Aligned with the European Digital Identity Framework Regulation, eIDAS 2.0, Belgium's Federal Government introduced MyGov.be, a unified app granting access to a plethora of digital public services, information, and official documents. Citizens can activate the app using their eID, communicate with government services, and securely store various official documents issued by the government. Future enhancements will enable citizens to store their identity card, driving licence, and certificates within the app.
Transitioning to mobile devices for sensitive data access and storage poses security challenges, with an intricate threat model and a surge in attack vectors. Given the value of digital assets stored in the wallet and the potential for substantial material damage resulting from any vulnerability, ensuring robust protection against a range of attacks is paramount.
To address these concerns, BOSA utilises Cryptomathic's Mobile App Security Core (MASC) to uphold the highest standards of security, protection, and privacy for the app. MASC, a tamper-proof security software development kit (SDK), integrates multiple layers of mutually reinforcing mobile app security components, including secure communication through device binding. With over a decade of safeguarding over 100 million+ apps without any recorded incidents, Cryptomathic's MASC ensures comprehensive protection.
Guillaume Forget, EVP of eSignatures and Mobile Security at Cryptomathic, added: “As an EU citizen, I’m excited by the prospect of having my own digital identity wallet. As a cybersecurity veteran, I’m also acutely aware of the security threats these wallets pose. That’s why the security underpinning these wallets must achieve the highest levels of security assurance.
“This is where Cryptomathic innovates and excels. MASC doesn’t just provide a wrap-around shield, or a security add-on, it provides true in-app security that frustrated hackers have described as ‘watertight’. Belgium has set the standard for other EU states by implementing security and privacy protections of the highest order, also ensuring that even the state cannot access the information on citizens’ phones without user acceptance.”
The digital identity wallet is presently accessible for download by Belgian citizens via major smartphone app stores.
