AAU Student Projects - visit Aalborg University's student projects portal
A master's thesis from Aalborg University
Book cover


Realizing the PSD2 open ecosystem utilizing Self-Sovereign Identity

Author

Term

4. term

Publication year

2022

Submitted on

Pages

111

Abstract

I takt med at hverdagen bliver mere digital, opstår nye muligheder for at forny etablerede sektorer. Samtidig stiger behovet for stærkere beskyttelse af privatliv og større gennemsigtighed for at skabe digital tillid. Dette speciale undersøger, hvordan EU-tiltagene PSD2 (som giver sikre, samtykkebaserede adgange til bankdata for betroede tredjepart) og eIDAS 2.0 (en opdateret EU-ramme for elektronisk identifikation og tillidstjenester) kan ændre betalingssystemer og digital identitetsforvaltning i den finansielle sektor. Specialet fremlægger implementeringsforslag, der viser, hvordan Self-Sovereign Identity (SSI, en model hvor personer selv kontrollerer deres digitale legitimationsoplysninger) og Financial-grade API (FAPI, sikkerhedsprofiler for sikre, standardiserede API’er i finans) kan bruges til at etablere nye tillidsrelationer mellem aktører i betalingslandskabet, samtidig med at stigende krav til databeskyttelse, gennemsigtighed og tillid imødekommes.

As daily life becomes more digital, established sectors gain new opportunities to innovate. At the same time, stronger privacy and transparency are needed to build digital trust. This thesis examines how two EU initiatives—PSD2 (which enables secure, consent-based access to bank data for trusted third parties) and eIDAS 2.0 (an updated EU framework for electronic identification and trust services)—could change payment systems and digital identity management in the financial sector. It proposes deployment approaches showing how Self-Sovereign Identity (SSI, a model where individuals control their digital credentials) and the Financial-grade API (FAPI, security profiles for secure, standardized APIs in finance) can be used to establish new trust relationships among actors in the payment landscape, while meeting rising expectations for data privacy, transparency, and trust.

[This summary has been rewritten with the help of AI based on the project's original abstract]