecommons/licenses/by/3.0/igo. Under the Creative Commons Attribution license, you are free
to copy, distribute, transmit, and adapt this work, including for commercial purposes, under the following
conditions:
Attribution—Please cite the work as follows: World Bank. 2018.
Technology Landscape for Digital
Identifcation
, Washington, DC: World Bank License: Creative Commons Attribution 3.0 IGO (CC BY 3.0 IGO)
Translations—If you create a translation of this work, please add the following disclaimer along with the
attribution:
This translation was not created by The World Bank and should not be considered an ofcial
World Bank translation. The World Bank shall not be liable for any content or error in this translation.
Adaptations—If you create an adaptation of this work, please add the following disclaimer along with the
attribution:
This is an adaptation of an original work by The World Bank. Views and opinions expressed in
the adaptation are the sole responsibility of the author or authors of the adaptation and are not endorsed
by The World Bank.
Third-Party Content—The World Bank does not necessarily own each component of the content contained
within the work. The World Bank therefore does not warrant that the use of any third-party-owned individual
component or part contained in the work will not infringe on the rights of those third parties. The risk of
claims resulting from such infringement rests solely with you. If you wish to reuse a component of the work,
it is your responsibility to determine whether permission is needed for that reuse and to obtain permission
from the copyright owner. Examples of components can include, but are not limited to, tables, fgures, or
images.
All queries on rights and licenses should be addressed to World Bank Publications, The World Bank, 1818 H
Street, NW, Washington, DC, 20433; USA; email: pubrights@worldbank.
26690-ID4DEmergingTechnologiesPaper.indd 22/26/18 5:12 PM
Contents
1. Introduction 1
2. Understanding the Identity Lifecycle4
2.1. Registration (Identity Proofing) 4
2.2. Issuance (Credential Management) 6
2.3. Identity Authentication 6
2.4. Authorization 7
2.5. Identity Management (Identity Maintenance) 7
2.6. Example of a User’s Journey through the Identity Lifecycle 7
3. Introducing the Technology Assessment Framework 9
3.1. Six Assessment Parameters 9
3.2. A Three-Point Scale 10
3.3. Assessing Technologies Used in Identification and Authentication12
3.4. Mapping Technologies to the Identity Lifecycle 12
4. Credential Technologies14
4.1. Biometrics 15
4.2. Cards 31
4.3. Supporting Technologies for Cards40
4.4. Mobile 46
5. Authentication and Trust Frameworks: Technologies and Protocols62
5.1. Blockchain 65
5.2. FIDO Universal Authentication Framework (UAF) 68
5.3. FIDO Universal Second Factor (U2F)69
5.4. OAuth 2.0 70
5.5. OpenID Connect 71
5.6. SAML 72
5.7. Key Trends in Authentication and Trust Frameworks: Technologies
and Protocols73
6. Analytics Technologies75
6.1. Risk Analytics 77
6.2. Predictive Analytics 78
6.3. Business Activity and Operations Analytics 78
6.4. Biographic Matching (Fuzzy Search) 79
6.5. Key Trends in Analytics Technologies80
7. Other Considerations82
7.1. Privacy and Data Protection82
i
26690-ID4DEmergingTechnologiesPaper.indd 12/26/18 5:12 PM
TECHNOLOGY LANDSCAPE FOR DIGITAL IDENTIFICATIONii
7.2. Open Standards and Vendor Neutrality 82
7.3. Demographics83
7.4. Culture83
7.5. Service-Level Requirements83
7.6. Economic Feasibility 84
7.7. Infrastructure Constraints 84
7.8. Conclusion84
Appendix 1. Other Design Considerations85
Application Programming Interfaces (APIs)85
Microservices 86
In-Memory Databases87
NoSQL Databases87
Distributed Systems88
DevOps 88
Appendix 2. 90
Figures
Figure 1: Identity Lifecycle 4
Figure 2: Rachel’s Journey through the Identity Lifecycle 8
Figure 3: Example Output from the Technology Assessment Framework 11
Figure 4: Identification and Authentication Technologies12
Figure 5: Technologies Mapped to the Identity Management Lifecycle 13
Figure 6: Biometric Sub-Technologies 15
Figure 7: Biometric Capture and Matching Assessment 16
Figure 8: Cards31
Figure 9: Cards Assessment 32
Figure 10: Supporting Technologies for Cards 40
Figure 11: Supporting Technologies for Cards Assessment 41
Figure 12: Mobile Sub-Technologies 46
Figure 13: Mobile Technologies Assessment48
Figure 14: Authentication and Trust Frameworks: Technologies and Protocols 63
Figure 15: Assessment of Authentication and Trust Frameworks, Technologies,
and Protocols63
Figure 16: Types of Blockchains 65
Figure 17: Trust Framework 66
Figure 18: Analytics Sub-Technologies 75
Figure 19: Analytics Sub-Technologies Assessment 76
Figure 20: Other Design Considerations as Spotlights 85
26690-ID4DEmergingTechnologiesPaper.indd 22/26/18 5:12 PM。