The lessons from European and Middle Eastern implementations of e-ID Michael Magrath, CSCIP Director, Business Development – Government & Healthcare Gemalto Identity Management September

Presentation overview eID Functions studies How do we measure success? Accepted but not used What have we learned? 5 suggestions

eID Functions Identification  Visual face-to-face identification  Automatic using data capture of the information securely stored on the chip. Can be done at point of service or over the Internet Authentication Digital Signature  Identifies the person who has signed a document  Guarantees that it has not been altered between the moment it was signed and the moment it is accessed by the recipient.

studies 3 studies on eID and eGov services carried out in 2007, 2009 and 2010 (40 interviews, 18 countries) Gemalto has delivered the core technical solution to 15 out of 25 national electronic ID implementations

Measure of success: what do we expect? More than a successful roll-out - eID brings the same abstraction and opportunities for public and private services as credit and SIM cards to economic and communication transactions The success of any on-line service can be measured by its membership rate; frequency of use & perceived benefit The substantial benefit, ease of learning and of use compensate for an inevitable resistance to change, and the factor of risk perception when using new tools The first expected benefits are time saved and greater freedom Resistance to change depends on whether or not the newly acquired points of reference are retained

1 - eIDs are widely accepted The perceived quality and security of a national eID are also strong messages to citizens Enable a virtual, secure and bilateral relationship between the citizen and their government while providing a tangible element of trust

2 – But why won’t they go eID? Barriers  Need for smart-card reader and software No awareness promotion  ID-cards are perceived as merely physical documents  Unawareness about security benefits  Unaware of eID services Habits

eID usage in Belgium 8 5% use eID applications 15 to 25% express interest for applications at work 15% have limited knowledge, trust and belief in added value 33% say limited availability of card reader is a barrier 44% use the card 100% have the eID card Source ( a spin-off from KU Leuven, 2009)

Estonia In 2006 : 3% of eUsers Co-operation program between private and public sector Aims for safe information society in general Special target: ten-fold increase of eID users (30% by the end of 2009) Achieved: February 2010

Estonia’s Reader distribution - USB card reader Price ca 6 EUR Available at retail stores Sold by banks Giveaways in campaigns

Estonia’s Ease of Use -- installer.id.ee

Estonia’s Alternative eID - MobileID Launched: May 2007 PKI-capable SIM cards  Requires replacement of SIM Instantly ready to use  No specific software required Similarly to the eID card, enables authentication and digital signing of documents.  User's certificates are maintained on the telecom operator's SIM card. In order to use them, the user has to enter a PIN code. Available from all major GSM operators

French Sesam Vitale Project , Roll-out Some results  “The French, for example, have used the carte vitale since 1998 and have 67 percent fewer administrative personnel per building than a comparable American establishment” Newsweek - February 2010  Over 1B electronic claims processed in 2009 (200m paper based)  Over 3B documents dematerialized per year  Over 82% of general practitioners are using the system  98% of pharmacists are using the system  Full back payment in less than 5 days

United Arab Emirates e-ID Launched in 2000 Aims of issuing the card  Combat fraud & forgery with secure biometric e-ID cards  Simplify identitifcation & authentication procedures  Maximize ROI for govt investments in IT infrastructure  Prepare for Future – number of services delivered through the card Adoption  April % were registered  2010 – Now required by law to have one Usage  Tax Payments  Requests for official documents (passport, DLs, vehicle registrations)  Obtain originals & copies of documents (birth & marriage certificates)  Changing address  Making formal complaints or statements to police

Innovative eServices Health Banking Tax payment ePurse eTicketing (transport) eRegistered Mail Hotel and Car Rental Registrations Remote Signature of contracts Police on web Kids ID (Belgium) Leveraging ATM networks to deliver documents and more E-Voting (Estonia) Delivering eIDs on mobile phones (Finland, Estonia)

What happens when they use it? Austria has in the range of 70% – 80% of all tax returns being done electronically (source The Vault – November 2009 interview of Pr. Dr. Posch, Austrian Federal Government) Belgium Tax-on-Web usage X2 in % of Estonian taxpayers declared their income online Same results for Sweden, Finland

Lessons learned National roll-out can be successfully achieved and can robustly deliver citizen benefits The capability of smart cards to deliver not only basic but also innovative facilities has been demonstrated Smart cards used for eID are more than adequate to provide ease-of- use and security Smart cards can be updated remotely after its issuance to citizens and is therefore a flexible tool for delivering innovative benefits to citizens Opportunity to create a virtuous upward spiral of capabilities, benefits and take-up which will enhance the value-for-money of public services From a citizen viewpoint. It is NOT about technologies. It is about citizens changing their life, making more secure and easier interactions with government services and private services as well. It works!

5 suggestions Convey a vision of usefulness Orchestrate the approaches taken by third parties to encourage acceptance Provide citizen convenience right from the start.  Must be easy-to-use the first time and every time thereafter. Encourage innovation Communication  G-to-C Marketing (4P’s)  Advertising  Public relations

Thank you Michael Magrath Phone: