Monthly Archives: avril 2020

Yoti’s Commitment to Doing Good During the COVID-19 Pandemic

by Leigh Day, Business Development Manager, Canada, Yoti

In response to the COVID-19 pandemic, the team at Yoti made a pledge. We are offering free, contactless identity verification for health organizations and volunteer initiatives working on the front lines. Using our existing technologies, we have been able to achieve positive change, in light of this crisis, reaching a wider audience and assisting those in need. 

Remotely and safely onboarding workers at scale

Yoti’s pledge revolves around several use cases, one being healthcare workers coming out of retirement on a volunteer basis, to aid in the COVID-19 efforts. After taking just a few minutes to download the free Yoti app and create their account, the worker can then scan a QR code on their employer’s website to remotely and securely verify their identity and be onboarded. A revocable Staff Digital ID card is then issued into their Yoti app, which they can present when reporting to a hospital to prove their identity and employment. Recruitment can be done remotely, without the need for face-to-face contact. 

This solution has been deployed by the UK’s National Health Service (NHS) in April, 2020. Putting employees’ NHS ID cards directly onto their phones will help improve the onboarding of new NHS staff, as identity can be proved online and in-person within seconds, allowing these front line workers to provide the immediate medical assistance needed.

Lessening regulatory headwinds and rapid regulatory advancement 

The pandemic and associated lockdowns are forcing many organizations to confront the challenge of remote identity verification in order to adapt and ensure they can provide their services effectively. We are seeing certain regulators embracing digital identity solutions, paving the way for rapid technical innovation. Businesses and regulators are realizing that digital identity solutions enable safe business continuity during this unprecedented time. This, we believe, is a step in the right direction. 

For instance, the Canadian real estate industry has been largely disrupted, as real estate agents cannot hold open houses, and land title laws still require in-person identity verification plus wet ink signatures on contracts. Digital identity verification and e-signatures could be allowed, removing the requirement for notaries and clients to meet in person.The time to innovate is now, in real estate and beyond, and businesses that do not adapt quickly enough risk losing their position to those that do, and to new businesses entering the market. 

Existing staff are provided with a secure digital ID Card, which they can present on screen (or prove their ID by text or
email).

Emphasizing the need for true innovation, rather than manual workarounds

In response to this crisis, we are also seeing relaxation of identity verification requirements to enable business continuity.  In B.C. for instance, car insurance is provided by the Insurance Corporation of British Columbia (ICBC). Insurance regulations are decades old and don’t currently contemplate digital identity solutions. To maintain social distancing, ICBC is applying temporary variance from normal in person identity verification in allowing certain transactions to be completed remotely, rather than in person, by phone or email. Instead of innovating and permanently adopting a digital ID solution for verification, this body is creating a temporary and risky work-around. A step away from innovation, this is where fraudsters can thrive. 

Where solutions exist, they should be integrated, and digital ID solutions do exist. Yoti already has a diverse set of products, ranging from an electronic signing solution to enable the remote signing of documents, as well as ID verification solutions. Other technology providers offer their own innovative solutions as well, many of who are members of the DIACC.

Many of these products are already built, they just need to be adapted to the situation at hand. For digital identity adoption globally, this is a massive opportunity. 

Learn More about DIACC member initiatives and identity solutions including Yoti’s within the COVID-19 Actions Directory, where we are pleased to share the actions taken to address the demands of these extraordinary circumstances.

About the Author: Leigh Day

A veteran Cyber Security Executive turned Digital ID evangelist, Leigh is helping expand Yoti’s global presence by driving new business and growth across Canada and the US, and representing Yoti within the Digital ID and Authentication Council of Canada, sitting on expert committees and contributing to the development of the Pan Canadian Trust Framework.

COVID-19 Actions Directory

The social distancing measures that are required to manage the COVID-19 pandemic only serve to further illustrate the urgent need for an ecosystem of identity solutions and services that are secure, privacy-respecting, and convenient to use.

DIACC calls on all of our members to share the actions that they are taking to address the demands of these extraordinary circumstances.

DIACC members who wish to add their COVID-19 related actions to this directory should contact the DIACC team via email or use our contact us form. 

