AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get...

10
1 MorphoTrust USA, LLC AAMVA International Digital Identity Workshop August 22 nd , 2017 The mDL as platform for Digital Transformation Simplify Protect Secure

Transcript of AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get...

Page 1: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

1

MorphoTrust USA, LLC

AAMVA International

Digital Identity WorkshopAugust 22nd, 2017

The mDL as platform for Digital Transformation

Simplify Protect Secure

Page 2: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

3

MorphoTrust USA, LLC

Mobile Driver License (mDL)

Our Mobile Driver License (mDL) gives today’s consumers the

convenience and option of having a genuine, broadly accepted

driver license accessible on their mobile phone that is

dynamically tied back to a SOR.

Simplify. Protect. Secure.

Page 3: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

4

MorphoTrust USA, LLC

mDL’s Value to the Digital Ecosystem

Administrator (MVA)

• Economics, customer service, resources

• Push dynamic updates

• Enabling trusted information (fraud reduction)

• Improved access to services

User

• Easy and Convenient

• Privacy through control of PII and minimal data

Authenticators

• Trustworthy visual and electronic security features

• Synchronized to the System of Record

• Machine readable

• Auditable record

• Age based indicator

Law Enforcement

• Trusted identification & verification

Other Government Agencies

• TSA, DOS, DHS, HHS, Medicaid

LawEnforcement

MVA

Users

Authenticators

Other Gov’tAgencies

Simplify. Protect. Secure.

Page 4: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

5

MorphoTrust USA, LLC

What must happen for Trust?

Only I can Use My Identity (Everywhere)

• Authentication Assurance Level (AAL) = Usage

• Simple Integration for Verifiers (Relying Parties)

• Biometrics and MFA to Protect User Privacy

Provision Identity to the RIGHT Person

• Identity Assurance Level (IAL) = Proofing

• Platform for Secure Storage

• Tamper Proofing for Reliable Usage

Framework for Trust between all Parties

• Identity and Trust Agreements

• Legislation, Rules, and Policies of Operation

• Comprehensive Business Model

Standardization

will drive trust

through this

value chain:• Interoperable

• Privacy-

Enhancing

• Secure

Simplify. Protect. Secure.

Page 5: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

6

MorphoTrust USA, LLC

Provisioning to the Right Person for THEM to Manage

• No In-Person Burden for Provisioning

• Accuracy MUST be better than PIN

– Email is easy to take over and steal Access Codes

– Mailed PIN codes can be swiped or forgotten

• Mobile Users Expect Apps On-Demand

Simplify. Protect. Secure.

Page 6: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

7

MorphoTrust USA, LLC

mDL Registration Process

Accurate, 30-second identity proofing on

any mobile device that transfers the trust

of the DL/ID to the citizen for them to

manage and use on their mobile phone

Applicant

(with their DL)

Quick Registration

(Derived Identity)

2. Authenticate

Document

3. Get

Data

4. Live Person(biometric)

Biometric & Demographic

Verification at DMV

DMV & Fabric

identity scoring service

Mobile identity

ready for use

• High Trust Identity

• Strong Credential

• Multi-Factor Authenticator

1. Mobile Number

& Device

Simplify. Protect. Secure.

Page 7: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

8

MorphoTrust USA, LLC

Simplify Integration for Relying Parties (RPs)

• Key to Creating Adoption

• Multiple ways for Citizen to Use Identity

• Common Data Model

• Must Operate Globally

• Standards Ensure Security and Interoperability

• Open Source and Tools for Integrating Easily

Simplify. Protect. Secure.

Share (App)

• Scan

• Receive

Lookup (Token)

Transmit (Signed Data)

Page 8: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

9

MorphoTrust USA, LLC

Protect the Privacy of Citizens

• Managed by the Citizen

• Just-in-time Clear Informed Consent

• Biometrics to Protect the Privacy of People

• Understandable Privacy Policies that All

Parties can Adhere To and Enforce

– https://policies.morphotrust.com/

• Privacy Engineering from the Ground Up

– Realize Privacy By Design with IIP Architecture

Simplify. Protect. Secure.

Interactive Information Privacy

Page 9: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

10

MorphoTrust USA, LLC

Secure and Interoperable through Standardization

• Trust Framework and Assessor Conformance

• ISO 18013 Mobile Driver License, Task Force 14

• FIDO Alliance – Universal Authentication Framework

• JSON Identity Suite (JWTs) extended for Legal Identity

• Open ID Connect and Standardized Identity Tokens

Simplify. Protect. Secure.

Page 10: AAMVA International Digital Identity Workshop · (Derived Identity) 2. Authenticate Document 3. Get Data 4. Live Person (biometric) Biometric & Demographic Verification at DMV DMV

11

MorphoTrust USA, LLC

What will Relying Parties do with a strong identity?

Identity

Contextual

Core

• Obtain Social Services

• Vote or Register to Vote

• Open Bank Accounts

• Peer to Peer Data Exchange

• Rent a Car, Car Sharing

• Check into Hotel

• Roadside Stop

• Board a Plane, Security Check• Federal Building Access

• Transmit Driving Privilege

• Enter a Bar, Club, Restaurant

• Age-Restricted Purchase

Unattended

At-a-Distance

Simplify. Protect. Secure.