Digital Trust Services Market
Snapshots on State of Play and Outlook

Jörg Lenz
Head of Marketing & Communication

Seminar Trust services/eID in Japan and EUby Standardisation Committee of the NPO Japan Network Security Association
JNSA Digital Signature WG/JT2A| © Namirial – All rights reserved

November 15 – Tokyo & online

1

Namirial Group Global Footprint
900+ Employees
85+ Countries with customer
deployments in cloud & on-premises
150+ Strategic Partners
1000+ Partners
Local presences of Namirial Group

Group headquarters in Italy
Local Presences

Austria, Brazil, Costa Rica, Ecuador,France, Germany, Greece,Guatemala, India, Mexico, Peru,Portugal, Romania, Spain, Turkey,
UK

Countries withPartners & customers
Customers
Acquisitions since 2021 = new subsidiaries
2021 Nov – Netheos (now Namirial France)
2022 Feb – Evicertia
Apr – Bit4id Group incl. Uanataca
Sep – Agenzia Trotta
2023 Sep – Unimatica
Data as of November 2023
| © Namirial – All rights reserved2Overall market perception from Namirial•Market has become largely commoditized• Hundreds of vendors that offer various forms of electronic signatures,
however just roughly 10-15 vendors with truly global relevance• 238 vendors offer qualified trust services in EU/EEA (as of November 14, 2023),
however just a handful truly pan-European relevance•Less low hanging fruit for a quick sale: Use cases addressed for digitization now are requiring a soundunderstanding of country-specific complex legal and regulatory requirements and the requirement for countryspecific trust service provider integrations.

•Market now characterized by many shades of grey among the vendors:• Rapidly increasing co-opetition as customers demand interplay with platforms for remote identification anddigital onboarding• New players in digital trust services thanks to PKI-as-a-service•

Many vendors are struggling to remain or become profitable, tempted to raise prices•

Vendor Stickiness for unregulated use cases only requiring basic e-signatures as a Public Cloud solution ismediocre.
• Many organizations reassessing value provided by a fully-fledged electronic signature solution if it makes
sense to pay for a premium product.
• Basic e-signature is increasingly offered as core functionality in other platforms or purpose-built software| © Namirial – All rights reserved

3

High Level Trends in E-Signature Vendor LandscapeMany vendors intensified their attempts to replace DocuSign or Adobe• DocuSign has a major lack in customer stickiness in basic use cases (e. g. customer
contracts, employee document signatures, NDAs) - if not part of a more complex
agreement workflow and analysis.
• Foxit, Nitro & others targeting Adobe customers: Same intention to enable a signature
upsell for the PDF business• Almost everyone has some QES offering – a few with own QTSP in the group (Nitro:Connective), most with one or more QTSP partners (e. g. Conga: aruba.it, Asseco,
firmaprofessional, itsme, Swisscom, TrustPro, Uanataca)
Erosion of revenue potential with basic e-signatures, feature became a commodity- Starting to be priced with unlimited transactions (envelopes) into larger solutions:• Acrobat Pro / Document Cloud• Box Sign - provided to Box users at no additional cost incl. unlimited signatures in all
Business Plans. Box claims in their earnings calls to have gained a significant amount ofcustomers from DocuSign.
• YouSign: Free e-signatures for consumers• Next in line with unlimited free basic e-signature offer could be Dropbox (Their Dropbox
Sign product is the former Hello Sign; QEC for QES is provided by Namirial)| © Namirial – All rights reserved

4

Landscape of Qualified Trust Service Providers in EU / EEA
238 active Qualified Trust Service Providers(QTSPs) in 29 countries - operating withdifferent backgrounds• Ownership: state owned vs. privatelyowned• Technology: Increasing number of QTSPs+1

operating based on PKI as a service• Business Cultures: e .g. Nordics / Baltics
different to Mediterranean• Level of Trust in Government and its
ability to digitize

