Beyond verification: signing and authentication
A signing flow that broke while identity was still being checked, and an authentication step that has to work inside every bank's own flow.
YEAR
2026
COMPANY
Verimi
SCOPE
Signing (QES) · Authentication (SCA)
QES
SCA
EUDI Wallet
eIDAS
The case studies cover verification. These two cover the other moments of identity: signing, and authenticating at your bank. They are short because the point is the reasoning, not the result.
Signing while identity is still being checked
Self-initiated · why signing sessions were breaking, and where the fix stops working
Some identity checks take minutes, not seconds. The signing flow could not wait, so users were sent away and brought back later by SMS. I found a steady share of sessions ending in that SMS re-entry, pulled the data, and traced the loss to the break in the flow, not to the wait. I recommended letting users finish signing while the identity check runs, with the signature issued only once identity is confirmed; the system architect confirmed it was feasible.
Status: Not built. Most partners fill their contracts with the verified identity data, so signing first would have meant more work on their side. The model fits partners whose contract content is fixed.
Three ways to handle a slow identity check. Today, slow checks send the user away. Moving the wait to the partner only transfers the problem. The proposal: sign now, and issue the QES once identity is confirmed. Proposal, not built.
Authentication that lives inside a bank's flow
EUDI Wallet · SCA · one component, inside every bank's own flow
From the end of 2027, banks must accept the EUDI Wallet for strong customer authentication. I designed the component a bank embeds to connect a user's wallet: one modal, three states: scan the QR code, success, error. The screens were simple; the constraint was not. The modal has to hold up inside a flow I do not control, for users I never see, with a different bank around it every time.
Status: Design complete; engineering tickets started, not built.
The wallet modal inside a bank's flow. Everything grey belongs to the bank; the modal has three states: scan the QR code, success, or error. Design complete, not built.