German eID.

Summary

eID is an electronic identity verification process that leverages German national electronic identity document capabilities to extract secure chip-based data through NFC readout technology.

Service Description

The IDnow eID verification module serves to prove the identity of natural persons (“users”) by means of an electronic proof of identity in accordance with § 18 of the German Identity Card Act (Personalausweisgesetz), by reading and transmitting relevant data from the electronic storage and processing medium (“chip”) of:

• The German National Electronic Identity Card (deutscher Personalausweis mit Online-Ausweisfunktion)
• The German Electronic Residence Permit Card in cheque-card format (Aufenthaltstitel mit Online-Ausweisfunktion im Scheckkartenformat)
• Optionally, the EU/EEA Citizens Card in cheque-card format (EU/EWR-Bürgerkarte mit Online-Ausweisfunktion) 

Together, these documents are referred to as the “eID”.

The service enables users, for example, to open new accounts.

To use the eID functionality, a secure connection between the eID and IDnow is required. The user must therefore use a smartphone with an NFC (Near Field Communication) interface. To transmit the identification data and verify the governmental authorization to read the chip, the user must enter their six-digit personal PIN when prompted. The five-digit transport PIN must be changed before first use. Personal information such as the PIN, transport PIN or card data is not stored in the app.

Key Capabilities

eID

The IDnow eID module verifies a user’s identity by reading chip-based data from supported electronic identity documents via NFC.

• Supported documents: German National Electronic Identity Card, German Electronic Residence Permit and, where configured, EU/EEA Citizens Card.
• NFC readout: Users read their document with an NFC-enabled smartphone through an encrypted connection.
• User authorization: The user enters their six-digit personal PIN when prompted. PINs and card data are not stored in the app.
• Data extracted: Configured identity data such as name, date and place of birth, address, nationality, document type, validity period and document identifiers.
• Secure processing: Chip-derived data and process records are handled according to the applicable retention configuration.
• Availability: Automated chip readout is available 24/7, subject to technical availability.

The service is designed for electronic proof of identity using the online identification function of the supported document.

eID (DE): Add-on for ID document picture

This optional add-on supplements the eID chip-readout result with:

• An image of the identity document, including the readable ID number and user image.
• Capture of the user’s signature for future reference.

Standard Data Retention and Deletion

• Standard data retention: data and recordings made available to Customer and unless otherwise agreed in writing; deleted from production system within 60 days
• Extended data retention (optional): retention for one calendar year with automatic renewal unless terminated; data export provided upon termination

Service Hours

• General service hours: 00:00–24:00 CET, seven days a week 
• Maintenance periods: excluded from Service Hours
• Automated chip readout: available 24/7 subject to technical availability

Compliance summary

eID readout offers chip-backed attributes to achieve high-assurance identity verification and can be combined with other modules to meet national eID and AML-specific requirements. Implementation depends on national rules and middleware availability.