We all want speed, convenience and security when we access our bank accounts, pay for goods, use mobile ticketing, interact with the authorities, or log on to our workplace systems.
Mobile technology plays an increasingly large role in the modernization of administrative processes, both internally, for the civil servants themselves, as well as for the delivery of online services. The mobile device has become the preferred access point to online services across many sectors, a trend which governments can tap into.
Mobile ID should enable governments to grant the consumer access to a wide range of online and offline services by using private mobile devices as a means of identification. Securely stored in a smart mobile device, the citizen’s ID can be presented and verified with the highest level of privacy protection.
What about security?
In terms of security foundations, the secure element will continue to act as a trust anchor in mobile ID systems requiring high levels of security, such as financial transactions. This can be used for tamper- resistant credential storage and service processing. Choice of form factor – SIM card, embedded SE or microSD card – will be driven by the market needs of service providers and end-users. The use of such trust anchors will enable that mobile ID applications are implemented securely and fulfill specific privacy and security requirements.
Partner of trust!
Infineon’s mobile ID solution perfectly migrates the traditional eID to the mobile world. Biometric personal data is stored in a secured eID document and can only be retrieved via an encrypted channel.
For the Mobile ID application, the device only uses the biometric data temporarily for authentication. Our Embedded Secure Element is the most suitable vault for personal data – it encrypts and stores it and creates a personal crypto software token in form of a credential. This identifier is not a duplicate of the eID but a derived temporary token. The eID server, after remote registration, displays a verified certificate of this person and can be connected to any service provider for secured authorization.