1. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. PTEXXXXX XX/12 m Commerce using mobile identities Bharadwaj Pulugundla, MBA Solution Architect – Consumer Mobile Identity Management Identity & Privacy Services, Verizon Enterprise Solutions May 27, 2013 TDL Student Pilot - Case Study of Innovation in Verizon Identity Management

2. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.2 PROPRIETARY STATEMENT This document and any attached materials are the sole property of Verizon and are not to be used by you other than to evaluate Verizon’s service. This document and any attached materials are not to be disseminated, distributed, or otherwise conveyed throughout your organization to employees without a need for this information or to any third parties without the express written permission of Verizon. © 2012 Verizon. All Rights Reserved. The Verizon and Verizon Business names and logos and all other names, logos, and slogans identifying Verizon’s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners.

3. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.3 Verizon Identity Management Verizon is a worldwide leading Managed Security, Cloud and Identity Service provider and has been very active in seeking opportunities to collaborate with both Government and Private Sector organizations both in the US and in Europe to develop Identity Ecosystem and Frameworks. Verizon provides Identity Services in more than 50 countries and to more than 25 Governments Below are some examples of organization we participate in or have been a formal member. EEMA Trust in Digital Life (TDL) Scoping the Single European Digital Identity Community (SSEDIC) Open Identity Exchange (OIX) NSTIC OpenID Foundation (OIDF) The World Economic Forum (WEF) – Tiger Team on Rethinking Personal Data

4. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.4 Background of the Project Verizon is leading a pilot as part of the European Commission’s TDL (Trust in Digital Life) initiative together with International Student Identity Card (ISIC). ISIC is a not for profit organization; Members of this association, (students, teachers and Youth) are issued with a ID card, with which they can obtain discounts from merchants. ISIC has issued more than 100 million ID cards since 1953. ISIC are planning to extend their current successful model to be available online. The Project Objectives This Student Pilot for e-Authentication aims to test the feasibility of a cross-country Identity Assurance ecosystem from the commercial, technical, legal and end user experience perspectives via an online and mobile Student Proposition. The pilot will aim to demonstrate three key attributes: 1.A functioning and effective technical solution 2.Attractive propositions to the Consumer, Relying Party, Identity and Attribute Providers 3.A commercially viable business case.

5. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.5 Project Approach The pilot will work within the EU Commission sponsored Trust in Digital Life vision, objectives, and guiding principles. It will take a fully commercial approach from the outset; Target group: College and university students intially16+ * Geographic reach: Initially UK and Netherlands, then up to four more markets by end 2013, likely to Sweden, Italy, Germany and Spain. Employing a collaborative approach across all ecosystem participants such as Relying Parties, Identity and Attribute Providers; Referenced to the TDL framework and contextualised for this pilot; And building on existing work including NSTIC, TDL sprints and STORK, with EU alignment for consistency. The project will provide benefits for the students and relying parties to join the pilot and continue to use the service beyond the end point. Students Discounts and promotions e.g. relevant call/text/data, software offers Money in their pockets e.g. joining clinical trial, research Saving time, and increasing self-awareness of their internet activity Relying Parties Increased customer entanglement and a more targeted relationship Reduced cost to add services Reduced fraud through false identities Know that students are genuine *Scope will be extended to under 16 age group in a further stage, allowing questions around access for parents/minors, parental control, mandate and delegation etc. to be addressed.

6. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.6 Student User Proposition Virtual Identity enabling access to the services and products they need at this point in their lives Enables and enriches their lifestyle, with strong benefits Saving money through partner discounts, faster, more secure access to online services, academic resources, campus networks etc Trigger points (Freshers week, University Admin, Travel, PC/Software purchase) Local student unions (Issuers) promote locally Relying Partners promote Viral between students Painless online process, or from mobile academic establishment act as AtPs to support verification High LoA achieved by using real-world channels, eg uni registration, receipt of first household bills Effortless user experience, easy and always convenient Must place the service at the heart of the student lifestyle Must reinforce control, privacy, security and therefore engender trust Must have range of interface options Service exit must erase digital footprint May stop using after given period of time, or in relation to specific services at eg graduation Online support free Paid for telephone support via chargeable number Could be paid for by relying party and free at point of consumption Any upfront payment easily recovered through financial and lifestyle benefits Value stored in wallet showing pay-back in terms of discounts What FindStop Set up Use Get help Pay for Channel strategy via student touch points -local student unions, benefits providers, university admin, hotspot providers, cloud service providers Leverage existing networks and providers wherever possible eg level –up from social networks Get Students, 16+ in tertiary or further education Becoming self-reliant in lifestyle and financial affairs UK, NL, S, I + DE, E?

7. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.7 Relying Party Proposition A service to provide trusted digital identity, authentication and authorisation in order to be sure that the correct people can access student services and products Commercial needs are tactical (sales promotion) or strategic (long term relationship) Academic institutions need to ensure the security and integrity of internal resources Public sector need to prove eligibility for provision of healthcare, welfare etc. Reduce cost to acquire and securely transact with their consumers in student market Marketing and awareness created by local student unions and cross-border organisations e.g. ISIC Targeted marketing to companies and organisations (clearing houses, student loans) serving the student market, academic networks etc. PR, case studies published with clear benefits for the target market Relatively easy and painless to set up e.g. it must be within the expertise of a small business (such as pizza delivery) while straightforward to integrate with the systems of a larger enterprise (such as a bank) Existing customers given short ‘upgrade’ path from existing ID (so pre-populating) Must integrate with existing infrastructure and processes Must fit with the relying party’s channels whether online, call centre or face-to-face At cessation of service there must be no residual footprint or data retained The Relying Party must be able to cease the service or switch providers easily Support requirements may vary e.g. a small retailer may only require basic support in office hours, whereas a large enterprise may require (and pay for) 24/7/365 support Options exist for the commercial model and provide flexibility Payment per transaction Annual fee for providing the service What FindStop Set up Use Get help Pay for Identity service can be obtained via both direct and indirect channels e.g. a rebranded (white label) service partner such as ISIC or enterprises reselling a white label solution Get The student “ecosystem” i.e. Commercial product or service providers Academic institutions Public Sector UK, NL, S, I + DE, E?

8. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.8 Relying Parties: Developing Strategy Relying Parties at launch to be large, international benefits providers through ISIC –Targeting minimum 5 major Relying Parties –Seeking to leverage existing ISIC relationships e.g.. with Microsoft, Logitech, MasterCard High profile strategic partners, motivated by long term value in relationship with students –Leveraging existing networks of Relying Parties, Attribute Providers –Initial discussions with GSMA and high-profile MNOs Exploit opportunities within TDL –Microsoft potential for including online Office for students, xBox Live and Skype being investigated –Inclusion of TDL Academic Institutions where appropriate –Verizon relationship with UK OIX (Cabinet Office) initiative for UK based partners Developing commercial model for Relying Parties –Proposal to be free initially, becoming chargeable Full EMEA Identity Services Strategy under development

9. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.9 Partner roles in the Trust Framework Glossary Identity ProviderIdP Attribute ProviderAtP Claims ProvideridP or AtP User Identity Agent Provider UIdAP Relying PartyRP

10. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.10 Functional Requirements User 1.Request for UIS credentials through website 2.Manage shopping preferences (app/website) 3.Manage privacy settings (app/website) 4.Manage UIS account (website) 5.View the deals based on the preferences (app/Website) 6.Select the interesting deals(app/Website) 7.Checkout (app/Website) 8.Make payment (app/Website) ISIC 1.Provisioning credentials 2.Authentication of user 3.Reports on UIS authentication/Usage 4.Other analytics Merchant 1.Manage campaign information (e-commerce platform) 2.Contextual adverts based on location info from the user, preference settings (e-commerce platform) 3.Capture transaction information (e-commerce platform) 4.Reports on transaction(e- commerce platform)

11. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.11 Solution Overview m-commerce platform Mobile App ISIC Profile Database UIS (Credential issuance and Authentication) Users Merchant Payment Gateway Verizon is providing the solution, with the UIS cloud based identity management system, and m-commerce platform from Alcatel Lucent. Students use their e-ID to obtain discounts and promotions, as well as easy login, security, privacy and more control of their data. This saves money and time, while increasing self-awareness of their internet activity Benefits Providers (Relying Parties) get increased customer entanglement and a more targeted relationship, a reduced cost to add services, and reduced fraud through false identities, knowing that students are genuine

12. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. PTEXXXXX XX/12 m Commerce using mobile identities Bharadwaj Pulugundla, MBA Solution Architect – Consumer Mobile Identity Management Identity & Privacy Services, Verizon Enterprise Solutions May 27, 2013 TDL Student Pilot - Case Study of Innovation in Verizon Identity Management