Page 70 - ITU-T Focus Group Digital Financial Services – Technology, innovation and competition
P. 70

ITU-T Focus Group Digital Financial Services
                                              Technology, Innovation and Competition



               positioning the MNOs in these markets as digital IDPs, the incumbent mobile money operators could benefit
               from crucial mobile data and the MNOs could benefit from commercial participation within DFS.

               However, in order for these applications to be successfully implemented, competition between IDPs needs to
               be carefully regulated. Too many providers operating in any single market can confuse consumers and lower
                                            rd
               the prospect of investment from 3  party funders.

               A.2.2  Federated IDP summary
                                                 Federated internet IDP model
                Description      Multiple digital IDPs offering federated ID services via interoperable standards for communica-
                                 tion protocols.

                Strengths        •    Enables interoperable standards for IDPs;
                                 •    Promotes competition and consumer choice;
                                 •    Privacy liability is spread across a number of providers.

                Weaknesses       •    Competition needs to be carefully regulated;
                                 •    Adoption of interoperable standards needs to reach sufficient scale in order to
                                      be effective.

                Examples         GSMA Mobile Connect, OpenID Connect


               A.3    State-issued eID provider architecture

               State-issued ID cards typically involve the control and access of personal data through a consumer issued
               authentication token (usually on a smartcard or mobile device) and a service provider-accessible middleware
               (e.g.: card reader infrastructure). Citizen data for the identification process is collected during government
               interactions such as birth registration. When a service provider wishes to gain access to this data the middleware
               is able to authenticate the card, for example, via cryptographic exchanges for, and provide access to the relevant
               data attributes. Usually both identification and authentication are performed as part of the scheme and hence
               the state can be viewed as an “IDP”.

               Figure 9: State-issued eID Cards

































                56
   65   66   67   68   69   70   71   72   73   74   75