Public Services Card Enhancing Services

1. Public Services Card Enhancing Services Bernard Fitzpatrick – DSP Seminar on Quality Customer Service Thursday 13th December 2012

2. Public Services Card • Background – SAFE • Design Requirements • Security Features • Progress to Date and Next Steps • Immediate Benefits • Questions and Answers

3. SAFE Principles • Standard Authentication Framework Environment • Rules based standards for establishing and authenticating identity • Facilitate access to public service across multiple channels • Identity token – e.g. the PSC

4. SAFE Levels • Safe 0 = No assurance of identity – not currently holder of a PPS number • Safe 1 = Balance of probabilities – current holders of a PPS number • Safe 2 = Substantial assurance – backed up by photograph and signature • Safe 3 = Beyond reasonable doubt – fingerprint captured at registration and digitally stored on the PSC

5. SAFE Level 2 • Minimum authentication level for PSC and most public services • Robust “Face to Face” registration in a designated SAFE Registration Office • Reduced Process – Known Customers • Capture of photo and signature • Proof of identity and evidence of address

6. Design Requirements • Standard “credit card” size • Multiple protection mechanisms • Immediately recognisable as being for use in the Public Services of Ireland • Comply with the best practice on accessibility/Official Languages Act

7. Data Inscribed on the Card(Section 263,SWCA 2005 as amended) • Name • PPS number • Photograph • Signature • Card issue number, and • Expiry date

8. Data Encoded on the Card (Section 263,SWCA 2005 as amended) • Date of birth • Sex • All former surnames (if any) of mother • Place of birth • All former surnames (if any) • Nationality • Name • PPS number • Photograph • Signature • Card issue number • Expiry date

11. Multiple Security Features • Polycarbonate Card • Laser Engraving • First Line Security Features (3) • Easily and speedily recognisable • Second Line Security Features (?) • Require specialist equipment • Third Line Security Features (?)

12. Phase 1 - Complete • Managed Service Provider • Design of physical PSC and its associated management systems • Internal system design to support robust SAFE registration and generate PSC requests • Accelerated roll-out of SAFE Registration functionality • Volume production commenced July 2012 following pilot

13. Phase 1 – Remaining Elements • Application of Facial Image Matching Software • Enhance the security environment using Hardware Security Modules

14. Phase 2 • Free Travel variant of PSC • Juvenile variant of PSC • Staff card – biometric trial • Pin Mailer • Card Reader Simulator • Provision of on-line authentication

15. SAFE Registration Process • SAFE 0 to 2 : DSP dedicated PPS number registration centres • SAFE 1 to 2 : Local/Branch Office network • Supplementary options under consideration • Other Agencies

16. Use Outside DSP Environment ? • EU Residence Permit? • NTMA? • Garda Age Card? • Others?

17. Immediate Benefits • Validation of Identity – provided SAFE principles are not undermined • Potential for substantial reduction in the rate of fraud and error • More secure payment token – chip and pin • Replacement of current insecure cards • Data enrichment – SAFE 2 registration • Efficiencies across the Public Service

18. Public Services Card Questions and Answers bernard.fitzpatrick@welfare.ie