GOV.UK Verify

Last updated

GOV.UK Verify was an identity assurance system developed by the British Government Digital Service (GDS) which was in operation between May 2016 and April 2023. The system was intended to provide a single trusted login across all British government digital services, verifying the user's identity in 15 minutes. [1] It allowed users to choose one of several companies to verify their identity to a standard level of assurance before accessing 22 central government online services. [2]

Contents

History

The Cabinet Office started work on the system in 2011, when it was known as the Identity Assurance Programme (IDAP). [1] [3] A private beta phase began in February 2014, [4] moving into public beta on 14 October 2014. [5] The system was declared live on 24 May 2016. [6] [7]

In June 2018, it was announced that the responsibility for digital ID policy had moved from GDS to the Department for Digital, Culture, Media & Sport. Responsibility for development and rollout of GOV.UK Verify remained with GDS. [8]

Certified companies

Third-party companies were responsible for carrying out identity verification within the scheme. The first five companies – known as identity providers (IdPs) – that signed up to provide the service through a tender issued by the Department for Work and Pensions [9] were the Post Office, Verizon, Experian, Digidentity and Mydex CIC. [10] After a further tender issued by the Cabinet Office in 2014, [11] Barclays, GB Group, Morpho and Royal Mail became certified companies. [12]

While Mydex CIC participated in the original tender process, it did not go on to become a certified GOV.UK identity provider. [13] In 2016, Verizon was temporarily [14] and then permanently [15] removed from the list of certified providers.

In October 2018, GDS announced that five of the seven identity providers – Barclays, Digidentity, Experian, Post Office and SecureIdentity – had signed contracts for a further 18 months. [16] Users of Citizensafe from GB Group and Royal Mail's identity service would be able to continue using their GOV.UK Verify identity for twelve months, but would need to set up a new account through one of the other five companies. [16] On 24 March 2020, Barclays stopped providing new GOV.UK verify digital identities, [17] and both SecureIdentity and Experian subsequently also pulled out of providing identities for both new and existing customers. [18] This left only two providers: Post Office and Digidentity. The Post Office depended on Digidentity infrastructure to operate as an identity provider. [19]

Level of assurance

GOV.UK Verify certified companies had to verify customers' identities to level 2 as defined by the Good Practice Guide 45 published jointly by CESG and the Cabinet Office. This level of identity assurance is intended to be sufficient to support a claim in a civil court. [20]

List of connected services

The following 22 services were connected to GOV.UK Verify as of January 2020: [21]

ServiceService provider
Total Reward Statements / Manage your NHS Pension NHS Business Services Authority
Get your State Pension Department for Work and Pensions
Sign your mortgage deed [22] HM Land Registry
Disclosure and barring service Home Office
Vehicle Operator Licensing Driver & Vehicle Standards Agency
Personal tax account HM Revenue & Customs
Check your income taxHM Revenue & Customs
Renew your short term medical driving licence Driver & Vehicle Licensing Agency
Report a medical condition that affects your drivingDriver & Vehicle Licensing Agency
Check your state pensionDepartment for Work and Pensions, HM Revenue & Customs
Universal Credit Digital Service Department for Work and Pensions
Help your friends or family with their taxHM Revenue & Customs
Claim a tax refundHM Revenue & Customs
Self Assessment tax returnHM Revenue & Customs
Claim for redundancy paymentInsolvency Service
View or share your driving licence informationDriver & Vehicle Licensing Agency
Rural Payments Department for Environment, Food & Rural Affairs
PAYE for employees: Company carHM Revenue & Customs
Social Work England Identity Department for Education
Teacher Student Loan Reimbursement SchemeDepartment for Education
Add a driving licence check code to your mobile phoneDriver & Vehicle Licensing Agency
Defence Cyber Protection Partnership Ministry of Defence

By October 2022, only five of those services were still using Verify: [23]