Spain, France and Italy have 43% (total: 102)
active QTSPs due to an active role of theirrespective Public Admins to foster
digitization & usage of digital certificates forthe delivery of citizen services (subsequentfamiliarity of the private sector with these
digital solutions)+1+1+130+351+7+2+2+1-3+121+1

Numbers in green = YOY changes – compared to status in October 2022
| © Namirial – All rights reservedScreenshot taken Nov 14, 2023

https://eidas.ec.europa.eu/efda/tl-browser/#/screen/statistics

5Landscape Remote ID Proofing & Digital Identity
2023: Many solutions on different levels of adoption
Public Sector Solution
Private Sector Solution

🇬🇧Digi.meOnfido

Private Public Partnership

eIDAS - eID scheme
🟠 Peer Reviewed
🟡 Peer Reviewed
🟢 Notified
💳 Card-based
electronic / digital identities

🇮🇸
Audkenny
Authenteq
IceKey💳 National ID card🇩🇰CitizenKey
🟢 MitID

🇮🇪MyGov ID.
🇳🇱🟢 DigiID
DigIdentity
🟢 EHerkenning
Fourthline
GeniDIN
SIDNYivi🇳🇴🟢 BankID🟢 Buypass
Commfides
MinID💳 National ID cardSignicat🇸🇪🟢 BankID
DIGG
eGov Authentication
Freja eID
iGrant🇫🇮
Finnish Trust NetworkFindy💳 National ID card🇱🇹🟢 💳 National ID cardOndato🇵🇱🟢 Public Electronic Identification System🇨🇿🟢 💳 ID card (nationals & foreigners)
BankID🟢 Mobile eGovernment Key, mojeID
CZ.NIC🇧🇪.beID🟢 itsme🟢 💳 ID card (nationals & foreigners)🇩🇪🟢 💳 ID card (national, perm. residents)
AuthadaHelix ID
NetID
Bundesdruckerei IDNow
PostID
ecsec
Lissi ID
Sign8esatus
msg mySaveID
VerimiGovernikusNectWebID🇱🇺
Luxtrust🟢 💳 National ID card

Via 🟢 France Connect
ID Provider Gateway:* available** to become available

🇺🇦
BankIdDIA National Wallet🇫🇷
A3bc**Amelie**
Carte vitale app**France Identitè*🟢 Idenitité Numerique* (La Poste)
IDNow* (former Ariadnext)
Impots.gouv*
Netheos
YRIS (former MobileConnect)

🇸🇰🟢 💳 ID card (national & foreigner)slovensko.sk🇭🇺💳 National ID card

🇷🇴

RoeID
🇧🇬
🟢 Evrotrust eID

🇵🇹Authenticacao.gov
🟢 Digital Mobile Key🟢 💳 National ID card
🟡 Professional Attributes
Certification System🇪🇸ClaveLogalty🟢 💳 National ID card
Validated ID| © Namirial – All rights reserved🇪🇪🇪🇪🟢 💳 Digi-ID
🟢 Diplomatic ID card
🟢 e-Residency
Smart-ID
🟢 ID card / RP card🇱🇻🟢 eParaksts🟢 💳 National ID Card
Verifeye online

🇬🇷
GRNET🇹🇷💳 National ID card
TurkTrust🇨🇭
Deepcloud PXL Vision
IntrumSwissID
mesoneer🇱🇮🟢 eID.li🇮🇹🟢 💳 National ID card
🟢 SPID🇦🇹🟢 ID Austria
SignD

🇲🇹
🟢 Identity Malta🇸🇮eUprava🇭🇷E-Gradini
Erste ID (BankID)
Identyum🇨🇾💳 National ID card

Last update: November 3, 2023 © Joerg Lenz Namirial ; Information provided without guarantee for accuracy and completeness of data displayed; For clarity reasons organizations are
only listed in their home / main country
Source: Namirial Research and European Commission - eID User Community: Overview of (pre-)notified eID schemes ( i. e. those that can be used across national borders thanks to their integration
with the eIDAS network ) http://bit.ly/eIDSchemes-eIDAS

