Mobile identity management
Encyclopedia
The mobile phone in addition to a wallet and house keys has become one of the essentials to take with you when leaving the house. By storing all the technical necessary applications on a SIM card, the mobile phone has turned into a device for managing each person’s digital identity
.
Mobile Identity is a development of the traditional online authentication and digital signing; the SIM
card of one’s mobile phone works as an identity tool. Mobile Identity enables legally binding authentication and transaction signing for online banking, payment confirmation, corporate services, and consuming online content. The user’s certificates are maintained on the telecom operator’s SIM card and in order to use them, the user has to enter a personal, secret PIN code. When using Mobile Identity, no separate card reader is needed, as the phone itself already performs both functions.
In contrast to other approaches, the mobile phone in conjunction with a mobile signature-enabled SIM
card offers the same security and superior ease of use than for example Smart cards in existing Digital identity
management systems. Smart card
-based digital identities can only be used in conjunction with a card reader
and a PC
. In addition, distributing and managing the cards has become a logistical nightmare
, exacerbated by the lack of interoperability between services relying on such a digital identity
.
With the mobile signature
concept, there are a number of private company stakeholders that have an inherent interest in setting up a mobile signature
service infrastructure thus offering mobile identity services. These stakeholders are mobile network operators and to a certain extent financial institutions or service providers with an existing large customer base, that could leverage the use of mobile signatures across several applications.
government has supervised the deployment of a common derivative of the ETSI-based mobile signature service standard, thus allowing the Finnish
mobile operators to offer mobile signature
services. The Finnish government certificate authority
(CA) also issues the certificates that link the digital
keys on the SIM
card to the person’s real world identity.
references
in the Nordic region is rapidly growing as governments, public sector and financial institutions are increasingly offering online and mobile channels to access their services. These new services require more secure and user-friendly authentication methods.
In Sweden a consortium owned by banks and mobile operators (WPK.Net) is specifying a mobile signature service infrastructure that is first used by banks to authenticate online banking users. Later on the mobile signature services is supposed to be available for other applications as well.
Telenor Sweden has provided technology for the company's mobile signature
services in Sweden since 2009. Telenor enables its customers a convenient and secure login to online services using their mobile phone for authentication and digital signing.
references
http://www.wpki.net
http://www.valimo.com/news_and_events/16-02-2009/valimo-and-telenor-sweden-collaborate-mobile-authentication-technology
sparsely. There is now a concerted effort from the private industry to leverage the Estonian CA
landscape and deploy mobile signature services, thus enabling Estonian citizens to port their existing digital identity
to the mobile phone.
has bought a mobile signature service infrastructure and has now signed up 8 Turkish banks to enable them to use mobile signatures for online user authentication.
Other services relying on mobile signatures are:
references
http://www.valimo.com/news_and_events/26-02-2009/kenya-turkey-japan-lead-mobile-money-trend
http://www.todayszaman.com/tz-web/detaylar.do?load=detay&link=113484
http://www.hurriyet.com.tr/ekonomi/6307988.asp?gid=196
http://www.turkcell.com.tr/bultenler/2007_02_20_mobile_signature_eng.pdf
. Since 2006, the Austrian government has explicitly mentioned mobile phones as one of the likely devices to be used for storing and managing a digital identity
.
Eight Austrian saving banks will launch a pilot allowing online user authentication with mobile signatures.
references
https://www.quelle-bausparkasse.de/presse/detail/88/
Abriva is a new promising free Mobile Identity Management. It now supports OpenID standard.
^^dead links^^
Digital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
.
Mobile Identity is a development of the traditional online authentication and digital signing; the SIM
Subscriber Identity Module
A subscriber identity module or subscriber identification module is an integrated circuit that securely stores the International Mobile Subscriber Identity and the related key used to identify and authenticate subscriber on mobile telephony devices .A SIM is held on a removable SIM card, which...
card of one’s mobile phone works as an identity tool. Mobile Identity enables legally binding authentication and transaction signing for online banking, payment confirmation, corporate services, and consuming online content. The user’s certificates are maintained on the telecom operator’s SIM card and in order to use them, the user has to enter a personal, secret PIN code. When using Mobile Identity, no separate card reader is needed, as the phone itself already performs both functions.
