Adnovum Blog

Swiss E-ID Update: Know What Is Next

Written by Timothy Rabozzi | Oct 2, 2024 1:37:02 PM

The Swiss e-ID has been a topic of considerable debate, evolving through years of planning, public discourse, and even a referendum. On 10 September, the Council of States followed the National Council and voted strongly in favor of the e-ID law, marking a major milestone in a long and at times difficult development.  

Catching up: developments of the e-ID between 2021 and the present

The e-ID debate peaked in 2021 when the Swiss public rejected the first version of the law, primarily over concerns about privacy and the involvement of private companies in issuing digital identities. The centralized architecture, which could have allowed providers to track users, added to the distrust.

After the rejection, the government shifted focus to a state-issued e-ID based on a self-sovereign identity (SSI) model. This approach addressed privacy concerns by ensuring decentralized data storage and giving individuals control over their personal data. Over the next three years, the Federal Office of Justice (FOJ), in consultation with stakeholders including cantons, political parties, and organizations such as the Digital Society, crafted an improved version of the law. Privacy by design, data minimization, and user control became core principles.

By mid-2022, the government prepared a technology-neutral draft law, designed to be adaptable for future innovations. The process, marked by transparency and collaboration, has helped rebuild public trust in the e-ID. As of 2023, the initiative continued to progress with pilot tests and regular technical updates.

At the same time, the Federal Office of Information Technology and Telecommunications (FOITT) developed the technical framework for the broader trust infrastructure and collaborated with the public through pilot projects. These projects, such as an electronic driver’s license under the Federal Roads Office (FEDRO) and a new electronic identity card for federal employees, provided insights into real-world implementation.

In the fall of 2024, the State Council approved the e-ID law with a decisive 41 to 1 vote. However, some disagreements between the chambers on data protection and cybersecurity still need to be resolved. Given the broad support and the relatively minor nature of the amendments, the law is expected to pass without significant delays. There remains the possibility of a referendum, but for now no political party or organization has raised the issue. 

So, what’s next for the e-ID?

Introducing new technologies in the public sector, such as the e-ID, comes with significant hurdles. These include the need for substantial investments in technology and expertise, infrastructure costs, and ensuring integration with existing systems. Data security is another critical challenge, as robust measures must be in place to protect sensitive citizen information and maintain public trust.

Regulatory Updates

The Swiss e-ID law lays the groundwork for a national digital identity system, establishing key principles around security, privacy, responsibility, and liability. Moving forward, the Federal Council will issue further technical and administrative guidelines through ordinances (Verordnungen) to ensure smooth implementation. These regulatory frameworks are crucial for fostering the widespread adoption of the e-ID across both public and private sectors. As the rollout advances, the focus will shift to developing a technological infrastructure that not only integrates seamlessly with existing systems but also remains adaptable to future innovations. Some key cornerstones of these regulatory frameworks are:

Trust infrastructure
Defines the roles, responsibilities, and technology behind issuing, verifying, and storing e-IDs and other electronic proofs. It ensures a secure system for users.

E-ID issuance
Describes the process for Swiss authorities to issue e-IDs to individuals, including necessary identity checks and criteria for eligibility. It also establishes the accountability of issuers for the integrity of the issued IDs.

Data security, privacy, and liability
Focuses on ensuring data minimization, decentralization, and privacy by design to protect personal information. Issuers and verifiers are liable for securing the data and must report any breaches or misuse.

Accessibility and support
Makes sure that e-ID systems are accessible to people with disabilities and provide technical support to users, with a focus on inclusivity and continuous improvement of the infrastructure.

Budget considerations

In addition to regulatory aspects, securing adequate funding is a crucial part of developing the e-ID. The latest version of the e-ID law includes a request for additional budget allocation. The FOITT is leading the charge, seeking financial support to build an architectural framework that aligns with EU standards while remaining capable of evolving with emerging privacy technologies. See the IT roadmap below for further information on this topic.

This budget will be pivotal in enabling FOITT to create a future-proof system that meets both current and long-term needs. A forthcoming press release is expected to confirm the approved funding and outline the next steps in technical implementation. Part of this funding will also be dedicated to public education efforts, ensuring widespread understanding, trust, and adoption of the new e-ID system among Swiss citizens.

The initial law proposal outlined a total budget of approximately 182 million CHF for the development and operation of the trust infrastructure, the issuance of the E-ID, and related pilot projects between 2023 and 2028. Starting in 2029, the annual operating costs are estimated at around 25 million CHF. These budgets have already been approved by both parliament chambers.

IT roadmap of the e-ID

The Swiss e-ID program is focused on creating a digital identity system that prioritizes privacy and interoperability with the European Union. While the final decision on the e-ID technology will be made by the end of 2024, the program is aiming to building a flexible, multi-stack architecture that supports various standards and use cases.

Key technical standards under evaluation include decentralized identifiers (DIDs), giving users control over their identity without relying on a central authority, and privacy-preserving credentials like JSON-LD. The program is exploring a system that securely binds e-IDs to smartphones using special security features (like the secure enclave in your phone). This means only the person who owns the phone can access their digital identity, adding an extra layer of protection.

Additionally, techniques like BBS+ signatures for unlinkability and real-time revocation mechanisms are being tested to enhance privacy and security. OpenID protocols (OID4VC and OID4VP) are under exploration for secure communication between identity issuers and verifiers, while the overlay capture architecture (OCA) could standardize credential appearance.