6

eIDAS 2.0: Proposed major changes
Art.
6aContent
Each Member State has to issue a European Digital Identity Wallet

6bRequirements for relying parties for fraud prevention

7

Each Member State has to notify at least one eID scheme

11aUnique and persistent identification of natural persons

14Commission allowed to adopt implementing decisions related to third countries

17, 18, 20, 24

Amendments to align with Network and Information Security (NIS) rules

24

Harmonized rules for remote identification to be applied across the EU

29aRequirements for qualified service for management of remote electronic signature creation devices

34, 38, 42, 44, 45, 45g Commission obliged to establish reference numbers of standards for preservation, qualified certificates, timestamps, electronic delivery and archiving
45

Providers of web browsers to recognized QWACs and display pertinent data in a user-friendly manner

45a-f

Provisions for (qualified) electronic attestations of attributes

45g

Qualified electronic archiving services in addition to preservation

45h+i

Establish a framework for trust services related to (qualified) electronic ledgers

48aStatistics on European Digital Identity Wallet usage have to be collected

Proposal for a Regulation of the European Parliament and of the Council amending Regulation (EU) No 910/2014 as regards establishing a framework for a European Digital Identity https://digitalstrategy.ec.europa.eu/en/library/trusted-and-secure-european-e-id-regulation| © Namirial – All rights reserved

7

eIDAS2 Ecosystem| © Namirial – All rights reserved

Source: Adrian Doerk – Lissi – On-site Workshop among speakers at Bitkom eIDAS Summit May 10, 2023

8

EU Digital Identity Wallet Roles – in a Nutshell (based on ARF)
Trust Services
Qualified
Non-Qualified

AuthenticSource

Identity Architecture and Reference Framework :PID= Person Identification Data
• (Q) EEA = (Qualified) Electronic Attestation of Attributes• QES= Qualified Electronic Signature

PID Provider

WalletProviderQEAAProvider

EUDI
Wallet*EAA
ProviderUser

QESProvider| © Namirial – All rights reserved• Acronyms defined in European Commission European DigitalRelyingParty• * EUDI Wallet provided• - by Member States• - or on behalf of Member States- or certified by Member States

9Opportunities for QTSPs and their partners
Increased strategic relevance of trust service providers and identity
orchestration platforms• Identity-related functions are becoming increasingly important or are required
such as strong user authentication, identity proofing, digital identity wallet
integrations, or use of digital certificates issued by a trusted entity• Together with corresponding orchestration systems – orchestrating processes for
identification and/or signing and/or document handling QTSPs are able to deal
with complex legal and regulatory requirements and hence having increasing
strategic relevance – also sometimes considered as being part of the criticalinfrastructure (as seen in peak pandemic times)| © Namirial – All rights reserved

10

eIDAS 2 / EUDI Wallet - Timeline on EU Level
Every member state will introduce their own implementation of the wallet

Q1

CouncilPresidency

2023
Q2
Q3

SwedenQ42024
Q2
Q3

Q1

Spain

Belgium

Hungary
Jun - Parliament Elections

Legislative
Process
Commission
Council
Parliament

Mar:
Parliament Vote

TrilogJune 29
Political agreementon key elements

Contracts
preparation

Architectural
Reference
Framework (ARF)

Feb: Apr:
V 1.0 V 1.1

Reference
Wallet(Open Source)

Development
Reference Implementation

Denmark

Dec – New Commission begins term of office

Implementing Acts

Nov 8 Nov 28
Early 2024
Final ITRE
Plenary Vote
Trilog Committee
Vote

Testing & feedbackJun:
1st prototypenot officiallyreleased:
V 1.2

Nov?
V 1.3

Ongoing updates – likely until 2027*
Adjustments – based on experiences in LSP

Nov?
V 1.0

Member States
Wallets* Timing Example for LSP POTENTIAL| © Namirial – All rights reserved