In contrast to other approaches, the mobile phone in conjunction with a mobile signature-enabled SIM
Subscriber Identity Module
A subscriber identity module or subscriber identification module is an integrated circuit that securely stores the International Mobile Subscriber Identity and the related key used to identify and authenticate subscriber on mobile telephony devices .A SIM is held on a removable SIM card, which...
card offers the same security and superior ease of use than for example Smart cards in existing Digital identity
Digital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
management systems. Smart card
Smart card
A smart card, chip card, or integrated circuit card , is any pocket-sized card with embedded integrated circuits. A smart card or microprocessor cards contain volatile memory and microprocessor components. The card is made of plastic, generally polyvinyl chloride, but sometimes acrylonitrile...
-based digital identities can only be used in conjunction with a card reader
Card reader
A card reader is a data input device that reads data from a card-shaped storage medium. Historically, paper or cardboard punched cards were used throughout the first several decades of the computer industry to store information and programs for computer system, and were read by punched card readers...
and a PC
Personal computer
A personal computer is any general-purpose computer whose size, capabilities, and original sales price make it useful for individuals, and which is intended to be operated directly by an end-user with no intervening computer operator...
. In addition, distributing and managing the cards has become a logistical nightmare
Nightmare
A nightmare is an unpleasant dream that can cause a strong negative emotional response from the mind, typically fear or horror, but also despair, anxiety and great sadness. The dream may contain situations of danger, discomfort, psychological or physical terror...
, exacerbated by the lack of interoperability between services relying on such a digital identity
Digital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
.
With the mobile signature
Mobile signature
A mobile signature is a digital signature generated either on a mobile phone or on a SIM card.-Origins of the term:mSignThe term first appeared in articles introducing mSign . It was founded in 1999 and comprised 35 member companies...
concept, there are a number of private company stakeholders that have an inherent interest in setting up a mobile signature
Mobile signature
A mobile signature is a digital signature generated either on a mobile phone or on a SIM card.-Origins of the term:mSignThe term first appeared in articles introducing mSign . It was founded in 1999 and comprised 35 member companies...
service infrastructure thus offering mobile identity services. These stakeholders are mobile network operators and to a certain extent financial institutions or service providers with an existing large customer base, that could leverage the use of mobile signatures across several applications.
Finland
The FinnishFinland
Finland , officially the Republic of Finland, is a Nordic country situated in the Fennoscandian region of Northern Europe. It is bordered by Sweden in the west, Norway in the north and Russia in the east, while Estonia lies to its south across the Gulf of Finland.Around 5.4 million people reside...
government has supervised the deployment of a common derivative of the ETSI-based mobile signature service standard, thus allowing the Finnish
Finland
Finland , officially the Republic of Finland, is a Nordic country situated in the Fennoscandian region of Northern Europe. It is bordered by Sweden in the west, Norway in the north and Russia in the east, while Estonia lies to its south across the Gulf of Finland.Around 5.4 million people reside...
mobile operators to offer mobile signature
Mobile signature
A mobile signature is a digital signature generated either on a mobile phone or on a SIM card.-Origins of the term:mSignThe term first appeared in articles introducing mSign . It was founded in 1999 and comprised 35 member companies...
services. The Finnish government certificate authority
Certificate authority
In cryptography, a certificate authority, or certification authority, is an entity that issues digital certificates. The digital certificate certifies the ownership of a public key by the named subject of the certificate...
(CA) also issues the certificates that link the digital
Digital
A digital system is a data technology that uses discrete values. By contrast, non-digital systems use a continuous range of values to represent information...
keys on the SIM
Subscriber Identity Module
A subscriber identity module or subscriber identification module is an integrated circuit that securely stores the International Mobile Subscriber Identity and the related key used to identify and authenticate subscriber on mobile telephony devices .A SIM is held on a removable SIM card, which...
card to the person’s real world identity.
references
- http://www.valimo.com/news_and_events/01-09-2009/uusi-laki-sahkoisesta-tunnistamisesta-astui-voimaan
- http://www.vrk.fi/vrk/home.nsf/pages/9C0B5FFC32EC6AF2C225724400511298?opendo
Sweden
The need for new authentication solutions like Mobile IdentityMobile identity
A mobile identity is an idem identity type, based on a message or a set of messages derived from mobile computing devices, constituting claims about the mobility, the location or other characteristics which are assumed to represent a data subject....
in the Nordic region is rapidly growing as governments, public sector and financial institutions are increasingly offering online and mobile channels to access their services. These new services require more secure and user-friendly authentication methods.