Sign your mortgage deedHM Land Registry
Disclosure and barring serviceHome Office
Vehicle Operator LicensingDriver & Vehicle Standards Agency
Rural PaymentsDepartment for Environment, Food and Rural Affairs
Add driving licence check code to your mobile phoneDriver & Vehicle Licensing Agency

Use beyond central government

Local government

GDS worked with local authorities from 2015 to pilot the use of GOV.UK Verify by local government. [24] [25] [26] Local government services piloted as of July 2017 included applying for free bus passes and 'blue badge' disabled parking permits. [27]

Private sector

From the outset, GDS had intended the use of GOV.UK Verify to be extended to the private sector. While work was underway in 2017, [28] this was still not in place in October 2018 when the GDS head Kevin Cunnington announced that "GOV.UK Verify is now mature enough for us to take it to the next stage – opening it up beyond the public sector for the private sector to take the lead". [16]

Cunnington announced that five of the identity providers had signed contracts for a further 18 months, after which the scheme would not receive further funding from government. The development of the scheme would instead be in the hands of the private sector. [16] [29]

NHS

GOV.UK Verify was one of the options considered by the National Health Service for its citizen identity solution. [30] In November 2018, the NHS announced that it was pursuing its own app-based solution, but was looking for a way to enable people who have a GOV.UK Verify account to use it to log in to NHS systems. [31]

International

Work was underway to enable non-British citizens to access the service from September 2018. [27]

GOV.UK Verify was designed to allow interoperability with the ID schemes of other EU states, as part of the eIDAS scheme. On 28 August 2018, GOV.UK Verify took its first step towards enabling British residents to use their GOV.UK Verify account to log on to online public services in other EU countries. [32] [33] The scheme was 'notified'[ jargon ] on 2 May 2019. [34]

Criticism

GOV.UK Verify did not meet various targets that GDS set for it: [35]

It does not meet all the identity requirements of government departments, such as identifying intermediaries or businesses. [35]

The Infrastructure and Projects Authority (IPA) reviewed Verify in July 2018, noting the department's reluctance to continue funding the project, with another report later that year recommending that the identity assurance programme should be terminated. [37]

In October 2018, Jo Platt, the Shadow Minister for the Cabinet Office, said that £130 million had been spent on developing GOV.UK Verify. [38]

Evolution and closure

In December 2018, GDS announced that over the next 18 months they would be working with standards bodies, identity providers and the private sector to: [39]

Computer Weekly expressed concern over this approach in August 2019. [19]

In April 2020, funding for GOV.UK Verify was extended by 18 months due to the COVID-19 pandemic. [40] In August 2020, trade association TechUK criticised the Government's progress since 2019 as being slow and opaque. [40] In April 2021, the platform was extended by a further two years. [41]

HMRC ceased to use Verify, which had been available for a limited number of online services in parallel with Government Gateway sign-in, with effect from April 2022. [42]

On 28 October 2022, it was announced that Verify would be closed, with no new accounts created from mid-December 2022 and all Verify services closed in April 2023. [23] [43]

The Government Digital Service is developing a replacement service, the One Login For Government. [44]

See also

Further reading

Related Research Articles

<span class="mw-page-title-main">Electronic identification</span> Digital proof of identity

An electronic identification ("eID") is a digital solution for proof of identity of citizens or organizations. They can be used to view to access benefits or services provided by government authorities, banks or other companies, for mobile payments, etc. Apart from online authentication and login, many electronic identity services also give users the option to sign electronic documents with a digital signature.

A digital identity is data stored on computer systems relating to an individual, organization, application, or device. For individuals, it involves the collection of personal data that is essential for facilitating automated access to digital services, confirming one's identity on the internet, and allowing digital systems to manage interactions between different parties. It is a component of a person's social identity in the digital realm, often referred to as their online identity.

