Mobile Signature in Turkey
Total Page:16
File Type:pdf, Size:1020Kb
Mobile Signature in Turkey A case study of Turkcell: MobilImza Co-authored: GSMA Mobile Identity team & Turkcell 2 Mobile Signature in Turkey GSMA: Mobile Identity — Turkcell I. Executive Summary In 2007, Turkey was the first country to launch a mobile signature solution – Turkcell’s “MobilImza” service. Since then, the solution has evolved, the number of available services has increased, and usage per subscriber has multiplied by five. Turkcell is now a reference for other operators that have launched similar mobile signature solutions (e.g. Finland, Estonia) or are planning launches (e.g. Moldova). With a limited but growing number of users, Turkcell continues to identify and overcome barriers to adoption. This represents a good opportunity to study the requirements and key success factors of mobile signature solutions. This case study begins with a summary of the Turkish ecosystem, highlighting the favourable conditions that have contributed to the creation of the Turkcell mobile signature solution. It then describes the different aspects of the solution: technical architecture, partnerships, user adoption and usage, and the business model. Finally, it examines key success factors identified by Turkcell and the GSMA Mobile Identity team; factors such as the lean subscription process, favourable local legislation and necessary partnerships with service providers that drive adoption and usage. 3 Mobile Signature in Turkey GSMA: Mobile Identity — Turkcell II. Introduction to the Turkish environment and to Turkcell A. The Turkish environment 2. Mobile phone penetration An electronic ID card that includes an Mobile phone penetration in Turkey electronic certificate has been piloted 1 1. The importance of signature in is approximately 88% which, whilst since 2008 in some areas of Turkey with administrative processes high is still lower than the regional a national roll-out planned. 1 The launch of mobile signature average (99.8% in the Middle East ). 4. High popularity of internet services in Turkey was a global first. To Mobile internet has a larger reach understand why this technology than the regional average (43% of 3G Another reason to explain why Turkey emerged in Turkey in the first place, connections), however smartphone was first to launch mobile signature penetration is relatively low (11% is the sophisticated and demanding it is important to understand the role 2 of signature in Turkey. As in all other according to the latest figures ). nature of Turkish customers. E-banking countries, signatures are required to platforms are for example very finalise contracts. For example, opening These figures suggest that the advanced in Turkey. “Despite being a a bank account, even with a branchless emergence of mobile signature is not less-developed country than the UK, (online) bank, requires a contract with a due to an unusual success of mobile. the level of expectations for services traditional “wet signature”. Despite its It indicates that for a solution to be from banks and mobile operators is simplicity, it is the most universal way pervasive, it needs to be compatible much higher in Turkey” explains to authenticate documents. with all kinds of phone, including a former member of the MobilImza basic devices. team, now living in London. The launch In Turkey, a signature is required for of mobile signature was supported by 3. ID cards in Turkey many processes, which would not require the banks which were ready to improve proof of acceptance in other countries. ID cards are mandatory for every customers’ experiences. For example, it is compulsory for all citizen in Turkey from birth, and are companies in Turkey to collect employees’ widely accepted as a secure proof of signatures when monthly payslips are ID. This was a favourable condition for distributed. This is a legal necessity the launch of mobile signature since specified by the country’s labour laws. Certificate Authorities can refer to a The same is true for holiday requests, single database to check the identity of Positive factors for emergence of corporate flight reservations, annual leave individuals. But unlike many countries mobile signature in Turkey: and a number of other daily processes. that have launched mobile signature (e.g. Estonia, Finland), Turkish ID cards ■ Importance of signature in The extensive use of signatures explains are not electronic, and thus do not why Turkey adopted an electronic include electronic certificates. administrative processes signature law early in 2004 in order ■ High mobile phone to give digital signatures the same This represented both an opportunity penetration legal value as wet signatures. At that and a risk for the development of time, four Certificate Authorities mobile signature. On the one hand, it ■ Mandatory ID cards meant there was room for operators were designated by the State to issue ■ High popularity of internet digital certificates to companies and to play the role of an “electronic ID” individuals. Turkcell was able to rely provider. But on the other hand, it services on this pre-existing ecosystem for meant that service providers did not electronic signatures to launch mobile see the acceptance of electronic forms of signature in 2007, even though the Identity as a priority. law needed to be adapted slightly to include mobile use cases. 