Mobile identity you really trust Liisa Lukin, Sertifitseerimiskeskus

This the problem our company is dealing everyday life This the problem our company is dealing everyday life. To provide a possibility to have an identity for electronic environment! Reality in internet. Dogs say that they are humans, old grumpy men say that they are young and handsome guys. For some services this is not enough, that you say that “hello! my name is Liisa”

Our mission To guarantee that there are electronic ID’s on the market that both public and private sector can trust Trust in an identity: who issues, who believes, who can fake, price of fake Identity itself is not enough (many countries where is token) but no usage or trust at all.

Company backround The only provider of certification services in Estonia Running the core infrastructure for Estonian eID Established in February 2001 Currently 35+ employees SK is privately held company with 4 shareholders having 25% each: Major clients: Republic of Estonia, Trüb, Gemalto, Estonian banks and telecom operators, ealth sector Now also more focus on export Including issuance of certificates and using the certificates.

Usage of Estonian eID Population: 1,3 mln >410,000 active ID-card users >40,000 Mobile-ID users 10 mln transactions per month Inc. ~1.5 mln Mobile-ID transactions Number of transactions per month: ~25 for each eID user ~38 for each Mobile-ID user SK is running the core infrastructure for Estonian eID SK is owner of eID infra components

Mobile-ID solution Mobile-ID provides a secure mechanism for subscribers to identify themselves to any service providers Subscribers are issued an SIM-card with a cryptographic certificate proving their identity The service provider uses the Mobile-ID to verify the identity of the subscriber

Mobile-ID in Estonia On the market since 2007 as an alternative to ID card Offical document from 2011 All operators are supported SK was driving development and implementation of requirements Unique toolset to combine WPKI and PKI possibilities SK is offering the CA and TSP services – owner of the core infrastructure All service providers (public / private) support Mobile-ID for authentication and signing Trust of issuance procedure Mobile-ID shares the two main functions of the ID-Card – it enables secure authentication and digital signatures. But it comes with an added benefit – since you can do everything on your mobile phone, you won’t need an ID-Card reader. You can be away from your computer, travelling or just walking your dog, and only need a mobile phone to sign documents, perform bank transactions etc.

Secure authentication and digital signature in every pocket DEMO Secure authentication and digital signature in every pocket

Mobile-ID is trusted by: Banks Government Public Services e-Services Web Sites Swedbank E-voting Gateway to eEstonia, eesti.ee portal IIZI Insurance Broker Student information systems SEB Bank Estonian Tax and Customs Board Document signing portal If P&C Insurance Ltd E-Learning Development Centre Danske Bank Center of Registers and Information Systems Public transport ticketing system Electricity provider portals Tallinn University Student Information System Nordea Estonian Road Administration (Vehicle Register) eKool education information system Tele2 / EMT / Elisa Apollo Book Shop e-shop LHV Pank Estonian Agricultural Registers and Information Board Nasdaq OMX Estonian Securities Market Medicum - medical assistance Estonian University of Life Sciences Krediidipank Public Procurement Register Unemployment Insurance Fund Lottery tickets Company loyalty card websites Tallinn Business Bank Health Information System GoSwift – information system for managing a common border queue Gas consumption portal e-auctions Bank: Use M-ID to authorize online banking transactions from the handset, 70% of M-ID transactions come from banking. Government Use handset with secure M-ID SIM to vote in national elections Web sites Use M-ID to securely login to any supporting website without using a password Digital signing of documents Submit any document to the M-ID web service to be signed digitally; Recipient can verify authenticity of the document at the M-ID service Source: id.ee

Comparison to “regular” bank token: Functionality PKI Mobile-ID PIN calculator OTP Works with any browser + Not vulnerable to key logger Not vulnerable to man-in-the-middle attacks - Digital signing support SSO solution No additional hardware to carry Based on PKI No

Mobile-ID setup

Mobile-ID solution role players Mobile-ID Service Provider Operates Mobile-ID Service Solution provided by SK Should be a party trusted by all service providers to provide identity verification services Provides Mobile-ID Service platform to all MNO-s in a country or region of operation Earns a fee for each identity verification transaction Certification Authority The entity that generates and signs the ID certificate for each user Could be an existing trusted CA in the country of operation CA services could be provided by SK Earns a fee for each certificate issued Mobile Network Operator (MNO) Issues the M-ID SIM with SIM Application provided by SK Earns a fee for each SIM issued, as well as a monthly M-ID subscription fee Acts as Registration Authority for CA Note: A single entity can fulfill multiple roles, e.g. MNO could also be the TSP and the CA. Revenue model: The subscriber has to purchase a Mobile-ID SIM The subscriber pays a monthly fee for the Mobile-ID service Each service provider pays a fee for each identity verification transaction CA receives money for every issued certificate

Revenue model The subscriber has to purchase a Mobile-ID SIM The subscriber pays a monthly fee for the Mobile-ID service Each service provider pays a fee for each identity verification transaction CA receives money for every issued certificate

Revenue example Assumptions 1 million subscriber base Average 0.01 € per ID verification Subscriber pays 10 € for Mobile-ID SIM card with a 5 year certificate Subscriber pays 0.7 € per month subscription for the service Description Year 1 Year 2 Year 3 M-ID active users 67K 97K 127K Annual transaction volume 10M 20M 30M TSP: Annual transaction revenue (€) 100K 200K 300K MNO: Annual SIM revenue (€) 670K MNO: Annual subscription revenue (€) 562K 814K 1,066K Total revenue (€) 1,332K 1,314K 1,666K

Summary SK has technology and competence to serve or set up full Mobile-ID Service Solution SK is able to deliver with partners the full implementation or support customers with already existing partners

Contact Thank You! www.sk.ee/en www.id.ee www.mobile.id.ee Margus Arm Head of Sales and Marketing margus@sk.ee Thank You!