Yearly Archives: 2019

Spotlight on League Data

League Data logo

Meet League Data

1. What is the mission and vision of League Data?

League Data has a Purpose Statement which is: “Strengthening the Credit Union System through Leadership and Innovation.” Our purpose is supported by four key principles that guide our team: ‘Together We Are One’, ‘Leadership at Every Level’, ‘Clarity of Direction and Communications’, and ‘Infinity and Beyond’. The following is a graphic with our purpose and principles:

Screenshot 2019 06 16 12.09.08

2. Why is trustworthy digital identity critical for existing and emerging markets?

The most valuable asset our credit unions and members own within financial services is their identity and the associated data. As stewards of the data for the Atlantic credit union system, we see digital identity as one of the most critical elements needed for movements such as open banking or payments modernization. Whether it’s access to services, or protection and security, establishing a digital ID is foundational for future innovation in financial services.

3. How will digital identity transform the Canadian and global economy? How does League Data address challenges associated with this transformation?

League Data is working with Canadian partners and credit unions through digital transformation – not only of systems and networks, but the overall customer experience. The modernization of the ecosystem is also transforming the opportunities and risks available to credit unions. As a cooperator, League Data engages many entities such as vendors, governments and credit unions to help build a sustainable and secure ecosystem for Atlantic credit unions and members to shift into the digital world.

4. What role does Canada have to play as a leader in the space?

Canada has a history of building infrastructure across our nation to benefit our people, from railroads to health to banking networks. Our collective DNA has been one of collaboration and partnership which transcends pure profit, for the greater good of our people. Canada can be a leader by continuing this legacy of working partnerships to build a powerful foundation for the digital era.

5. Why did League Data join the DIACC?

We see a great opportunity to contribute our experience, technology and strategic thinking to DIACC. We are also a cooperative, and our business is built on partnerships and collaboration. DIACC is a natural fit for us in the financial services space, particularly as we look to ensure our members and credit unions can participate, compete and innovate in the digital economy.

6. What else should we know about League Data?

League Data is a non-profit, cooperative IT organization of 32 people that is the CIO for the 46 credit unions in Atlantic Canada. Since 1975, League Data has been providing solutions and expertise in financial technology through collaborative partnerships and relationships across Canada. Through our aggregated model, we provide solutions to credit unions such as core banking systems, mobile apps, network services, cybersecurity and data management.

Spotlight on Manulife

Meet Manulife

  1. What is the mission and vision of Manulife?
Manulife rgb

Manulife is a leading international financial services group that helps people make their decisions easier and lives better in Canada, the United States and in 12 countries in Asia. We operate primarily as John Hancock in the United States and Manulife elsewhere. We are a trusted market leader in insurance providing life and health solutions and among the top 30 fund managers in the world with financial advice, wealth and asset management solutions.

We believe our greatest contribution to society is the products we provide, which help people make their decisions easier and lives better. We also strive to make meaningful impacts in other ways: through environmental responsibility, philanthropy, employee volunteerism, promoting health and wellness, and much more.

2. Why is trustworthy digital identity critical for existing and emerging markets?

The need for verifiable identity is important to many industries. In financial services, as a trusted custodian of our client’s information and property, secure solutions are critical from the first introduction to a client, throughout our relationship with them and to be there during their most important life events. Manulife is focused on making these points of contact as simple as possible. Through joining DIACC, we are working to support Canada’s digital economy and supporting digital identity solutions that are trustworthy, convenient and secure methods of protecting the private information of our customers.

3. How will digital identity transform the Canadian and global economy? How does Manulife address challenges associated with this transformation?

A trusted and secure digital identity improves the security and information exchange for every connection with our customers. It enables financial services to move from static paper forms entered on legacy systems over to customer-centric services.

For Manulife’s advisor community, the simplification and security provided by digital identity will enable them to provide better services for our customers. We strongly believe in improving how customers interact with us every day, using digitization and innovation to exceed expectations. We were the first Canadian insurer to accept any type of group benefit claim online or through mobile. And, by the end of 2018, we exceeded two million robotic transactions in Canada. We also launched online claims capability for health and dental customers, which is being met with fantastic early feedback through survey results.

This fits with our goal to make decisions easier and lives better at every point of contact with our customers.

4. What role does Canada have to play as a leader in the space?

Canada has an opportunity with the Pan-Canadian Trust Framework to prove that information custodians can deliver an identity model that puts the customer in control of their information securely and efficiently to drive the next generation of commerce.  

