bankid
play

BankID 23. August2016 23.10.2016 2 Questions How did you decide - PowerPoint PPT Presentation

Dec 08, 2023 •99 likes •446 views

BankID 23. August2016 23.10.2016 2 Questions How did you decide to build/create your national eID solutions? Which elements does your solution consist of? The conceptual model. Which challenges have you met while implementing and

  1. BankID 23. August2016

  2. 23.10.2016 2 Questions • How did you decide to build/create your national eID solutions? • Which elements does your solution consist of? The conceptual model. • Which challenges have you met while implementing and distributing the solutions? • What does the eID solution mean for the society the Citizens of your countries? • If you were about to start over, what would you do differently? • What do you think is coming with the future solutions on eID/signing?

  3. How did you decide to build/create your national eID solutions? Assessed: Conclusion: Card- & Soft-based Solutions Central / roaming / HSM Solution Established 2000 Reason: Usability, Security and Cost

  4. Which elements does your solution consist of? The conceptual model. MNO SERVICE PROVIDERS (MERCHANTS) END USER SERVICE PROVIDER SERVICE AGREEMENT WITH END USER AGREEMENT INTER-BANK RULES BANK BANK COMMON ROOT, STANDARDS, POLICIES, RULES ETC. BANKID CORE TECHNICAL COMPONENTS

  5. Governance To be used by the government we are required to: Ø Qualified certificates Ø Level 4(highest) in a National system defining security Anti Money Landering law is also pointing to these security level – it says ”eID can be used for AML, but must the n be on level 4 security wise

  6. 6 Which elements does your solution consist of? The conceptual model. Ø BankStored BankID Ø Java client with keys and certificates in the cloud Ø No need for software innstaled on the computer/mobile Ø Client downloaded each time Ø Java to Web Client in 2014 Ø Requires One Time Password Ø BankID on Mobile(or SIM) Ø Popular because it’s truly mobile and for its code word security Ø Combination model Ø BankStored with BankID on mobile as OTP Ø BankID on mobil a real mobil solution embrased by customers Ø Enrollment requires passport. Activated and renewed through internettbank.

  7. Norway 8 out of 10 adults have BankID

  8. Norway 8 out of 10 have a SmartPhone * * Kilde MedieNorge.no

  10. Which challenges have you met while implementing and distributing the solutions?

  12. What does the eID solution mean for the society the Citizens of your countries? An overwhelming online banking adoption…but not only BankID transactions done for financial 90.9 % services including consumer banking 1 (91.5% of total transactions) Including 2 5.1 % Including 4 % 3 12

  13. BankID for governmental services 13

  14. BankID for Government Services ID-Porten: the national ID Gateway ID-Porten provides common identification service for all governmental eServices M ore than 700 >1Mill transactions servi ces connected per month T A X D E C L A R A T I O N M U N I C I P A L I T Y S E R V I C E S C I T I Z E N E M A I L citizen@norge.no A C C O U N T

  15. BankID for Government Services Access (login with BankID) Panorama of main supported services Labour & Welfare National health web administration community (patients 5% records and professionals 21 communication) % 3.5 % 3.5 % 60 ePrescriptions Governmental % digitalized forms & services for Businesses & Citizens Email box for Norwegian Citizens 15

  16. BankID for Government Services Access (login with BankID) Main Use case: Secure Login # 1 For the top 5 governmental portals the secure login is the most solicited use case No matter the service, user will have a consistent experience Altinn, the success of dematerialization Since 2003 $$ 4 million citizens registered Millions of 1 million entities registered savings ß 112 million forms sent by citizens & entities ß 83 million administration answers sent 16

  17. Enrolling user to BankID End-user is initially registered physically with passport End-user registers to Mobile ID through their Online Bank using existing hardware token 17

  18. BankID in Financial services 18

  19. BankID for Financial Services A growing portfolio of services despite predominant Consumer Banking usage # 1 1. Consumer Banking +9/10 total BankID transactions Financial Services’ BankID T O P B A N K S F O R B A N K I D transactions represent 90.9% T R A N S A C T I O N S of total ecosystem transactions 11.4 transacti million 2. Credit Cards 3. Mobile Payments 4. Investment Funds Services 0.4% of transactions 0.2% of transactions ons 0.8% of transactions ► 50k ► 25k ► 100k transactions/month transactions/month transactions/month per month 19

  20. BankID for Financial Services How is BankID used for Financial Services? 1. Login Key driver > Regulation in Norway for secure banking 2. Online Payment Validation 3. Signing of Mortgage documents Demo BankID SpareBank 20

  21. BankID in Other services 21

  22. BankID for Other Services 7 % Of others BankID transactions for Online Shopping 500k transacti 3 % Of others BankID transactions ons for Document management per month 60 % Services on the rise Real Estate Of others BankID transactions for Insurance Services Clubs & Charities 29 % Utilities Of others BankID transactions for Telecom Services 22

  23. BankID for Other Services How is BankID used for these other services? 1. Login 2. Sign Up for new service 3. Document signing & mail reception validation BankID transformed Norway’s digital economy when it was first released, enabling processes that typically took over a week to be completed in only a matter of hours. Source: GSMA Norway Case Study 23

  24. If you were about to start over , what would you do differently? • Cooperation is indeed important and the role of Bits(BSK) as a glue setting security requirements have been important for all banks to trust all banks • Governental governence model has been important for certain imporant use cases • AML • Become customer in finance • I would have defined OTP as COI if possible • I would have started improvement on signing earlier • I would not have used Java(but honestly there were nowoption in 2003) • We would have buildt it with one common CA instead of one per Bank 24

  25. If you were about to start over , what would you do differently? • It takes time to build infrastructure, • have people to learn to use it • services that people find usefull • Sucsess is a result of hard work and cooperation in many levels • Between Banks • Banks and MNO’s • Banks and government Mobile ID 23.10.16 25

  26. What do you think is coming with the future solutions on eID/signing? • Eidas with all its standards will be the future ways to implement eID / Signing • It will be mobile • And there will be elements of Biometric however it will take time as it is not mature enough yet • I.e. Enrolment with selfie J Mobile ID 23.10.16 26

  27. Key Figures of BankID on Mobile (2016) Part of the daily digital habits of Norwegians 33 % Of Norwegian Active population* is using Mobile ID 327 providers 900 000 users service 12.6 million transactions all suscribers per month are equiped with SIM card average 14 transactions Mobile ID per user/month *Norwegian from 15 27

  28. Deployment Model BankID on Mobile Bank 1 (CA) Service 1 Service 2 Bank 2 (CA) IDP + AGGREGATOR Service … Bank N (CA) Service N MNO 1 MNO 2 MNO N SUBSCRIBERS SUBSCRIBERS SUBSCRIBERS 28

  29. Statistical information • 5 million people • Population density 13,52 persons pr km2 • Nederlanda 408,13 • Belgia 370,94

  30. Our play of words to handle security • 100+ Adjective • 100+ substantiv • i.e. Yellow submarine

  31. 31

  32. 32

  33. 33 That’s it from Norway ! Thank you !

Recommend

More recommend