The Mobile Connect services of the Dutch telecom operators enable service providers such as banks, webshops and social media to easily verify data of their users. And users can safely login, just with their mobile phone.
On websites and apps you usually login with a username and password. This is not always secure. Many people reuse their password and passwords my be compromised, e.g. through phishing or a data leak. For this reason some service providers add an extra verification factor, such as a one time SMS-code. This makes the login more secure, but is less convenient. And sometimes criminals are able to intercept this code.
The Mobile Connect services of the Dutch telecom operators provide a user friendly and secure solution.
Mobile Connect is a worldwide standard developed by the GSMA, an international association of mobile network operators. The GSMA has developed Mobile Connect to enable mobile users to share sensitive data, and undertake online transactions with confidence.
Dutch telecom operators, including KPN, Odido and Vodafone, believe it is important that consumers can use the internet in a safe way. Therefore they work together within Association COIN to combat online fraud and to introduce services that protect consumers against online fraud and cybercrime.
Within COIN telecom operators have made standardization agreements to ensure the proper working of Mobile Connect services in the Netherlands. This includes agreements with respect to the Mobile Connect ecosystem, the common processes and infrastructure and the technical interfaces. As a result the Mobile Connect services work the same, regardless of the telecom operator you are subscribed to.
Currently there are three Mobile Connect services available on the Dutch market: Number Verify, Account Takeover Protection and Match. These services each contribute in their own way to secure online transactions. Service providers can use these services seperate or in combination. Privacy conditions apply in order to use this service.
Number Verify enables service providers to verify if a user has access to the mobile phone number that he has provided. For this purpose, the mobile operator verifies whether a mobile phone number belongs to a specific user. A service provider can use this to easily control the identity of a user. And the user can easily login with his mobile phone.
Service providers can use Number Verify also as an extra, user-friendly, verification step when identifying users or to validate online transactions, e.g. replacing a one time SMS-code.
Visit the following website for more information on Number Verify: www.numberverify.org.
The Account Takeover Protection service allows service providers to verify if a user's SIM card has been changed recently. This service is very effective in preventing identity fraud based on mobile telephone numbers, or SIM swap fraud. Service providers can use this service to secure SMS one time passwords.
The Match service enables service providers to easily verify data of a user, such as name, address and date of birth. The verification is performed with the data of the same user from the telecom operator. This allows a service provider to verify a user's identity and counter fraud.
Match is a privacy friendly solution. All data is encrypted before it is being verified. This will result in a positive or negative match. As a result no personal data is exchanged.
A central component in the Mobile Connect ecosystem is the COIN Mobile Connect Discovery Service. The COIN Mobile Connect Discovery Service directs a service provider to the correct mobile operator. This is based on the telephone number of the user. Subsequently the mobile operator will execute the authentication request. The COIN Mobile Connect Discovery Service is an integral part of the Dutch Mobile Connect ecosystem.
Mobile Connect is a privacy-friendly solution and the user always keeps control over his data and with whom it will be shared. Mobile Connect also uses techniques to protect the privacy of the user. Personal data is encrypted and will only be shared when it is really needed.
For more information you can contact the participating operators: KPN, Odido and Vodafone.