RDW: NETHERLANDS VEHICLE LICENSING AUTHORITY

The Netherlands Vehicle Authority, RDW is responsible for tasks in the area of licensing of vehicles and vehicle parts, supervision and enforcement, registration, information provision and issuing documents.

With more than 13 million vehicles and 14 million driving license holders and RDW’s mission for safety, sustainability and legal certainty in mobility, RDW treat the security and integrity of the data they hold as a priority.

THE CHALLENGE

Responsible for a variety of vehicle and driver license data, RDW need to enable insurance providers, RDW-approved companies, and governmental organisations have secure access to the data they hold.

Any potential solution would need to connect to a variety of internal databases and technologies whilst also providing a simple and fast means for approved parties to securely access data.

Public key infrastructure (PKI) provides RDW with the robust assurance necessary to enable trusted third parties to access data securely.

Through their PKI solution RDW were able to create, manage, distribute, store, and revoke digital certificates and public-keys at the scale necessary for a major public service provider. A solution to securely authenticate the identity of trusted third parties, individuals and systems that require access to RDW’s securely held data.

Intercede’s MyID® formed an essential part of RDW’s PKI solution; providing the software necessary for disparate databases and users to seamlessly and securely connect using PKI.

A robust credential management system (CMS), MyID not only provided the connectors for RDW to interoperate across multiple technology and hardware types for user access via PKI but also the solution for RDW’s IT team to manage the issuance, access levels, and revocation of user access into their secure databases. MyID essentially enabled RDW to utilise the strong authentication benefits of PKI at the scale they need.

However, RDW needed to move to a new PKI provider due to their existing certificate authority (CA) vendor ending support for their product. A new partner was needed to integrate within their existing technology, ensuring optimum levels of security was maintained, while disruption minimised.

THE SOLUTION

PrimeKey’s PKI solution EJBCA Enterprise emerged as the best solution for RDW’s needs. EJBCA Enterprise provides a reliable method of issuing digital certificates. This technology embeds the strongest form of multi-factor authentication, meaning RDW can be sure external parties accessing their secure data are who they claim to be.
As a PKI solution supported by MyID, the process of moving across to EJBCA was a smooth one that was well phased and managed by RDW’s IT team in partnership with PrimeKey and Intercede.

MyID’s capacity to connect to multiple PKIs simultaneously helped ensure the migration took place in a controlled manner.

The new solution sees the EJBCA Enterprise certificates issued and managed by MyID’s CMS. This integrated solution means RDW’s team have all the technology necessary to issue cryptographically protected certificates from EJBCA to approved organisations and users via MyID.

MyID’s user-friendly interface means RDW’s IT have control on user access and can easily move, switch and revoke access as and when required.

The combined solution has integrated well into RDW’s existing infrastructure to provide a robust system that is housed on-site and easily managed by the in-house IT team.

Future-proofed by the interoperability of the EJBCA Enterprise and MyID combined solution, RDW have the technology that will meet their demands for years to come, safe in the knowledge that the data they hold is secure.

To find out more about PrimeKey EJBCA: https://www.primekey.com/contact/