jump link

citizen service

Where?

You enter your place of residence or the place where you want to contact the administration or use the location sensing.

What?

In the second step, you choose which information you really need.

Source: BUS Sachsen-Anhalt (Linie6PLus)

Apply for authorization certificate for online ID function

Description

For each electronic service that can be used with the online ID, an authorization certificate is required, which entitles the user and provider to authenticate and authenticate.
To apply for an authorization certificate:

  • service providers and
  • Identification service providers
  • On-site service providers

The following permissions are distinguished:

  • proof of identity vis-à-vis online service providers,
  • on-site reading at service providers and
  • proof of identity vis-à-vis identification service providers.


Proof of identity to online service providers

With the authorization certificate, you get permission to request and process data from identity cards to identify the owner. With the authorization certificate and the checked electronic keys, technical access is made possible. They can use it to integrate the online ID function as a digital means of identification into their own online service or in a vending machine or terminal.
In your application, you must explain why you have an interest in using the online ID function and how you will use the personal data of the ID card holders. You also need to make sure that the data is adequately protected.

On-site readout at service providers

Wherever personal data such as name and address are to be transferred to a form, an on-site reading is an offer. The data is read out electronically and transferred.
The card holder is present in person. The holder of the authorisation must identify the card holder on the basis of the printed photograph and his or her personal data before reading out the data.
When reading on site, the PIN entry by the card holder is omitted. It is replaced by the entry or technical recording of the Card Access Number (CAN) on the front of the card by the holder of the authorization.

Proof of identity to identification service providers

Companies and authorities can use a certified third-party service for proof of identity. The so-called identification service providers make the data from the use of the online ID function available to companies and authorities in individual cases. Identification service providers must apply for authorization and authorization certificate instead of service providers.
You must also have your service certified by the Federal Office for Information Security.

The authorizations are valid for a maximum of 3 years. In the event of a violation of the declaration made and the law, they can be withdrawn immediately at any time.

Hint
As the applicant, you must commission the authorization certificate provider (BerCA) yourself. This means that on the basis of the positive authorization decision of the Federal Office of Administration (BVA), you conclude a contract directly with the provider of authorization certificates for the technical reference of the authorization certificate and the revocation lists.

.

If you want to use the online ID function as a provider in your own application, you need an authorization certificate.

You must apply for the certificate of eligibility in writing or online at the Federal Office of Administration (BVA).

Written application:

  • Go to the BVA website and fill out the application form electronically.
  • Print out the completed form and sign it.
  • Send the completed and signed form together with all other required documents by post to the issuing authority for authorization certificates.
  • The contracting authority will examine your application.
  • You will then receive by post
    • proof of eligibility, or
    • a decision on the rejection
    • or a request for a new application

Delivered.

Online application:

  • Go to the website of the Federal Portal and fill out the application form electronically.
    • Note: For the online function you need your identity card with PIN number
  • Add the other required documents as a scan.
  • Submit your application.
  • The contracting authority will examine your application.
  • You will then receive by post
    • the proof of eligibility is delivered, or
    • a decision on the rejection
    • (or a request for a new application)

Delivered.

  • You must then choose an authorization certificate provider to provide the authorization certificates and can then conclude a contract based on the positive authorization notice.
  • Now you can operate your own eID server or select a service provider as your eID service provider.

Hint
eID service providers can support you in obtaining the certificates for a fee and provide the complete infrastructure.

To apply for an authorization certificate:

  • Service provider
  • Identification service providers
  • On-site service providers

Further requirements:

  • Requirements for service providers to purchase an entitlement:
    • communicate and prove the identity of the service provider,
    • Description of the underlying interest in entitlement to the application, in particular for planned organisation-related use
    • Proof of data protection and security measures
    • there must be no evidence of misuse of the authorization
  • Separate requirements for identification service providers:
    • Certificate of the Federal Office for Information Security (BSI) on compliance with the requirements
  • In addition, you need your own eID server or a service provider as an eID service provider or
    • suitable software,
    • a reader for on-site reading and
    • a suitable integration of the BADGE application into your website or background system.

When applying, you must submit:

  • Privacy policy
  • Excerpt from the commercial register (only for e-business)
  • Description of the underlying interest in eligibility for the application
  • To understand, you can use a flowchart to illustrate your business process and attach it to the application.
  • If you use a technical service provider, please add the contract.
  • Certificate of the Federal Office for Information Security (BSI) (only identification service providers)
  • Granting of an authorization: EUR 102,00
  • Rejected application for eligibility: EUR 80.00
  • Return or revocation of an entitlement: EUR 115.00

Validity of the authorization certificate: 3 years

  • Issuance of an authorization certificate: 1 to 2 weeks

Note: Contract negotiations between you as a service provider and the authorization certificate provider should start early so that you can use the certificate in a timely manner.

The text was automatically translated based on the German content.

Federal Ministry of the Interior, Building and Community (BMI)

No authority found