PolandQ4

Prepare Implementing Acts

Development based on Ref. Wallet

Large Scale
Pilots (LSP) *Q1

Q42025
Q2
Q3

Piloting in Large Scale Pilots
Implementation in National Wallets

Interdependencies
Information provided without guarantee for accuracy and completeness of data displayed

estimated
Displayed dates areactual
Last update of this overview: November 14, 2023

Start of National Wallets in
DE & IT Mid 2026

11EU Digital Identity Wallet - Framework conditions

European level

Legal

TechnicalUsability

eiDAS 2.0

Architecture Reference
Framework (ARF)

Large Scale Pilots (LSP)

EU regulation on
prototypical infrastructure

Technical specifications
for development

Testing of functions withconcrete use cases

National level Example Germany

National Requirements

National Policy Decision

GovLabDE
Digital Identities
Working group on digital
identities in the Federal
Government

Use of eID as Personal
Identifiable Data (PID)
No use of blockchain or
distributed ledgertechnology

Source: German Federal Ministry of the Interior- Unit DV I 5 Digital identities; authentication: German implementation of the eIDAS overall system - Kick Off of the consultation process, Slide 18 - July 31, 2023

| © Namirial – All rights reserved12

Digital Identities – Activities on national level
GovLabDE = Interministerial project group in Germany’s Federal Government
Members: Representatives from the Federal Chancellery, Federal Ministry of Economics and Climate Protection, Federal Ministry ofFinance, Federal Ministry of the Interior and Federal Ministry of Digital Affairs and Transport as well as subordinate institutionsGovLabDE Priorities in 2023
1. Revision of "AusweisApp2" the official app for eID on German national identity card - incl. new name(timing of launch t b d*) .
2. A “large number” of private providers are in the process of integrating the online ID function (especiallybanks).
3. Start in late 2023: Communication campaign to promote the on German national identity card (notproducts, funding 8-12 M €)4. Start in Q4: Rollout Smart-elD with recourse to Secure Elements – planned with 17 Samsung models* **5. Scaling of the eID system to higher usage figures
6. Concept for easier and cheaper (possibly free) access for service providers (Authorization Certificates)
7. Preparation for eIDAS 2.0 in the LSP POTENTIAL and architecture process for an own prototype for aneIDAS 2.0-compliant infrastructure (Version 1 to be released June 2024)* Subject to changes ** Financing of operation under discussion as part of 2024 budget, might not start in Q4

Sources: Federal Ministry of Interior, Moritz Heuberger at Bitkom Working Group Digital Identities & Digital Banking March 2, 2023 & Round Table GovLabDE Digital Identities June 1, 2023 Slides & Protocol and Website about Digital
Strategy Germany - Digital Identities - Answer of the Federal Government to the small enquiry of the parliamentary group of the CDU/CSU Status of the implementation of the eIDAS 2.0 regulation - printed matter 20/8040 (PDF)
published September 1, 2023 // Overview last updated October 21, 2023

| © Namirial – All rights reserved

Slide last updated: November 14, 2023

13

Digital Identities – Consultation process H2 2023
Initiated and orchestrated by German Federal Minster of Interior looking into Wallet as an ecosystem
Goals

Definition of the ecosystem of the German EUDI wallet
1. Conception, design and provision of the federal government EUDI wallet, various parties (incl. private sector) cancontribute attribute proofs for later use
2. Ecosystem of private sector EUDI wallets, for whose recognition regulatory requirements (licensing, certification,etc.) are defined by the federal government.
3. Combination of a government EUDI wallet (with core functions) and a variety of compatible private sector EUDI
wallets

Timeline

DateWorkshop

FormatParticipants Topic(s)July 31

1virtualall

during AugustParticipation
Rules

Kick-Off - Information on upcoming process, clarification on tasks
processing feedback processing, developing schemas for use cases &business models, preparing workshops

