  With the ongoing digitalisation of our everyday tasks, more and more
eGovernment services make it possible for citizens to take care of their
administrative obligations online. This type of services requires a certain
assurance level for user authentication. To meet these requirements, a digital
identity issued to the citizen is essential. Nowadays, due to the widespread
use of smartphones, mobile user authentication is often favoured. This
naturally supports two-factor authentication schemes (2FA). We use the term
mobile derived identity to stress two aspects: a) the identity is enabled for
mobile usage and b) the identity is somehow derived from a physical or digital
proof of identity. This work reviews 21 systems that support mobile derived
identities. One subset of the considered systems is already in place (public or
private sector in Europe), another subset is subject to research. Our goal is
to identify prevalent design and implementation aspects for these systems in
order to gain a better understanding on best practises and common views on
mobile derived identities. We found, that research prefers storing identity
data on the mobile device itself whereas real world systems usually rely on
cloud storage. 2FA is common in both worlds, however biometrics as second
factor is the exception.
