Google has upgraded Android to include OpenID support, making it easier and more secure to manage digital credentials, such as virtual driving licenses. By implementing OpenID standards, Android apps can now efficiently communicate in verifying digital identities.
This enhancement is integrated through Android’s existing Credential Manager, specifically using the DigitalCredential API to support OpenID4VP for displaying credentials and OpenID4VCI for issuing new ones. This move is part of a broader effort to use open standards for digital identity management.
OpenID digital credentials serve as secure, virtual documents that can be electronically verified. While many associate them with standard identity documents like driving licenses and passports, their application extends far beyond.
Google encourages developers to explore various use cases, including education certificates, insurance information, gym memberships, event tickets, and work permits. The innovation isn’t limited to traditional wallet apps; any application could potentially serve as a credential holder.
When an app or website requests verification, Android’s Credential Manager simplifies the process. Instead of navigating through multiple wallet apps, it identifies and presents a list of compatible credentials to the user, who can then select which to share.
This method allows users to control which credentials are shared while adding an extra layer of security as apps complete the verification process. Receiving and storing new digital credentials is also streamlined through the OpenID4VCI protocol.
Users will receive prompts to select a wallet app for saving new credentials, providing the flexibility to manage credentials across different apps. As more credentials accumulate, they can be distributed among various wallets, as long as wallet apps inform the Credential Manager about their holdings.
Real-world applications of these digital credentials are beginning to emerge. For example, Google Wallet users will soon be able to recover Amazon accounts, access health services like CVS and MyChart, and verify identities on platforms such as Uber and Bumble.
Prominent wallets like Samsung Wallet and 1Password are also embracing these standards, suggesting industry-wide acceptance. Overall, this update facilitates a smoother, more secure experience in managing digital identities, empowering users and offering developers new opportunities to integrate credential verification into their applications.