5. Why did Manulife join the DIACC?

Manulife is moving to be a digital, customer-obsessed, market leader. Our priority is to improve customer experiences, using digitization and innovation to put customers first.  By joining DIACC, Manulife will be the first insurer joining other leaders – in technology, government and business – to develop Canada’s digital identification and authentication framework to enable Canada’s full and secure participation in the global digital economy. With Manulife’s global footprint, we also have the opportunity to bring insights from its other markets and share DIACC’s outreach objectives internationally.

6. What else should we know about Manulife?

One-third of adult Canadians are Manulife customers with products ranging from health and dental plans to group pensions, travel insurance, life insurance, investments and banking. We know customers are looking for more digitization and innovation at every touchpoint. This is why it is important to be at the forefront of developing Canadian digital identity.

Spotlight on Yoti

Meet Yoti

  1. What is the mission and vision of Yoti?
yoti logo 1

Our mission is to be the world’s trusted identity platform. We want to be the solution to fears around transparency, trust, privacy and control.
To achieve this, we need to build trust, which is not an easy task today for any company. So we’re building Yoti around principles which are regulated by an independent Guardian Council – the antithesis of big tech and data companies. By staying on track to our principles and working in close collaboration with all of our stakeholders including businesses and governments, we can achieve our goal of putting people in control of their data and fixing the broken identity system.

2. Why is trustworthy digital identity critical for existing and emerging markets?

The current identity system is broken – organisations and governments still rely on paper or card-based forms of identity verification, because proving who we are online to a high degree of certainty has been difficult. This process of creating physical forms of identity can take days or weeks instead of seconds, and often results in us sharing excessive amounts of personal information, putting us at great risk of identity theft. Millions of ID documents are lost every year, over 1.1 billion people around the world don’t have any form of identification, and the costs of online scams and fraud are spiralling. Having a trusted digital identity system is critical in fixing these issues.

3. How will digital identity transform the Canadian and global economy? How does Yoti address challenges associated with this transformation?

The ability to seamlessly use digital identities will empower individuals, businesses and government, and help unleash the true potential for a digital economy.

A digital identity lets individuals prove their identity online and in-person in a seamless, simple and secure way. They can share specific identity attributes, such as their name and date of birth, without disclosing their full identity with ID documents; helping to protect them from the ever-growing risks of identity theft. Individuals have a more convenient way to prove their identity across a range of industries and sectors – from financial services, travel, healthcare, dating and retail. More people will be able to take part in society and access essential services such as healthcare, education and finance, without being held back by lack of documentation, geography or wealth.

Companies have a cost-effective and efficient way to verify the identity of their customers, saving time and money, as well as reducing the risks associated with identity fraud. Additionally, governments can be sure that the right person is involved in the transaction, empowering them to offer a greater range of online services with the confidence and certainty that the users are who they say they are; leveraging technology to create a digital ecosystem.

Yoti is a global digital identity platform and free consumer app that gives individuals a simple, fast and secure way of proving who they are, online and in person. Each account is linked to biometrics and an ID document, so businesses and governments can be confident in the details shared with them – creating more trust and transparency. Challenging the existing way of doing things is never easy, but it’s time for a better way to prove who we are.

4. What role does Canada have to play as a leader in the space?

Canada has many advantages in the digital identity space. End-user demand is high for ubiquitous and low-friction access to digital services and information.  Canada has highly-evolved financial infrastructure and cybersecurity methods to balance end-user demand with secure identity and authentication. The regulatory environment is demanding. We believe Canada will be harnessing these factors to develop world-leading identity management and authentication processes in the coming years and will likely assume a leadership role in this area.

5. Why did Yoti join the DIACC?

As Yoti expands into Canada, we are seeing active participation in the local Digital ID community being of paramount importance.  While we are looking to grow our business and develop opportunities in Canada, we also want to contribute to the development of an ethical, safe and trusted Digital ID framework across the country, as we have done elsewhere in the world.

6. What else should we know about Yoti?

Yoti has achieved some significant milestones and partnerships, including:

  • Working with Heathrow Airport to explore biometric travel for passengers
  • Selected as the official digital ID provider for the Government of Jersey
  • Partnered with the Improvement Service in Scotland to help deliver digital services to Scottish citizens
  • Partnered with social networking site Yubo, who are using Yoti Age Scan to flag accounts where the person appears to have significantly misstated their age; an important step in safeguarding young people on social networks which would be expensive to do manually each day
  • Working with Jagermeister to let individuals use Yoti to prove their age when buying age-restricted products on the new, promoting responsible alcohol sales online with digital identities
  • Gained accreditation for SOC2, FCA Sandbox and UK Government G-Cloud
  • Over 4 million installs of their app since launching in November 2017
  • Has a team of 250 staff, headquartered in London with offices in India and the U.S.
  • Yoti has 25 separate patents and applications in the U.S. and the U.K. Their core digital identity patents (which cover the core Yoti system and our method of storing and sharing identity attributes) have a very early priority date in the digital identity industry.

