Data extraction
Introduction
Raytio extracts identity data directly from the cryptographic chip in the document, rather than from a photograph of it. A photograph of a document proves very little - chip data is digitally signed by the issuing authority, so it can be cryptographically proven genuine and unaltered.
Because the data is machine-read from the chip, customers never type their details in, and the extracted values are exact - no transcription or recognition errors.
Supported documents
| Document source | How it is read | Extracted data |
|---|---|---|
| ePassports (all issuing countries) | NFC chip read (ICAO 9303), verified by passive authentication |
|
| Mobile driver licences | Presented from the holder's phone wallet (ISO 18013-5) | Requested data elements only, as consented by the holder |
| EU Digital Identity Wallet credentials | Presented via OpenID4VP (EU-PID and EU Photo ID) | Requested data elements only, as consented by the holder |
Only the data groups required for the verification are extracted, in line with data-minimisation principles - for example, an age check can read the date of birth without the address.
How chip data is proven
Every chip read is verified server-side following ICAO 9303 passive authentication:
- The document's security object signature is verified against the Document Signer Certificate.
- Each data group read from the chip is hashed and compared with the signed hash table - any altered byte fails the check.
- The Document Signer Certificate is validated against the issuing country's certificate chain.
The extracted data is then digitally signed by Raytio, so downstream recipients can confirm it has not been modified since extraction.