What is BankID

1
What is BankID?

• BankID is a infrastructure that offers secure
  electronic identification and signatures over the
  Internet
• BankID is used by members of the public,
  authorities, companies and other organisations
• Nearly all Swedish banks are connected to BankID
• BankID was developed to meet requirements from
  the Swedish authorities to enable e-government
• BankID has been in production for almost 2 years

2
Why BankID?

• The European Union has specified requirements for
  electronic signatures
• The Swedish government, as other countries within
  the EU, has already implementing the
  specification in some national law
• The Swedish government has required that all
  departments, municipals and other authorities
  shall provide 24x7 e-government web-services to
  the citizens
• BankID fully meets the requirements for
  identification in these web-services, and is the
  preferred choice

3
Important facts

• One national ID-number accepted and used by
  everyone
• The Banks issues BankIDs to there Internetbank
  customers
• More than 50 of the Swedish population are
  Internetbank

• Nearly all Swedish banks are connected to the
  BankID infrastructure
• The Bank guarantees the identity of the BankID
  user

4
The security foundation

• For the Bank to guarantee the identity, we need
  to understand/control the security in every link
  of the chain
• Primary Identification
• Issuing and using BankID
• Validation of transactions
• Revocation

5
How does it work?
Client
Create signature
6
Some Companies, Government and Local Authorities
using BankID

• Banks for Internet banking
• The Tax Office
• The National Health Insurance agency
• Change your address
• Pension information planning portal
• Municipal services
• Register companies, name changes
• Online credit process for e-business shopping
• Etc.

7
Future plans

• 100 of the Swedish Internetbank market
• Document Signing with Adobe
• Payment services
• Expansion in / cooperation with other countries
• Smartcards / USB-dongles
• Integration with EMV cards
• Integration with National ID cards
• WPKI Signing using your phone!

8
Wireless PKI safety by phone

• Standard specification project finished
• Proof of concept usability proven
• Vodafone, Telia Sonera Tele2
• All major Swedish banks
• Building on WAP and WIM standards
• Private keys on the SIM-card
• New channel using the same infrastructure
• The phone as the (near)perfect secure
  token/security channel
• Works with different information channels

9
The driving forces behind the concept

• Swedish parlament require that every authority
  provides secure 24x7 web services
• Increased service level towards citizens
• Great cost cutting potential
• Very high Internetbank penetration and all major
  banks are connected to BankID
• Lower cost/shared funding in a common solution