Consumer Digital Identity Leveraging Blockchain

DIACC forecasts that numerous multiple-party Identity Information Networks (aka Networks), may become available in the near future. What are some implementation considerations regarding such networks?

To further explore this, DIACC member SecureKey released a new white paper, Consumer Digital Identity Leveraging Blockchain.

For this project, collaboration is key. “Establishing a secure and effective digital identity network would truly not be possible were it not for effective collaboration between the public and private sectors towards this shared goal,” said Didier Serra, EVP, Sales & Marketing at SecureKey.

“Our forthcoming digital identity network was also strengthened by its development in accordance with DIACC’s digital network principles and with the U.S. Department of Homeland Security Science & Technology Directorate (DHS S&T) support. Operating within this framework and in a collaborative environment, we were able to get the necessary findings to establish a first-of-its-kind digital identity network in Canada.”  

SecureKey is implementing a Network on blockchain technology, one that strives to provide a foundational service to drive forward the digital economy.

securekey whitepaper image

Networks have a number of benefits, among them, the potential to secure:

  • A user’s right to privacy of activity
  • A user’s right to decide when, and what information is shared between organizations

This can simplify in-person services, such as visiting a financial institution to apply for a credit product. This is often a lengthy process, one in which the user must submit various forms of documentation to confirm their identity. Alternatively, this process can also be completed online.

Users create Digital Lockboxes, in which they are able to share and manage their digital assets, review transaction history and report problems. This service is not limited to only mobile devices, as SecureKey’s collaboration with Intel Corporation offers the option for consumers to verify their identity directly from a laptop or desktop, with additional privacy and security.   

Key findings from the research stress the fact that Networks must prioritize speed and efficiency when processing transactions. This would also allow for a seamless user experience. Furthermore, these findings provide an opportunity to inform the Pan-Canadian Trust Framework.  

“At SecureKey, we believe that the strongest approach to solving the problems of digital identity for consumers and businesses alike is an approach taken together. We are proud of the work we’ve been able to achieve alongside DIACC and our public and private sector partners to better Canadians’ digital lives,” said Serra.

About the Paper

The Information in this report is based on research funded by the U.S. Department of Homeland Security Science & Technology Directorate (DHS S&T). Any opinions contained herein are those of the performer and do not necessarily reflect those of DHS S&T.

This content of this white paper is developed under the governance of the DIACC International Applied Research program. The International Applied Research program connects innovators that align with the DIACC Digital Identity Ecosystem Principles with international applied research funding opportunities. The content of the paper was submitted by SecureKey and does not necessarily reflect those of the DIACC membership.

Identity in Action Case Study: BC Services Card

This week, the Province of B.C. released the Identity in Action Case Study: BC Services Card.  

Recognizing that now people are managing much of their daily lives online and on mobile devices, the province created the BC Services Card. Available when individuals apply for or renew their B.C. Driver’s Licence, the Card is a way for citizens to easily prove who they are in person, online and on mobile.

This multi-year effort is the result of collaboration with several other organizations, including Service BC, SecureKey Technologies and IBM. The journey began in 2007, when the Ministry of Citizens’ Services (CITZ) commenced their research on industry standards and trends.  

“Having a digital identity solution embedded in our service model for government means we will have a profound impact on the way citizens and businesses access government services,” said Beverly Dicks, Assistant Deputy Minister, Service BC.

mujeres de mexico 1302795 unsplash scaled

While the Cards have so far been used as a physical piece of secure government-issued ID, the long-term vision is for individuals to use them to prove their identity when they access services online, in person, or using mobile devices.

Below are some highlights from the case study:

  • Since the first BC Service Cards were issued in February 2013, there are now over 4.6 million in circulation
  • In April 2018, CITZ launched the first public-facing service with the BC Services Card, partnering with the Ministry of Advanced Education, Skills and Training (AEST) to deliver StudentAid BC services
  • The province is seeing a huge demand for the card, with more than 90% of British Columbians as current Cardholders

“This is a pivotal moment in the lifecycle of the BC Services Card,” said Sophia Howse, Executive Director, BC Provincial Identity Information Management Program. “We are excited to unlock the true value of the card by delivering trusted digital services to businesses, citizens, and the broader public sector.”