Desjardins Logo RGB

Desjardins encourages members to use Desjardins ATMs or AccèsD (internet, mobile and phone services). Desjardins is asking those who haven’t signed up for government direct deposit services yet to register so they can avoid having to deposit cheques. Learn More

iComply has announced a $2M services grant for government and community organizations in need of online identity verification to support COVID-19 response efforts. Learn More

Jumio Go for Good. Now more than ever, it is important to establish trust remotely. To help in this time of crisis, we’re offering our fully automated, AI-powered identity verification solution FREE of charge to qualifying COVID-19 relief organizations including: Telehealth, Online Education & Testing Services and Other Essential Services. Learn More

OARO

OARO has expanded its physical access control system, OARO ACCESS®, to include body temperature screening to help fight COVID-19. The new optional feature can detect individuals exhibiting a fever, the primary symptom of viral infections such as the novel coronavirus. Unlike many other temperature screening systems currently on the market, the new OARO ACCESS® module will be able to analyze trends over time, enabling predictive analytics and improved workplace health and safety measures. The system uses advanced encryption to comply with global data privacy laws. OARO is currently working with existing and new clients to install temperature screening modules on OARO ACCESS® systems. Learn More

diacc ontairo

The Ontario government put out a call for support from the private sector to fight the spread of COVID-19 using the Ontario Together banner. Included in that call out is a request for supplies, innovation, and ideas. Learn More

TELUS is providing numerous ways to help their customers stay connected and protected. As an essential service, we are ramping up our efforts to keep Canadians connected during this crisis. We are also dedicating $20 million to help COVID-19 relief efforts in support of our frontline healthcare workers, seniors, hospitalized patients, vulnerable Canadians, and families in need. Learn More

yoti logo

Yoti has spent six years building a secure identity platform that makes it simpler and safer to prove who we are in our modern, digital world. We have always offered our digital identity app free to eligible charities and non-profits, and for the next three months, we will be extending this commitment to any public health organization, emergency service and community initiative tackling the COVID-19 crisis. Read more on our COVID-19 crisis pledge. Learn More

manulife logo

Through this challenging time, our top priority remains the health and safety of our employees, customers and partners. We express our deepest sympathies to those who have been affected. We’re also helping the communities in which we operate, and we’ve made donations of supplies and resources in some of the hardest hit areas. Manulife is well-positioned to navigate this evolving situation. We have robust and tested business continuity plans that help ensure we are proactive and prepared, and employees in critical functions can work remotely if required. Manulife will continue to take necessary actions to ensure the health and safety of our teams, and service to our customers, is our top priority. We are committed to helping make decisions easier and lives better. Learn More

OneSpan has rerouted its charitable giving program, OneSpan ACTS, to provide financial contributions toward non-profit organizations or charities working to support those fighting COVID-19 or those impacted by the virus. Through the program, OneSpan employees can submit their association and charity of choice to donate funds to on OneSpan’s behalf.

iProov is providing biometric authentication services free of charge to start-ups that are working on solutions to assist the COVID-19 crisis. A number of projects are already underway, using our Genuine Presence Assurance technology to great effect. One area where we’re seeing a lot of focus is safeguarding. Safeguarding allows genuine offers of help to be encouraged and utilized, by putting processes and systems in place to protect the vulnerable.

Folio has extended the fundamental building blocks of its mobile-based identity platform to support the secure issuance and management of health credentials. The Folio Digital Wallet is highly secure and biometrically bound to the citizen, enabling them to carry their health status, test results and perhaps eventually a vaccination certificate with them conveniently and consent to share attributes to trusted relying parties.

For organizations and governments, Folio allows for the scalability of credential issuance, with certificates that are dynamic and can be time-bound, updated or revoked instantly. Learn more.

To help accelerate this shift to virtual care, Canada Health Infoway reallocated existing funds to create a Rapid Adoption of Virtual Care Fund. In consultation with Health Canada and the jurisdictions, Infoway identified three priority areas for investment that would have the biggest impact in the shortest amount of time: accelerating the implementation of virtual care solutions (including e-visits and home monitoring), offering online mental health services and increasing capacity of 811/ tele-triaging services. As the next stage, mid- to long-term responses are being evaluated.