An age verification system, also known as an age gate, is any technical system that externally verifies a person's age. These systems are used primarily to restrict access to content classified, either voluntarily or by local laws, as being inappropriate for users under a specific age, such as alcohol, tobacco, gambling, video games with objectionable content, pornography, or to remain in compliance with online privacy laws that regulate the collection of personal information from minors, such as COPPA in the United States.

Electronic authentication is the process of establishing confidence in user identities electronically presented to an information system. Digital authentication, or e-authentication, may be used synonymously when referring to the authentication process that confirms or certifies a person's identity and works. When used in conjunction with an electronic signature, it can provide evidence of whether data received has been tampered with after being signed by its original sender. Electronic authentication can reduce the risk of fraud and identity theft by verifying that a person is who they say they are when performing transactions online.

Dr Jerry Fishenden has been referred to as "one of the UK’s leading authorities in the world of technology", and appears regularly in a variety of mainstream media. He is also a frequent guest and keynote speaker on the conference circuit, drawing on his background across both private and public sectors.

Identity assurance in the context of federated identity management is the ability for a party to determine, with some level of certainty, that an electronic credential representing an entity with which it interacts to effect a transaction, can be trusted to actually belong to the entity.

The National Strategy for Trusted Identities in Cyberspace (NSTIC) is a US government initiative announced in April 2011 to improve the privacy, security and convenience of sensitive online transactions through collaborative efforts with the private sector, advocacy groups, government agencies, and other organizations.

<span class="mw-page-title-main">Kantara Initiative</span> Digital identity organization

Kantara Initiative, Inc. is a non-profit trade association that works to develop standards for identity and personal data management. It focuses on improving the trustworthy use of identity and personal data in digital identity management and data privacy.

The Government Gateway is an IT system developed to allow applicants to register for online services provided by the UK Government, such as obtaining a driving licence and HMRC self-assessment. This replaced the old system of paper submissions.

The Public Services Network (PSN) is a UK government's high-performance network, which helps public sector organisations work together, reduce duplication and share resources. It unified the provision of network infrastructure across the United Kingdom public sector into an interconnected "network of networks" to increase efficiency and reduce overall public expenditure. It is now a legacy network and public sector organisations are being migrated to using services on the public internet.

gov.uk Official website of the Government of the United Kingdom

gov.uk is a United Kingdom public sector information website, created by the Government Digital Service to provide a single point of access to HM Government services. The site launched as a beta on 31 January 2012, following on from the AlphaGov project. The website uses a modified digital version of the Transport typeface called New Transport. It officially replaced Directgov and the online services of Business Link on 17 October 2012. As of January 2023, GOV.UK is the second-most-used government website worldwide, after Russia's Gosuslugi.

The Government Digital Service is a unit of the Government of the United Kingdom's Cabinet Office tasked with transforming the provision of online public services. It was formed in April 2011 to implement the "Digital by Default" strategy proposed by a report produced for the Cabinet Office in 2010 called 'Directgov 2010 and beyond: revolution not evolution'. It is overseen by the Public Expenditure Executive. GDS is primarily based in the Whitechapel Building, London. Its CEO is Tom Read.

The UK Government G-Cloud is an initiative targeted at easing procurement by public-sector bodies in the United Kingdom of commodity information technology services that use cloud computing. The G-Cloud consists of:

The Open Identity Exchange (OIX) is a membership organisation that works to accelerate the adoption of digital identity services based on open standards. It is a non-profit organisation and is technology agnostic. It is collaborative, and works across the private and public sectors.

ID.me is an American online identity network company that allows people to provide proof of their legal identity online. ID.me digital credentials can be used to access government services, healthcare logins, or discounts from retailers. The company is based in McLean, Virginia.

<span class="mw-page-title-main">Digital Economy Act 2017</span> United Kingdom law

The Digital Economy Act 2017 is an Act of the Parliament of the United Kingdom. It is substantially different from, and shorter than, the Digital Economy Act 2010, whose provisions largely ended up not being passed into law. The act addresses policy issues related to electronic communications infrastructure and services, and updates the conditions for and sentencing of criminal copyright infringement. It was introduced to Parliament by culture secretary John Whittingdale on 5 July 2016. Whittingdale was replaced as culture secretary by Karen Bradley on 14 July 2016. The act received Royal Assent on 27 April 2017.