Canada’s Digital Identity Ecosystem

In today’s digital-centered world, Canadians have expectations regarding convenience, data privacy and security. How do businesses and governments deliver on those expectations?

It is imperative to have a vehicle for enabling and growing Canada’s digital economy, one that is open and client-focused, and facilitates more integrated and client-centric services. One that is an interoperable network, in which digital identity information can be asked for and subsequently verified across all industries and all levels of government in the country.

DIACC’s latest publication, Canada’s Digital Identity Ecosystem, stresses the value in building such a system. By unlocking digital identity capabilities from both the public and private sectors, this ecosystem benefits people, businesses and governments across the country. For instance,

  • Businesses can leverage the ecosystem to mitigate risks for fraud and accelerate the adoption of electronic business processes.
  • The ecosystem can help governments to enable real-time service delivery, and reduce fraud risk for services that are considered high-risk.
  • For consumers, it will provide a more convenient user experience, as access should reduce the number of username-password credentials, using a “tell us once” approach to data collection.
phone scaled

“All participants – from individuals to organizations across various industries – are authorized as trusted stewards for Canadian identity information,” said DIACC President Joni Brennan. “By adhering to a common framework, stakeholders share only the essential identity information, and nothing more.

Ken McMillan, Acting Director, Digital Identity at Treasury Board of Canada Secretariat, noted that each province and territory has a different schema, and one definition hasn’t yet been agreed upon.

« The ecosystem approach says that you need a common set of definitions, and we don’t apply definitions uniformly across the country. » he said. « It forces us to have the conversation about a common definition of terms. »

“Most importantly, this ecosystem provides Canadians with choice and control,” Allan Foster, VP Global Partner Success at ForgeRock and member of DIACC’s Board Of Directors, pointed out. “Users are able to offer their consent on what information is shared and are notified of access to their personal information, such as a police background check,” he said.

Other countries have made their own cases for establishing such ecosystems. DIACC posits that having a Digital Identity Ecosystem built in Canada, for Canadians, will set our country up for success in the modern global digital economy.

Exploration of Remote Identity Proofing Alternatives to Knowledge Based Verification

A recently published white paper developed by DIACC members Digidentity and ID Crowd explores remote identity proofing alternatives to knowledge-based verification. The paper proposes that digital identity has the potential to mitigate risks associated with fraud. Greater customer reach, better compliance, and secure and streamlined onboarding processes are among the benefits digital identity can provide.  

Read the full white paper, “Exploration of Remote Identity Proofing Alternatives to Knowledge Based Verification.”

“The US and Canadian identity ecosystems will benefit from this research as it demonstrates that robust alternative methods of remote verification are theoretically possible, both technical as well as commercial,” said Marcel Wendt, CTO and Founder of Digidentity.

bench accounting 49025 unsplash scaled

Knowledge-based verification refers to a security method in which a user is asked to answer at least one « secret » question. The challenge with this approach, the authors purport, is that it is largely based upon the foundation of “what the user knows,” and relies on the integrity and secrecy of the underlying information that is being verified.

Given that 2017 and 2018 were years in which online data breaches became part of the public consciousness, concerns surrounding data privacy and protection are mounting.

“Data breaches are becoming more frequent; these breaches undermine the integrity of confirming the identity of an individual using knowledge based verification” said Dick Dekkers, Director Business Development at Digidentity.

“The inability to trust these traditional data set to identify, verify and authenticate individuals and assets, undermines the development undermines the development of identity ecosystems in North America.”

authentication scaled

Posing the question – “is the entity asserting the evidence the true owner of the asserted identity?”- the research studied five alternatives to traditional knowledge-based verification.

  • The comparison between a machine readable travel document and a “selfie” of the user asserting their identity
  • A government issued driver’s license as identity evidence
  • Comparing a user’s asserted identity with that of their mobile phone contract
  • Verifying the ownership of a financial account under the control of the user
  • Verification using credit card transaction data

“The NIST 800-63A identity standards enabled us to grade each method and the evidence in terms of their issuance, validation and security features” noted David Black, Director at ID Crowd.

All methods, the study determined, are credible identity verification alternatives to the traditional knowledge-based verification approach.

“The five methods selected are not as vulnerable to breaches as traditional methods such as the credit file as they rely on a spread of features including strong issuance processes, biometric comparisons and cryptographic protective measures,” said Gillan Ward, Director, ID Crowd.

