John works in the Office for Digital Identities and Attributes, leading the Market Oversight and Integrity team.
His team is responsible for building and maintaining the infrastructure that makes it possible to use trusted digital identities in the UK, including the UK digital identity and attributes certification scheme and the GOV.UK register of digital identity and attributes services.
We’ve been asked variously for some kind of document with a gap analysis or assimilation matrix. We don't have one. This is why.
You want to tell people that your service is certified and on the GOV.UK register of digital identity and attribute services. What should you say and what shouldn't you?
The gamma (0.4) publication of the UK digital identity and attributes trust framework introduces certification for "component services". You don't have to use certified components – but you'll probably want to.
This blogpost explains the new approach to certification of white label services against the gamma (0.4) trust framework.
The register of digital identity and attribute services is now in public beta. This means it’s easier for businesses and the public to check and find trusted digital identity products across the UK. Faster and easier The new register …
It’s our responsibility – here in OfDIA – to ensure the register is accurate and up-to-date, and only includes digital identity and attribute services that have been assessed as meeting our rules. In this post, we explain how we intend to do that.
You shouldn’t have to be an expert in trust frameworks and certification to be able to identify a trustworthy digital identity service. And we’re doing two things to mean you don’t have to be.
How can we be confident that the trust framework rules are being followed? That’s the role of “conformity assessment”.
A “digital identity” is just a way to prove who you are, things about you and things you might be eligible for. Individual pieces of information about you, that together make up your identity, are what we call “attributes”.
