Valimo Mobile ID Overview

Valimo Mobile ID

The Secure Registration Process

Once identified at the registration center the Mobile ID process begins.

Valimo Registration Server sends a request to the Valimo Mobile Signature Server to communicate with your phone via an encrypted SMS. Valimo's security client, VMAC, which is embedded in the mobile phone's secure element, asks you to select your specific PIN code to be used for your Mobile ID. When the PIN is entered private keys are generated on-board the secure element in the handset (such as a SIM card). These security keys never leave the tamper-proof chip on the handset and can be utilized only by you.

Then, your public key is securely sent to the Valimo MSSC, which forwards it to the Valimo Registration Server. The Valimo Registration Server links the necessary user information with the public key and sends a request to a Certificate Authority (CA) to create a certificate tying you and your unique public key securely together. Now you can start using your Online ID.

Everyday Use

Whenever you need to authenticate you or sign a transaction online, on your mobile phone, or using any service, the user experience is always fast and convenient.

First you give your phone number or some other unique identifier to the online service, such as online banking. This identifier is first checked by the Valimo ID Server. Valimo ID Server then asks the Valimo Signature Server to send an authentication or signing request via Valimo Messaging Server to your handset by an encrypted SMS. VMAC on your handset then informs you about the transaction you are now conducting, asks you to approve it, and then asks you to verify that the mobile phone is in the hands of rightful owner by requesting that you enter your own PIN. Once the correct PIN is entered, VMAC signs the transaction and sends it via Valimo Messaging Server to Valimo Signature Server for validation. Valimo Signature Server then sends the signature to Valimo ID Server for validation and to grant or deny your access to the service or to accept the secured transaction.

This is simple and intuitive. Say you wish to confirm a payment transaction on your online bank. You simply press the "Confirm" button on the online bank and then in seconds a message appears on your mobile phone's screen stating the details of the transaction for your verification. If correct, you press "OK", enter the PIN code when prompted and then after few seconds your online bank tells you the confirmation is OK and you also receive a confirmation message to your phone.

No unsecure passwords. No extra devices to carry with you. Valimo Mobile ID works for all services, all channels and has legal validity. Very simply, Valimo Mobile ID combines high level of security and user convenience.

Attachment	Description	Size
Valimo Solution Architecture.pdf	Valimo Solution Architecture PDF	520.6 KB