Panel | Open Source Wallets

Thank you. Thank you very much. Final panel before we come to the break. And this is an interesting panel and for that panel that will be around open source wallets and open source always comes with that ring of, I can do it myself and I can use something that is around there for that panel. I want to invite on the stage. Dick Bwo from T Systems International, Loy Jordan from the A-A-M-V-A, Rob Otto from Ping Identity and Constantine.

Oh, now I'm lost. Papa Santis. Hope this is kp. Huh KP to all his friends. Kp k kp. Much easier from the side Tales AB to the stage. Please welcome to the stage. Hello. Woo. Set. Okay.

Okay, You're good. Something to laugh. Not really, but To laugh.

Oh, what Set? Okay we will, we will delete that from the video. Yep. Okay. Fantastic. Never experienced this before.

Yeah, there's always something for the first time. So we, we always do this before lunch in order to ensure that everyone wakes up here and sorry that it was, it was your chair. We want German quality. That's okay. So we want to talk about, about digital wallets in, in terms of open source software. Well as with every panel we start with brief introductions. Can I start with you? Certainly. I'm Lofi Nan. I'm here representing the American Association of Motor Vehicle Administrators. Our members issue driver licenses and ID cards across North America.

So we have 69 jurisdictions responsible for that function and they're moving into the digital world and in doing that they need wallets into which to provision, which is why we are very interested in this topic. Very good.

Rob, you're from a company called Ping Identity. I'm definitely from a company called Ping Identity and the those who are smart will notice that Lofi and I share an accent.

So yes, I'm the, I'm the EMEA field CTO at at Ping Identity. A little bit of a late replacement on this panel for a, a far better educated colleague, Patrick Harding, who's our, our chief Chief product architect. So Patrick couldn't make it, so I'm going to do the best job I can standing in for him, but without the Australian accent. It's very nice to be here.

Yeah, actually for an earlier panel I asked the people here who was familiar with the EODI wallet or who is not familiar with the EDI wallet, there was not one hand up. So I think people are very familiar with EODI kp you have a major role to play when it comes to the reference wallet.

Well, thank you Daniel. Thank you. My name is KP if you would like to do the short, you know, way, otherwise it is constant in Pep Santi. I'm responsible for Sket, SAB group of companies.

I'm here, you know, to to to, to answer a lot of questions. I'm also the consultant contractor together with our partner company partner company, net company Intra soft delivering, you know, the the oil wallet for, for the commission. Thank you. Nice to meet you all.

Yeah, I think everyone here is probably familiar both with Deutsche Telecom and T Systems but may not be familiar with the fact that you actually play a big role in wallet. Indeed we do. Yeah.

I'm Dirk, I'm from Dutch Telecom Systems and I'm responsible for the entire digital identity business within Dutch Telecom group. And this is not only the ODI wallet business, we are doing a lot of things, especially in the health care arena already and in finance sector and those therefore we try to bring together all the, yeah, I would like to say legacy technology in digital identities with the new one on the SI side with the UDI wallet and therefore I'm very happy to hear, to discuss with you how we can bring those different worlds together to generate a mass market approach.

Because it's not all about the technology as we will discuss altogether. It's more to convince the users to use this technology and how does it work. This is exactly one of the questions that we would like to answer today. Let me ask with a, with a simple or start with a simple question. Obviously digital wallets are based on open standards, right? You are very much involved in ISO MDL for instance. Why open source? Why not simply say, well we have open standards, everyone is just creating their, their wallets. Why do we need open source software?

Why do we want a reference implementation For our members? Of which we have quite a few as I mentioned earlier, it's about choice. So having open source, having these in the current model that Open Wallet Foundation has, having these different components from which someone can just pull together and and create something really increases options for issuing authorities. So it gives them choice, it increases competition and we believe that's good all around for everyone. I think it increases confidence as well.

So I think where we are at the moment is at a point where we are trying to encourage as much adoption as we possibly can and having good quality open source implementations of wallets like we have through the open wallet foundation, I think just really increases the, you know, increases the surface of people that are able to put these, you know, put these things into the hands of consumers, start to build trusts, start to build confidence in the whole ecosystem. I should probably say that mentioning the open Wallet foundation once is the price of admission for these pounds.

No, that's actually not true. I could Say many other things about the open Wallet foundation if you like. Thank you for the thank you for, for, for the name dropping kp I mean Sal is one the, the reference the tender to create the reference wallet.

Why, why a reference wallet? Why not just every country creating their own wallet? I would say the following, I I mean as you know, Europe is structured, you know, let's say union, we have 20 member states. If you set in a rule a legislation, then people will follow.