Sep 12in presence selected

Defining use cases & needs

Oct 23*3

in presence selected

Elaboration of potential wallet business models

Nov/Dec*

4

onlineselected

Discussing privacy aspects

Q1 2024*

5

onlineselected

Elaboration of wallet architecture• Submission of proposals for business models for privately operated wallets on OpenCode• Participation in the workshop and the evaluation of the possible operating models• Public sharing of collected information on objectives, framework conditions, initial considerations as well as on the start of thepublic consultation process on Github https://gitlab.opencode.de/bmi/eidas2• Commenting on the published documents

Source: Federal Ministry of the Interior- Unit DV I 5 Digital identities; authentication: German implementation of the eIDAS overall system - Kick Off of the consultation process, Slide set shown at Kick-Off July 31, 2023 – Research ofdelays October 24, 2023 - * New dates listed for workshops 3-5 compared to initial plan| © Namirial – All rights reserved14EU Digital Identity Wallet - Large Scale Pilot Consortia
Pilots kicked off between May and July 2023
Consortium
POTENTIAL

NOBID

EUDIW

nobidconsortium.com

EU Digital Identity Wallet
eudiwalletconsortium.org

DC4EU

digital-identity-wallet.eu
Organizations
From member states148
19 + Ukraine

28660
26 + Ukraine

82
21

Use Cases

SIM eRegistration
Bank account opening
eDriving LicenseeGov Service
eSignature
ePrescription

Payment transactions

Travel (main use case)
Payment transactions
Organizational Digital
Identity

Education and educational
credentials
Social Security

Germany

Federal Government,
Bundesdruckerei, Banks(DSGV, DB, Commerzbank,ING), Telcos

German Savings Banks
Association, Rewe

Bosch, Condor, Datev, msg,Neosfer, Idunion, Spherity

German pension insurance

Italyvarious organizations

various organizations

various organizations

Digital Credentials 4 Europe
dc4eu.eu

Participants fromSource of data in table: Digital Innovation Observatories of the School of Management of Polytechnic University Milano – Working Group Digital Identity – Oservatorio Digital Identity: Le notiva nel mondi dell'identità digitale:possibli consozi e progetti pilota - presented in Workshop November 11, 2022; plus: additional research by Namirial,
Last updated August 16, 2023

| © Namirial – All rights reserved

15Namirial is engaging in Large Scale Pilot POTENTIAL
148 consortia members
Co-lead by France and Germany

Source: POTENTIAL Large Scale Pilot - The Potential consortium launched to pilot the new European Digital Identity Wallet (EUDIW) - Press Release, July 10, 2023

| © Namirial – All rights reserved

16Large Scale Pilot POTENTIAL – Use Cases

Source: Nicklas Urban (Accenture) on behalf of German Federal Ministry of Interior, April 18, 2023

| © Namirial – All rights reserved17Large Scale Pilot POTENTIAL – Timeline
In combination with activities on German National Level

Source: Nicklas Urban (Accenture) on behalf of German Federal Ministry of Interior, April 18, 2023 –( No EN version available. This content was created commissioned for the German speaking POTENTIAL participants )| © Namirial – All rights reserved

Status Oct 2023: Delays / Postponed to18

Large Scale Pilot POTENTIAL – Next steps

Following the Kick-off on July 10 & 11 2023

Step 1

Research: Clarification of organisational and regulatory requirements governing the use cases:“Which rules apply in which states and in which industries, what information and what security
is necessary in each case?”- E. g. in Greece I need my father's name to open a bank account. This is information that I
cannot easily prove online.
- If a French citizen signs a mobile phone contract in Germany, she has to prove her
registration address - but this is not stored on the French identity card.
Step 2
Testing implementation of EU Digital Identity Wallets with prototypes and gather empiricalvalues.
Source: Moritz Heuberger (German Federal Ministry of Interior), Posting on LinkedIn July 26, 2023

| © Namirial – All rights reserved

19Compiled byJörg Lenz
Head of MarComj.lenz@namirial.com+49 174 2409 299

Followbit.ly/JörgLenz| © Namirial – All rights reserved20