A consortium of healthcare and digital identity organizations led by the CARIN Alliance has released a new unified trust framework policy designed to enable interoperable digital credentials. Developed with DirectTrust and the Kantara Initiative, the policy harmonizes three major US identity and security standards into a single, cohesive framework to address identity fragmentation, starting with the complex needs of the healthcare industry.
The initiative aims to solve a core challenge for patients and providers: the proliferation of siloed identity systems across electronic health records, insurance portals, and patient apps, which forces individuals to manage dozens of separate logins. The new framework creates a common foundation of trust so that a single digital credential can be used securely across these different systems.
To achieve this, the policy integrates requirements from three distinct standards: NIST’s security and privacy controls (SP 800-53), its Digital Identity Guidelines (SP 800-63) for identity proofing and authentication, and the IETF’s framework for X.509 PKI certificates for cryptographic integrity. This ensures that any credential issued under the policy meets a high bar for both identity vetting and data security.
The unified policy is also designed to align with the US government’s Trusted Exchange Framework and Common Agreement (TEFCA), which governs nationwide health data interoperability. This allows accreditation bodies like Kantara and DirectTrust to recognize each other’s certifications, a key step toward a “network-of-networks” for trusted health data exchange. The framework was informed by a successful 2024 pilot in which consumers proved their identity once and then accessed health records from multiple providers.
While healthcare is the immediate focus, the CARIN Alliance has published the policy as an open resource to encourage adoption in other industries. The long-term vision is to enable a single, high-assurance digital ID to be used seamlessly and securely across sectors, from healthcare to banking and government services.
Sources: CARIN Alliance; Leavitt Partners
–
By the ID Tech Editorial Team
