ISO/IEC 18013-5
ISO/IEC 18013-5 is the standard for mobile driving licence data, security, and device-to-device presentation, including the mdoc model, selective disclosure, and issuer authentication.
Published in September 2021, ISO/IEC 18013-5:2021 defines the interfaces between a mobile driving licence (mDL), a reader, and the issuing authority. It is also searched as “ISO 18013 part 5.” The mDL is the credential held in a wallet; Part 5 is the technical standard behind its data structure and in-person presentation. See mDL for the credential, wallet support, and adoption context.
Part 5 represents the credential as a mobile document, or mdoc. Issuer-signed data is grouped into namespaces and individual data elements. The issuing authority calculates digests for those elements and places them, along with the document type, validity information, digest algorithm, and device public key, in a Mobile Security Object (MSO). The issuer signs the MSO. A verifier checks that issuer signature against trusted issuer certificate material, checks validity, and recomputes the disclosed elements’ digests. Those checks show that the returned attributes came from the issuer and were not altered.
For an attended presentation, the devices first exchange engagement information. A QR code or NFC tap can bootstrap the session; BLE or NFC can carry the encrypted retrieval exchange. The reader’s request names the document and data elements it needs. The wallet returns only the selected issuer-signed elements, so a verifier can ask for an age-over threshold instead of receiving every field on the licence. The standard defines the selective-disclosure and cryptographic mechanics, but explicitly leaves the user-consent method and private-key storage requirements outside its scope.
The first edition remains published, but ISO now marks it “to be revised” and lists a new Draft International Standard under development; the ISO catalogue does not list a separately published amendment to Part 5. Related standards extend the model rather than changing what an mdoc is. ISO/IEC TS 18013-7:2025 adds presentation over the internet. OpenID4VP 1.0 is a credential-format-agnostic protocol that can request and carry ISO mdoc presentations and defines verifier/wallet request, response, and transaction binding for web and cross-device flows. See OpenID4VP for the presentation protocol Stile uses in online wallet flows.
How Stile handles ISO/IEC 18013-5
Stile accepts ISO mdoc presentations through its digital ID flow, verifies issuer-signed data and transaction binding, requests only the attributes the ruleset needs, and returns the result through the same signed webhook used for other verification methods.
See digital ID verification