Implement online mDL (mobile driver's license) verification using ISO 18013-7 and OID4VP

Steps

1. Understand the standard split: ISO 18013-5 (2021) defines the mDL data model and proximity presentation protocols (NFC, QR code, BLE); ISO 18013-7 extends it to online use cases via OpenID for Verifiable Presentations (OID4VP).
2. Stand up a verifier endpoint that initiates an OID4VP authorization request specifying the requested mDL document type (org.iso.18013.5.1.mDL) and the specific data elements needed (e.g., age_over_21, given_name, issue_date).
3. Present the OID4VP request to the user's wallet via a QR code (cross-device) or a deep link (same-device); the wallet generates a signed mdoc Presentation and returns it to your verifier redirect URI.
4. Validate the mdoc Presentation: verify the issuer signature using the issuing authority's certificate retrieved from the IACA (Issuer Authority Certificate Authority) trust store, and verify the device-bound key signature.
5. Extract the disclosed data elements from the DeviceSigned and IssuerSigned structures; only elements the user consented to disclose are present — treat absent elements as undisclosed rather than absent.
6. Test against mDL reference implementations and simulator wallets available in the ISO 18013 GitHub ecosystem before connecting to production state-issued wallet deployments.