Warwickshire/GDS projects - Identity Assurance & Attribute Exchange | Ian Litton | October 2014
•Download as PPTX, PDF•
0 likes•698 views
Presentation on Identity Assurance and Attribute Exchange for Warwickshire County Council digital projects. Presented by Ian Litton Strategy, Programme and Information Manager at Warwickshire County Council, at the DVLA Local-Central Discovery Day in Bristol on 1 October 2014.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Warwickshire/GDS projects - Identity Assurance & Attribute Exchange | Ian Litton | October 2014
Similar to Warwickshire/GDS projects - Identity Assurance & Attribute Exchange | Ian Litton | October 2014 (20)
More from Department for Communities and Local Government Local Digital Campaign
More from Department for Communities and Local Government Local Digital Campaign (20)
Recently uploaded
Recently uploaded (20)
Warwickshire/GDS projects - Identity Assurance & Attribute Exchange | Ian Litton | October 2014
- 1. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Warwickshire/GDS projects Identity Assurance & Attribute Exchange Ian Litton Strategy, Programme and Information Manager WCC 1st October 2014
- 2. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Some definitions • Identity assurance – Knowing who you are dealing with online to a defined level of certainty – LoA2 • Attribute exchange – Real-time, on-line exchange of data to prove eligibility for service
- 3. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Why IDAP matters to LAs • Underpins Digital by Default • Single ID for citizens • Reduces LA risk • Reduces system suppliers’ risks • Underpins Attribute Exchange
- 4. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Attribute exchange • Eligibility-based transactions • Remove paper proof • 10 weeks to 10 minutes • Service improvements • Cost savings
- 5. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Blue Badge proof of concept • The following slides show the proof of concept screens • The proof of concept was user tested – 13 test subjects – 11 were over 60 years old – Two sessions, with screen improvements for the second session
- 6. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 7. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 8. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 9. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 10. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 11. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 12. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 13. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil
- 14. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil What did the users think? • Felt comfortable with the process • Understood what was going on • Appreciated the need to confirm an applicant’s identity and eligibility • Very happy to give permission to share attributes • User journey had the “wow” factor.
- 15. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Key points • Real-time data sharing • Part of a specific online transaction • Data is specific and limited • Data shared with customer permission • Clear and explicit process – users like it • 1 login, 2 transactions • Bundling of related services
- 16. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Current project status • IDA – Interoperability proven – “Verify” going into public beta – Commercial arrangements for LAs? • Attribute exchange – Discovery completed – Moving into Alpha • White papers on oixuk.org
- 17. WarWwaircwkicskhsihriere CCoouunntyt Cyo Cunocuilncil Other activities • Engaging with attribute providers • Engaging with suppliers • Addressing commercial issues • Spreading the word
Editor's Notes
- Digital by Default – services so good that people choose to use them. And they save us money too… Services that are high risk, or involve personal data and case-related material are likely to require assured identities. Single ID for citizens. Good for citizens. Ubiquity is good for everyone – central and local government alike: One ID to get familiar with Reduces confusion Builds familiarity – more transactions where it can be used Builds brand More likely to drive up digital delivery Registering a citizen is a common good LAs deliver services from cradle to grave Reduces risk for local authorities Complex agenda Build once and reuse Accredited by CESG Built to Privacy and Consumer Advisory Group principles No one LA could achieve that alone Reduces 3rd party suppliers’ risks. They need to be part of the ecosystem to achieve a single, ubiquitous citizen ID One standard interface across government reduces their risk and cost Underpins Attribute Exchange The real game changer…could deliver radical transformational change
- Attribute exchange – online, real-time exchange of data to deliver online transactions Allow us to put complex, eligibility-based transactions online Removing paper proof is key – the time-consuming and inconvenient element Blue Badges. Can be up to 10 weeks to process in Bristol. Could be done in 10 minutes with attribute exchange And it will deliver better customer service for a vulnerable group. Cost savings Blue Badges - £2m of annual savings to be made nationally from attribute exchange DVLA data – potential to save £100m per annum in LAs DWP and HMRC data could save much more Benefits to attribute providers too – reduce the “noise" of providing customers with proofs of eligibility
- There are 3 simple steps to applying online. The user starts at the County Council web site
- Online eligibility checks would be possible for anyone meeting the primary eligibility criteria. These applicants do not need to go through any further face to face checks. Nationally this accounts for 40% of all applicants. The 6 primary eligibility criteria are listed on this screen
- Because a blue badge is a benefit in kind, and eligibility criteria need to be checked, the applicant has to sign in with a gov.uk accredited identity. The Identity Assurance scheme is now called “Verify”.
- But first the applicant has to give explicit permission for data about them to be shared with the local authority. This is a pre-requisite of applying online. User experience testing shows that people are quite comfortable with this as they understand the need to reduce fraud. Explicit permission meets the expectations of the Privacy and Consumer Advisory Group, but is also good practice under the Data Protection Act.
- If an applicant already has a gov.uk assured identity then they can simply log in and use it for this new transaction. This is the user journey you are seeing here. A key principle of the government’s identity assurance programme is that the customer should be able to carry out any government transaction with the same credentials. As well as logging in with an email address and password the user will be sent a one-time token by SMS to give two-factor authentication
- Once signed in, the applicant can see the progress of the attribute exchange process. It is important that the customer is clear what data is being exchanged and with whom. The current GDS/WCC project is designing the architecture to allow all this to happen.
- The applicant is given a summary of their application to sign off. The applicant’s personal details have all been picked up from the identity provider who assured their identity in the first place. Processes would need to be put in place in case applicants have moved house, or other aspects of their personal details need to be updated. The applicant confirms the data is correct before applying
- The transaction is summarised, and the applicant has the opportunity to see a copy of the application details. If other services rely on the same eligibility criteria then the user could be fast tracked through the application process. For example, a Blue Badge holder may be eligible for a disabled parking bay outside their house. They could complete the application for this in the same session without the need to sign in again.
- IDA: Interoperability was proven in the first WCC/GDS Alpha project – see the white paper on oixuk.org Verify (as the Government IDA scheme is now branded), goes into public Beta in October 2014 As yet there is no commercial vehicle for LAs to procure government IDA services Attribute Exchange: WCC/GDS Discovery project completed in August 2014 – see the white paper on oixuk.org Moving into alpha in October Will write up by April 2015
- Need to get government attribute providers engaged, and attribute exchange in their development programmes Need to engage with suppliers – both suppliers of the attribute exchange infrastructure and suppliers of third-party systems to local and central government Need to ensure there are commercial vehicles for local government to procure identity assurance and attribute exchange services Need to get the message out to local authorities about the national work that is underway, and the need for any current work to adopt the same standards to ensure interoperability later.