Trust at scale: aviation’s next digital identity challenge [6]

Passenger processing is entering a new phase. Through initiatives such as IATA’s One ID and ICAO’s Digital Travel Credential (DTC), the aviation industry has demonstrated that biometric travel can reduce repetitive document checks and improve operational efficiency across multiple airport touchpoints.

However, growing passenger volumes, evolving security threats and increasing cross-border complexity are exposing the limitations of identity systems built around isolated organisations and national frameworks.

The industry’s focus is therefore shifting toward a more fundamental challenge: enabling airlines, airports, governments and border agencies to securely recognise and trust identity information beyond their own systems and jurisdictions. The urgency is becoming increasingly apparent as IATA projects that global air travel demand will more than double by 2050, requiring aviation stakeholders to support significantly higher passenger volumes while maintaining security, efficiency and resilience.

Moving beyond biometrics

Facial recognition remains the most visible component of biometric travel, but it represents only one element of a much broader transformation.

The limitations of current identity models stem from the fact that passenger information remains fragmented across multiple organisations. Airlines, airports, border agencies and governments often verify the same traveller independently, creating duplication, inefficiencies and barriers to interoperability.

Addressing these challenges requires a shift from isolated identity verification toward shared trust frameworks capable of operating across the broader travel ecosystem.

Three technologies are emerging as foundational to this transformation:

• ● Decentralised identifiers (DIDs): unique identifiers that allow travellers to manage digital identities independently of a single centralised provider.
• ● Verifiable credentials (VCs): cryptographically signed credentials capable of proving attributes such as identity, citizenship or travel authorisation.
• ● Selective disclosure: a privacy-preserving capability that allows travellers to share only the information required for a specific transaction.

Together, these technologies enable a model in which trust can be established across organisations without requiring every participant to maintain its own copy of passenger data.

In this environment, biometrics serve as the authentication layer, confirming that a traveller is the legitimate holder of a credential. Digital identity frameworks provide the trust layer, enabling credentials and identity attributes to be securely recognised, validated and exchanged throughout the travel ecosystem.

The next phase of aviation digitalisation will therefore depend less on recognising faces and more on enabling trusted identity exchange at scale.

The scalability challenge

Many biometric programmes have demonstrated strong results during pilot deployments, but scaling those capabilities across international aviation networks is significantly more complex.

A future digital identity ecosystem must support millions of daily transactions involving airlines, airports, border agencies and security providers while maintaining low latency, high availability and operational resilience. It must also integrate with a wide range of existing aviation systems, including departure control systems (DCS), airport operational databases (AODB), border management platforms and security infrastructure.

Scalability extends beyond passenger throughput. Identity verification processes must remain reliable during peak travel periods, operational disruptions and large-scale international events while minimising friction for both passengers and frontline staff.

For airport operators, this is becoming a capacity issue as much as a technology issue. As airports will face growing pressure to accommodate increasing passenger volumes without proportionally expanding physical infrastructure, trusted identity frameworks could become a critical enabler of that objective.

Scalability and interoperability are also closely linked. A digital identity framework may function effectively within a single airport or national programme, but supporting millions of cross-border identity transactions requires trust mechanisms capable of operating consistently across multiple organisations and jurisdictions.

Interoperability starts with trust

One of the most common misconceptions surrounding digital identity is that interoperability is primarily a biometric challenge. In reality, interoperability depends on trust architecture.

Most emerging identity ecosystems are being built around standards such as W3C verifiable credentials, decentralised identifiers and OpenID for verifiable credentials (OID4VC). These frameworks allow credentials to be issued, presented and verified across organisations without requiring direct integration between every participant.

In a typical model, a government authority issues a digital credential, the traveller stores it in a secure digital wallet, and airlines, airports and border agencies act as verifiers. Rather than manually inspecting physical documents, organisations validate credentials through cryptographic verification.

Supporting this model at global scale requires public key infrastructure (PKI), trust registries and credential status services capable of determining whether a credential remains valid, expired or revoked.

Aviation already operates under a similar principle. Electronic passports rely on ICAO’s public key directory (PKD) to verify the authenticity of ePassport chips worldwide. Digital identity ecosystems effectively extend this trust model beyond passports to support secure credential exchange across the broader passenger journey.

The aviation sector may be approaching a point where interoperability, rather than biometric performance, becomes the primary constraint to digital transformation.

Security in the age of synthetic identity

As identity becomes increasingly digital, security becomes inseparable from operational performance.

Organisations must protect not only identity repositories, but also biometric templates, credential exchanges and trust relationships across participating entities.

At the same time, advances in generative AI are lowering the barriers to sophisticated identity fraud. Deepfake-based impersonation, synthetic identities and manipulated credentials are becoming increasingly accessible and convincing.

For aviation stakeholders, the challenge is no longer limited to verifying that a face matches a credential. It increasingly involves determining whether the credential itself can be trusted.

Maintaining public confidence will require robust anti-spoofing capabilities, continuous credential validation and governance frameworks capable of adapting to rapidly evolving threats.

Ensuring trust at scale also requires strong biometric performance. Technologies such as liveness detection and presentation attack detection (PAD) help prevent spoofing attempts using photos, videos or masks, while metrics such as false acceptance rate (FAR) and false rejection rate (FRR) ensure the right balance between security and passenger convenience. As biometric deployments expand, managing these indicators becomes essential to maintaining both operational efficiency and public confidence.

Trust must be continuously earned, not assumed.

Breaking down cross-border barriers

The greatest test for digital identity may ultimately be international implementation.

A credential issued in one country may need to be recognised by an airline, accepted by an airport operator and validated by border authorities in another jurisdiction. Achieving this level of interoperability requires alignment across regulatory frameworks, privacy requirements and trust models.

Without that alignment, digital identity risks becoming a collection of disconnected national programmes rather than a truly global ecosystem.

Progress is already underway.

For example, at Singapore Changi Airport, passport-free immigration clearance has moved beyond pilot programmes into large-scale operational deployment. By October 2024, close to 1.5 million travellers had completed immigration procedures without presenting a passport.

This initiative also reduced average clearance times by 60%, from approximately 25 seconds to 10 seconds per traveller, demonstrating the operational impact that trusted identity systems can deliver when deployed at scale.

Meanwhile, Finland became one of the first countries to test ICAO’s Digital Travel Credential concept in operational environments, providing valuable insights into how digital credentials may function across international journeys.

Industry-wide initiatives are also helping establish common foundations. IATA’s One ID programme continues to demonstrate how trusted identities can reduce repetitive document verification, while ICAO’s Digital Travel Credential framework is helping establish the standards architecture necessary for secure identity exchange across jurisdictions.

These initiatives remain early steps, but they point toward a future in which trusted identity becomes a shared capability rather than a collection of isolated systems.

The future of trusted travel

Aviation has already demonstrated what is possible when identity verification becomes faster and more efficient. The next challenge is ensuring that trust can travel as easily as passengers do.

If successful, digital identity will become more than a passenger-processing capability. It will form part of the invisible infrastructure that enables secure, efficient and connected global mobility.

About the author

Raúl Valencia is a Mexican communications strategist and aviation commentator with more than 20 years of experience in corporate communications, public relations and reputation management. With a background in commercial pilot training, he focuses on the passenger journey and the evolving relationship between airlines, airports and travellers. Through his writing, he explores how communication, operations and service design influence the traveller experience across every touchpoint. He advocates for a more connected, transparent and passenger-centric aviation ecosystem that balances operational efficiency with traveller expectations.