The Trustnet Initiative

Trustnet Initiative

Developing the next evolution of the Internet sounds like an extremely large task. Like Bob the Builder, given the size and scale of this task, we have to ask ourselves: Can we do it? Given the social and economic benefits promised by the Trustnet vision, the answer has to be: Yo, we can do it. And we can do it as a community.
Six people sit around a circular desk. They are surrounded by a blue, digital shimmer.

Trustnet Community

Developing the next evolutionary stage of the Internet sounds like an extremely big task. Like Bob the Builder, the size and scale of this task begs the question: Can we build it? Given the social and economic benefits that the Trustnet vision promises, the answer has to be: Yes, we can. And we can do it as a community. Everything has to start small, every great innovation needs pioneers and we are not starting the Trustnet Community from scratch. The starting point of the community is the ID-Ideal project, funded with €15 million by the German Ministry of Economics and Climate Action (BMWK) in the "Secure Digital Identities" showcase programme1. As part of this showcase project, the potential of verifiable credentials in conjunction with the principle of self-sovereign identities (SSI) was investigated and demonstrated in application scenarios in local government, industry, mobility and retail. The Trustnet vision and the roadmap for its implementation were developed with the participation of stakeholders from three other, simultaneously funded showcase projects and the accompanying research. The Trustnet Community therefore not only consists of the 15 partners and 26 associated partners of the ID-Ideal project2. It also has a Germany-wide network that includes the 40 direct and 79 associated partners of the three BMWK showcases IDunion3, ONCE4 and SDIKA5. The existing partner structure includes

  • Universities and research institutions

  • Technology partners, ID services and trust services

  • IT departments of local authorities

  • Users in industry and business, banks and financial service providers

  • Public authorities

  • Experts for the evaluation of legal issues

The unique technological selling point of the existing community is its pioneering role in the development and implementation of Trustnet applications and the associated data infrastructure, including the associated product and service innovations. Overall, the SDI showcase programme is the world's largest R&D community in the field of digital trust. Based on this R&D community, the task now is to form an innovation community and bring a wide range of applications "on the road". The aim is to integrate ministries, offices and authorities, users from industry, interest groups and civil society players into this community, as well as the citizens of the participating municipalities.

The Trustnet roadmap

For the targeted and structured development of the Trustnet, it is important to identify and take the necessary development steps. The following first draft of a roadmap is intended to serve this purpose, the further development and refinement of which is the task of the Trustnet initiative:

Standards for ID solutions:

  • Public Administration Network



  • Business Network



Data infrastructure:

  • Best practice for trust registers at level 1-4 of the Trustnet stack

Governance

  • Initial Trust Framework



  • Governance Authorities Level 1 and 2



  • Governance at levels 1 and 2



  • Certification bodies for all four levels



Product innovations:

  • OpenWallet interoperability solution



  • Privacy tools



  • Cloud wallet apps



  • Register interfaces for issuing register extracts as verifiable credentials



  • Software for generating official notifications and certificates as VCs



  • Development of application software for the automated handling of VCs as part of the digitalisation of application processes



Applications

  • Digitalisation of initial trust domains (credentials, governance and processes)



  • Digitisation / automation of initial application ecosystems / processes



Community

  • Establishment of the Trustnet Community in Germany



  • Network of European multipliers



  • Network of international multipliers



  • Establishment of new business models and new data economy



Legal framework:

  • Identification of legal barriers to innovation in the course of developing applications



  • Initiation of regulatory sandboxes to test applications under the protection of exemptions, insertion of experimentation clauses in existing laws



  • Gradual adaptation of the legal framework based on the results of the regulatory sandboxes



ID solution for sovereign actors

In the first step, authorities (e.g. the residents' registration office) are provided with the necessary technical and organizational framework in order to be able to tackle the further process of introducing and integrating digital identities.

Fig. 1: initial Trustnet roadmap, milestones for best practice examples

Construction sites and innovation barriers

In addition to the key tasks outlined above on the way to the Trustnet, there are other unresolved technical development steps as well as technical, economic and legal barriers to innovation that need to be removed. Let's start with the technical aspects. There is currently no standardised basis for technical interoperability that would enable any wallet app, consisting of a wallet and agent, to address various DID methods and underlying data infrastructures (blockchains, PKIs, DLTs, etc.) at the level of basic technologies. Thanks to the OpenWallet Foundation activities, there is light at the end of the tunnel. Any player planning to develop a wallet app, whether at national level, EU level or from the private sector, should make this technical interoperability their own maxim. Although there are conceptual considerations for the trustworthy registers at levels 1 to 4 shown on the right-hand side of the Trustnet stack, there are currently no examples of best practice in practice. There is still pioneering work to be done here. The same applies to product innovations such as privacy tools and cloud-based wallet apps. The Trustnet Community platform is still under construction. A transfer platform for products and services and a training platform are also in the works. Anyone who would like to get involved is welcome to do so. As with comparable initiatives, a democratic organisation of the community is required. Anyone who wants to have a say in the canonisation of regulations and standards must also contribute to the financing of the necessary structures.