1. Turkey penetration: operators’ announcements as of 2Q12; ME penetration: Wireless Intelligence Q411 2. TomiAhonen Consulting Analysis December 2011, based on raw data from Google/Ipsos, the Netsize Guide/Informa, and TomiAhonen Almanac 2011 reported data 4 Mobile Signature in Turkey GSMA: Mobile Identity — Turkcell B. Turkcell specificities 2. Relation to service providers 3. Focus on innovation Turkcell runs a partner programme Innovation is one of Turkcell’s 1. Market share and since 2002 Turkcell has been corporate values. A separate entity Turkcell is the market leader in Turkey developing new products and services called Turkcell Teknoloji was created with a market share of 53%3, which with its partners and the programme in 2007 to work on the research has been a crucial element for the now includes over 200 business and development of new mobile launch of MobilImza, because Turkcell partners. Turkcell also launched a technologies, which since launch has alone had sufficient market share and programme called Turkcell LAB, facilitated three million hours of R&D therefore customer reach to convince targeting universities and developers. by its 360 engineers. service providers to adopt its mobile These programmes make it possible signature service. for the mobile operator to be in contact In addition to programmes tailored for with companies and individuals with individual end-users, Turkcell provides In most other countries where mobile specific expertise or capabilities in order products and services designed to signature has been launched, the to identify new business opportunities. boost productivity of its corporate State has lead the project and subscribers. Turkcell’s willingness to promoted interoperability between Turkcell developed and maintained offer innovative services and test new the different operators. Very few close relationships with the main technologies also helps to explain why operators have the market position to Turkish banks. In 2003, Turkcell Turkcell MobilImza was the first mobile independently lead the launch of initiated Mobile Payment in signature solution. a mobile signature service. cooperation with Yapi Kredi Bank, one of Turkey’s leading banks. In 2007, an SMS-based mobile advertising programme for consumer loans was launched with AKBank. In 2008 Turkcell and Garanti Bank worked together on an NFC pilot. These pre- existing partnerships helped Turkcell gain bank support when they first launched mobile signature. 3. Wireless Intelligence, Q4 2011 5 Mobile Signature in Turkey GSMA: Mobile Identity — Turkcell III. Turkcell’s mobile signature service: MobilImza A. Concept description 1. Vision and principle Mobile signature services are easy The idea behind Turkcell MobilImza to use, since they don’t require any is to offer a remote way to complete software installation. The certificate is transactions equivalent to an “original” activated Over-The-Air once the user signature on a hard copy - making has subscribed to the service. Signature it possible to sign documents and requests then automatically pop-up on authenticate oneself via a mobile phone, the user’s phone each time he requests in a way that is legally approved, access to secure services. Once the user secure, easy and convenient. has entered his PIN, the signature is sent to the service provider, who checks its Legal compliance is ensured by validity and grants access to the service. the 5070 Electronic Signature Law that was passed by the Turkish Making electronic signature mobile government in 2007. This law gives also made it more convenient for users. electronic signatures the same The smartcard alternative existed when authentication level as wet signature Turkcell launched MobilImza, but as long as they rely on a “qualified Turkcell desired “to spare subscribers certificate”. Qualified certificates are the hassle of buying and setting up a 4 defined by the ETSI Standards and smart card reader and carrying an extra 5 a directive by the EU Commission smartcard to perform secure online as certificates that are issued by an transactions with qualified digital authorised Certificate Authority signatures”6. following face-to-face verification of both the user and government