The delivery of a successful and secure digital identity is fundamental to the modernization of states and the dematerialization of public services.
And for many, digital identity is a synonym for mobile ID.
The lesson for all digital ID stakeholders is clear: prepare for mobile-first solutions.
From eID to Mobile ID
It is also critical to support the digital transformation of their economies and develop trusted public and private digital services.
Governments are ideally placed to deliver this foundation for our digital future.
Whether they seek to protect citizens online, boost economic growth, achieve greater efficiency, or reduce the spiraling cost of public services, what is certain is that any national digital identity platform must be based on a backbone of Trust.
One of Thales' greatest assets is extending smartcard-based national eID and digital identity schemes to mobile.
Gemalto Mobile ID Smart App is a cutting-edge application that enables governments to offer strong authentication and identity validation services to their citizens by transforming the device in all our pockets into a mobile TRUSTED digital ID built on the highest level of Common Criteria certification for software security ever reached on the market.
The need for mobility and convenience
Accessibility is key to the success and adoption of digital services.
Given the sheer volume of devices worldwide (5.4 billion people have a mobile subscription in 2022 according to the GSMA), smartphones offer a compelling proposition for governments seeking to provide citizens with secure and convenient access to online public services.
The latest report from Juniper Research even forecasts over 3 billion citizens worldwide will be equipped with a government-initiated mobile ID app by 2024.
Users want a secure digital identity and frictionless mobile experience when transacting online.
They are ready for mobile identity and want to replace passwords with simple mobile-based PINs and biometric authentication to fully utilize fast and convenient digital services.
If they knew the app was secure, 70% of online service users would want digital ID documents on their smartphone
Trusted Digital Identity
for Everyone Everything Everyday
Accelerating the shift toward mobile ID schemes
Governments around the world are capitalizing on the mobile revolution. Many national mobile ID initiatives are underway, notably in Estonia, Norway, Belgium, Qatar, Oman, The Netherlands, Iceland, Finland, Moldova, etc...
Many of these initiatives are government-driven or government-supported to serve the entire economy by providing a single trusted digital identity to protect public and private online services.
Government-backed digital ID schemes can quickly achieve critical mass by focusing on public services and expanding to serve the broader economy.
Once a project has a critical mass of active users, it becomes an exciting proposition for the private sector, leveraging the national digital ID scheme to secure their online channel or integrate new customers.
Thales' Mobile ID Smart App explained.
With Thales' Mobile ID Smart App, governments can now be confident of winning adoption by both citizens and public and private service providers via:
An inclusive solution, which works on all devices and in any situation,
that offers enhanced Common Criteria-certified security and privacy features,
with a smooth end-user onboarding experience
that ensures ease of use throughout the entire authentication journey.
An inclusive solution
The app is inclusive. It works on any smartphone, anytime and anywhere, to ensure governments can address all citizens and residents.
One mobile ID, many use cases
Mobile ID Smart App enables a rich, convenient, and trusted online experience where citizens can prove who they are online, authenticate to websites, confirm transactions, and digitally sign documents. All this can be done in seconds while better engaging with public and private online service providers.
A single mobile ID for:
ID proofing
Citizens can prove who they are in an online environment, safely sign up for new online services, and undertake real-time ID checks. It also helps online service providers comply with know-your-customer policies.
A mobile ID is a strong authentication tool enabling citizens to log in and validate transactions online securely.
Thanks to PKI technology, citizens can digitally sign documents with a few clicks of their mobile ID.
Multi-level security
This PKI-based mobile authentication solution covers all security levels up to the highest (e-IDAS High, NIST Authentication Assurance Level 3, ISO LoA 4).
The assurance level is scalable and can be adapted to suit the risk and nature of the accessed services. This enables government bodies and service providers to have a rich and adaptive security policy adjusted to all situations and complies with relevant regulations.
There's more.
Governments can rely on the only mobile ID on the market that reaches the highest level of Common Criteria certification in software security,
Modularity by Design
Leveraging smartphone features such as NFC, cameras, and fingerprint readers, the mobile ID was designed with modularity in mind. Using the latest biometric authentication functionalities, it delivers the most enhanced and safest online self-registration and authentication experiences for citizens.
A powerful and modular backend solution
In the back end, Gemalto Mobile ID Smart App is managed by the Gemalto Digital Identity Services platform.
