Refer to https://en.wikipedia.org/wiki/Smart_Nation, Singapore’s Smart Nation initiative was launched by Prime Minister Lee Hsien Loong on 24 November 2014. This initiative aims to bring benefits to the nation in term of jobs, quality of life and the society improvement. This article mainly will delve into the technology aspect of digital identity that with newly embedded features called PKI (Public Key Infrastructure) to enhance security and encryption. We will see from different angle how this enhanced version of Digital ID can assist in achieve nationwide objective such as cashless, paperless and presenceless transactions.
We first look at what is the evolution of Digital identity. By definition Digital identity consists of various pieces of information or we called it data attributes that technological link to a real entity in physical world. Data attributes commonly used today including Username and Passwords, Date of Birth, ID Numbers, Mobile No, Bank Detail, biometric data, device information, certificate-based and etc. Malaysia has introduce digital certificate business since 2000. In short certificate-based digital identity is not something new in market, however in the past the utilization is more focus into specific application centric for example, e-procurement, e-Court, e-tax and etc.
We also noticed that ASEAN government started to introduce/explore new version of national digital identity (version 2.0 or higher) and the key element added is utilize PKI technology as the security foundation. With this PKI-Based digital identity, government will issue digital certificate for all citizens. This will provide users with a single identity to transact with the government securely and conveniently
In a nutshell, in order to become fully digital government, regulatory, governance frameworks, digital technology, PKI are one of the key elements to ensure collaboration in secure ecosystem.
Objective of National Digital ID Infrastructure
• As a secure digital infrastructure to support Digital Economy, Digital Government and Digital Society.
• Unified Identity verifiable platform
• Strong security system foundation for online services and transactions
• Digitize contract signing and paperless productivity
Why Government go for PKI?
In compare to other options like user name and password, SMS and OTP authentication, PKI technology can offer additional advantages as following
Confidentiality: Assurance that only the intended recipient can see the data
Authenticity: Assurance that the sender or recipient is who he/she claims to be
Integrity: Assurance that the data has not been altered
Non-Repudiation: Assurance that the sender cannot refute that he/she had sent the data
You can refer this link for more information https://en.wikipedia.org/wiki/Public_key_infrastructure. Basically, PKI offer asymmetric key implementation that based on Public and Private Key pair compare to other shared-key or shared-secret method. With that private key that stored in user secure environment(mobile storage/smart card), this can offer higher level of trust.
Benefit of PKI-Based National Digital ID
From a wider perspective, implementation of PKI in national identity management systems can bring various benefit as following
• PKI technology can create high trust environment to provide non-repudiate online transaction
• Effectively resolve online fraud problems if service provider can offer more security services based on National Digital ID
• Assemble services more quickly and at lower cost (Paperless and Presentless Transaction)
• Establish trust and avail services over digital networks.
• By harnessing digital to build and deliver services, the government can transform the relationship between citizen and state and inter-communication between agency.
• Centralize identity provider and deploy various services provider mode
• Ensure online transaction security (transaction signing and verification)
• Empower government servant to deliver differentiated services
• Transform your paper-based process to real-time transaction that increase Paperless productivity
• Conduct more transaction remotely without in-person presence.
What are the current challenges?
In fact we are not new to Digital ID as currently we access many system online such as
• Access bank services via OTP authentication
• Access eWallet app via PIN with OTP
• Access government services with user name and password.
Based on above we know that we have different user credentials by using mobile as the additional channel to protect our account. From my personal point of view, the OTP security protection level is not a future-proof option when we move to new digital economy era such as digital bank setup and much more collaboration-needed digital ecosystem. Without assure the real digital identity (Who we work with) in online transaction, is hard to build the trust within this digital-ecosystem.
High level of current Digital ID challenge.
• No standardization on digital identity security protection
• Fragmentation/Silo based implementation that caused duplication of setup and maintenance cost
• Interoperability problems
• High cost of investment for service provider to offer secure digital identity
As a conclusion, National Digital ID can bring benefits to the nation as below.
Secure Cyber Security Foundation
• Secure foundation of digital identity ecosystem
• Seamless user experience when access government services (User authentication and authorization)
• Transaction verification & Secure exchange of data
• Business valued-added services for example digital agreement signing which will facilitate end-to-end digitalisation of business
• Secure access to online financial services
• Secure identification and authentication can effectively prevent online financial crime
• Lack of Interoperable standards;
• The ability to check/validate any identity;
• Protect high-value transactions and will also support the use of biometrics for added identity assurance of their customers.
• Paperless productivity
Paperless Government
Government can transform the paper-intensive organisation to cut out expensive and inefficient paper-based process. This can improve the organization efficiency, strong audit trails and decision tractability and control. Under e-Gov initiative In addition gov can offer more services to citizens and business for example authenticate digital identities and retain long-term evidence proving who submitted e-documents.
New Secure Application
• Agreement & Form Signing
• National Digital Transaction Platform
• Mobile PKI ID
• PEPPOL eInvoice
• Trust Verifier Platform
• Secure Paperless Solution
• National Data Exchange Platform
• Trust Service Foundation
You can contact sales@idthrivo.com to arrange a demo on how our product ThrivoSign can help government in building secure PKI-Based application.
