Digital Identity in Canada The little Trust Framework that could

Transcription

5 Today all web services have dedicated-siloed authentication infrastructure Tomorrow there will be three types of web services! Credential Provider! Silo Authentication! Credential Subscriber The middle disappears as users demand credential acceptance and economics make silos crumble SecureKey Technologies Inc. All rights reserved. Page 5

6 MasterCard MPRI Study, 2014 " MPRI - a consolidated measure of mobile payments readiness for a country (1 to 100) " Key filters Collaboration between gov, banks, telcos Level of user adoption Mobile ready UN EGovernment Survey, 2014 " EGDI EGovernment Development Index A composite measure of egovernment service delivery (0 to 1) TII Telecommunication Infrastructure Index» Measures fixed and wireless telecom data and consumer adoption OSI Online Services Index» Measures egovernment service programs and efficacy HCI Human Capital Index» Measures level of citizen education SecureKey Technologies Inc. All rights reserved. Page 6

7 MPRI Countries Figures are MPRI Score (0 to 100) Observation: There is a big spread in country sizes both in terms of 1) Land Mass 2) Population Size SecureKey Technologies Inc. All rights reserved. Page 7

8 Egov Services Index EGDI EGDI Heatmap Darker colours are better positioned for egov services Two key components of EGDI TII Telecom/Internet readiness OSI egov program readiness SecureKey Technologies Inc. All rights reserved. Page 8

9 Plot of TII to OSI Telecom to egov readiness Four Quadrants 1. Aspirational Economies are typically in the developing world and want to come up the curve. Likely interested in egov messages, but many things to accomplish at once. 2. Lethargic Governments have healthy telecom sector but egov services are not there yet. Lower tax jurisdictions. Lower installed solutions to overcome, but also may need to create the case for change. 3. Gov-Lead Economies have good egov services but telecom sector is lagging. Tend to be left leaning. Likely state influence over telecom. 4. Magic Quadrant tend to be healthy democratic countries with well developed egov and telecom. egov thinking is there, need to intersect with current plans. egov Laggards egov Leaders Telecom Laggards Telecom Leaders SecureKey Technologies Inc. All rights reserved. Page 9

11 Plot of TII to OSI Telecom to egov readiness Bubble size represents population size Countries broken in to two groups MPRI Countries (Orange) Non MPRI Countries (Blue) Clear lead in MPRI countries in to serve egovernment use cases SecureKey Technologies Inc. All rights reserved. Page 11

12 MPRI Countries: MPRI vs OSI (egov readiness) All of these countries have the right conditions: 1) Advanced egov 2) Advanced Banks & Telecom 3) Proven P3 collaboration 4) Consumer readiness 1) Internet adoption 2) Mobile payments All need Identity Federation. Canada has the lead on P3 Federation O5 Meeting 2015 Mexico SecureKey Technologies Inc. All rights reserved. Page 12

13 Created 2010 by Minister Flaherty Headed by Pat Meredith Cross section of business 250 business people Tasked to find path forward to digital payments in Canada Key Conclusions " Requiring electronic invoicing and payments for all government suppliers and benefit recipients; " Supporting the build out of a digital identification and authentication regime; and " Partnering with the private sector to create a mobile ecosystem to deliver both commercial and public services to citizens. Lead to creation of DIACC SecureKey Technologies Inc. All rights reserved. Page 13

16 The double-barreled conundrum of the online channel for some services. Low transaction velocity mean low business assurance. Users are quick to abandon when they can t accomplish their tasks online. SecureKey Technologies Inc. All rights reserved. Page 16

20 Credential Providers Frequently Used Trusted Credentials briidge.net Exchange Platform deployed as a branded service called SecureKey Concierge Credential Subscribers Infrequently Used Services SecureKey Technologies Inc. All rights reserved. Page 20

24 You can travel anywhere in the world with your bank card and get cash from the local ATM. 1) Federation 2) Strong Authentication 3) Trust Framework Online identity needs to work more like that. SecureKey Technologies Inc. All rights reserved. Page 24

