AWS Private CA and AWS KMS can be used to build a mobile driver's license issuing authority solution based on the ISO/IEC 18013-5 standard, enabling cryptographic signing and verification of mobile driver's licenses.

<div>
<p>This article explains how to build a mobile driver's license (mDL) issuing authority solution using AWS Private Certificate Authority (CA) and AWS Key Management Service (KMS), following the ISO/IEC 18013-5 standard for mDLs.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Creating an issuing authority certificate authority (IACA) root CA and generating a root certificate using AWS Private CA</li>
<li>Creating an asymmetric key pair in AWS KMS for signing mDL documents</li>
<li>Generating a certificate signing request (CSR) signed by the AWS KMS asymmetric key</li>
<li>Issuing an mDL document signing certificate using AWS Private CA based on the CSR</li>
<li>Signing an mDL document using the private key in AWS KMS</li>
<li>Delivering the signed mDL to a user's mobile device for verification by mDL readers</li>
</ul>
</div>


Related articles