Airlines Integrate EUDI Wallets with Digital Boarding Passes

Major European airlines integrate EUDI Wallets with digital boarding passes for smooth travel.

Digital Travel Credentials and the ICAO Standard

The integration of EUDI Wallets with airline travel builds on the International Civil Aviation Organization's (ICAO) Digital Travel Credential (DTC) framework. ICAO, the UN specialized agency that sets international standards for civil aviation, has been developing the DTC concept since 2017, recognizing that the future of travel identity is digital. The DTC standard defines three types of digital travel credentials with varying levels of functionality, from a simple digitized copy of the passport data page (Type 1) to a fully virtual credential that can replace the physical passport (Type 3).

The EUDI Wallet's architecture aligns well with ICAO's DTC framework, particularly for Type 1 and Type 2 credentials. A Type 1 DTC essentially digitizes the machine-readable zone (MRZ) data from the passport and stores it as a verifiable credential in the wallet. A Type 2 DTC adds the capability for the credential to be cryptographically linked to the passport's chip, enabling remote verification of the physical document's authenticity. Both types can be stored alongside other wallet credentials, creating a unified travel and identity experience.

For intra-EU travel within the Schengen area, where passport checks at borders have been eliminated, the EUDI Wallet offers a particularly compelling proposition. Airlines operating Schengen routes still need to verify passenger identity for security and commercial purposes, but they are not performing border control functions. A verified identity credential in the EUDI Wallet, issued by the passenger's home member state, provides the necessary identity assurance without requiring a physical passport or national ID card. This makes the wallet a practical tool for the estimated 1 billion intra-EU flight segments operated annually.

The Airport Journey with EUDI Wallet Integration

EUDI Wallet integration transforms every touchpoint of the airport experience. The journey begins at check-in, whether performed online or at the airport. During online check-in, the airline's app sends a credential request to the passenger's EUDI Wallet, asking for identity verification and booking confirmation. The passenger reviews and approves the request, and the airline issues a boarding pass credential directly to the wallet. This boarding pass credential is cryptographically linked to the verified identity, making it impossible to transfer to another person.

At the airport, the passenger approaches the security checkpoint with their EUDI Wallet. Automated gates equipped with NFC readers or QR code scanners verify the boarding pass credential and the linked identity credential simultaneously. The system confirms that the person presenting the wallet matches the booked passenger, that the booking is valid for the current date and time, and that any required travel authorizations (for non-Schengen flights) are in order. This automated verification takes approximately 5-8 seconds, significantly faster than the current process of manual document inspection.

At the boarding gate, the process is even simpler. The gate reader verifies the boarding pass credential and confirms the passenger's authorization to board the specific flight. Because the identity was already verified at security, the boarding gate check focuses primarily on the boarding authorization, enabling faster processing. Airlines participating in pilot programs report that wallet-based boarding can reduce the per-passenger gate processing time from an average of 15 seconds to under 5 seconds, translating to significant time savings for flights with 200 or more passengers.

For connecting flights, the EUDI Wallet eliminates one of the most frustrating aspects of air travel: managing multiple boarding passes. All boarding passes for a multi-segment journey are stored as credentials in the wallet, automatically presented at the relevant touchpoints. Transfer passengers at connecting airports are verified through their wallet credentials, reducing the risk of missed connections caused by long transfer security queues.

Biometric Gates and Passenger Verification

Many European airports have invested heavily in biometric gate infrastructure, particularly for automated border control (ABC gates) and automated boarding processes. The integration of EUDI Wallets with these biometric systems creates a powerful combination of identity verification methods. The wallet provides the cryptographically verified identity credential, while the biometric gate performs a live comparison between the person physically present and the photograph stored in the credential.

The privacy architecture of this integration is carefully designed. The biometric comparison is performed locally at the gate, meaning the live facial image captured by the gate camera is compared against the photograph in the credential on the spot and then immediately discarded. No biometric data is transmitted to central databases or stored by the airline or airport operator. This "verify and delete" approach aligns with GDPR requirements and addresses the privacy concerns that have surrounded biometric systems at airports.

The EUDI Wallet also enables an alternative to traditional biometric enrollment. Currently, passengers using biometric fast-track services typically need to enroll their facial biometrics at a dedicated kiosk or check-in counter at the start of their journey. With wallet integration, the verified photograph in the identity credential serves as the enrollment data, eliminating the separate enrollment step. The passenger simply approaches the biometric gate, the gate reads the wallet credential wirelessly, and performs the facial comparison, all in a single smooth interaction.

