The lessons from European and Middle Eastern implementations of e-ID

Michael Magrath, CSCIP

Director, Business Development – Government & Healthcare

Gemalto

Identity Management 2010

27 September

Presentation overview

eID Functions

2007-2010 studies

How do we measure success?

Accepted but not used

What have we learned?

5 suggestions

eID Functions

Identification Visual face-to-face identification Automatic using data capture of the information securely stored on

the chip. Can be done at point of service or over the Internet

Authentication

Digital Signature Identifies the person who has signed a document Guarantees that it has not been altered between the moment it was

signed and the moment it is accessed by the recipient.

2007-2010 studies

3 studies on eID and eGov services carried out in 2007, 2009 and 2010 (40 interviews, 18 countries)

Gemalto has delivered the core technical solution to 15 out of 25 national electronic ID implementations

Measure of success: what do we expect?

More than a successful roll-out - eID brings the same abstraction and opportunities for public and private services as credit and SIM cards to economic and communication transactions

The success of any on-line service can be measured by its membership rate; frequency of use & perceived benefit

The substantial benefit, ease of learning and of use compensate for an inevitable resistance to change, and the factor of risk perception when using new tools

The first expected benefits are time saved and greater freedom

Resistance to change depends on whether or not the newly acquired points of reference are retained

1 - eIDs are widely accepted

The perceived quality and security of a national eID are also strong messages to citizens

Enable a virtual, secure and bilateral relationship between the citizen and their government while providing a tangible element of trust

2 – But why won’t they go eID?

Barriers Need for smart-card reader and software

No awareness promotion ID-cards are perceived as merely physical documents Unawareness about security benefits Unaware of eID services

Habits

eID usage in Belgium

8

5% use eID applications

15 to 25% express interest for applications at work

15% have limited knowledge, trust and belief in added value

33% say limited availability of card reader is a barrier

44% use the card

100% have the eID card

Source www.indigov.be ( a spin-off from KU Leuven, 2009)

Estonia

In 2006 : 3% of eUsers

Co-operation program between private and public sector

Aims for safe information society in general

Special target: ten-fold increase of eID users (30% by the end of 2009)

Achieved: February 2010

Estonia’s Reader distribution

- USB card reader- https://installer.id.ee- Price ca 6 EUR

Available at retail stores

Sold by banks

Giveaways in campaigns

Estonia’s Ease of Use -- installer.id.ee

Estonia’s Alternative eID - MobileID

Launched: May 2007

PKI-capable SIM cards Requires replacement of SIM

Instantly ready to use No specific software required

Similarly to the eID card, enables authentication and digital signing of documents. User's certificates are maintained on the

telecom operator's SIM card. In order to use them, the user has to enter a PIN code.

Available from all major GSM operators

French Sesam Vitale

Project 1985-1998, Roll-out 1998-2007

Some results “The French, for example, have used the carte vitale since 1998 and

have 67 percent fewer administrative personnel per building than a comparable American establishment” Newsweek - February 2010

Over 1B electronic claims processed in 2009 (200m paper based) Over 3B documents dematerialized per year

Over 82% of general practitioners are using the system 98% of pharmacists are using the system

Full back payment in less than 5 days

United Arab Emirates e-ID

Launched in 2000

Aims of issuing the card Combat fraud & forgery with secure biometric e-ID cards Simplify identitifcation & authentication procedures Maximize ROI for govt investments in IT infrastructure Prepare for Future – number of services delivered through the card

Adoption April 2009 - 98% were registered 2010 – Now required by law to have one

Usage Tax Payments Requests for official documents (passport, DLs, vehicle registrations) Obtain originals & copies of documents (birth & marriage certificates) Changing address Making formal complaints or statements to police

Innovative eServices

Health

Banking

Tax payment

ePurse

eTicketing (transport)

eRegistered Mail

Hotel and Car Rental Registrations

Remote Signature of contracts

Police on web

Kids ID (Belgium)

Leveraging ATM networks to deliver documents and more

E-Voting (Estonia)

Delivering eIDs on mobile phones (Finland, Estonia)

What happens when they use it?

Austria has in the range of 70% – 80% of all tax returns being done electronically (source The Vault – November 2009 interview of Pr. Dr. Posch, Austrian Federal Government)

Belgium Tax-on-Web usage X2 in 2009

86% of Estonian taxpayers declared their income online

Same results for Sweden, Finland

Lessons learned

National roll-out can be successfully achieved and can robustly deliver citizen benefits

The capability of smart cards to deliver not only basic but also innovative facilities has been demonstrated

Smart cards used for eID are more than adequate to provide ease-of-use and security

Smart cards can be updated remotely after its issuance to citizens and is therefore a flexible tool for delivering innovative benefits to citizens

Opportunity to create a virtuous upward spiral of capabilities, benefits and take-up which will enhance the value-for-money of public services

From a citizen viewpoint. It is NOT about technologies. It is about citizens changing their life, making more secure and easier interactions with government services and private services as well. It works!

5 suggestions

Convey a vision of usefulness

Orchestrate the approaches taken by third parties to encourage acceptance

Provide citizen convenience right from the start. Must be easy-to-use the first time and every time thereafter.

Encourage innovation

Communication G-to-C Marketing (4P’s) Advertising Public relations

Thank you

Michael Magrath

michael.magrath@gemalto.com

Phone: 1-703-562-9056

www.gemalto.com

www.justaskgemalto.com