BankIDin

BankIDin is a proposed digital identity and authentication framework intended for use within the banking sector. It envisions a single, bank-backed identity that customers can use to log in to online banking, authorize payments, and access third‑party financial services across participating institutions.

The goals are cross-institution interoperability, privacy by design, strong multi‑factor authentication, and user-consent based data sharing. Authentication is anchored to the customer’s device and the bank’s credentials, with cryptographic protection and revocable credentials to control access and sessions.

Architectural elements typically include an identity provider run by the customer’s bank, relying parties such as other banks and payment apps, and user agents (mobile apps or web browsers). The framework is commonly discussed in the context of using standard protocols like OAuth 2.0, OpenID Connect, and FIDO2/WebAuthn to enable secure, interoperable sign‑in and consent flows. Data minimization and privacy‑preserving verification are emphasized to limit the amount of personal data exposed during authentication.

Status and adoption vary by region. BankIDin has appeared in industry discussions and some academic work as a concept to streamline user experience while preserving security. No universal standard has been adopted, and implementations, if any, differ across regions and institutions.

Regulatory and security considerations include compliance with data protection laws and payment regulations. Mechanisms such as device binding, hardware‑backed keys, biometrics, and robust audit logs are proposed to mitigate fraud and enable accountability.

See also: BankID; digital identity; eIDAS; FIDO2.