This software orchestrates and powers the entire life-cycle management of the trusted mobile identity, from user registration to verification of mobile authentication, digital signatures, and connection to the certification authority and online service providers.
Enhanced User Experience
Complex enrollment and authentication processes are the last things citizens need when looking for safe and fast access to online public and private services.
That's why Thales has placed security and user convenience at the heart of its proposal, from enrollment to everyday usage.
A unique end-user journey
It all starts with an easy first-time registration:
A seamless onboarding experience for mobile ID is critical. People have no time for cumbersome processes, and an excellent first impression is key to widespread adoption.
Thales leverages its identification and biometric expertise to provide a more agile registration process through various identification and enrollment scenarios. This enables governments to be inclusive and offer solutions that address all user profiles and their prerequisites.
Easy first-time registration
-
Supports multi-channel registration, including face-to-face as well as remote self-onboarding, with various scenarios to fit with each user's profile (multi-channel)
-
Supports remote ID proofing from both electronic and non-electronic ID documents to suit the ecosystem
-
Employs the latest biometric authentication features to deliver a frictionless, optimized User eXperience
-
Enables step-up identification
Followed by a smooth everyday authentication experience
Empowered with Gemalto Mobile ID Smart App, citizens can securely authenticate and confirm any online transaction using their smartphone as their secure online national identity.
The app supports one of the widest authentication methods citizens can choose, depending on their preferences and profile (PIN code, geometric patterns, fingerprint, facial biometrics, etc.).
Whenever Qualified Electronic Signatures (QeS) are required, the Mobile ID Smart App can turn into an NFC document reader to communicate with contactless eID documents such as eID cards, ePassports, eDriver's licenses, etc...
A mobile ID with built-in software security and privacy principles
A unique and disruptive approach to security
We take a unique and disruptive approach to security to combat ever more sophisticated hacking techniques.
The Mobile ID solution is built on the following:
- Gemalto Advanced White box Crypto, our in-house and patented latest security mechanisms, turns the keyed cryptographic algorithm into an unintelligible program and always protects the keys, even in an untrusted environment, without fear of exposing any secret.
- Gemalto Mobile Security Core, our comprehensive in-house Mobile Application Shielding offering, for which our expertise was recognized in the latest Gartner report. It integrates all the best practices Thales has built and implemented to secure mobile applications and guarantees over the years.
Thales' Mobile Security Core encompasses anti-tampering and hardening capabilities, such as anti-debugging, anti-hook, white-box cryptography, obfuscation, and jailbreak or root detection.
As a result, our Mobile ID Smart App can withstand malware's dynamic nature and defend itself in the field, detect unsecured environments, and react accordingly.
To ensure it is always a step ahead of hackers in terms of security, the app benefits from regular updates with the latest security patches.
Self-protected Mobile ID Smart App enabled to:
- DEFEND through coding and cryptography
- DETECT threats through secure environment detection
- REACT to threats by halting the execution and alerting the risk-management server
Privacy in an era of digital identity
Digital security and privacy protection have become public policy priorities as our society becomes increasingly digital and data-dependent. People want to be in control of how their personal information is used and shared.
- Data minimization
- Data protection
- User's privacy rights management
A strong value proposition for all stakeholders
Governments
Governments using Thales' Mobile ID Smart App benefit from a field-proven mobile identity solution that guarantees wide adoption from service providers and end-users.
The solution is future-proofed through Thales' commitment to delivering an app and related security that is always up-to-date and compatible with all handsets, the latest OS, and the most recent security patches.
Citizens
End-users can enjoy a unique and simplified login experience to access various online services, eliminating password fatigue securely.
Multiple and remote enrollment scenarios are available to suit every user profile.
Accurate biometric recognition means fast enrollment for everyday use.
Moreover, citizens can benefit from a robust digital identity for all their online interactions, with enhanced user privacy features and protection against identity theft.
With such a user-centric approach, citizens are in total control of their digital identity and can manage it, along with their data, through an intuitive self-care portal.
Public & Private eService Providers
Online service providers benefit from the robust security the mobile ID national scheme provides without bearing its cost.
They can adjust the authentication level required (e-IDAS Substantial or e-IDAS High) to suit the nature of their services. They can offer an improved online experience to their customers. This, in turn, will positively impact the volume of transactions.
We enable digital transformation through Trusted mobile ID solutions.
Thales has unrivaled experience in identity and document verification, authentication, digital signatures, biometrics, mobile device, and software security. We integrate all the technologies needed to capture and verify user identities and digitalize them securely and seamlessly.
