Authlete Achieves OpenID Certification for Verifiable Credentials in Compliance with HAIP Standards

Authlete, a prominent technology company based in Chiyoda, Tokyo, has recently announced its success in obtaining OpenID certification for its Authlete 3.0 platform. This certification is for the implementation of the "OpenID for Verifiable Credential Issuance (OpenID4VCI) 1.0" specification, which adheres to the High Assurance Interoperability Profile (HAIP) 1.0. This accomplishment confirms that Authlete's implementation meets the implementation requirements established by the OpenID Foundation.

Key Takeaways

- Adherence to Global Standards: The certification serves as independent verification that Authlete’s implementation aligns with global standards.
- Efficient VC Issuance Foundation: Leveraging Authlete 3.0 enables the construction of a highly interoperable and standards-compliant infrastructure for issuing Verifiable Credentials (VC).
- Technical Contributions to Social Implementation: Authlete has been instrumental in the development of a test suite for HAIP conformance testing, utilizing its expertise in OAuth/OpenID Connect (OIDC) implementations to enhance security and privacy within the VC ecosystem.

Background of the Certification and Authlete’s Initiatives

Authlete has actively participated in the implementation of OpenID4VCI specifications since the draft version released in 2023, swiftly supporting the final version requirements of HAIP. As an expert in OAuth and OIDC specifications, Authlete contributes not only to the development of relevant specifications but also to conformance testing.

What is OpenID for Verifiable Credential Issuance?

OpenID for Verifiable Credential Issuance (OpenID4VCI) is a standard for issuing VCs that combines the security and flexibility of the OAuth 2.0 specifications. By employing this standard, providers can issue various VC formats, including SD-JWT VC and mdoc/mDL.

Understanding OpenID4VC High Assurance Interoperability Profile (HAIP)

HAIP is designed to ensure interoperability between issuers, wallets, and verifiers for VC in use cases requiring heightened security and privacy protection. This specification anticipates the use of SD-JWT VC and mdoc formats and mandates compliance with key requirements defined by the FAPI 2.0 Security Profile.

What are Verifiable Credentials?

Verifiable Credentials (VC) are digitally signed credentials that can be cryptographically verified by issuers. They offer higher security than traditional paper documents or plastic cards, enabling third-party verification of authenticity. VC holders can selectively disclose information, eliminating the need to carry physical certificates, thereby enhancing flexibility, portability, and convenience.

Accelerating the Adoption of OpenID4VCI in Japan and Abroad

The utilization of VCs spans various scenarios, such as passports, driver's licenses, and reusable KYC/KYB in financial institutions. Higher education institutions issuing graduation certificates are also included in these applications. By adopting OpenID4VCI standards, public, financial, and educational institutions can enhance interoperability and promote the digitalization of certificates, streamlining issuance and management processes, ultimately improving user convenience.

Trends in Japan

In Japan, the implementation of Authlete's OpenID4VCI has been employed in a proof-of-concept project aimed at promoting "trustworthy transactions based on KYC/KYB," selected under the fiscal 2022 supplementary project to realize Trusted Web. The Japanese government is also working on use cases to secure interoperability of digital identities between Japan and other countries, including a pilot project with the EU.

Global Trends

Globally, OpenID4VCI has been adopted as a technical specification for digital ID wallets across over 30 jurisdictions, including EU member states, the UK, Switzerland, India, and California. In the EU, it has been integrated into the standard specifications of the upcoming "European Digital Identity Wallet (EUDI Wallet)," set to launch by the end of 2026. This common framework will enable EU citizens, residents, and businesses to use identity verification and VC sharing across public and private services.

Authlete’s HAIP-Compliant VC Issuance

Service providers can rapidly and efficiently construct a VC issuance foundation that complies with HAIP by utilizing the Authlete 3.0 API. Detailed procedures for issuing credentials can be found in our developer documentation. Additionally, Authlete will host a free seminar on HAIP implementation for engineers, scheduled for October 28, 2026.

Learn more about Authlete's OpenID4VCI implementation and sign up for a free trial through this link or contact us via our official website.

About Authlete

Authlete provides Web API solutions to streamline OAuth and OpenID Connect implementation in authorization systems, developed by experts involved in the formulation of international standards. The OpenID-certified Authlete accommodates advanced security specifications such as FAPI, CIBA, and the latest OpenID for Verifiable Credential Issuance. Companies across various industries, including finance, media, retail, technology, and consulting, have widely adopted Authlete’s solutions, ranging from startups to large enterprises.