From eID to Mobile ID
The delivery of successful and secure digital identity is fundamental to the modernization of states and the dematerialization of public services. It is also critical to support the digital transformation of their economies and the development of trusted public and private digital services.
Governments are ideally placed to deliver this foundation for our digital future. Whether they are seeking to protect citizens online, boost economic growth, achieve greater efficiency or reduce the spiraling cost of public services, what is certain is that any national digital identity platform must be based on a backbone of Trust.
One of Gemalto's greatest assets is the ability to extend smartcard-based national eID and digital identity schemes to mobile.
Gemalto Mobile ID Smart App is a cutting-edge application that enables governments to offer strong authentication and identity validation services to their citizens by transforming the device in all our pockets into a mobile trusted digital ID.
The need for mobility and convenience
Accessibility is key to the success and adoption of digital services. Given the sheer volume of devices worldwide (6 billion devices to be in circulation by 2020, according to IHS market research), smartphones offer a compelling proposition for governments seeking to provide citizens with secure and convenient access to online public services.
Users want a secure digital identity and frictionless mobile experience when transacting online. They are ready for mobile identity and want to replace passwords with simple mobile-based PINs and biometric authentication to take full advantage of the wealth of fast and convenient digital services available.
If they knew the app was secure, 70% of online service users would want digital ID documents on their smartphone
Accelerating the shift towards mobile ID schemes
Governments around the world are capitalizing on the mobile revolution. Many national mobile ID initiatives are underway, notably including Estonia,
Oman, The Netherlands,
Many of these initiatives are either government-driven or government-supported to serve the entire economy, by providing a single trusted digital identity to protect both public and private online services.
Government-backed digital ID schemes can quickly achieve critical mass by focusing initially on public services and then expanding out to serve the wider economy. Once a scheme has a critical mass of active users, it becomes an extremely attractive proposition for the private sector, which can leverage the national digital ID scheme to secure their online channel or securely integrate new customers.
Gemalto's Mobile ID Smart App explained
With Gemalto’s Mobile ID Smart App, governments can now be confident of winning adoption by both citizens and public and private service providers via:
An inclusive solution, which works on all devices and in any situation,
that offers enhanced security and privacy features,
with a smooth end-user onboarding experience
that ensures ease of use throughout the entire authentication journey.
An inclusive solution
The app is inclusive. It works on any smartphone, anytime and anywhere to ensure governments can address all citizens and residents.
One mobile ID, many use cases
Mobile ID Smart App enables a rich, convenient and trusted online experience where citizens can prove who they are online, authenticate to websites, confirm transactions and digitally sign documents. All this can be done in a matter of seconds, while better engaging with public and private online service providers.
A single mobile ID for:
Citizens can prove who they are in an online environment, safely sign up for new online services and undertake real-time ID checks. It also helps online service providers comply with know-your-customer policies.
A mobile ID is a strong authentication tool enabling citizens to securely log in and validate transactions online.
Thanks to PKI technology, citizens can use their mobile ID to digitally sign documents in a few clicks.
This PKI-based mobile authentication solution covers all levels of security, right up to the highest (e-IDAS High, NIST Authentication Assurance Level 3, ISO LoA 4). The level of assurance is scalable and can be adapted to suit the risk and nature of the services being accessed. This enables government bodies and service providers to have a rich and adaptive security policy that can be adjusted to all situations and complies with relevant regulations.
Modularity by Design
Leveraging smartphone features such as NFC, cameras and fingerprint readers, the mobile ID was designed with modularity in mind. Using the latest biometric authentication functionalities, it delivers the most enhanced and safest online self-registration and authentication experiences for citizens.
A powerful and modular backend solution
In the back end, Gemalto Mobile ID Smart App is managed by
Gemalto Digital Identity Services platform, which orchestrates and powers the entire life-cycle management of the trusted mobile identity, from user registration to verification of mobile authentication, digital signatures and connection to the certification authority and online service providers.
Enhanced User Experience
Complex enrollment and authentication processes are the last thing citizens need when looking for safe and fast access to online public and private services. That's why Gemalto has placed both security and user convenience at the heart of its proposal, from enrollment right through to everyday usage.
A unique end-user journey
It all starts with an easy first-time registration:
A seamless onboarding experience for mobile ID is critical. People have no time for cumbersome processes and a good first impression is a key to widespread adoption.
Gemalto leverages its identification and biometric expertise to provide a more agile registration process through a wide range of identification and enrollment scenarios. This enables governments to be inclusive and offer solutions that address all user profiles as well as their pre-requisites.
Easy first time registration
Supports multi-channel registration, including face-to-face as well as remote self-onboarding, with various scenarios to fit with each user's profile (multi-channel)
Supports remote ID proofing from both electronic and non-electronic ID documents to suit the ecosystem
Employs the latest biometric authentication features to deliver frictionless, optimized User eXperience
Enables step-up identification
Followed by a smooth everyday authentication experience
Empowered with Gemalto Mobile ID Smart App, citizens can securely authenticate and confirm any online transaction using their smartphone as their secure online national identity.
The app supports one of the widest range of authentication methods citizens can choose from, depending on their preferences and profile (PIN code, geometric patterns, fingerprint, facial biometrics, etc).
Whenever Qualified electronic Signatures (QeS) is required, the Mobile ID Smart App can turn into an NFC document reader to communicate with contactless eID documents such as
eDriver's licenses, etc...
A mobile ID with built-in software security and privacy principles
A winning multi-layered approach to security
Mobile brings convenience but comes with its own security challenges. The use of mobile devices indeed opens up new areas of vulnerability, so it is crucially important to protect mobile applications that run within such environments.
