1. Mobile identity you really trust
Liisa Lukin, Sertifitseerimiskeskus

2. This the problem our company is dealing everyday life
This the problem our company is dealing everyday life. To provide a possibility to have an identity for electronic environment!
Reality in internet. Dogs say that they are humans, old grumpy men say that they are young and handsome guys.
For some services this is not enough, that you say that “hello! my name is Liisa”

3. Our mission
To guarantee that there are electronic ID’s on the market that both public and private sector can trust
Trust in an identity: who issues, who believes, who can fake, price of fake
Identity itself is not enough (many countries where is token) but no usage or trust at all.

4. Company backround
The only provider of certification services in Estonia
Running the core infrastructure for Estonian eID
Established in February 2001
Currently 35+ employees
SK is privately held company with 4 shareholders having 25% each:
Major clients: Republic of Estonia, Trüb, Gemalto, Estonian banks and telecom operators, ealth sector
Now also more focus on export
Including issuance of certificates and using the certificates.

5. Usage of Estonian eID
Population: 1,3 mln
>410,000 active ID-card users
>40,000 Mobile-ID users
10 mln transactions per month
Inc. ~1.5 mln Mobile-ID transactions
Number of transactions per month:
~25 for each eID user
~38 for each Mobile-ID user
SK is running the core infrastructure for Estonian eID
SK is owner of eID infra components

6. Mobile-ID solution
Mobile-ID provides a secure mechanism for subscribers to identify themselves to any service providers
Subscribers are issued an SIM-card with a cryptographic certificate proving their identity
The service provider uses the Mobile-ID to verify the identity of the subscriber

7. Mobile-ID in Estonia
On the market since 2007 as an alternative to ID card
Offical document from 2011
All operators are supported
SK was driving development and implementation of requirements
Unique toolset to combine WPKI and PKI possibilities
SK is offering the CA and TSP services – owner of the core infrastructure
All service providers (public / private) support Mobile-ID for authentication and signing
Trust of issuance procedure
Mobile-ID shares the two main functions of the ID-Card – it enables secure authentication and digital signatures. But it comes with an added benefit – since you can do everything on your mobile phone, you won’t need an ID-Card reader. You can be away from your computer, travelling or just walking your dog, and only need a mobile phone to sign documents, perform bank transactions etc.

8. Secure authentication and digital signature in every pocket
DEMO
Secure authentication and digital signature in every pocket

9. Mobile-ID is trusted by:
Banks
Government
Public Services
e-Services
Web Sites
Swedbank
E-voting
Gateway to eEstonia, eesti.ee portal
IIZI Insurance Broker
Student information systems
SEB Bank
Estonian Tax and Customs Board
Document signing portal
If P&C Insurance Ltd
E-Learning Development Centre
Danske Bank
Center of Registers and Information Systems
Public transport ticketing system
Electricity provider portals
Tallinn University
Student Information System
Nordea
Estonian Road Administration (Vehicle Register)
eKool education information system
Tele2 / EMT / Elisa
Apollo Book Shop
e-shop
LHV Pank
Estonian Agricultural Registers and Information Board
Nasdaq OMX Estonian Securities Market
Medicum - medical assistance
Estonian University of Life Sciences
Krediidipank
Public Procurement Register
Unemployment Insurance Fund
Lottery tickets
Company loyalty card websites
Tallinn Business Bank
Health Information System
GoSwift – information system for managing a common border queue
Gas consumption portal
e-auctions
Bank: Use M-ID to authorize online banking transactions from the handset, 70% of M-ID transactions come from banking.
Government Use handset with secure M-ID SIM to vote in national elections
Web sites Use M-ID to securely login to any supporting website without using a password
Digital signing of documents
Submit any document to the M-ID web service to be signed digitally; Recipient can verify authenticity of the document at the M-ID service
Source: id.ee

10. Comparison to “regular” bank token:
Functionality
PKI Mobile-ID
PIN calculator
OTP
Works with any browser +
Not vulnerable to key logger
Not vulnerable to man-in-the-middle attacks -
Digital signing support
SSO solution
No additional hardware to carry
Based on PKI No

11. Mobile-ID setup

12. Mobile-ID solution role players
Mobile-ID Service Provider
Operates Mobile-ID Service Solution provided by SK
Should be a party trusted by all service providers to provide identity verification services
Provides Mobile-ID Service platform to all MNO-s in a country or region of operation
Earns a fee for each identity verification transaction
Certification Authority
The entity that generates and signs the ID certificate for each user
Could be an existing trusted CA in the country of operation
CA services could be provided by SK
Earns a fee for each certificate issued
Mobile Network Operator (MNO)
Issues the M-ID SIM with SIM Application provided by SK
Earns a fee for each SIM issued, as well as a monthly M-ID subscription fee
Acts as Registration Authority for CA
Note: A single entity can fulfill multiple roles, e.g. MNO could also be the TSP and the CA.
Revenue model:
The subscriber has to purchase a Mobile-ID SIM
The subscriber pays a monthly fee for the Mobile-ID service
Each service provider pays a fee for each identity verification transaction
CA receives money for every issued certificate

13. Revenue model The subscriber has to purchase a Mobile-ID SIM
The subscriber pays a monthly fee for the Mobile-ID service
Each service provider pays a fee for each identity verification transaction
CA receives money for every issued certificate

14. Revenue example Assumptions 1 million subscriber base
Average 0.01 € per ID verification
Subscriber pays 10 € for Mobile-ID SIM card with a 5 year certificate
Subscriber pays 0.7 € per month subscription for the service
Description
Year 1
Year 2
Year 3
M-ID active users
67K
97K
127K
Annual transaction volume
10M
20M
30M
TSP: Annual transaction revenue (€)
100K
200K
300K
MNO: Annual SIM revenue (€)
670K
MNO: Annual subscription revenue (€)
562K
814K
1,066K
Total revenue (€)
1,332K
1,314K
1,666K

15. Summary
SK has technology and competence to serve or set up full Mobile-ID Service Solution
SK is able to deliver with partners the full implementation or support customers with already existing partners

16. Contact Thank You! www.sk.ee/en www.id.ee www.mobile.id.ee Margus Arm
Head of Sales and Marketing
Thank You!