Innovation barrier 1: The still low level of development maturity

It will take 20 to 30 years for the Trustnet to become established worldwide. Today's Internet also took decades to develop. The Internet pioneers could only have guessed how much their development would change the world. The situation is similar today with the Trustnet. But someone has to lead the way. We have the vision, we have the expertise, we have the roadmap. And the EU is already doing its part to generate demand. With the eIDAS amendment, a legal framework is currently being developed that will be mandatory for all local authorities from 2025 and thus legally enforce part of the future Trustnet. As a result of a question from the CDU/CSU in the Bundestag, the topic of digital organisational identities has now been placed on the political agenda alongside eID and the EUDI wallet. However, the regulation of digital identities is just one of many pieces of the puzzle that need to be put into place. The current development map (see figure 2) still contains many blank spots, both in terms of technology and in relation to applications and the necessary infrastructure, whereby the governance (regulations) and legal framework must also be developed. These blank spots need to be eliminated step by step.

Fig.2: current Technology map of the Trustnet

Innovation barrier 2: Credibility and acceptance

The second major barrier is of a psychological nature - the sheer scale of the overall task and the many doubts that a pioneering region has to dispel, both internally and externally. During a presentation, we often receive the response: "Surely the big Internet companies are doing this." No, they don't. Only a Trustnet Community does that. Just like the energy transition, the development of the Trustnet is a joint task for business, society, politics and administration. And the nucleus of the Trustnet Community has precisely this composition.

Innovation barrier 3: The current legal framework

Irrespective of the eIDAS Regulation, which regulates the use of digital identities of natural persons and, in the long term, organisations, the necessary legal framework for many Trustnet applications is not in place or is not suitable. Written form requirements or earmarking of documents still frequently limit or prevent the use of digital credentials. The planned Bureaucracy Relief Act will hopefully remove some of these obstacles, at least in Germany, but due to the complexity of the legal framework, it is to be expected that many legal barriers to innovation for the Trustnet at EU, federal, state, district and municipal level will survive this planned "decluttering" and only become apparent when applications are implemented in practice.

Approach:

The Trustnet Community's approach to overcoming the still low level of development maturity is to gradually fill in the blank spots on the development map in the course of piloting, practical realisation and scaling of applications in administration, industry, trade, mobility and other areas of digital interaction. To this end, best practice examples for technology, governance and infrastructure are to be developed on the basis of the above-mentioned roadmap, which can serve as a basis for transfer to other areas of application. The roadmap will be continuously updated within the Trustnet Community in order to take account of the technological and political development dynamics. For the geographical expansion of the community, the transfer of these best practice examples follows a frontrunner-follower approach. We achieve the necessary credibility and acceptance through visibility and proof of the practicality of broad-based, low-threshold applications. Digital pilot applications such as social passes, public transport tickets, digital product passes, eBon and green electricity/CO2 certificates have already been developed as part of the preliminary work. Further use cases have reached demonstrator status. Field tests, explanatory videos and hands-on demos are intended to make it possible to experience the technological and application maturity of these pilots in practice. The development of the Trustnet also requires innovation in the legal framework. The political instrument of regulatory sandboxes exists for the purpose of trialling technology-based innovations that collide with the current legal framework. With the help of experimentation clauses and exemptions, it is possible to gain knowledge in the short term as to whether and in what form an adaptation of the legal framework makes sense. Of course, there are many other aspects to consider when planning a real-world laboratory in order to satisfy the political and administrative interest in knowledge as well as the interests of other stakeholders. A process was therefore developed as part of the preliminary work for the first real-world lab on the "Digital Citizens' Petition" use case, which will be used in the course of the first community project in the state capital of Dresden and form the basis for further real-world labs. We have been coordinating this with the Saxon State Chancellery and the state capital of Dresden since spring 2023. Several lawyers are currently concretising the initial need for further regulatory sandboxes. Irrespective of the bottom-up development of the Trustnet Community, the topic of Trustnet must be put on the political agenda. The construction sites and barriers to innovation highlighted make it clear that the social benefits of the Trustnet will not materialise on their own. The development and establishment of the Trustnet must be viewed as a complex social innovation project with tasks for all political departments. Germany needs a Trustnet strategy. The alternative would be digital insignificance and only those who profit from the current potential for fraud and abuse in the digital space can want that.

Footnotes

© 2023 All rights reserved Innoloft GmbH
Logo