So, so for us, and based on the formula question, why open source, you will have fast adaption. So, so plus no licensing fees each, you know, issue or country can put a layer of technology on top. You make it simply and it is proven because I mean in the passport business a lot of installations are also based on open source and that's why, you know, the the biometrics essential passport bloomed up, you know, very fast. Thank you Dick, can you say a little bit about your wallet project and I think you are thinking about open sourcing that as well.

Yeah, before I come to this, I would like to answer the first question of you as well because I think we, you can answer this question with a lot of technical arguments that you have heard already, but you have touched this, attached to this already, Rob. I think the most important thing of the open source is the trust component because if you would like to convince the people to use something and they have at the end some kind of fears, I would like to say some doubts, then it doesn't work.

And therefore maybe an open standard is already good enough, but the open source is, is giving you exactly this kind of openness of, of freedom, of independent independency on which everybody can can can say okay, I can double check what will happen, what is really behind this.

There is no back doors, there is nothing which is really not under my control and this kind of trust component is especially here in Europe, maybe it's a special problem in Europe, it's something that was long time underestimated and now we see after this is open for everybody and especially the German government, do it very, very perfectly within consultation process in which everybody's in invited to bring arguments from all organizations, from the economy, from from public organization, non-public organizations and and bring this into at the end to the code, into, into the open source code, into this is for me the most relevant thing.

Why open source is so needed for this kind of development. At the end the technology is manageable and by the way a lot of people thinking, oh now we are losing all the business models as companies forget that all take all this code which you have open source and try to install it. A lot of people will see that it's more than to know the code. You have to set up environments and so on.

I think a lot of people here in this, in the audience know this and therefore this is from my point of view, so important and especially when we come to this later on, when we speak about how we can achieve low or high level for ance high, then we have some restrictions on the smartphones trust element. I think you have discussed this, those topics already beforehand or do it afterwards. And then sometimes you come to an approach which you may say, hmm, let's ex export this trusted element into maybe an external infrastructure because then you can also offer this for Apple devices.

We did it already and for sure if you use such kind of in personal encrypted cloud ID space, then this is a cloud and we decided to have an open source cloud as well with your, because only if you have an open source wallet and an open source cloud and this both related to each other as ecosystem for digital identities, then it'll work. This is our personal core belief and therefore I think that this kind of trust component that you have really everything open, open source based for sure with trustworthy parties, which are operate those things and trustworthy environments.

So therefore it's also very important then you can really support the idea of self serenity because self serenity of the customer, of the citizen is not coming from I declared it has to be felt by heart and this is exactly on which we are working. Can you tell a little bit about the EU reference wallet?

What, what is it and is there the idea to have the same code base all over Europe? Is it inspiration if, if you would have a free wish, how would you wish that the the reference wallet code is going to influence the rest of Europe or maybe even beyond Europe?

Yes, I can tell you the following, I've been doing projects in two, 2001 open source projects, you know, in former, you know, camper constellations and so on. I think it needs to be one leadership, one captain.

Now, I mean this boat Europe took a decision, 27 member states they put a lot of money it you have engagement, you have over 500, you know, companies in the, so-called, you know, large scale pilots following this. The trust is there, like Derek said before, the regulation is there, the technology is simple, it is there to download. So I think follow the captain and I think it's the best day.

And then when we will see the adoptions, you know, coming then I think many, you know, countries will follow, remember the biometric passports going back to that start, you know, 2000 3, 4, 5 and, and when you did a lot of cross testing process, inter interoperability, you know, groups, suddenly you have 220 nations over 140 are following this methodology and many of the system components that are open source. So, so I mean follow the leader. Thank You Rob. I think Ping has a wallet as well. Are you thinking about open sourcing? Have you already open sourced? What's the ping story?

Yeah, so I, I think I'll, I'll answer that in a in a couple of ways and I'll give you the, the second, the second mention already for the open wallet foundation, ping identity obviously is a, is a founding member and we have contributed and do continue to contribute code to that, to that project. So I think for us, obviously we, we truly believe that the wallet is not the competitive battleground or at least the wallet is not the competitive battleground where we as ping identity see ourselves.

You know, that's not a hill that we want to die on in terms of success of the decentralized identity revolution. We need, you know, every person in the world to have a, a good quality, interoperable safe wallet on their device with a, with a great user experience that enables the ecosystem that we are trying to build with our customers and partners in terms of, you know, how do we, how do we really make this decentralized identity thing work at scale? How do we use it as a way to improve experience, to improve privacy, to speed up integrations between businesses, et cetera, et cetera.

I won't go into a whole a whole sort of pitch on that. So we do obviously have our own wallet implementation, which we are using as a way to, to really start to build the ecosystem with, with our customers.

It's going to be a little while I guess before every citizen in Europe and you know, hopefully every citizen in the US and every citizen around the world other than Bhutan as we heard earlier, you know, actually has a digital identity in their wallet and the customers that we are working with can't really wait for that to happen, which is why we are providing them all that infrastructure today, but we don't know how it's going to develop tomorrow. I think the first A in AMVA stands for America, but if I remember correctly, you also have Canadian members.

