NTT DATA Corporation is beginning studies and development work toward implementation of services for private businesses using the computer chip embedded in smart card driver's licenses for simple and reliable personal authentication.
By using the information recorded on the chip embedded in the driver's license as authentication information, tampering and other illegal uses can be prevented and reliable identity verification can be achieved. NTT DATA has developed a smart card "pairing technology," which will make it easier to use a smart card driver's license in reliable personal authentication schemes for use in such consumer services as opening a banking account or contracting for cell phone use. NTT DATA will now carry out studies on utilizing this technology to develop a commercial authentication service aimed at private businesses.

Background

The changeover to chip-embedded smart card driver's licenses has been under way since 2007. The current schedule should have all Japanese prefectures issuing them by the end of this fiscal year.
The license information of a smart card driver's license is written electronically to the embedded chip. Even if the photo or information printed on the surface is altered, the information in the chip can be read and the authenticity of the digital data can be verified, enabling detection in case of tampering. Taking advantage of this feature, a smart card driver's license is potentially usable for preventing falsification of identity in consumer services requiring personal verification, such as when opening a bank account or contracting for cell phone use.
In order for information to be read from a smart card driver's license, however, the bearer must remember two different PIN numbers, set at the time of issuance, and enter them in the card reader each time. This is likely to be an impediment to use of the driver's license information in consumer services.

Project Overview

Normally the electronic data stored in a smart card driver's license can be read only by entering two PIN numbers set at the time the license was issued. NTT DATA has developed technology for password conversion pairing two smart cards. In place of PIN numbers, information on a second smart card carried by the user can be used as a key for reading the authentication data from the driver's license. In the service being developed, the two PIN numbers associated with the smart card driver's license (PIN1, PIN2) as well as identifying information on another medium (smart card or Osaifu-Keitai^®, etc.) carried by the user will be registered in advance in a data center as ID information (pairing). Then when reading electronic data stored in a smart card driver's license, the second medium can be scanned in place of password entry.

(* Patent applied for as Patent Application No. 2009-140364)

NTT DATA plans to study the implementation of this technology to authentication service for private companies. The expectation is that by making it more convenient to use the information stored in smart card driver's licenses, their use as a reliable means of authenticating personal identity will grow among private businesses.
The advantages for businesses using electronic data in smart card driver's licenses for authentication include the high reliability of such authentication, and also the possibility of switching from paper to electronic media for keeping records of authentication operations. The latter has benefits in such areas as strengthening compliance and improving efficiency of operations.
Smart card driver's license users will be freed from the bother of having to remember two PIN numbers and enter them each time, as well as from the problem of not having their authentication attempt accepted in case they forget a PIN number.

Service Configuration and Usage Scenarios

In the authentication service currently being studied and developed, the functions for verifying driver's license authenticity and for pairing with another smart card are expected to be provided from an authentication center as a SaaS service. Provision of additional services in the center is also being considered, such as identity verification proxy, age verification proxy, and tracking management proxy.

The resulting service is expected to be used in situations like the following.

Scenario 1: Identity authentication when opening a bank account

A consumer wanting to open a new banking account taps the smart card driver's license and mobile phone handset on the reader terminal to have the authenticating data verified. By reading the electronic data, the financial institution can perform more reliable personal identification than by looking at the printed surface of the driver's license alone. With the consumer's consent, the electronic data can be captured as customer information, reducing manual input for more efficient customer operations.

Scenario 2: Identity authentication at a convenience store information terminal

A customer picking up pre-ordered tickets or other product can tap the smart card driver's license and convenience store member's card to verify identity, without needing to enter the reservation number or the like. This is more convenient for customers while also helping to prevent identity falsification.

Further Developments

As smart card driver's licenses become the norm, NTT DATA plans to determine market needs for new services and expanded functions making use of this technology, while working closely with organizations responsible for related administrative systems and the operation of such a service, with a view to possible service introduction in fiscal 2010 or after.

* Osaifu-Keitai^® is a registered trademark of NTT DoCoMo, Inc.
* Other names of products, companies and organizations herein are the trademarks or registered trademarks of their respective owners.