Understanding Face Biometrics for Identity Verification and Authentication

Applied Recognition and the Digital ID & Authentication Council of Canada (DIACC) developed this report to highlight the opportunities for businesses in adopting biometrics to verify and authenticate identity, with the next generation of technology available to bring instant, secure access to personal data. The report covers areas such as how face biometrics work, the privacy advantages they present, and current market uses of the technology.

Read the full report: Understanding Face Biometrics for Identity Verification and Authentication.

Why Canada Needs a Digital ID Framework

Canada must become a nation of digital identity. 

What does this mean, exactly?

I believe that Canadians should be in control of their personal data. I also think that there should be standards and practices that help guide the way that citizens can safeguard their digital identity. In a world where entire economies are struggling thanks to the COVID-pandemic, the value of digital ID couldn’t be more relevant.

We are all collectively trying to adapt to the “new normal,” as many of us crave more social interaction and worry about financial stability. There’s never been a better time to invest in our national security and digital economy.

Canada has to become a nation of digital identity, and it should do so as soon as possible.

Digital ID is critical to the economy

Today, shortcomings in digital identity (such as data breaches and potential fraud) result in risks to individuals and businesses and hinder the growth of the digital economy. The entire economy is impacted.

The Digital ID & Authentication Council of Canada (DIACC) estimates that the potential value that trusted digital identity could bring to the Canadian economy is at least 1 percent of Canada’s GDP, or CAD 15 billion.  

This is a significant amount of money, especially when you consider that the Canadian government plans to spend $10 billion to bail out its oil industry. Why can’t we invest in an infrastructure that prevents billions from being lost in the future?

There are also other economic benefits to be realized. In Canada, for instance, the DIACC and participating banks have determined potential net savings per institution at or above CAD 100 million per year, through operational efficiencies created by reducing manual processing costs, as well as reducing fraud.

A Remote Working Solution

More employees are being asked, or even required, to work remotely. This gives rise to new obstacles in terms of establishing secure connections, and maintaining data privacy poses a challenge. For example, each time an employee connects to their corporate network from their home; they create access points that hackers may exploit. 

There are already reports that hackers have sent phishing emails, claiming to be related to the COVID-19 pandemic. Google has stated that they have already blocked an average of 18 million emails per day this past week, as hackers try to capitalize on fears about public health. While public safety requires a rapid shift to remote working, this shift creates a greater strain on IT departments and existing infrastructure. 

Canada needs to establish a secure digital identity to enable organizations to streamline and secure their operations. This benefits so many aspects of a company, whether we are speaking to customer registration or credit risk assessment. The volume of online transactions is increasing in the shift towards a decentralized work environment. 

Canadians are shifting online to conduct important transactions and access services such as banking, education and e-commerce purchases. Canadians need a secure and safe environment to transact, both for business and personal needs. 

Data breaches continue to increase, as do concerns surrounding them. A recent survey from the Office of the Privacy Commissioner of Canada found that 92 percent of Canadians expressed concern about the protection of their privacy. 

Just two months ago, the personal information of over 140,000 Canadians was compromised. In fact, the information here was actually mishandled by Canadian departments and agencies, rather than a data breach or hack by a foreign government.

More Trust, Less Fear

Digital identity boils down to trust: trusting who is on the other end of a transaction and having confidence that one’s data is protected. Digital identity will enable that trust, and provide that secure digital social safety net that Canada urgently needs. 

At a time when Canadians are experiencing fear and anxiety, not knowing what lies in the weeks and months ahead, they deserve to have greater control over and protection of their data. Technology companies have the opportunity to step up and make this happen. 

As the global business landscape shifts along with the changing times, a secure digital identity becomes critical, as businesses will have to adjust their operating procedures. With a secure digital identity, employers will be able to keep more Canadians at work during a time of crisis. 

Collaboration Is Essential

The COVID-19 pandemic highlights the importance of community  – and banding together to share experiences and much-needed information, both on a local and global scale. 

A community of leaders from the public and private sectors have joined together in the DIACC to connect their in-depth knowledge and expertise to unlock digital identity capabilities of all sectors, to secure Canada’s full participation in the digital economy. 

