Valimo Mobile ID Overview

Valimo Mobile ID

The Secure Registration Process

Once identified at the registration center the Mobile identity (ID) process begins.

Valimo Registration Server sends a request to the Valimo Mobile Signature Service Center (MSSC) to communicate with your phone via an encrypted SMS. Valimo's security client, VMAC, which is embedded in the mobile phone's secure element, asks you to select your specific PIN code to be used for your Mobile ID. When the PIN is entered private keys are generated on-board the secure element in the handset (such as a SIM card). These security keys never leave the tamper-proof chip on the handset and can be utilized only by you.

Then, your public key is securely sent to the Valimo MSSC, which forwards it to the Valimo Registration Server. The Valimo Registration Server links the necessary user information with the public key and sends a request to a Certificate Authority (CA) to create a certificate tying you and your unique public key securely together. Now you can start using your Online ID.

Everyday Use

Whenever you need to authenticate you or sign a transaction online, on your mobile phone, or using any service, the user experience is always fast and convenient.

First you give your phone number or some other unique identifier to the online service, such as online banking. This identifier is first checked by the Valimo ID Server. Valimo ID Server then asks the Valimo Validator - MSSP to send an authentication or signing request via Valimo MSSC to your handset by an encrypted SMS. VMAC on your handset then informs you about the transaction you are now conducting, asks you to approve it, and then asks you to verify that the mobile phone is in the hands of rightful owner by requesting that you enter your own PIN. Once the correct PIN is entered, VMAC signs the transaction and sends it via Valimo MSSC to Valimo MSSP for validation. Valimo MSSP then sends the signature to Valimo ID Server for validation and to grant or deny your access to the service or to accept the secured transaction. Finally, Valimo MSSP sends via Valimo MSSC a confirmation of the successful authentication or signing.

From your point of view as a user, this is simple and intuitive. Say you wish to confirm a payment transaction on your online bank. You simply press the "Confirm" button on the online bank and then in seconds a message appears on your mobile phone's screen stating the details of the transaction for your verification. If correct, you press "OK", enter the PIN code when prompted and then after few seconds your online bank tells you the confirmation is OK and you also receive a confirmation message to your phone.

No unsecure passwords. No extra devices to carry with you. Valimo online and mobile ID works for all services, all channels and has legal validity. Very simply, Valimo online and mobile ID provides you with best security and the most convenience.

Attachment	Description	Size
Valimo Solution Architecture.pdf	Valimo Solution Architecture PDF	520.6 KB