A survey on server-based electronic identification and signature schemes to improve eIDAS: with a new proposal for Turkey

Abstract

The design, development, and implementation of e-Government applications aim to improve the quality of daily life and facilitate the mobility of citizens by reducing the constraints imposed by existing borders. This study examines previous research in the literature on electronic identification (eID) credentials technologies and the projects carried out in Europe. This study focuses especially on server-based e-signing methods. In the light of these reviews, the applicability of a server-based mobile electronic signature model without disrupting local initiatives has been examined as a case study. As an exemplary case, Turkey’s eID structure is examined from a technical and legal perspective. When creating the proposed server-based eID model, it was especially inspired by Austria’s server-based approach in use. In this process, the suitability of the existing structure with the server-based e-signing method was examined. In addition, some suggestions were made to eliminate the problems that may prevent the use of the proposed server-based e-signing method. This study revealed that a server-based electronic signature approach would develop a more user-friendly and flexible solution in identity management. It was concluded that using a server-based signature approach would help achieve international standards for cross-border online identification methods.

eIDAS Regulation and Its Impact on National Legislation: The Case of the Slovak Republic

“…In other words, where a Member State offers its citizens certain online services requiring electronic identification, that Member State must also recognise, for the purposes of cross-border identification, the electronic identification methods (options) established in another Member State (Cirlig 2016). This view is shared by Erdogan and Saran (2021), pointing out that the mutual recognition obligation is limited to those electronic identification means that meet the requirements set out in Article 6 of the eIDAS Regulation (included in the list published by the Commission, assurance level equal to or higher). According to Berbecaru et al (2019), the first precondition that an electronic identification means must fulfil in order to be recognised on the territory of another Member State is a sufficient level of guarantee for that means, which must be at least significant or high.…”

A Comprehensive and Privacy-Aware Approach for Remote Qualified Electronic Signatures

“…In 2002, Estonia used the first national eID with digital signatures [35]. • Solutions implemented by Austria and Estonia are appreciated for their ability to handle user mobility [39].…”