Topic R- Authentication of the User to the device

[phin10]

Description
Requirements and guidance need to be provided to address the authentication methods available on modern mobile devices, such as PIN codes, swipe patterns, and biometrics (e.g., face or fingerprint recognition).

Planned publication discussion paper
3 September 2025

Link to discussion paper
link will follow

Links to discussion thread(s)
link will follow

Discussion close
Three weeks later.

[OBIvision]

Smartphones cannot - ever - provide a secure platform for Wallets as control is inherently linked to BigTech smartphone platforms. The very real risk is that EU feed control to BigTech through bad security design of the wallet.

One alternate mechanisms to to upgrade dedicated smartcards with biometrics and move control from the Smartphone to the Smartcard.

It is, however, not a simple question as there are many parallel requirements.

The core agenda must be support of Qualified Unlinkable Signatures as the key alignment mechanism across Eu regulations.