SIM-enabled electronic signatures to potentially benefit more than 30 million Turkcell subscribers

Apr 3, 2007 12:32 GMT  ·  By

Gemalto announced that Turkcell, Turkey's leading mobile operator with more than 30 million subscribers, has selected its SIM-based identification solution to implement a large-scale mobile program. The program is based on qualified digital certificates by E-Guven, a Turkish Certificate Authority. Digital certificates are created under Turkish Digital Signature Law that is also in accordance with EU's Digital Signature Directive. The Gemalto solution will allow Turkcell subscribers to securely access services that require strong authentication, such as Internet banking or e-government applications, using their mobile phone to generate a legally binding electronic signature.

Turkcell's mobile signature program, the largest in the world, will allow users to perform secure online transactions through their handset. From their mobile phone or home PC, the subscriber accesses, for instance, the banking site and enters their customer ID for login or giving a transaction order. The bank then sends an authentication request that prompts the user to enter the secret code they chose when they activated the mobile signature service, using their GSM phone. The SIM card then checks the secret code, creates the digital signature and sends it back to the bank to enable the corresponding transaction on the banking account. What makes this Gemalto mobile signature solution more secure is that it relies on something the users owns (the private key of the digital signature that is securely carried on the SIM card) and something the user knows (the secret code). Turkcell's m-signature program is designed to work with any digital service or application that requires legally binding identity confirmation and approval.

"Ease of use and security were critical when we decided to implement our m-signature program", said Cenk Serdar Chief Executive for Value Added Services, Turkcell. "We wanted to spare our subscribers the hassle of buying and setting up a smart card reader and carry an extra smartcard to perform secure online transactions with qualified digital signatures. The Gemalto solution transforms the handset into a highly secure digital signature creation device they feel familiar with."