WalletMobile appIn progress
Your identity, in your hand. Nowhere else.
The Aegis wallet holds the credentials a person has earned and presents them at a counter or online — one fact at a time, approved with their face or passcode, signed by a key that never leaves their phone’s secure hardware.
Simulation
Runs entirely in your browser.
One tap at a counter. One approval online.
Prove an age in person over ISO/IEC 18013-5, open an account online over OpenID4VP, or approve a payment with the transaction bound into the signature.
Scenarios
Present in person
Show this to the readeror hold the phone to it
Waiting for a reader
Channel
In person · no network needed
ISO/IEC 18013-5 · QR or NFC → Bluetooth
The reasoning
A shop must know the person is old enough. Must it see their name, their birth date, or their document?
- EngageThe wallet shows a code, or the phone is tapped to the reader. That engagement carries the reader into a secure session over Bluetooth.
The app
A native app over one protocol core, shared with the platform’s own issuer and verifier tests.
Built so the wallet cannot betray its holder.
- Keys in hardware
- Private keys are generated and used inside the phone’s secure hardware, with hardware key attestation, and never enter the app’s memory.
- Built
- Every use approved
- Each presentation needs the person, by face or device passcode.
- Built
- Collect
- Receive credentials over OpenID4VCI from Aegis or any conformant issuer.
- Built
- Present online
- OpenID4VP, cross-device and same-device; registering as a credential provider with the phone, so a browser can ask the wallet directly.
- In progress
- Present in person
- ISO/IEC 18013-5 over QR or NFC engagement and Bluetooth, with the reader authenticated before the radio answers.
- In progress
- Transaction binding
- For approvals, the key signs exactly the transaction shown; change the payee or the amount and the signature fails.
- Built
- Status at use
- A credential’s status is checked when it is used, failing closed.
- Built
- Backup without values
- A backup that holds no credential value, kept in the phone platform’s end-to-end encrypted store.
- In progress
- No telemetry about you
- The wallet sends Aegis no personal value — no claims in logs, analytics or crash reports — and Aegis never learns where a credential was presented.
- Built
Wallet provider
Vouching for the wallet, never for the person.
Before an issuer trusts a wallet, Aegis’s wallet provider checks the phone’s own attestation evidence and issues wallet and key attestations. It can suspend or revoke a compromised instance — and a wallet instance is never linked to the person who holds it.
Every country’s wallet
In progress
Accept the identity a person already carries.
A person picks the country that issued their digital identity and signs in with it. The scheme returns a signed answer, so no document photograph is needed, and Aegis verifies everything itself: every signature, the chain to the scheme’s roots, revocation, and the binding to the request it sent.
- European identity wallets
- Person identification data in both credential formats, under the European Digital Identity framework and its trusted lists.
- In progress
- Bank identity schemes
- National bank-issued digital identities, verified as signed assertions.
- In progress
- Mobile and smart-card identity
- Mobile identity and identity derived from national smart cards.
- In progress
- National eID apps
- Government identity apps built on OpenID Connect, verified as a relying party.
- In progress
- Mobile driving licences and ID cards
- Documents held in wallets and verified under ISO/IEC 18013-5 and 18013-7.
- In progress
- Wallets built into phones
- Identity documents held in the phone platforms’ own wallets, verified to their published presentation profiles.
- In progress
Assurance
Below the bar is refused, never downgraded.
Every digital-identity sign-in carries a level of assurance. Each organisation sets, per country, which schemes it offers, the minimum level it accepts, whether document capture stays available, and whether a failed sign-in falls back to documents or declines. A sign-in below the minimum is refused outright.
Build on identity that is proven, not assumed.
Aegis is built by Protoworks and offered to partners on request. Tell us what you need to verify, issue or accept, and we will show you the platform running.