As a result, governments can rely on us to provide trusted mobile identity schemes that will accelerate their digitalization strategies, enable them to launch new online public services, fight fraud, and meet regulations.
A trusted partner for your Trusted Digital Identity projects:
- Mastering the full chain of Trust throughout the entire mobile ID credential life cycle (from identification and enrollment through to revocation)
- Reaching new software security landmarks: Gemalto Mobile ID just passed the highest Common Criteria Software Security certification Level in history. Governments selecting Thales for their schemes have the assurance to provide their citizens with market-first and best-in-class certified mobile ID software security to protect them against ID thieves.
- Field-proven technology is trusted worldwide in over 20 mobile identity and online federated identity platform references.
- A mobile identity designed to win adoption: Our solutions are tailored to accelerate a country's digital transformation by meeting your individual needs, your local needs, and those of your citizens and online service providers.
- Richest multi-channel registration scenarios: Thales has a truly differentiated identity verification offering when onboarding to the Mobile ID Smart App. It sets us apart from the competition regarding security, flexibility, resilience, and service availability.
- Expertise in biometrics: We have the technology to verify that a person is who they claim to be! Building on the acquisition of Cogent 3M, Thales benefits from 27 years of biometric technology expertise. According to the latest NIST benchmarks, we offer world-class biometric algorithm accuracy, ranking amongst the top biometric experts (US National Institute of Standards and Technologies).
- Future-proof solution: By choosing Thales for your mobile ID scheme, you choose a provider already working on tomorrow's technologies. The mobile environment is ever-changing, with new smartphones and regular OS updates entering the market every year. Governments deploying a national mobile ID scheme must trust their mobile ID app to work at all times on all devices throughout the years ahead. With deep expertise in telecommunication and software security, Thales commits to delivering a continuously updated app and security scheme through an active policy to maintain mobile ID compatibility with your market's needs.
- Consulting services: With a track record of deploying mobile identity schemes in various environments and ecosystems, no company is better placed to share the expertise and best practices your project could benefit from. Ultimately, there is no 'one size fits all' solution; identity is tied to a country's cultural characteristics and regulatory framework. Through consulting services, Thales can help define a successful digital ID scheme that will also best reflect these local factors.
- Industry Recognition:
Phil Sealy, Senior Analyst at ABI Research: "Thales continues to innovate at the forefront of the digital identity market, in line with future market trends. The company is emphasizing eGovernment enablement regardless of the device used by citizens – computers, smartphones, tablets, and more."
Frost & Sullivan recognized Thales with a 2018 Global Company of the Year Award for its comprehensive mobile security suite to support the secure transition to digital-first interactions, delivering identity verification, user authentication, transaction verification, and fraud prevention to create a seamless user experience, regardless of device.
Danielle VanZandt, Security Industry Analyst at Frost & Sullivan: "The company houses digital identity solutions, which include enhanced driving license (eDL), ePassport, and electronic vehicle registration card (eVRC), on an application on the user's smartphone—protected by a PIN or fingerprint scan. Importantly, if an end user's smartphone is lost or stolen, eIDs and eDLs can be remotely removed and installed on a new device."
Gartner recognizes Thales as a critical provider of application security shielding through its Software Mobile Security Core, which secures Gemalto Mobile ID solutions.
Frost & Sullivan recognized Thales with a 2019 Global Company of the Year Award for its innovative Mobile ID and Digital ID Wallet solutions, which offer advanced features, certified security, and strong overall performance.
Giving voice to digital identities worldwide - 2021 SIA whitepaper
Key Insights and Experiences to Overcome Shared Challenges
Read moreWebinar ABI Research /Thales - Mobile ID in the 21st Century
Demand for government-issued mobile identities continues to accelerate at a considerable pace. A focus on service enablement and access via digitization is now considered of fundamental market importance as governments aggressively look toward the mobile form factor in order to execute on their digitisation strategies. With the tipping point within the mobile identities market now fast approaching, it’s critical that ecosystem players, governments, and service providers alike understand what lies ahead.
Watch the webinarLearn More
- Thales launches its new digital ID wallet (Press Release)
Get to know more about the Digital ID Wallet
Would you like to learn more about the possibilities of Thales Digital ID Wallet and discuss how our award winning solution matches your needs? Contact us today to schedule a private session with our experts or request a demo.