Digital channels and the evolution of ID

Access & Identity Management Handbook 2019 Editor's Choice, Access Control & Identity Management, Infrastructure

In today’s increasingly connected world, proof of identity has gone mobile, with digital driving licences and mobile identity cards the latest in a growing list of ID innovations to make it onto the smartphone.

For lawmakers, service providers and citizens, this kind of application offers tremendous opportunity. In the near term, these digital documents will provide full identity or restricted access to relevant attributes like age, town of residence and so on, for car hire, bank account opening or access to age-restricted venues, such as clubs and bars. They can even support a variety of notification services including expiry and renewal, fines reporting and points management, while enabling greater levels of monitoring.

Further out, the ability to link identity, through the licence, to connected cars offers exciting opportunities for keyless entry and a host of remote services.

Of course, as technologies and applications evolve, so must the controls. And here, government-derived identity will be the starting point for ensuring that every digitised identity matches the correct individual.

In this paper we explore the evolution of identity from physical to digital (or dematerialised), and take a closer look at the opportunities this represents – for issuing authorities, service providers and users.

Creation and verification of identity in the digital world

The concept of identity remains unchanged – the set of unique characteristics or attributes that define who we are, and crucially, that distinguish one individual from another. These attributes often include name, date of birth, physical appearance and a variety of social factors including home address, occupation and so on.

In a digital context, attributes may be extended to biometric data. Typically, these are confirmed by and/or derived from government-issued identities based on face-to-face enrolment, breeder documents and civil registries.

Verifying identity in the physical world has been a relatively straightforward task. Individuals present themselves along with their state-generated credentials – such as a passport, ID card or driving licence – to the organisation requiring proof of identity. With identity or the ‘age’ attribute successfully checked, access to the service is granted or the transaction completed. While things become more technically complex in the digital world, the advantages of digitising identity are certainly significant.

According to a Boston Consulting Group and Secure Identity Alliance report published at the end of 2013, going digital could offer governments around the globe up to $50 billion in annual savings by 2020. Alongside boosting and rationalising access to ‘trust based’ services, going digital enables a host of trusted interactions between society and individuals. Indeed, a trusted (and secure) digital identity is becoming ever more critical for healthcare, education, social welfare and civil security.

Today, Smart ID documents are already providing a high level of authentication for accessing various European governmental portals. As we move forward these state-generated credentials offer unmatched convenience when it comes to creating or deriving mobile Identity online as they can be remotely authenticated by the user’s biometrics. Once created, the mobile identity then allows online connection, with identity checking, to new and developing public and private eServices.

So, as more citizens live and conduct their lives online, the pressure is on states – which typically issue or regulate ‘sovereign’ identities – to extend identity to the digital channel. Giving citizens a digital identity that can be used for purposes other than law enforcement. Many already do so, with live programmes for example in Belgium, Bulgaria, Estonia and Latvia.

While these digital channels will complement and strengthen physical identity services, they rely heavily on the development and promotion of sophisticated frameworks. Digitisation is a journey, there are many starting points and the role of physical documentation remains crucial.

The role and importance of state-issued identity

The issue of trust is fundamental in the digital ecosystem. Today, we have multiple digital identities: email addresses, aliases on the Internet, social network profiles, IP addresses, bank account details, SIM cards on mobile phones. Whether all can be trusted is open to question.

Clearly, providing a disposable email address or login in the digital space is an inefficient way of establishing identity as it does not provide any trust in knowing the individual behind the digital identity. What’s needed is for states to make it possible for citizens to be recognised in an unequivocal manner.

Just as they do today, when issuing or regulating physical sovereign identities, states need to consider providing or approving digital identity ‘companion’ solutions. Here, states have a tremendous advantage over private identity providers. Their enrolment process typically requires the physical presence of the individuals – which allows the capture of biometrics and the creation of a set of documents for identity proofing. Added to this, most states create identities with high levels of assurance. It is therefore logical that states take advantage of this unique position to create strong mobile identity than everyone can trust.