Together, DIACC members and partners are delivering a Pan-Canadian Trust Framework to provide rules and tools to accelerate digital identity solutions and services that are designed with privacy and security as core principles. 

Furthermore, DIACC is working with members and partners to support near term identity-related projects to help Canadians in this urgent time of need. With the sole focus on making digital identity a reality for Canadians, DIACC takes a uniquely collaborative approach. The urgent need for digital identity is something that impacts us all, and we welcome all voices to the table. 

As we manage life and death immediate needs during this crisis, we must also commit to ensuring that Canada becomes a digital identity nation. 

Australia has notably taken tangible steps towards establishing a digital identity program. Specifically, the Australian government hopes to create a single digital ID for every Australian citizen by 2025. Michael Keenan, the Digital Minister of Australia, says plainly that the initiative will save the country “tens of billions of dollars per year.”

It’s also clear that the General Data Protection Regulation (GDPR) has already accomplished a lot in Europe in a relatively short period of time. The law has forced some of the most powerful tech companies in the world to rethink and revamp the way that they operate.

The majority of Canadian citizens support a digital identity framework. What are we waiting for, exactly?

We must do this now, so that when the next emergency hits, we are well-prepared. 

Spotlight on Mastercard

1. What is the mission and vision of Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. We recently committed to the Mastercard Data Responsibility Imperative, as we believe that innovation is critical to business success and goes hand in hand with the ethical use of data. 

2. Why is trustworthy digital identity critical for existing and emerging markets?

Identity is what makes our existence in the world official: it is how countries recognize and see us, and it establishes citizens’ rights to national benefits. It is also the foundation for participating in the economy, and more importantly, to help grow the economy.

That economy is rapidly becoming digitized and globalized. Many of us live in a hyper-connected world, where digital services blend invisibly into our daily lives. It has changed the way we shop, do business, engage politically, obtain health services and communicate.

In all of this, trust is essential – organizations offering digital services and the people they are interacting with need to be confident of their interactions within this environment. A user-centric digital identity built on the premise of privacy- and security-by-design can help establish that confidence and trust as parties can validate who is on the other end of the transaction.

3. How will digital identity transform the Canadian and global economy? How does Mastercard address challenges associated with this transformation?

As the economy becomes increasingly digitized and globalized, identity will become our personal keys to every website, app and service. But the systems we have in place to establish, use and secure these crucial keys are fundamentally flawed.

An average user may be faced with 150 login accounts, all with disparate approaches to passwords and authentication. With the rapid growth of e-commerce, identity fraud is increasing, and that risk will multiply with the Internet of Things (IoT). It’s estimated that 75 billion smart devices will be in use across the globe by 2025. That’s why Mastercard unveiled its new Intelligence and Cyber Centre in Vancouver earlier this year. It will help us meet the growing demand for technology solutions to reduce the cost of cyber-attacks, enable today’s connected devices to become tomorrow’s secure payment devices, and address the growing vulnerabilities associated with IoT.

Last year, Mastercard introduced a consumer-centric model for digital identity. Guiding this model are the Principles of Digital Identity, which focuses on data rights and ownership, confidentiality, consent, transparency, security and inclusion. They amount to a fundamental individual right: “I own my identity and I control my identity data.”

4. What role does Canada have to play as a leader in the space?

Canada needs to fundamentally address how people manage their identity in a digital world, how that identity is verified, and how digital service providers that rely on that identity data can be best served. We need to build a digital identity system that answers the challenge without releasing the data, ensuring that the path forward is infinitely smarter and stronger than what we have now. Mastercard believes in local solutions and initiatives, such as the Department of Innovation, Science and Industry’s Digital Charter, as well as DIACC and its Pan-Canadian Trust Framework, that encourage domestic scale and global interoperability. At Mastercard, we believe scale is key to inclusion. 

5. Why did Mastercard join the DIACC?

Digital identity requires a collective effort, and Mastercard is committed to facilitating the network and helping define the rules and governance. Together, we have a real opportunity to transform digital engagement so that it’s convenient and doesn’t compromise on security.

