Can Banks act as digitial ID providers? Is there money to be made?
Session Topic: Can Banks be IDP Providers (T3G)
Convener: Peter Van Swift
Notes-taker(s): Sid Sidner
Tags for the session - technology discussed/ideas considered:
Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:
SWIFT is wanting to issue certificates
USB cert token
Another project with an anonymous USB cert
that can be used anywhere
Recent innovation contest winner: eMe was 2008
Couldn't get it funded
2011 visited digital ID providers
Started a digital ID innovation project - well funded
Research phase: how far should Swift go? Should Swift be a trust broker
focusing on VRM
with a federted ID approach
The Digital ID Tuner: tunes across your identity, by both attribute and time
Use case: credit rating
Peter sees it as a sphere
David Segal "Pull"
belgian id system - one id for everything doesnt feel right
do consumers want this?
canadian banks tried it and failed
Pter this is not a consumer idea
What about telcos?
What about EMV?
Scott David but there is a problem mwith scaling up a system to Internet scale. How can we extend the Swift trust top a larger context.
if this is a new business for a bank or telco offers IDP, and then something goes wrong, what about brand damage.
Scott: pool the risk among many players
new topic know your customer
NIST LOA 4 ( or maybe three)
Scott: you are already kyc on corporations, a non real entity. This is similar to vetting virtual identies.
kyc is not shared between banks