Building architecture and development for STØ. The new digital Norwegian identification solution in the BankID app.

It has the same validity and security as a physical ID card. STØ builds on the success of Norway’s most used services, BankID and BankAxept, for securing bank identification and signing across public and private entities.

Challenge

The challenge was to create a digital equivalent of a physical ID. This digital ID should make it effortless for users to identify themselves in physical settings, such as stores or post offices. Above all, the solution had to be secure, ensuring that the app shares only the necessary information to verify a user's identity.

The solution architecture prioritises efficiency by eliminating redundant data, ensuring a swift verification process.

The solution architecture prioritises efficiency by eliminating redundant data, ensuring a swift verification process. For instance, if a user needs to confirm their legal drinking age at a Vinmonopolet, the app prioritises displaying the user's age rather than their name.

The new Digital ID Card by STØ was a completely new solution designed to be available within the well-established BankID app. Zebra Consulting was tasked with building the solution architecture and code from scratch.

Solution

The architecture for the Digital ID Card focuses on security and minimising user data exposure. It uses an end-to-end encrypted database where the end-user controls the decryption key.

The process begins when the user activates the Digital ID Card on the BankID app by scanning their physical ID document, such as a passport or national identity card. After verification, a Digital ID Card is created in the app, ready for use whenever the user is asked for identification.

The app creates a unique QR code that a merchant can scan. The merchant then receives the necessary information about the user to complete the transaction. For example, if Vinmonopolet is the merchant, the data shared by the QR code is the user’s age and picture.

The Digital ID Card is now available on the BankID app and ready for use at all Vinmonopolet and Posten locations, as well as bars and clubs serviced by PSS security. You can find STØ in your BankID app, which is already in use by 4.5 million people in Norway.

Launched in March 2024.