We envision a digital identity service that is:

  • Simple: Enabling a user and a third party to interact easily, confidently, and with trust.
  • Smart: Allow digital interactions to occur with only minimal data exchanged.
  • Secure: Safeguarding data and the use of data effectively such that the rightful owners are in control. 

6. What else should we know about Mastercard?

Mastercard’s model for digital identity embodies privacy-by-design and does not aggregate identity data. It will enable digital interactions to occur with minimal data exchanged and only when needed. It will safeguard data and the use of data effectively such that the users are in control, with a person’s identity securely bound to their smartphone. Ultimately, the Mastercard model for digital identity enshrines the Mastercard Data Responsibility Imperative’s core principles aimed at ensuring innovation takes place in a responsible and secure way, driving relevant benefits for individuals and society.  

Subvention Internationale

Lire le journal complémentaire

Digital ID and Authentication Council of Canada obtient une subvention internationale pour développer la gestion, la sécurité et la confidentialité de l’identité en nuage

Ce financement vise à soutenir la recherche et le développement de nouvelles solutions en nuage – basées sur les valeurs canadiennes – afin de protéger les identités numériques et de forger l’économie numérique du Canada

TORONTO, mardi le 14 février 2017 – Le Digital ID and Authentication Council of Canada (DIACC), une coalition sans but lucratif de chefs de file des secteurs public et privé ayant pour vocation de développer un cadre canadien d’identification et d’authentification numériques, a annoncé aujourd’hui une nouvelle initiative de recherche appliquée, menée avec la collaboration de la société canadienne SecureKey Technologies, en vue de concevoir un écosystème de l’identité en nuage.

L’initiative, qui pourrait coûter jusqu’à 800 000 $, est le fruit d’une collaboration entre le DIACC et le Control and Interoperability Center for Advanced Data Analytics (CCICADA), un centre d’excellence en recherche de l’Université Rutgers financé par la Direction de la science et technologie du U.S. Department of Homeland Security.

« Le DIACC contribue à promouvoir l’innovation au Canada – au profit du monde entier – en catalysant la recherche innovatrice sur l’identité et l’authentification numériques, a déclaré Joni Brennan, présidente, DIACC. En cherchant avant tout à appliquer les valeurs canadiennes que sont le respect de la vie privée, la sécurité et la transparence au développement de l’écosystème mondial de l’identité numérique, le DIACC fait en sorte que le Canada soit un leader pour ce qui est de façonner l’économie numérique mondiale. Si le Canada compte saisir l’occasion qu’offre l’économie numérique, nous devons investir ensemble dans l’identité et l’authentification numériques – les rails de l’économie numérique.

Tirant parti des architectures de réseau distribuées (chaîne de blocs) modernes, l’écosystème de l’identité en nuage donnera aux entreprises, aux consommateurs, aux gouvernements et aux membres de la société civile du Canada les outils dont ils ont besoin pour gérer d’une façon sécuritaire les identités et les actifs numériques. L’écosystème sera bâti à l’intérieur d’un cadre qui protège et promeut les valeurs et les perspectives canadiennes, en appliquant les 10 principes adoptés par le DIACC, selon lesquels un écosystème de l’identité numérique de confiance doit :

  1. Être robuste, sûr et adaptable
  2. Instaurer, protéger et améliorer la protection intégrée de la vie privée
  3. Être inclusif, ouvert et adapté aux besoins généraux des parties prenantes
  4. Avoir une gouvernance et un fonctionnement transparents
  5. Offrir choix, contrôle et commodité
  6. Être construit sur des protocoles basés sur des normes ouvertes
  7. Permettre une interopérabilité avec les normes internationales
  8. Être économique et ouvert à la concurrence du marché
  9. Pouvoir être évalué et vérifié d’une façon indépendante, et être assujetti à l’application de la loi
  10. Réduire le transfert de données entre les sources autorisées et ne pas créer de nouvelles bases de données d’identification

« SecureKey est parfaitement déterminée à développer un écosystème en nuage national qui accorde la priorité aux consommateurs et qui accroît leur sécurité et leur confidentialité numériques, a indiqué Andre Boysen, chef de l’identité de SecureKey. Ce financement sera essentiel pour que cet engagement demeure une réalité, en faisant en sorte que les consommateurs aient accès à une protection numérique sûre. »