Here’s an overview of the relevant technical aspects with a short description, the according technologies under review, and the probability of their inclusion in the final ID system:

Aspect Description Technologies under review Probability
Identifiers Create DIDs for individuals, ensuring secure and verifiable identity management in the system

DIDs v1.0 (W3C)

did:tdw

High
Status mechanisms Manage the status of digital IDs, including revocation and verification, to maintain privacy and security

Statuslist

Accumulator

High

Candidate

Trust protocol Establishes a secure framework for trusting digital IDs between issuers and verifiers, ensuring proper authentication

OpenID Federation

Proprietary Swiss solution

High
Communication protocol
(issuance /
verification)
Sets the rules for issuing and verifying digital IDs, ensuring they work seamlessly across different systems and organizations

OID4VC

OID4VP

High
Payload encryption Encrypts the data exchanged during digital ID processes to protect privacy and ensure secure communication JWE (JSON Web Encryption) Candidate
VC-format / signature scheme combination Supports different signature formats and cryptographic schemes, balancing privacy, security, and interoperability for digital ID credentials

SD-JWT and ECDSA/EdDSA

JSON-LD and BBS

Candidate
Holder binding scheme Links digital IDs to a specific device or person, ensuring only the legitimate holder can use or present the ID Hardware-based holder binding (ECDSA, Android, Apple Secure Enclave) High
VC appearance Defines the visual representation of digital IDs, including essential metadata, ensuring consistency and clarity for users and verifiers Overlay capture architecture (OCA) High

Collaborating internationally through the OpenWallet Foundation, the program aims to align with global standards and future-proof the e-ID system. With a focus on privacy, security, and adaptability, the final design will ensure seamless integration with existing systems and evolving technologies. Regular updates on these developments are shared via GitHub and Swiss e-ID platforms.

Open questions

Despite the progress made, several open questions remain that could impact the final implementation of the e-ID system:

Interoperability: How will the e-ID integrate with existing digital identity solutions within Switzerland, such as BE-Login, ZHservices, and AGOV? Additionally, how will it ensure seamless compatibility across EU borders?

User adoption: What strategies will be employed to ensure widespread adoption, particularly among citizens who are less familiar with technology? Can Switzerland’s e-ID achieve the same level of success as other countries like Estonia, Norway, Austria, and Portugal?

Data sovereignty: How will the system ensure that personal data remains under Swiss control, especially when interacting with international services and providers? Furthermore, how will essential SSI principles like unlinkability and selective disclosure be effectively implemented to protect user privacy?

Public Beta

The Swiss E-ID program follows a structured phased approach, beginning with a re-evaluation after the rejection of the initial law in 2021. With recent progress, including the approval of the E-ID's key elements by the State Council, the program is now focused on finalizing the technology and building the necessary trust infrastructure. A major step forward is the launch of the E-ID Sandbox (Public Beta), where developers and ICT companies can actively test the infrastructure ahead of the official rollout. This environment allows participants to familiarize themselves with the system and prepare their solutions for seamless integration. By 2025, the system will enter a public beta phase, enabling issuers and verifiers to start using the E-ID, which aims to support the broader adoption of digital identity verification and electronic proofs.

The launch of the e-ID and its trust infrastructure is planned for 2026, followed by efforts to professionalize and expand the system further. From 2027 onwards, the program will focus on scaling the infrastructure and building out the ecosystem to ensure broader adoption and continued innovation. This methodical, multi-year approach is designed to ensure robust digital identity security, user privacy, and trust from the public and private sectors.

Levels of ambition for the e-ID

The Swiss E-ID program outlines three levels of ambition for its future development:

Ambition level 1: Basic e-ID (planned for 2026)
This is the minimal purpose of the e-ID: a digital identity issued solely by the government, used for identity verification in various scenarios, such as opening a bank account, subscribing to mobile services, or verifying age. While useful, this level's benefits may not fully meet public expectations based on past feedback.

Ambition level 2: E-ID with linked state-regulated proofs
This level envisions an ecosystem where the e-ID serves as a base identity, onto which additional government-issued credentials (e.g., digital driver’s licenses) can be linked. These credentials would complement the base identity with extra information like vehicle categories or license validity. The ecosystem expands significantly compared to Level 1, offering more use cases and involving various state entities as issuers. In addition to using their e-ID for identification, for example, users’ debt registries, driver’s licenses, and proofs of residence are also fully digitized and easily verifiable.

Ambition level 3: Full digital ecosystem
This highest level of ambition envisions a broad digital ecosystem where the e-ID is just one of many digital credentials. Private and public entities could issue a wide range of digital proofs, such as tickets, membership cards, or certificates, all stored in a state-regulated, decentralized «national wallet». This system would standardize digital proofs and enable seamless digital transactions across multiple sectors, similar to the EU’s vision for a highly secure digital identity wallet, which could include users’ concert tickets, gym memberships, and other digital credentials, allowing seamless use across various public and private services.

Moving forward with the Swiss e-ID

If you're an interested onlooker, an independent specialist keen to promote a reliable infrastructure, or responsible for preparing your organization for the challenges and opportunities of the Swiss e-ID – there are ways you can participate in the development process, and now is the time to take action. With the Public Beta tech stack launching in Q1 2025, you can assume an active role in shaping the future of Switzerland’s digital identity landscape. Here’s how you can get involved:

Stay informed: Sign up for the e-ID Newsletter from the FOITT team to receive the latest updates, insights, and invitations to participation meetings directly to your inbox. 

Collaborate with us: Get a free consultation on how the e-ID laws and upcoming changes will impact your organization. Contact us to learn more about how we can help you navigate the implementation process.

Help us make the Swiss e-ID a success – test, collaborate, and be part of building the digital future of Switzerland!