# Mundus ID in brief

### One European identity service — known everywhere, linkable nowhere

**What it is.** Mundus ID is the identity service of our architecture. A person is admitted once, through a certified electronic identity — a bank-backed login or a national or European digital wallet — and from then on is known to every organisation under a **different, random identifier** that carries only the roles that organisation assigned. An organisation registers a person with a single query and receives *true* or *false* plus its own identifier: no name, no date of birth, no national number is ever released. Two organisations cannot link their identifiers to each other; the same person is simply two unrelated IDs.

**What it never holds.** Only the link between the certified identity and the person's internal anchor, and per organisation the scoped identifier with its roles. No addresses, no bank data, no purchase data, no cross-organisation view for anyone. During an authentication the binding is used inside a short-lived machine-to-machine process that shares nothing and is flushed before it stops.

**Anonymous by default, accountable when a judge says so.** Mundus ID also issues pseudonymous accounts for use on the European sovereign internet. Re-identification is possible only for a serious breach of European law, on a court order, by reconstructing a key split three ways between independent holders — an investigation service, a public prosecutor and a notary. No platform, no state acting alone, and not we, can resolve an account.

**Contractors and chains.** A contractor is authorised through the organisation that holds the contract: the employer attests employment, clearances and contract, each link in a chain may grant no more than it received, and liability follows each attested element. The same pattern binds devices to their owner organisation.

**For your organisation.** A role is a capacity, not a standing permission; sensitive acts are authorised just in time, and opening a door, a server or a transaction follows one cryptographic path and one audit trail. When organisations merge or split, a migration service re-maps identifiers without anyone learning who the people are.

**Who would run it — and who would not.** Not a commercial company and not us. We propose a **non-commercial European public utility**, owned by the European banks, audited and certified by the European Union under joint EU–bank stewardship, working on cost recovery. We design and verify the architecture, run the first reference deployment under the stewardship's rules, and intend to hand the service over to that utility. Legal form, name and certification regime are not yet decided.

*Wols CA — security architecture for sensitive and top-secret assets. The utility, its EU certification and the European judicial route are proposals; the institutions named do not yet exist in this form.*