Digital identity is used in Australia by residents to validate who they are over digital media, such as over the Internet.

<span class="mw-page-title-main">Login.gov</span> Authentication system for US government services

Login.gov is a single sign-on solution for US government websites. It enables users to log in to services from numerous government agencies using the same username and password. Login.gov was jointly developed by 18F and the US Digital Service. The initiative was announced in a blog post in May 2016 and the new system was launched in April 2017 as a replacement for Connect.Gov.

<span class="mw-page-title-main">Mike Bracken</span> Public sector technology leader

Mike Bracken is a public sector technology leader who was a founder and executive director of the UK Government Digital Service (GDS). Under his leadership, the UK became a world leader in digital government, with the US Digital Service, the Australian Digital Transformation Office and numerous others modelling themselves on GDS, as a founder nation of the Digital 5.

Many nations have implemented, are implementing, or have proposed nationwide digital identity systems.

References

  1. 1 2 Jee, Charlotte (24 May 2016). "UK government identity scheme GOV.UK Verify launched today: What is GOV.UK Verify? GOV.UK Verify explained". Computer World UK.
  2. ↑ Merrett, Neil (16 February 2017). "GOV.UK Verify, NHS numbers and the 25 million user challenge". Government Computing.
  3. ↑ Glick, Bryan (16 September 2014). "GDS unveils 'Gov.UK Verify' public services identity assurance scheme". Computer Weekly .
  4. ↑ Curtis, Sophie (9 October 2014). "How the government plans to 'verify' your identity online". The Daily Telegraph .
  5. ↑ Arthur, Charles (6 November 2014). "Gov.uk quietly disrupts the problem of online identity login". The Guardian .
  6. ↑ Burton, Graeme (25 May 2016). "Gov.UK Verify: Late, unnecessary and finally launching this week". Computing .
  7. ↑ Evenstad, Lis (19 May 2016). "Gov.uk Verify to go live 24 May 2016". Computer Weekly.
  8. ↑ "Digital-identity policy function shifted from GDS to DCMS". PublicTechnology.net. 13 June 2018. Retrieved 15 October 2018.
  9. ↑ "Contracts Finder Archive". data.gov.uk. Retrieved 13 June 2017.
  10. ↑ Nguyen, Anh (3 September 2013). "Government signs first identity assurance contracts". Computer World UK.
  11. ↑ Jee, Charlotte (17 December 2014). "Cabinet Office seeking suppliers for GOV.UK Verify". Computer World UK.
  12. ↑ Hughes, Janet (25 March 2015). "Procurement 2: New identity suppliers to join GOV.UK Verify". Identity Assurance blog. Government Digital Service.
  13. ↑ "GOV.UK Verify and Mydex CIC | GOV.UK Verify" . Retrieved 13 June 2017.
  14. ↑ "Verizon "temporarily removed" as GOV.UK Verify ID provider - Government Computing Network". central-government.governmentcomputing.com. 20 July 2016. Retrieved 13 June 2017.
  15. ↑ "The latest improvements across GOV.UK Verify's certified companies | GOV.UK Verify". 6 January 2017. Retrieved 13 June 2017.
  16. 1 2 3 4 "Taking GOV.UK Verify to the next stage - Government Digital Service". gds.blog.gov.uk. 11 October 2018. Retrieved 11 October 2018.
  17. ↑ "Barclays Identity Service | Barclays". www.barclays.co.uk.
  18. ↑ "Experian to close more than two million Gov.uk Verify accounts". Computer Weekly.
