This document discusses guidelines for digitization projects in Northern Europe. It provides examples of existing digital identity schemes in Denmark and Norway that have been successful. It then offers recommendations for developing new digital applications, including starting with simple financial use cases, reusing components, and creating an "app store" concept to encourage many small applications. Finally, it argues that all the necessary tools for digitization exist, and that the main requirement is confidence to move projects forward.

1. ‗Kick-Starting‘ Application Services
Effective Digitisation
Jon Shamah
Northern Europe‘s
leading Payments
and Identity
Services Provider
1 V1.04

2. Nets in brief
• Owned by Norwegian and Danish Banking Systems
• More than 2,100 skilled staff
• More than DKK 5.2 billion (€700 million) in revenues
• Nets‘ network connects more than 260 banks and 10 data
centres primarily in the Nordic region
• 17 million cards on Nets‘ platforms
• Payment services to most households in NO and DK
• Issued more than 6 million electronic identities
• Processes 1 billion E-ID transactions annually
• Services more than 300,000 merchants
• More than 425,000 terminals interact with Nets
• More than 230,000 terminals are sold/leased from Nets
• 140,000 creditors use our services along with 5,000
public sector customers
2
2

3. Case Study 1 - NemID Scheme
• Successful Private / Public Partnership
• 3.5 million users
• 400 million annual eID transactions
• Centrally Stored Electronic Identities
• Accepted by eGovernment, Private
Sector and Banks
• Trusted ID-Signature Infrastructure in
Denmark
• Winner of IBM‘s Year 2011 Smart Planet
Award
Securing Danish Banks, Public Sector, SMEs and Enterprises
3
3

4. Case Study 2 - BankID Scheme
• E-ID-scheme securing all e-banking
and e-payments
• 3.5 million users,
• 360 million annual eID transactions
• Multi-Channel Infrastructure
• Implemented for mobile commerce
and bank employees and used for
many e-government services
• Winner of 2006 EEMA Excellence
Award in Europe
Securing Norwegian eID Bank Services
4
4

5. Digitisation – not an National Identity Card
5

6. Digitisation Guidelines
• Do not be afraid of financial applications to build familiarity.
• Financial applications are the easiest to build business cases for
• Norway/Denmark have over 1.5 million eID transactions every day (from a
combined 7m+ users) of which the majority are authenticating routine
financial transactions.
• Make it easy and cheaper to develop large applications
• Re-use components and managed/cloud-based services if possible. This
reduces time-to-market and assists in reducing capital expenditure.
• In 2011, Nets managed service applications facilitated the signing of
over 500,000 digital signatures on PDF documents
• Be bold! Have digital application delivery channels only and outsource
interim non-digital obligations to ‗Assisted Services‘ from 3rd parties – it still
will work out cost effective.
• Small Applications: use an app-shop concept for many low cost mini-apps
able to share key components. Encourage creativity with tax concessions
and incentives
6

7. Example: Social Service Tickets/Vouchers
• Service Ticket/Voucher
• valid and redeemable for a particular approved social service or item with
approved suppliers and is not linked to a specific monetary value.
• virtual and is signed by participants in process as each stage
• Signatures needed are:
• Issuer
• Recipient
• Authorised Merchant
• Payment Authority
• Ticket can be provided by email or postal services with barcode to present to the
merchant. In the event of there being no digital identity available,
• Every stage of the process is signed on a central server and cannot be changed
7

8. Example: Safety Compliance
• Service consisting of a signing and workflow service is used in conjunction
with eIDs for Safety Assessment of a Public Venue.
Risk Evacuation Security
Equip Performance
Assessment Procedures Procedures
Health & Safety Manager x x x x
‘House’ Manager x x
‘Facilities’ Manager x
General Manager x
• This process will need to be completed for each event and many will
need to be signed in a specific order, collated and filed both on site and
externally.
• Digital completion, non-repudiation of documentation and archiving,
coupled with a flexible alert and warning system can ensure that tasks
are completed on time and documentation is filed and archived according
to regulations.
• Real experience has shown that timely completion of documentation
against hard deadlines is challenging, and can lead to fines and closures.
8

9. Example: Digitisation of Bank Loan Application
• Service consisting of a signing and workflow service is used in conjunction
with eIDs to digitally process bank loan application
Application Guarantee Contract Terms & Conditions
Applicant X x x
Advisor X x x
Manager X x x
Guarantor x x x
• Traditionally in this process can take over one month in time to complete
and require over 70 sheets of paper.
• Real examples have shown savings in excess of €70 per application and
each bank may process many thousands of applications per week.
• For the case of 10,000 applications per month, the saving to a bank is
worth approximately €8m+ per year.
9

10. Increasing the Numbers of Cheaper Applications
• There has been a revolution in the development and deployment of identity and
location based applications in the last number of years.
• July 7, 2011— ―Apple® today announced that over 15 billion apps have been downloaded
from its App Store‖
• There is no reason why a cloud-based eID ‗App Store‘ should not equally XXXXXX
be successful. – Google Apps is going in right direction!
• Trust / liability / SLAs could be dealt with through a ‗Shrink-Wrap‘ licence
• Could work in conjunction with attribute service provider
• Business Model could be per click or periodically
• Encouragement of creativity through tax concessions and incentives
10

11. Example: eID mini-Apps
• Health & Safety compliance process for SMEs
– Signed, countersigned and archived
• Short term entry authentication for public facilities
– removes need to leave ID card at swimming pool entrance
– proof of commune residence
• Acceptance of courier delivery
• Automated authenticated attendance
11

12. KEY TRANSACTION - ARCHIVING
12

13. eArchiving and Trust
• Major concern of SMEs is long term storage of digital
transactions for compliance with regulations.
• Availability
• Traceability
• Readability
• Understanding
• Accountability
• Security
13

14. CONCLUSIONS
14

15. Conclusions
• All the tools are available
• We just need the confidence !
15

16. Jon Shamah
Thank You Email: jshamah@ejconsultants.co.uk
UK Mobile: +44 7813-111290
Any questions ? NETS
http://www.nets.eu
16