The Netherlands collaborates with several countries to develop a standard for certifying European Digital Identity (EUDI) wallets. One example is collaboration on the OWASP MAS (Mobile Application Security), a globally recognised standard for certifying app security. This standard also guides the certification of EUDI wallets. As an international, non-profit community, OWASP focuses entirely on improving software security.
The Ministry of the Interior and Kingdom Relations (BZK) joined forces with the international OWASP MAS core team and experts from Belgium, Spain, and Germany to update this standard.
Key documents
The collaboration produced 2 key documents:
- The OWASP MAS EUDI Wallet Profile outlines the requirements an EDI wallet should meet from an OWASP perspective.
- The accompanying OWASP MAS EUDI Wallet Profile Practical Guidelines provide practical guidance on applying these requirements to both EDI wallets and other sensitive apps.
The OWASP MAS EUDI Wallet Profile is currently in use to develop national certification schemes and security profiles for EUDI wallets.
More information
The EDI-stelsel NL programme (Dutch), in collaboration with OWASP, the Centre for Cybersecurity (Belgium), Traficom (Finland) and the Ministry of BZK, made this possible.
For the original Dutch announcement, visit the Pleio website. Visit the NL Digital Government topic page for more information on the EUDI Wallet.