25 We all know what trust frameworks are " We just don t call them that Stock markets, credit card networks, real estate brokers, auto insurance, ATM networks All examples of Trust Frameworks Trust Frameworks make transactions flow SecureKey Technologies Inc. All rights reserved. Page 25

27 Arrange forces at play in a way that transactions can flow Provide Tools and Rules to operate network Provide a discovery mechanism for transactions to occur. Plurality is key: choice and coverage Set out details of how to manage: Privacy & Consent, UX, SLA, Assurance mode, Liability, Non-repudiation, Risk, Remediation SecureKey Technologies Inc. All rights reserved. Page 27

28 Symmetrical " Each endpoint both consumes and provides transactions " Example: Stock markets, ATM networks, Real estate networks Asymmetrical " Some endpoints produce transactions and others consume transactions " Example: Credit card networks, debit networks Hybrid " Every endpoint consumes transactions, some endpoints also produce transactions " Example: SecureKey Concierge SecureKey Technologies Inc. All rights reserved. Page 28

29 Symmetrical " Liability is easier to balance " Real Estate Asymmetrical " Liability is harder to get balance right " Credit Cards Hybrid " Also hard to get get balance right " SecureKey Concierge SecureKey Technologies Inc. All rights reserved. Page 29

30 GC derived CATS2 from Kantara Initiative GC sought authentication only SKC Trust Framework = Contract + CATS2 Partner Banks & SecureKey innovated to add " Privacy model " Business model " Liability model " Commercially viable provider coverage SecureKey Technologies Inc. All rights reserved. Page 30

31 Identity Onboarding Who is this person? Authentication Access Is this the same person originally onboarded? Authorization Access Rights What can the person do? The pillars are distinct but they are often conflated together. In ederation, each element can come from different providers. SecureKey Technologies Inc. All rights reserved. Page 31

33 Identity Canada leads at federation globally USA & UK next Clear separation between 3 pillars Authentication Separation provides more flexibility Ecosystem players Procurement Authorization Attributes are a squeaky wheel. Need to separate identity From Authorization SecureKey Technologies Inc. All rights reserved. Page 33

36 RP Sourced (GC model) Bank Sourced (ie: CSP) 3 rd Party Sourced (credit bureaus et al) Digital Credentials (BC model, epassports) All modes are likely to active in the ecosystem SecureKey Technologies Inc. All rights reserved. Page 36

38 Payments Identity Street Model Moving to embrace cloud Tokenization Online payments more secure One card + many destinations 3 to 6 cards many destinations Digital Model Moving to embrace the street Beacons Same experience online and instore One card with many destinations One card per destination Market Opportunity Street ID and Digital ID convergence SecureKey Technologies Inc. All rights reserved. Page 38

39 Objectives " Reduce number of citizen credentials. " Conversion of Drivers License to Services Card. " Accelerate shift of services to on-line. " Drive point-of-interaction terminal support. " Common framework across all channels. " CSP accepted by Canadian Federal Gov for future " Reduce fraudulent Health Care Cards ( 9M to 4.5M). $100M savings over 5 years for card consolidation Est. $600M - $1B / year savings in health care fraud alone Utilizes briidge.net Connect for credential issuance and authentication services Results " Card issuance started in February " Authentication services starting in early " First EMV based framework for Government services " Planned: Health, Education, Vehicle, Voting, Benefits SecureKey Technologies Inc. All rights reserved. Page 39

40 "Approaches like BC in Canada, in partnership with vendors like SecureKey are the Future of Citizen Digital ID s". He went on to reference specific details the SDK approach, and simple payment network style of identity authentication. Roles and Responsibilities Jeff Vining focuses on governmentspecific topics, such as digital government, citizen eid initiatives, social media tools and mobile enterprise strategy. Oct 2014 Gartner Symposium SecureKey Technologies Inc. All rights reserved. Page 40

41 Identity What we are doing is new Canada is leading the world The world is following Authentication The transition is happening do we create it - or let it happen to us Keeping identity/authn/authzn separate key to success Authorization Trust Frameworks are the Ecosystem skeleton SecureKey Technologies Inc. All rights reserved. Page 41