In Sweden a consortium owned by banks and mobile operators (WPK.Net) is specifying a mobile signature service infrastructure that is first used by banks to authenticate online banking users. Later on the mobile signature services is supposed to be available for other applications as well.
Telenor Sweden has provided technology for the company's mobile signature
Mobile signature
A mobile signature is a digital signature generated either on a mobile phone or on a SIM card.-Origins of the term:mSignThe term first appeared in articles introducing mSign . It was founded in 1999 and comprised 35 member companies...
services in Sweden since 2009. Telenor enables its customers a convenient and secure login to online services using their mobile phone for authentication and digital signing.
references
http://www.wpki.net
http://www.valimo.com/news_and_events/16-02-2009/valimo-and-telenor-sweden-collaborate-mobile-authentication-technology
Estonia
The Estonian government has issued all citizens with a Smart card, but citizens are using the digital identityDigital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
sparsely. There is now a concerted effort from the private industry to leverage the Estonian CA
Certificate authority
In cryptography, a certificate authority, or certification authority, is an entity that issues digital certificates. The digital certificate certifies the ownership of a public key by the named subject of the certificate...
landscape and deploy mobile signature services, thus enabling Estonian citizens to port their existing digital identity
Digital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
to the mobile phone.
Turkey
The mobile operator TurkcellTurkcell
Turkcell is the leading mobile phone operator of Turkey, based in Istanbul. The company has 34.1 million subscribers as of June 30th, 2011.- Company background :...
has bought a mobile signature service infrastructure and has now signed up 8 Turkish banks to enable them to use mobile signatures for online user authentication.
Other services relying on mobile signatures are:
- Securing the withdrawal of small loans from an ATMAutomated teller machineAn automated teller machine or automatic teller machine, also known as a Cashpoint , cash machine or sometimes a hole in the wall in British English, is a computerised telecommunications device that provides the clients of a financial institution with access to financial transactions in a public...
- Processing custom work flow processes by enabling applicants to use mobile signatureMobile signatureA mobile signature is a digital signature generated either on a mobile phone or on a SIM card.-Origins of the term:mSignThe term first appeared in articles introducing mSign . It was founded in 1999 and comprised 35 member companies...
s.
references
http://www.valimo.com/news_and_events/26-02-2009/kenya-turkey-japan-lead-mobile-money-trend
http://www.todayszaman.com/tz-web/detaylar.do?load=detay&link=113484
http://www.hurriyet.com.tr/ekonomi/6307988.asp?gid=196
http://www.turkcell.com.tr/bultenler/2007_02_20_mobile_signature_eng.pdf
Austria
The Austrian government has decided to allow private sector companies to propose means for storing the government-controlled digital identityDigital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
. Since 2006, the Austrian government has explicitly mentioned mobile phones as one of the likely devices to be used for storing and managing a digital identity
Digital identity
Digital identity is the aspect of digital technology that is concerned with the mediation of people's experience of their own identity and the identity of other people and things...
.
Eight Austrian saving banks will launch a pilot allowing online user authentication with mobile signatures.
references
https://www.quelle-bausparkasse.de/presse/detail/88/
Free Mobile identity Services
- http://www.abriva.net
- http://id.abriva.net
Abriva is a new promising free Mobile Identity Management. It now supports OpenID standard.
^^dead links^^
See also
- Identity managementIdentity managementIdentity management is a broad administrative area that deals with identifying individuals in a system and controlling access to the resources in that system by placing restrictions on the established identities of the individuals.Identity management is multidisciplinary and covers many...
- Location-based serviceLocation-based serviceA Location-Based Service is an information or entertainment service, accessible with mobile devices through the mobile network and utilizing the ability to make use of the geographical position of the mobile device....
- Mobile computingMobile computingMobile computing is a form of human–computer interaction by which a computer is expected to be transported during normal usage. Mobile computing has three aspects: mobile communication, mobile hardware, and mobile software...
- Mobile communityMobile communityA mobile community is a group of people generally united by shared interests or goals who interact:* considering their context ,* by means of location-independent information technology,...
- Mobile identityMobile identityA mobile identity is an idem identity type, based on a message or a set of messages derived from mobile computing devices, constituting claims about the mobility, the location or other characteristics which are assumed to represent a data subject....
- MobilityMobilityMobility may refer to:* Mobility * "Mobiliy" , a song by Moby* Mobility * Mobility , the ability of military units or weapon systems to move to an objective-See also:* Academic mobility* Apprentices mobility...
- PICOS Project