Operators Taking the Lead in Digital Identity

October 2, 2017

Blog

Consumers are increasingly tired of usernames and passwords. As the variety of online purchases made by the average person has increased, so has the number of different login details they must remember, and as a result the convenience of the format has been greatly diminished.  This has a deleterious effect on commerce: 86% of users report abandoning a purchase when asked to register with a website.  Usernames and passwords are also an increasingly insecure way of verifying digital identity. With hackers now highly adept at cracking even sophisticated passwords, around 63% of online security breaches can be attributed to compromised passwords;  Michael Chertoff, former head of Homeland Security in the US has described passwords as “the weakest link in cybersecurity today”.  As cases of identity theft in the US have now risen to their highest-ever level, it is little wonder that 86% of users express concern over security in online purchases, with 87% saying they would prefer one single means of logging in.

It is therefore excellent news that mobile network operators are increasingly moving into the digital identity market.  We are now seeing collaborations around the world between operators and their partners to eliminate the need to remember multiple insecure usernames and passwords, by using instead a device now carried as standard by anyone making such a purchase: their mobile phone. The market is undoubtedly there – research published this month indicates that 76% of mobile users are interested in using a single sign-on service from their mobile network operator – and operators are uniquely-placed to provide such services.  Those who have rolled out such solutions already have seen excellent returns on their investment. SKT for instance, announced that their identity solution has been adopted by 99% of Korean websites, generating a $40 Million annual revenue opportunity for operators.

Deployment is therefore understandably picking up momentum elsewhere. Operators in Belgium, working in tandem Belgium’s major banks, have launched their application ‘itsme’. A 5-digit code is entered for each transaction – codes which are not stored in a database – which itsme verifies while also checking the handset and SIM being used are those of the registered user. The Big Four operators in the United States are working with the GSMA’s Mobile Connect programme on their Mobile Authentication Taskforce, which among other tools will use behavioural and location data to determine whether users are who they claim to be.  Collaboration between operators and major private sector partners in Germany will soon make operator-led verification available to a wide range of consumers in the automotive, finance, IT, aviation, media, telecommunications and insurance sectors.  Verimi – an amalgam of the words ‘verify’ and ‘me’ – will enable mobile users to access this broad range of services by using a single login or ‘master key’, without the need to enter separate details for each participating business.  Significantly, users will soon also be able to access public bodies and services using Verimi, as Europe’s largest economy becomes its first major state to follow Estonia in facilitating e-government on a wide scale.

The implications therefore go beyond financial transactions and online purchases – use cases are now expected to include a wide array of public sector deployments as well.  As we look ahead to implementation of the eIDAS Regulation in September 2018, we can expect a rise in the use of operator-led solutions in cross-border public as well as private-sector services: users will increasingly be able to access services as various as university enrolment, access to medical records, and filing of tax returns across borders using their smart phone.  We at the GSMA therefore anticipate that operators will next turn their attention to ensuring interoperability between what are for now largely national identity solutions.  As borders become ever-more digitally porous to transactions of ever-more various types, operators must use their unique position to facilitate the efficiency and security of those transactions. More than $4 billion per year in new revenues is forecast to be generated by 2020 for those providing authentication, authorisation and identity services via eIDAS.  The market incentive to meet this challenge is clear, and operators are plainly now well underway in meeting it.

Back

Strong Mobile Customer Authentication under PSD2: Comparisons and Cons The new PSD2 regulations will bring about major changes to the digital security landscape. Among the most significant of these will be the requirement to use strong customer auth...

Read more | See all Identity Resources

Mobile Connect for Cross-Border Digital Services: Lessons Learned from The GSMA has released the results of the Mobile Connect and eIDAS implementation pilot. The year-long collaboration brought together several public and private sector organisatio...

Read more | See all Identity Resources

Mobile Authentication: Capitalising on China’s Identity Market China Mobile have firmly established themselves in the digital identity market. The network operator’s identity service, Mobile Authentication, offers a range of authentication...

Read more | See all Identity Resources

Mobile Connect in the GSMA Innovation City @MWC18 Mobile Connect, the mobile industry’s identity solution, will be present at Mobile World Congress’ GSMA Innovation City where attendees will have the opportunity to e...

Read more | See all Identity Resources

Presentations from the Mobile Connect Summit Singapore The Mobile Connect Summit was a forum for all stakeholders engaged with digital identity and  addressed the status of Mobile Connect deployments both globally and in the Asian m...

Read more | See all Identity Resources

Mobile Connect Privacy Principles The Mobile Connect Privacy Principles are intended to guide the use of personal information in Mobile Connect branded services. Mobile Connect enables verified authentication, au...

Read more | See all Identity Resources

CAPS Report on Authentication and Mobile Payments to aid Implementatio With PSD2’s Regulatory Technical Standards now published, the broader financial ecosystem is moving closer towards full-scale implementation of the EU’s revised payment servi...

Read more | Visit Identity Blog

eIDAS Pilot Recommends Mobile Connect for Cross-Border Digital Service Having removed many of the barriers to European cross-border trade by way of the Single Market, the European Commission’s vision of a Digital Single Market aims to create secur...

Read more | Visit Identity Blog

MWC18: Operators Poised to make Unique Contribution to Securing Trust As the digital economy grows, and the Internet of Things expands, digital identity authentication will play an increasingly routine role in the lives of billions around the world...

Read more | Visit Identity Blog

Securing Trust in India’s Digital Citizenship Jai Rajaraman, Vice President and Global Head of Technology User privacy has been at the forefront of debates over digital identity since their inception.  The case of Aadhaar, ...

Read more | Visit Identity Blog

Digital Identity: What to Expect in 2018 2017 was a profoundly important year in digital identity.  The tide turned decisively against usernames and passwords, with more than 86% of consumers expressing doubts over the...

Read more | Visit Identity Blog

China Mobile Now Scales up GSMA Mobile Connect for Global Authenticati China Mobile have announced their intention to advance in the digital identity market Sihan Bo Chen, Head of Greater China, GSMA A steady rise in spam and fraudulent activity in ...

Read more | Visit Identity Blog

Mobile Connect at Mobile World Congress 2018 February 26, 2018 The GSMA’s Identity team will be present at this year’s Mobile World Congress 2018, where Mobile Connect, the mobile industry’s identity solution, will be showc...

Read more | See all Identity Events

MWC18 Seminar: Data Attributes as the New Digital Identity Currency February 26, 2018 During this seminar we will focus on how attributes are becoming the new digital identity currency and how cross border identity transactions will shape ecommerce. A number of di...

Read more | See all Identity Events

MWC18 Seminar: How are Identity Regulations Shaping the Digital World? February 27, 2018 The seminar will focus on how technology and digital services are increasingly facing new challenges and opportunities to keep pace with today’s digital transformation. During ...

Read more | See all Identity Events

Contact GSMA Legal Email Preference Centre Copyright © 2018 GSMA. GSM and the GSM Logo are registered and owned by the GSMA.