OpenID in Estonia

What?

OpenID.ee is an OpenID provider that uses Estonian eID smart cards and Mobile-ID SIM cards for user identification and authentication. It gives users control over their private data and allows to remain partially anonymous on the net. You can learn more about the service from the Web2Expo 2007 slides (starting with slide #41).

Why?

• Passwords are insecure and can be stolen.
• Privacy and anonymity on the Internet must be addressed.
• OpenID allows easy access to complex Estonian eID technologies. Globally.

Features

OpenID.ee has all the features you would expect from an advanced, secure OpenID provider:

• No registration required. It Just Works!
• OpenID 2.0 support. Including 'anonymous' identifiers via Directed Identity.
• PAPE support. All used authentication methods are phishing resistant.

Contact

This is a free service, built and operated by Ideelabor. Contact Martin Paljak (martin.paljak.pri.ee) for more information.

OpenID.ee URL-s

Integrators wishing to build upon OpenID.ee should check for the following URL types:

• https://openid.ee/u/[your].[name](.number) e.g. https://openid.ee/u/martin.paljak or https://openid.ee/e/joe.doe.1. If there are more Estonian ID-card holders with the same name, an index is appended to their name. This form is useful on OpenID 1.1 sites where the user has to type in the used OpenID. Every user has only one such URL.
• https://openid.ee/i/[countrycode]:[personalidcode] e.g. https://openid.ee/i/EE:38207162722. This scheme allows us to extend our service into other countries. These URL-s are meant for government services that rely on the personal ID code as the unique identifier.
• https://openid.ee/a/[random token] e.g. https://openid.ee/a/29dd7a86e7020ab672731508e07b71ddde05a7e2. These URL-s contain random data, and every person can have several such OpenID-s. But on one website the random token remains uniq and persistent.

Guarantees/assertions

OpenID.ee service is uniq in its own kind as applications using it can rely on the following facts:

• No bots. There is always a real human being behind every OpenID.ee URL verification.
• Verified data. If the user chooses to send gender, date of birth or full name to the website, this information is always verified and true.
• Only one anonymous OpenID per site. For a given trust root (website) every user can have one and only one anonymous OpenID