It all starts with the digital transformation of administration services, and the implementation of structures that harmonise the sovereign identity of individuals between physical and digital spaces. These companion digital IDs could either be linked to or de-coupled from the sovereign ID.

As with national identity schemes, this all depends on having the ability to authenticate the individual – ensuring they are who they say they are – in the public domain. This will enable them to use their trusted identity to verify their access information and services. For example:

• Can a local council check you are a local resident before it allows you access to a service?

• Can a motorcycle rental business verify you are permitted to ride an 80cc vehicle?

• Can your bank check your residential status?

The evolution of national identity into the digital channel

While we reside in the physical world, we live increasingly digital lives. Indeed, the digital revolution has changed the lives of billions of people. More households in developing countries now own a mobile phone than have access to electricity or improved sanitation facilities.

According to the GSMA, there are 4,7 billion unique mobile phone subscribers globally (63% penetration rate), by 2020 there will be 5,6 billion (72% penetration). What’s more, smartphone adoption is accelerating. The GSMA says mobile broadband connections are set to increase from 47% of all phones in 2015 to 71% by 2020. In the developing world, mobile broadband already accounts for more than 80% of connections – by 2020, this will reach 92%.

Little surprise then that policy-makers around the world are working hard to implement new mobile digital policies that protect citizens without impeding social and economic progress, ensuring there are sufficient trusted frameworks in place to help drive exciting new economic and infrastructure ecosystems. And enable enhanced social inclusion for citizens.

In this new world of mobility, mobile devices are becoming instruments for digital identity. And the mobile phone is increasingly acting as a bridge between physical and digital identity. A connected, personal and multi-functional device that’s always on our person, it’s the ideal tool to contain our identity.

Secure, convenient and manageable, the mobile device is where our physical and digital identities converge. Say hello to mobile identity, where the mobile device becomes a powerful and convenient point tool for users to manage their proof of identity.

Making identity mobile

As citizens opt for convenience, ID documents, like national IDs and driver licences, will ultimately follow the trend towards mobility. Since citizens rely on IDs for everyday scenarios, most are ready and willing to use their smartphones to simplify this aspect of life as well.

Indeed, mobile IDs give governments an unprecedented opportunity to provide citizens with new levels of convenience.

Imagine being able to receive a digital companion for your driver’s licence or your ID card – in addition to your physical documentation – direct to your phone. Alongside making the secure retrieval of insurance, address or other identity credentials fast and easy in the event of an accident, it is now simplicity itself when you encounter situations in which you need to prove identity to transact.

From driver’s licences to national ID cards, vehicle registrations, residence permits, fishing permits and more, mobile IDs mark a new era in which citizens can confidently use their smartphone to demonstrate they hold secure and trusted IDs.

So, while today’s citizen may use a national ID or driver’s licence at the airport for domestic travel, with a digital ID securely stored on their smartphone, citizens can leave documentation at home. What’s more, citizens can renew their mobile ID remotely. There is no need to stand in-line for new cards or other renewals.

That’s good news for citizens and for government agencies, which can do their job more efficiently.

Mobile digital IDs – the digital driving licence

Governments around the world are introducing apps that allow citizens to download and store digital copies of their vehicle registration, driving licence, insurance papers and pollution certificates to their mobile phones. Today, over 30 countries have digital driving licence programmes – over 276 million licences were issued in 2015.

Eradicating the need to carry original documents, these digital companions are downloadable via an app that can be instantly verified by the police and other authorised authorities.

Operational in both online and offline environments, these mobile IDs provide citizens with back-up in the event of physical document loss and, as we’ve seen, instant identification they can present on their phone the moment they need it (proof of age for alcohol purchase or car rental, for example).

Available in digital format, citizens now have a highly portable and convenient way to manage their day-to-day essential documentation.

And, in the case of a driving licence, these digital IDs also enable ease of verification for law enforcement agencies who can instantly confirm a driver’s status and driving privileges on the spot. Similarly, commercial service providers like car hire companies, pubs and clubs, and a host of other businesses will benefit.

