Index of documents supporting the Grant of Approval to Morpho UK Limited’s SecureIdentity Service.

1. What the tScheme Approved Service Mark signifies.
2. Approved Service - Service Description
3. Approval Profiles used in the assessment:
   

   Base Approval Profile	tSd0111	3.00
   Profile for Identity Registration	tSd0108	2.06
   Profile for an Identity Provider	tSd0112	1.00
   Profile for Credential Management	tSd0113	1.00

Back to Grant details

---

What the tScheme Approved Service Mark signifies

When a trust service carries the tScheme Mark, you can be secure in the knowledge that:

• the service has been thoroughly evaluated against rigorous criteria by independent experts;
  
  
• the service provider has agreed to keep to these criteria;
  
  
• the service provider subscribes to the tScheme Code of Conduct;
  
  
• the service provider has agreed to act promptly and fairly to remedy faults.
  
  

For each service, tScheme approval is regularly reviewed and may be withdrawn.

This Grant of Approval does not affirm or endorse any claims of conformance to standards or adherence to guidelines not explicitly listed as forming part of the service assessment.

top

---

Approved Service - Service Description

The subject service of this Grant of Approval is the SecureIdentity Service from Morpho UK Limited.

SecureIdentity is designed to allow an adult Subscriber to securely authenticate himself/herself to UK official on-line services without the need to repeatedly transmit personal data. It allows the Subscriber to keep a complete control over all his/her personal data he/she provided at the enrolment while Morpho-UK runs the Service infrastructure at its secure Trust Service centre.

The Subscriber registers on his/her personal terminal (smartphone, tablet) and provides a small set of personal data among the list of authorised data. Based on this, SecureIdentity automatically searches public and private databases to validate these evidences to eventually verify the declared identity.

Key features of the SecureIdentity are:

• Complete managed service;
• Regular automatic identity re-validation. The Identity is revalidated every 6 months when a new sign-in request is received;
• Secure infrastructure designed to meet and assessed against ISO27001:2013 (certification planned during first half of 2016);
• Compliance with the UK Data Protection Act 1998 and all other relevant UK Data Protection Laws;
• Compliance with the HMG (Her Majesty’s Government) IPV Operations Manual Version 2.3.1;
• Compliance to the HMG Good Practice Guide 45: Identity Proofing and Verification of an Individual;
• Support of a variety of personal data including UK Passport, Driver licence, etc.;
• Support of a variety of personal terminals including Smartphone (Apple, Android, etc.);
• Operational 24/7 with physically remote secure contingency facility;
• Customer support through a Service desk opened 14 hours a day during the week (less during the week-end).

The service is built using Morpho technologies trusted by dozens of governments world-wide and utilises industry standard protocols and best practises to protect personal information.

top

---

The tScheme Code of Conduct

Participants in the electronic trust services industry strive:

• to act in an honest, fair, reasonable and trustworthy manner;
  
  
• not to bring electronic trust services into disrepute;
  
  
• to provide clear information about what each electronic trust service provides, including limitations and exclusions, to those who rely on that service;
  
  
• to meet service commitments and obligations;
  
  
• to be proactive in identifying and correcting faults and deficiencies in electronic trust services;
  
  
• to operate in accordance with appropriate standards;
  
  
• to act promptly in resolving complaints relating to electronic trust services.

top

 

copyright tScheme 2017 | Privacy | Accessibility | Designed by Infocuswebs.com