BankID
- 23. August2016
BankID 23. August2016 23.10.2016 2 Questions How did you decide - - PowerPoint PPT Presentation
BankID 23. August2016 23.10.2016 2 Questions How did you decide to build/create your national eID solutions? Which elements does your solution consist of? The conceptual model. Which challenges have you met while implementing and
BankID
Questions
model.
distributing the solutions?
your countries?
eID/signing?
2 23.10.2016
How did you decide to build/create your national eID solutions?
Established Assessed: Card- & Soft-based Solutions Conclusion: Central / roaming / HSM Solution Reason: Usability, Security and Cost 2000
END USER COMMON ROOT, STANDARDS, POLICIES, RULES ETC.
Which elements does your solution consist of? The conceptual model.
BANK SERVICE PROVIDER AGREEMENT SERVICE AGREEMENT WITH END USER SERVICE PROVIDERS (MERCHANTS) INTER-BANK BANK BANKID CORE TECHNICAL COMPONENTS
RULES
MNO
Governance
To be used by the government we are required to:
Ø Qualified certificates Ø Level 4(highest) in a National system defining security Anti Money Landering law is also pointing to these security level – it says ”eID can be used for AML, but must the n be on level 4 security wise
Which elements does your solution consist of? The conceptual model.
6
Ø BankStored BankID Ø Java client with keys and certificates in the cloud Ø No need for software innstaled on the computer/mobile Ø Client downloaded each time Ø Java to Web Client in 2014 Ø Requires One Time Password Ø BankID on Mobile(or SIM) Ø Popular because it’s truly mobile and for its code word security Ø Combination model Ø BankStored with BankID on mobile as OTP Ø BankID on mobil a real mobil solution embrased by customers Ø Enrollment requires passport. Activated and renewed through internettbank.
8 out of 10 adults have BankID
8 out of 10 have a SmartPhone*
* Kilde MedieNorge.noWhich challenges have you met while implementing and distributing the solutions?
12
BankID transactions done for financial services including consumer banking (91.5% of total transactions)
Including Including
What does the eID solution mean for the society the Citizens of your countries?
An overwhelming online banking adoption…but not only
1 2 3
90.9%
5.1% 4%
BankID for governmental services
13
ID-Porten provides common identification service for all governmental eServices
M ore than 700 servi ces connected
T A X D E C L A R A T I O N M U N I C I P A L I T Y S E R V I C E S C I T I Z E N E M A I L A C C O U N Tcitizen@norge.no
BankID for Government Services
ID-Porten: the national ID Gateway
transactions
per month
15
BankID for Government Services Access (login with BankID)
Panorama of main supported services
Governmental digitalized forms & services for Businesses & Citizens
60 %
Labour & Welfare administration
21 %
National health web community (patients records and professionals communication)
5%
ePrescriptions
3.5% 3.5%
Email box for Norwegian Citizens
16
BankID for Government Services Access (login with BankID)
Main Use case: Secure Login
For the top 5 governmental portals the
secure login is the most solicited
use case No matter the service, user will have a consistent experience
Altinn, the success of dematerialization
Since 2003 4 million citizens registered 1 million entities registered 112 million forms sent by citizens & entities 83 million administration answers sent
ß ß
$$ Millions of savings
Enrolling user to BankID
17
End-user is initially registered physically with passport End-user registers to Mobile ID through their Online Bank using existing hardware token
BankID in Financial services
18
#1
Financial Services’ BankID transactions represent 90.9%
19
per month
million
+9/10 total BankID transactions
Services 0.8% of transactions ► 100k transactions/month
0.4% of transactions ► 50k transactions/month
0.2% of transactions ► 25k transactions/month
T O P B A N K S F O R B A N K I D T R A N S A C T I O N S
A growing portfolio of services despite predominant Consumer Banking usage
BankID for Financial Services
20
How is BankID used for Financial Services?
Key driver > Regulation in Norway for secure banking
2. Online Payment Validation 3. Signing of Mortgage documents BankID for Financial Services
Demo BankID SpareBank
BankID in Other services
21
Of others BankID transactions for Insurance Services
22
500k transacti
per month
BankID for Other Services
Of others BankID transactions for Telecom Services
7%
Of others BankID transactions for Online Shopping
3%
Of others BankID transactions for Document management
Services on the rise
Real Estate Clubs & Charities Utilities
23
BankID for Other Services
BankID transformed Norway’s digital economy when it was first released, enabling processes that typically took over a week to be completed in only a matter of hours.
Source: GSMA Norway Case Study
How is BankID used for these other services? 1.
Login 2. Sign Up for new service 3. Document signing & mail reception validation
If you were about to start over , what would you do differently?
24
glue setting security requirements have been important for all banks to trust all banks
imporant use cases
in 2003)
per Bank
If you were about to start over , what would you do differently?
23.10.16 Mobile ID 25
What do you think is coming with the future solutions
implement eID / Signing
time as it is not mature enough yet
23.10.16 Mobile ID 26
27
Of Norwegian
Active population* is using Mobile ID
transactions
per month
million
per user/month
average
users
service providers
all suscribers
are equiped with
SIM card
Key Figures of BankID on Mobile (2016)
Part of the daily digital habits of Norwegians
*Norwegian from 15
Deployment Model BankID on Mobile
28
IDP + AGGREGATOR
Service 1 Service 2 Service … Service N MNO 1 MNO 2 MNO N
Bank 1 (CA) Bank 2 (CA) Bank N (CA)
SUBSCRIBERS SUBSCRIBERS SUBSCRIBERS
Statistical information
Our play of words to handle security
31
32
That’s it from Norway ! Thank you !
33