-20-

À propos du Digital ID and Authentication Council of Canada

Fruit du groupe de travail sur l’examen des systèmes de paiement mis sur pied par le gouvernement fédéral, le Digital ID and Authentication Council of Canada (DIACC) est une coalition sans but lucratif de leaders des secteurs public et privé qui a pour vocation de développer un cadre canadien d’identification et d’authentification numériques afin de permettre au Canada de participer pleinement et en toute sécurité à l’économie numérique mondiale. Les membres du DIACC comprennent des représentants des gouvernements fédéral et provinciaux ainsi que des chefs de file du secteur privé.

Le DIACC a pour objectif d’offrir des débouchés économiques aux consommateurs et aux entreprises du Canada en fournissant le cadre voulu pour développer un écosystème d’identification et d’authentification numériques à la fois robuste, sécuritaire, évolutif et plus confidentiel, qui va réduire les coûts des gouvernements, des consommateurs et des entreprises tout en favorisant la croissance du PIB. Pour atteindre cet objectif, le DIACC collabore avec des partenaires – au Canada et ailleurs dans le monde – afin de catalyser les investissements et les collaborations liés à l’identité et l’authentification numériques. Pour en savoir davantage, visitez www.diacc.ca ou suivez-nous sur twitter @mydiacc

À propos du Command, Control and Interoperability Center for Advanced Data Analysis

Le Command, Control and Interoperability Center for Advanced Data Analysis (CCICADA) est un centre d’excellence universitaire du U.S. Department of Homeland Security qui utilise des analyses de données et des systèmes avancés pour s’attaquer aux menaces naturelles et humaines contre la sécurité et la sûreté des Américains. Le travail du CCICADA est accompli par des chercheurs et des étudiants de 17 institutions partenaires. L’Université d’État Rutgers du New Jersey est le principal partenaire. Le directeur du CCICADA est le Dr Fred Roberts, professeur de mathématiques à Rutgers.

À propos de SecureKey Technologies

SecureKey est un fournisseur d’identité et d’authentification de premier plan, qui simplifie l’accès des consommateurs aux services et aux applications en ligne. SecureKey crée un réseau d’identité et d’authentification de prochaine génération, qui protège davantage la vie privée en offrant aux gens un accès pratique à des services en ligne essentiels grâce aux identifiants numériques qu’ils possèdent déjà et auxquels ils font confiance. SecureKey a son siège social à Toronto et des bureaux à Boston et à San Francisco. Pour plus de renseignements, visitez www.securekey.com.

Renseignements :

Krista Pawley

Digital ID and Authentication Council of Canada

info@diacc.ca

416-270-9987

DIACC Investir au Québec, investir dans l’identité numérique

Le Canada a un besoin urgent d’un véritable écosystème d’identité numérique pancanadien qui soit sûr, respectueux de la vie privée et facile à utiliser.

C’est pourquoi DIACC se concentre à accélérer la livraison d’une identité numérique véritablement pancanadienne qui fonctionne pour tous les Canadiens et assure notre participation pleine et bénéfique à l’économie numérique mondiale.

Une approche véritablement pancanadienne de l’identité numérique doit représenter la diversité et les cultures de tous les Canadiens. Pour établir une approche véritablement pancanadienne, le DIACC collabore avec les entreprises du secteur privé du Canada de toutes tailles, ainsi qu’avec le gouvernement fédéral, les provinces et les territoires du Canada. La stratégie du DIACC privilégie une approche économique et sociétale des avantages pour tous.

DIACC est fier de contribuer dans la réussite du Canada grâce à deux nouvelles
initiatives :

  1. Nous sommes très heureux d’accueillir notre nouveau membre de l’équipe – François Bedard. François est l’ambassadeur franco-canadien du DIACC pour le Québec. François aidera DIACC à s’engager avec le Québec et tous les francophones du Canada d’un océan à l’autre.
  2. Nous sommes également heureux d’annoncer que DIACC relancera
    DIACC.ca dans les deux langues officielles du Canada.

Et maintenant … veuillez rencontrer François Bebard.