Schengen vs Non-Schengen Travel Considerations

The regulatory framework for EUDI Wallet use in air travel differs significantly between intra-Schengen and non-Schengen flights. For flights within the Schengen area, where border controls have been eliminated under the Schengen Borders Code, there is no legal requirement to present a travel document for border purposes. Airlines verify identity for security and commercial reasons, and a verified identity credential in the EUDI Wallet satisfies these requirements. This makes intra-Schengen flights the primary use case for wallet-based air travel in the near term.

For flights crossing the external Schengen border, including flights to and from non-EU countries and flights to non-Schengen EU member states (Ireland), the situation is more complex. The Schengen Borders Code requires travelers to present a valid travel document (passport or, for EU citizens, national identity card) at border crossing points. While a DTC stored in the EUDI Wallet can facilitate and speed up border control processing, it does not currently replace the requirement to carry a physical travel document for external border crossings.

The European Commission is actively working on amending the Schengen Borders Code to accommodate digital travel credentials. The proposed revision includes provisions that would allow DTCs meeting specific security requirements to serve as valid travel documents for Schengen border crossings, at least for EU citizens traveling between Schengen states and select third countries with bilateral agreements. This legislative evolution is expected to progressively expand the scenarios where the EUDI Wallet can serve as the sole travel document, moving toward the long-term vision of passport-free travel for EU citizens.

The EU Entry/Exit System (EES), expected to become operational in the coming years, adds another dimension. EES will register entries and exits of third-country nationals crossing EU external borders, replacing passport stamping with digital recording. For EU citizens, EES does not apply, but the infrastructure being built for EES is designed to be compatible with digital travel credentials, creating a technology pathway that will eventually support wallet-based border crossing for all categories of travelers.

Airline Partnership Requirements and Industry Standards

Airlines seeking to integrate EUDI Wallets must meet specific technical and regulatory requirements. The International Air Transport Association (IATA) has developed the One ID framework, which defines standards for identity management throughout the passenger journey. EUDI Wallet integration aligns with IATA One ID by providing a standardized digital identity credential that works across airlines and airports, replacing the current fragmented approach where each airline maintains its own identity verification process.

Technical integration requires airlines to implement the OpenID4VP protocol for credential verification, maintain access to the EU trust registry for credential validation, and update their Departure Control Systems (DCS) to accept wallet-based boarding credentials alongside traditional boarding passes. Airport operators must upgrade gate infrastructure to support NFC and QR code-based credential presentation, and ensure that their security checkpoint systems can verify wallet credentials in the same time or faster than traditional document checks.

The cost of integration varies significantly by airline size and existing technology infrastructure. Major carriers like Lufthansa and Air France-KLM, which already operate sophisticated digital platforms and have experience with biometric boarding trials, can integrate EUDI Wallet support within their existing digital transformation programs. Budget carriers like Ryanair, which process enormous passenger volumes with lean technology stacks, face different integration challenges focused on high-throughput credential verification at scale. Smaller regional carriers may need to rely on shared airport infrastructure rather than building airline-specific wallet integration capabilities.

Privacy Protections for Air Travelers

The introduction of digital identity and boarding credentials in the air travel context raises legitimate privacy concerns that the EUDI Wallet architecture is specifically designed to address. Airlines and airports currently collect significant amounts of passenger data through Passenger Name Records (PNR), Advance Passenger Information (API), and frequent flyer programs. The addition of wallet-based identity verification could potentially increase data collection if not carefully managed.

The EUDI Wallet's selective disclosure feature is the primary privacy safeguard. At each touchpoint, the passenger shares only the minimum data required for the specific interaction. At check-in, the airline receives name, date of birth, and nationality for booking verification and API requirements. At security, the system receives a boarding authorization and identity confirmation without accessing the full credential data. At boarding, only the boarding pass validity and a confirmation that the identity has been verified at security are needed.

Critically, the EUDI Wallet architecture prevents airlines and airports from tracking passengers across different journeys or building complete travel profiles through wallet interactions. Each credential presentation uses cryptographic techniques that prevent different verifiers from correlating presentations by the same person, unless the passenger explicitly allows it (for example, by linking their frequent flyer account). This unlinkability property ensures that adopting EUDI Wallet-based travel does not inadvertently create new surveillance capabilities.

The European Data Protection Board (EDPB) has issued guidance on the processing of personal data in the context of EUDI Wallets, emphasizing that the same GDPR principles apply regardless of whether data is presented in physical or digital form. Airlines must continue to respect purpose limitation, data minimization, and storage limitation principles when processing wallet-verified passenger data. The shift to digital does not expand the legal basis for data collection; it simply changes the mechanism through which legitimate data processing occurs.