We have started testing the technology that will allow organisations to check information on the digital verification services (DVS) register securely and at scale. We will test capabilities in phases, with the first phase expected to last 2 weeks.
Phase 1: Testing secure connections
In Phase 1, we are testing transport certificates and client authentication. These allow services to prove their identity when they connect.
Testing is taking place in a controlled environment where participants can test the technology without connecting to the live DVS register or using real data.
Participating DVSPs can:
- access information about their organisation and registered services
- set up the technical assets for a registered service
- authenticate that service securely
- make a request to a protected API
This will test whether a registered service can securely identify itself and access information through the technology.
Participating DVSPs can also use one of 2 methods to authenticate their service:
- mutual TLS (mTLS) using a client transport certificate
- or, a digitally signed client assertion (private_key_jwt)
We have published the technical guidance for Phase 1 of testing on GitHub.
Next phase
As we develop more capabilities, we plan to expand testing to include OpenID Federation, user interfaces, and the full onboarding journey. Phase 2 will begin testing the trust resolution chain and is expected to start in 2 weeks.
Testing in phases allows us to learn from DVSPs while we develop the technology. The feedback will help us identify what works, what needs to change, and how we can make the technology work well for its users.
We will share further updates as testing progresses and more capabilities become available.
Take part in testing
If you are a registered DVSP, you can help us test the technology in a controlled environment. Email digital.identity.register@dsit.gov.uk to register your interest.
Leave a comment