Case Studies

Strategy Development

nist2 www.nstic.gov

National Strategy for Trusted Identities in Cyberspace (NSTIC) – a strategy signed by the President to improve security and privacy of online identity across the public and private sectors. The National Strategy for Trusted Identities in Cyberspace (NSTIC or Strategy) charts a course for the public and private sectors to collaborate to raise the level of trust associated with the identities of individuals, organizations, networks, services, and devices involved in online transactions.

The realization of it’s vision is the user-centric “Identity Ecosystem” described in this Strategy. It is an online environment where individuals and organizations will be able to trust each other because they follow agreed upon standards to obtain and authenticate their digital identities—and the digital identities of devices The Identity Ecosystem is designed to securely support transactions that range from anonymous to fully-authenticated and from low- to high-value The Identity Ecosystem, as envisioned here, will increase the following:

Privacy protections for individuals, who will be able trust that their personal data is handled fairly and transparently
Convenience for individuals, who may choose to manage fewer passwords or accounts than they do today
Efficiency for organizations, which will benefit from a reduction in paper-based and account management processes
Ease-of-use, by automating identity solutions whenever possible and basing them on technology that is simple to operate
Security, by making it more difficult for criminals to compromise online transactions
Confidence that digital identities are adequately protected, thereby promoting the use of online services
Innovation, by lowering the risk associated with sensitive services and by enabling service providers to develop or expand their online presence
Choice, as service providers offer individuals different—yet interoperable—identity credentials and media.

Product Implementation

gsma

www.gsma.com/personaldata/

Across many industries, from entertainment to banking, from health to e-government, services and processes are becoming both more digital and more mobile, yielding efficiency and convenience benefits for individuals and businesses alike. However, consumers want to be able to access these services securely, shielded by robust privacy safeguards and strong data protection. The GSMA Personal Data programme is developing digital identity solutions that offer a safe, seamless and convenient consumer experience, a consistent user interface and low barriers to entry across the digital identity ecosystem, thereby driving global scale.

One of the GSMA’s top four priority programmes, the Personal Data initiative has developed Mobile Connect, a fast and secure login system that enables individuals to access their online accounts with just a single click or, where appropriate, automatically. Mobile Connect can provide different levels of security, ranging from low-level website access to highly-secure bank-grade authentication. Mobile Connect promises to make passwords a thing of the past.

Kimble & Associates is working with GSMA and mobile operator partners to address the online authentication issues of today and enabling citizens to not only access more services online, but doing so in a more secure and privacy enhancing way.

Security and Privacy Services

SCC logo

www.sccgov.org

In recent years, there has been significant attention focused on the privacy and security of citizen, consumer and patient data. People are becoming increasingly aware of how their personal information is being handled as numerous data breaches have occurred in the public and private sectors, alike. People are also realizing that enabling online transactions does not always mean having to share personal information. For example, does a movie theater need to know a person’s full name, address, and other personal details when buying a movie ticket at the theater?  Or does the theater simply need to know that the person is over a certain age?  These considerations are becoming even more relevant in today’s digital marketplace. Companies and organizations are facing the ramifications of not protecting people’s private data.  Simultaneously people are realizing the impacts of poor privacy options in conducting transactions online. 

Kimble and Associates and Santa Clara County are building a best of breed privacy program by incorporating privacy by design principles, leveraging past experiences from building privacy programs, and coordinating executive level relationships across the public and private sectors. 

Santa Clara County is the fifth most populous County in California, with a population of nearly 1.8 million people. The County contains fifteen cities, encompassing approximately 1,300 square miles, which have large concentrations of electronics, research and manufacturing firms. Santa Clara County is the fifth-largest County government in the State and has an estimated workforce of 15,000.