About the Paper

The Information in this report is based on research funded by the U.S. Department of Homeland Security Science & Technology Directorate (DHS S&T). Any opinions contained herein are those of the performer and do not necessarily reflect those of DHS S&T.

This content of this white paper is developed under the governance of the DIACC International Applied Research program. The International Applied Research program connects innovators that align with the DIACC Digital Identity Ecosystem Principles with international applied research funding opportunities. The content of the paper was submitted by Digidentity and ID Crowd and does not necessarily reflect those of the DIACC membership.

Spotlight on Entersekt

Meet Entersekt

Entersekt logo digital blue
  1. What is the mission and vision of Entersekt?

Entersekt’s vision is of a world where everyone can interact and transact digitally without fear. In 2008, Entersekt launched the very first out-of-band, mobile push-based transaction authentication product in the world. Since then we’ve continued to innovate, and today millions of people across the world use our products daily to secure their online banking, mobile banking, online shopping, and corporate networks.

Entersekt’s mission is to be the preferred fintech partner for bringing financial service providers and their users closer together. We enable our customers with secure, privacy-enhanced, user-centric solutions that allows them to maintain a high degree of trust with their customers. With that foundation of trust, consumer adoption of lower-cost digital channels increases, while increasing the ability for the organization to offer more high-value services across those channels.

2. Why is trustworthy digital identity critical for existing and emerging markets?

In today’s world, customer engagement and intimacy, built on trust, have become key differentiators for organizations. Unfortunately, in existing markets, the amount of personal data that has been compromised due to breaches makes it difficult for any organization to know that they are dealing with a real person, and that the person on the other side of an interaction is actually who they claim to be. In emerging markets, identity is critical for social and economic advancement. Often however, an authoritative registry of individuals does not exist, which can complicate the identity proofing and corroboration process.

These factors highlight the need for a robust and scalable digital identity framework, since it’s more important than ever for organizations to be able to validate and engage with end-users securely. If this can be done efficiently, a world of potential can be unlocked where, for example, consumers can be allowed to engage in self-service activities, which can lower costs, enable new products and ultimately create better value propositions for both consumers and organizations.

3. How will digital identity transform the Canadian and global economy? How does Entersekt address challenges associated with this transformation?

Digital identity and interoperability are key to transforming and enabling any digital economy. With a trusted and secure digital identity, organizations will finally be able to move from legacy and physical processes over to digital, thereby reducing costs and improving the level of service . In addition, interoperable solutions can potentially allow for new lines of business and innovative products and services to be made available to the global market.

Entersekt provides organizations with the ability to accurately identify and authenticate users across the omni-channel via a convenient, secure, and privacy-enhanced user experience. Strong authentication is not only about telling the good guys from the bad. It helps to foster and maintain trust between organizations and their customers, allowing businesses to accelerate consumer adoption of their lower-cost digital channels while building on the foundation of trust.

4. What role does Canada have to play as a leader in the space?

The benefits of a successful digital identity ecosystem are well-documented: cost savings, fraud reduction, improved regulatory compliance, and enhanced privacy are only some of the advantages identified. As a highly-developed country of technology-savvy citizens comfortable with a range of digital interactions, Canada is already establishing itself as a global thought leader in digital identity.  The added support that Canada’s public and private sector bring to the table as demonstrated through organizations such as DIACC, the willingness of stakeholders to be part of the process, as evidenced through numerous POCs in market, and the openness to transparency and collaboration are all crucial factors contributing to making Canada a leader in this space. The Canadian economy at large will ultimately benefit from the final outcome of these activities, while the global economy will benefit from the lessons it can learn from Canada’s leadership in this space.

5. Why did Entersekt join the DIACC?

At Entersekt, we believe that developing a national trust framework and digital identity ecosystem is the future, and we recognize the value of a digital identity ecosystem that prioritizes security, scalability, and transparency. As a company where the utmost security has always been the foundation of everything we do, the principles of a digital identity ecosystem for Canada, as set out by the DIACC, truly resonates with us. Joining the DIACC helps us play a part in this ecosystem, and provides a platform for us to share our global experience, and learn with fellow stakeholders as we work towards solving global issues across the digital domain.

6. What else should we know about Entersekt?

Entersekt’s mobile app security and authentication technology is used in more than 45 countries across the world to protect tens of millions of consumers as they transact over the Internet, via mobile devices, or by using other self-service channels. We provide organizations 100% certainty regarding the devices they are interacting with, and based on that certainty we can deliver outstanding user experiences. Entersekt is GDPR, PSD2, PCI DSS and MiFiD compliant.

Newer Entries »