  19. 1 2 Glick, Bryan (23 August 2019). "Three more identity providers to withdraw from troubled Gov.uk Verify programme". ComputerWeekly.com. Retrieved 5 September 2019.
  20. ↑ Simpson, Gary; Lindley, Emma. "Investigating Challenges in Digital Identity" (PDF). OIX UK. Open Identity Exchange: 4.
  21. ↑ "Government services using GOV.UK Verify". GOV.UK. Retrieved 5 January 2020.
  22. ↑ "Verifying a secure digital mortgage service - HM Land Registry". hmlandregistry.blog.gov.uk. 28 July 2017. Retrieved 22 January 2018.
  23. 1 2 "GOV.UK Verify is closing". Government Digital Service . 28 October 2022.
  24. ↑ Mathieson, SA (29 March 2017). "LCIOC Latest: GDS, Verify, NHS Digital Services". Soctim blog.
  25. ↑ Southern, Joanne (22 March 2017). "Guest post: working with GDS on transforming local services". Identity Assurance blog.
  26. ↑ Hill, Rebecca (3 May 2017). "Local government Verify pilot hit by council departures". Public Technology.net.
  27. 1 2 Trendall, Sam (13 July 2017). "GOV.UK Verify to be extended to cover other countries next year". www.publictechnology.net.
  28. ↑ Merrett, Neil (30 March 2017). "Summer launch planned for GOV.UK Verify private sector testing". Government Computing.
  29. ↑ "UK.gov withdraws life support from flagship digital identity system". www.theregister.com.
  30. ↑ Merrett, Neil (4 April 2017). "NHS Digital targets late September online identity launch". Government Computing.
  31. ↑ "NHS login to use video for initial ID | UKAuthority". UKAuthority. Retrieved 5 November 2018.
  32. ↑ "GOV.UK Verify eID scheme pre-notified under eIDAS". CEF Digital. Retrieved 24 January 2020.
  33. ↑ "GOV.UK Verify eID scheme pre-notified under eIDAS" (PDF). European Commission. 24 January 2019.
  34. ↑ "Overview of pre-notified and notified eID schemes under eIDAS - eID User Community - CEF Digital". ec.europa.eu. Retrieved 24 January 2020.
  35. 1 2 Fishenden, Jerry (5 May 2017). "Gov.uk Verify and identity assurance - it's time for a rethink". Computer Weekly.
  36. ↑ "Dashboard - GOV.UK Verify - GOV.UK". www.gov.uk. Retrieved 11 October 2018.
  37. ↑ Glick, Bryan (5 September 2018). "Government projects watchdog recommends terminating Gov.uk Verify identity project". ComputerWeekly.com. Retrieved 8 September 2018.
  38. ↑ Trendall, Sam (12 October 2018). "Shadow minister slams government for 'abandoning its responsibility' on Verify". PublicTechnology.net. Retrieved 15 October 2018.
  39. ↑ "What's next for GOV.UK Verify? - Government Digital Service". gds.blog.gov.uk. 20 December 2018. Retrieved 20 December 2018.
  40. 1 2 "Digital identities: the missing link in a UK digital economy" (PDF). TechUK . 27 August 2020. Retrieved 27 August 2020.
  41. ↑ Evenstad, Lis (28 April 2021). "Government extends Gov.uk Verify for a further two years". Computer Weekly . Retrieved 23 November 2021.
  42. ↑ "HMRC withdraws GOV.UK Verify". ICAEW . 29 March 2022. Retrieved 9 April 2022.
  43. ↑ Say, Mark (27 April 2023). "GDS closes GOV.UK Verify service". UKAuthority. Retrieved 27 April 2023.
  44. ↑ "An update on One Login for Government - Government Digital Service". gds.blog.gov.uk. 24 August 2022. Retrieved 16 November 2022.

UKOpenGovernmentLicence.svg  This article incorporates text published under the British Open Government Licence : "Dashboard - GOV.UK Verify - GOV.UK". www.gov.uk. Retrieved 5 January 2020.

This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.