Britain’s pension agency is adopting a patchwork approach to identity as it migrates from one solution to another. The Department for Work and Pensions (DWP) had previously been one of the agencies taking advantage of the GOV.UK Verify service for digital identity, and is eventually planning to implement the One Login service that will be entering trials later in the year.
The problem, according to DWP, is that One Login is not yet ready, while GOV.UK Verify creates too much friction for the average user. The agency decided to ditch the older solution, but still has an obligation to provide services for the British public.
With that in mind, the agency is deploying its own piecemeal solution to tide them over through the interim. The agency described their solution as a “pantry” offering, which is to say that it is put together with different ingredients pulled from the pantry on an as-needed basis. The composite service has been dubbed the Dynamic Trust Hub, and its different components can verify someone’s identity to a low, medium, or high level of confidence depending on the nature of the interaction.
On that front, the Trust Hub can be used to evaluate user documentation, and to analyze each person’s activity history to watch for any anomalous behavior. The service also uses knowledge-based verification questions for an additional (albeit imperfect) layer of security. The Trust Hub will generate a risk score for each verification event, drawing on stored identity information to determine the likelihood that the person signing in is in fact a legitimate user.
The DWP’s Trust Hub provides coverage for multiple channels, and can provide fully automated service in some lower risk cases. The solution can achieve a medium confidence level for online verification, while phone verifications can be completed in roughly 60 seconds.
The One Login solution is being developed by the Government Digital Service (GDS), though DWP is collaborating with GDS to ensure that One Login will meet its particular needs. However, DWP is trying to provide users with a consistent service, and assured citizens that the new One Login user interface will look the same as the one that is currently up and running.