Conclusion

Digitising ID is a highly effective way to enhance a citizen’s day-to-day experience, giving service providers and others a fast, secure and convenient way to verify status, age and identity.

Alongside offering a convenient and fast way to confirm identity, document provisioning and updating becomes easier. Citizens can be sent e-reminders to their digital companion when driver licences need to be renewed, for example.

Implementing a mobile digital driver licence app – which is free to citizens – also creates the foundation for future applications. Citizens can use their privacy-friendly mobile wallet service to carry multiple licences: hunting/fishing, library membership/emergency contact information and more.

As smartphones become ubiquitous, new innovations in facilitating the ability to issue and verify secure identification quickly, safely and remotely will enable governments to further extend their relationship with citizens, enabling users to utilise their smartphone as a platform for holding their credentials and other essential documentation for authentication.

In a world where airlines are already using mobile phone boarding passes and in which citizens can use their smartphones to present tickets for events or gain access to university campuses and hotel rooms, leveraging the convenience and power of mobile devices to deliver secure authenticated digital identities and other government credentials to citizens represents a major step forward.

Find our more at www.secureidentityalliance.org

This article was first published by the Secure Identity Alliance: https://secureidentityalliance.org/blog/entry/digital-channels-and-the-evolution-of-id





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

What is your ‘real’ security posture?
BlueVision Editor's Choice Information Security Infrastructure AI & Data Analytics
Many businesses operate under the illusion that their security controls, policies, and incident response plans will hold firm when tested by cybercriminals, but does this mean you are really safe?

Read more...
What is your ‘real’ security posture? (Part 2)
BlueVision Editor's Choice Information Security Infrastructure
In the second part of this series of articles from BlueVision, we explore the human element: social engineering and insider threats and how red teaming can expose and remedy them.

Read more...
IQ and AI
Leaderware Editor's Choice Surveillance AI & Data Analytics
Following his presentation at the Estate Security Conference in October, Craig Donald delves into the challenge of balancing human operator ‘IQ’ and AI system detection within CCTV control rooms.

Read more...
Onsite AI avoids cloud challenges
SMART Security Solutions Technews Publishing Editor's Choice Infrastructure AI & Data Analytics
Most AI programs today depend on constant cloud connections, which can be a liability for companies operating in secure or high-risk environments. That reliance exposes sensitive data to external networks, but also creates a single point of failure if connectivity drops.

Read more...
Toxic combinations
Editor's Choice
According to Panaseer’s latest research, 70% of major breaches are caused by toxic combinations: overlapping risks that compound and amplify each other, forming a critical vulnerability to be exploited.

Read more...
Short-range indoor LiDAR sensor
OPTEX Perimeter Security, Alarms & Intruder Detection Infrastructure Products & Solutions
The REDSCAN Lite RLS-1010L has been developed to provide comprehensive coverage and protect high-risk security zones and vulnerable, narrow indoor spaces that are difficult to protect with traditional sensors.

Read more...
Direct-to-cloud surveillance platform
Surveillance Infrastructure
Oncam has announced a forthcoming end-to-end, direct-to-cloud video platform that combines AI-enabled cameras, intelligent IoT devices, and cloud-integrated video management software to deliver smarter performance with reduced complexity.

Read more...
Is your entrance security secure?
SMART Security Solutions Centurion Systems Technews Publishing News & Events Access Control & Identity Management Smart Home Automation
While Centurion Systems may be known as a leader in gate and door motors in 72 countries, the company has developed more than hardware and now offers an automation ecosystem for access control security.

Read more...
Continuum launches centralised access and identity management
Editor's Choice Access Control & Identity Management Integrated Solutions Facilities & Building Management
Continuum Identity is a newly launched company in the identity management and access control sector, targeting the complexity of managing various Access and Identity Management (AIM) systems.

Read more...
Software security is a team sport
Information Security Infrastructure
Building and maintaining secure software is not a one-team effort; it requires the collective strength and collaboration of security, engineering, and operations teams.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.