Is your focus for open source solutions limited to America, to the Americas? Are you thinking that ideally digital driver's licenses should happen on a global basis? What kind of ambition should our open source projects have in terms of geography?

Global, we deal with driver licenses and we believe driver licenses is something you should be able to use across borders internationally, not only in North America but across the world. So we, we drive very hard and try to reach out and build connections throughout the world. Asteroids in Australia, the commission here here we talked to Japan, any issuer of driver licenses we want to engage with so that we can ultimately exchange driver licenses.

'cause as we just talked before, this panel, being able to use your credential across borders internationally in the first place requires acceptance of the credential, regardless of the technology. Do I trust the other issuer? Do I as a DMV in North Carolina accept a German, a German driver's license?

And then I look at the technology and then when we look at the technology, when we look at open wallets, I think that the next thing we want to do, and I think that's sort of perhaps missing at this point, but we want to make work of it, is to say this is what the user journey should look like for this type of credential. Given that you have the issuer and the relying party trust or the relying party trust the issuer, this is where the relying party is, this is where the issuer is. Mr.

Wallet, please build the rails for the credential from this side of the world to be accepted over here given that they trust each other. I don't know how many of you here are familiar with the way browsers work, but you know, when you look at browsers, of course the bedrock for every browser are the open standards. Take H-T-M-L-H, you know, htt P JavaScript away from the internet and you're left with nothing. But actually between the open standards and the web browsers themselves, you have open source projects and that's really true for any web browser in the world.

It's, you know, Google Chrome, the edge browser, the Samsung internet browser, the opera browser, they're all sharing the same open source components. So I am just the moderator, but as a moderator, I completely agree with what you've been saying. I think open source can be tremendously helpful because dozens or hundreds of standards will factor into wallets and open standards are hugely important, but they're not enough. We need open source components on top of that. We have only three minutes left. I don't know if there is a question online or please Kipi.

Yes, thank you Dan. I need just to do a comment.

You know, based on what you said and our colleagues here in the panel, we shall not forget, you know, the the commitment that many, I mean developers mean one many, you know, companies through the Linux Foundation or through the Open ID or or other, you know, foundations and so on, what they're committing. Yesterday I went around, you know, here on, on, on the show, it's a fantastic show.

I could see, you know, how they were speaking about the open source tools that you can choose if you would like to be a relying partner or if you like to be an issuer, you know, and what kind of technology you're going to choose. So, so I see, you know, fast adoption, you know, here on, on, on let's say these stakeholder, you know group and we shall not forget them and I would like Amin to thank them as well because without them we will not have a project. Thank you. Maybe two additional remarks from my side.

First of all, I think when we speak about open source, we are looking mainly into the future for new things, new projects. And I'm so happy that we are all the founding member of Open Wallet Foundation, but I think we shouldn't forget all the legacy technologies that we still have. And I think we should find ways that we create at the end multi-protocol wallets in which we support the new technology and the old technology as well in open source approach.

This is very important from my point of view because if you think that you can convince the entire world only with the new technology, you forget the entire installed base. Don't forget it first thing.

And the second thing I would like come back to this, what love already introduced a little bit, this is a question of technology of the open source code as such, but I believe it's needed to embed it this open source code at the end into an ecosystem which has rules and policies we have discussed already before in a little bit because to the, you mentioned this, it's trust between the relying party verifier to the issue and so on.

But it has to be declared officially that you as a user of an open source wallet know what kind of a party, what kind of a government is relying on which kind of a wallet, which kind of a relying party, which kind of issuer. And to be honest, I see on this side a lot of things that we have still to clarify because there are some things that Europeans are doing something isolated only for Europe, which is maybe good from a, a perspective of self serenity for Europe.

But at the end we shouldn't over such self serenity in a way that we are blocking ourselves on the borderline and when we are crossing over to US or Canada, then it doesn't work anymore. Doesn't help. But to find those rules and policies is a very important thing and should be implemented at the same time when we speak about open source code, maybe we should have open policies and open governments governance structures as well. This is very important because otherwise we will fail as well because then the technology doesn't help us. Thank you very much to all our panelists.

Thank you also to the audience. I know we are competing with lunch and that's hard competition, so thank you for, for having been here and we hope to see you in the afternoon for for the second sessions. Exactly. And before I let you go, we have one and a half hours break now and when we return we will start with the, the introduction to the German EUDI wallet project and we will have Torsten and Paul Basian here presenting that. I know it's just 90 minutes, I know it's lunch, but you won't, don't want to miss this. And it'll continue at the same pace, at the same quality.

So I'm looking forward to seeing you back in 90 minutes here and enjoy your lunch. Thank you. Thank you very much.