m Commerce using mobile identities

1. m Commerce using mobile identities TDL Student Pilot - Case Study of Innovation in Verizon Identity Management Bharadwaj Pulugundla, MBA Solution Architect – Consumer Mobile Identity Management Identity & Privacy Services, Verizon Enterprise Solutions May 27, 2013

2. Verizon Identity Management • Verizon is a worldwide leading Managed Security, Cloud and Identity Service provider and has been very active in seeking opportunities to collaborate with both Government and Private Sector organizations both in the US and in Europe to develop Identity Ecosystem and Frameworks. Verizon provides Identity Services in more than 50 countries and to more than 25 Governments • Below are some examples of organization we participate in or have been a formal member. • EEMA • Trust in Digital Life (TDL) • Scoping the Single European Digital Identity Community (SSEDIC) • Open Identity Exchange (OIX) • NSTIC • OpenID Foundation (OIDF) • The World Economic Forum (WEF) – Tiger Team on Rethinking Personal Data

3. Background of the Project • Verizon is leading a pilot as part of the European Commission’s TDL (Trust in Digital Life) initiative together with International Student Identity Card (ISIC). • ISIC is a not for profit organization; Members of this association, (students, teachers and Youth) are issued with a ID card, with which they can obtain discounts from merchants. • ISIC has issued more than 100 million ID cards since 1953. • ISIC are planning to extend their current successful model to be available online. The Project Objectives This Student Pilot for e-Authentication aims to test the feasibility of a cross-country Identity Assurance ecosystem from the commercial, technical, legal and end user experience perspectives via an online and mobile Student Proposition. The pilot will aim to demonstrate three key attributes: A functioning and effective technical solution Attractive propositions to the Consumer, Relying Party, Identity and Attribute Providers A commercially viable business case.

4. Project Approach The project will provide benefits for the students and relying parties to join the pilot and continue to use the service beyond the end point. • Students • Discountsand promotions e.g. relevant call/text/data, software offers • Money in their pockets e.g. joining clinical trial, research • Saving time, and increasing self-awareness of their internet activity • Relying Parties • Increased customer entanglement and a more targeted relationship • Reduced cost to add services • Reduced fraud through false identities • Know that students are genuine *Scope will be extended to under 16 age group in a further stage, allowing questions around access for parents/minors, parental control , mandate and delegation etc. to be addressed. The pilot will work within the EU Commission sponsored Trust in Digital Life vision, objectives, and guiding principles. It will take a fully commercial approach from the outset; Target group: College and university students intially16+ * Geographic reach: Initially UK and Netherlands, then up to four more markets by end 2013, likely to Sweden, Italy, Germany and Spain. Employing a collaborative approach across all ecosystem participants such as Relying Parties, Identity and Attribute Providers; Referenced to the TDL framework and contextualised for this pilot; And building on existing work including NSTIC, TDL sprints and STORK, with EU alignment for consistency.

5. Student User Proposition • Students, 16+ in tertiary or further education • Becoming self-reliant in lifestyle and financial affairs • UK, NL, S, I + DE, E? • Virtual Identity enabling access to the services and products they need at this point in their lives • Enables and enriches their lifestyle, with strong benefits • Saving money through partner discounts, faster, more secure access to online services, academic resources, campus networks etc • Service exit must erase digital footprint • May stop using after given period of time, or in relation to specific services at eggraduation What • Online support free • Paid for telephone support via chargeable number Stop Find Get • Trigger points (Freshers week, University Admin, Travel, PC/Software purchase) • Local student unions (Issuers) promote locally • Relying Partners promote • Viral between students • Could be paid for by relying party and free at point of consumption • Any upfront payment easily recovered through financial and lifestyle benefits • Value stored in wallet showing pay-back in terms of discounts Get help Set up Pay for • Channel strategy via student touch points -local student unions, benefits providers, university admin, hotspot providers, cloud service providers • Leverage existing networks and providers wherever possibleeg level –up from social networks Use • Effortless user experience , easy and always convenient • Must place the service at the heart of the student lifestyle • Must reinforce control, privacy, security and therefore engender trust • Must have range of interface options • Painless online process, or from mobile • academic establishment act as AtPs to support verification • High LoA achieved by using real-world channels, eguni registration, receipt of first household bills

6. Relying Party Proposition • The student “ecosystem” i.e. • Commercial product or service providers • Academic institutions • Public Sector • UK, NL, S, I + DE, E? • A service to provide trusted digital identity, authentication and authorisation in order to be sure that the correct people can access student services and products • Commercial needs are tactical (sales promotion) or strategic (long term relationship) • Academic institutions need to ensure the security and integrity of internal resources • Public sector need to prove eligibility for provision of healthcare, welfare etc. • Reduce cost to acquire and securely transact with their consumers in student market What Stop Find • At cessation of service there must be no residual footprint or data retained • The Relying Party must be able to cease the service or switch providers easily Get help Get • Support requirements may vary e.g. a small retailer may only require basic support in office hours, whereas a large enterprise may require (and pay for) 24/7/365 support Pay for Set up • Marketing and awareness created by local student unions and cross-border organisations e.g. ISIC • Targeted marketing to companies and organisations (clearing houses, student loans) serving the student market, academic networks etc. • PR, case studies published with clear benefits for the target market Use • Options exist for the commercial model and provide flexibility • Payment per transaction • Annual fee for providing the service • Relatively easy and painless to set up e.g. it must be within the expertise of a small business (such as pizza delivery) while straightforward to integrate with the systems of a larger enterprise (such as a bank) • Existing customers given short ‘upgrade’ path from existing ID (so pre-populating) • Must integrate with existing infrastructure and processes • Must fit with the relying party’s channels whether online, call centre or face-to-face • Identity service can be obtained via both direct and indirect channels e.g. a rebranded (white label) service partner such as ISIC or enterprises reselling a white label solution

7. Relying Parties: Developing Strategy • Relying Parties at launch to be large, international benefits providers through ISIC • Targeting minimum 5 major Relying Parties • Seeking to leverage existing ISIC relationships e.g.. with Microsoft, Logitech, MasterCard • High profile strategic partners, motivated by long term value in relationship with students • Leveraging existing networks of Relying Parties, Attribute Providers • Initial discussions with GSMA and high-profile MNOs • Exploit opportunities within TDL • Microsoft potential for including online Office for students, xBox Live and Skype being investigated • Inclusion of TDL Academic Institutions where appropriate • Verizon relationship with UK OIX (Cabinet Office) initiative for UK based partners • Developing commercial model for Relying Parties • Proposal to be free initially, becoming chargeable • Full EMEA Identity Services Strategy under development

8. Partner roles in the Trust Framework

9. Functional Requirements

10. Solution Overview • Verizon is providing the solution, with the UIS cloud based identity management system, and m-commerce platform from Alcatel Lucent. • Students use their e-ID to obtain discounts and promotions, as well as easy login, security, privacy and more control of their data. This saves money and time, while increasing self-awareness of their internet activity • Benefits Providers (Relying Parties) get increased customer entanglement and a more targeted relationship , a reduced cost to add services, and reduced fraud through false identities, knowing that students are genuine Merchant ISIC Profile Database UIS (Credential issuance and Authentication) Payment Gateway m-commerce platform Mobile App Users

11. m Commerce using mobile identities TDL Student Pilot - Case Study of Innovation in Verizon Identity Management Bharadwaj Pulugundla, MBA Solution Architect – Consumer Mobile Identity Management Identity & Privacy Services, Verizon Enterprise Solutions May 27, 2013