The idea is simple: Make the state DMV/MVA or country's embassy verify the ID.
It goes like this:
- Site contacts agency to generate token and redirect URL, giving return URLs and age/drinking requirements
- Site has user browser redirect
- Agency securely checks ID, logs results.
- Agency redirects to site URL.
- Site contacts agency to follow up, get result code
- Site acts accordingly.