We take a multi-layered approach to security to combat ever more sophisticated hacking techniques. The app is built on Gemalto Mobile Security Core, our comprehensive in-house Mobile Application Shielding offering, for which our expertise was recognized in the latest Gartner report. It integrates all the best practices that Gemalto has built and implemented over the years to secure mobile applications and guarantee their data integrity.
Gemalto's Mobile Security Core encompasses the full range of anti-tampering and hardening capabilities, such as anti-debugging, anti-hook, white-box cryptography, obfuscation, and jailbreak or root detection.
As a result, our Mobile ID Smart App can withstand the dynamic nature of malware and can defend itself in the field, detect unsecured environments and react accordingly.
To ensure it is always a step ahead of hackers in terms of security, the app benefits from regular updates with the latest security patches available on the market.
Self-protected Mobile ID Smart App enabled to:
DEFEND through coding and cryptography
DETECT threats through secure environment detection
REACT to threats by halting execution and alerting the risk-management server
Privacy in an era of digital identity
As our society becomes increasingly digital and data-dependent, digital security and privacy protection have become public policy priorities. People want to be in control of how their personal information is used and shared.
With this in mind, Gemalto has opted for a privacy-by-design approach. Our Mobile ID Smart App is fully compliant with the EU General Data Protection Regulation (GDPR
) and offers built-in principles that ensure:
- Data minimization
- Data protection
- User's privacy rights management
A strong value proposition for all stakeholders
Governments using Gemalto’s Mobile ID Smart App benefit from a field-proven mobile identity solution designed to guarantee wide adoption from both service providers and end-users.
The solution is future-proofed through Gemalto’s commitment to delivering an app and related security that is always up to date and compatible with all handsets, the latest OS, and the most recent security patches.
End-users can enjoy a unique and simplified login experience to securely access an array of online services, eliminating password fatigue.
Multiple and remote enrollment scenarios are available to suit every user profile.
Accurate biometric recognition means fast enrollment for everyday use.
Moreover, citizens can benefit from a robust digital identity for all their online interactions, with enhanced user privacy features and protection against the risk of identity theft.
With such a user-centric approach, citizens are in total control of their digital identity and can manage it, along with their personal data through an intuitive self-care portal.
Public & Private eService Providers
Online service providers benefit from the robust security provided by the mobile ID national scheme without having to bear the cost of it.
They can adjust the level of security to suit the nature of their services and can offer an improved online experience to their customers. This, in turn, will positively impact the volume of transactions.
We enable digital transformation through Trusted mobile ID solutions
Gemalto has unrivaled experience in identity and document verification, authentication, digital signatures, biometrics, mobile device, and software security. We integrate all the technologies needed to seamlessly capture and verify user identities and digitalize them securely.
As a result, governments can rely on us to provide trusted mobile identity schemes that will accelerate their digitalization strategies, enable them to launch new online public services, fight fraud and meet regulations.
A trusted partner for your Trusted Digital Identity projects:
Mastering the full chain of trust throughout the entire mobile ID credential life cycle (from identification and enrollment through to revocation)
Field-proven technology trusted around the world in 18 mobile identity and online federated identity platform references.
A mobile identity designed to win adoption: Our solutions are tailored to accelerate the digital transformation of a country by meeting your individual needs, your local needs, and those of your citizens and online service providers.
Richest multi-channel registration scenarios: When onboarding to the Mobile ID Smart App, Gemalto has a truly differentiated offering in identity verification. It sets us apart from the competition in terms of security, flexibility, resilience and service availability.
Expertise in biometrics: We have the technology to verify that a person is who they claim to be! Building on the acquisition of Cogent 3M, Gemalto benefits from 27 years of
biometric technology expertise. We offer world-class biometric algorithm accuracy, ranking amongst the top biometric experts according to the latest NIST benchmarks (US National Institute of Standards and Technologies).
Future-proof solution: By choosing Gemalto for your mobile ID scheme, you are choosing a provider that is already working on tomorrow’s technologies. The mobile environment is ever-changing, with new smartphones entering the market every year and regular OS updates. Governments deploying a national mobile ID scheme need to be able to trust their mobile ID app to work at all times, on all devices throughout the years ahead. Gemalto, with deep expertise in telecommunication and software security, commit to delivering a continuously updated app and security scheme through an active policy to maintain mobile ID compatibility with your market’s needs.
Consulting services: With a track record of deployed mobile identity schemes in various environments and eco-systems, no company is better placed to share the expertise and best practices that your project could benefit from. Ultimately, there is no 'one size fits all' solution; identity is very much tied to a country's cultural characteristics and regulatory framework. Through consulting services, Gemalto can help define a successful digital ID scheme that will best reflect these local factors too.
Phil Sealy, Senior Analyst at ABI Research: “Gemalto continues to innovate at the forefront of the digital identity market, in line with future market trends. The company is placing the emphasis on eGovernment enablement regardless of the device used by citizens – computers, smartphones, tablets and more.”
Frost & Sullivan recognized Gemalto with a 2018 Global Company of the Year Awards for its comprehensive mobile security suite to support the secure transition to digital-first interactions, delivering identity verification, user authentication, transaction verification, and fraud prevention to create a seamless user experience, regardless of device.
Danielle VanZandt, Security Industry Analyst at Frost & Sullivan: “The company houses digital identity solutions, which include enhanced driving license (eDL), ePassport, and electronic vehicle registration card (eVRC), on an application on the user's smartphone—protected by a PIN or fingerprint scan. Importantly, if an end user's smartphone is lost or stolen, eIDs and eDLs can be remotely removed and installed on a new device."