KYC (Know Your Customer)
KYC (Know Your Customer) is a generic term for procedures of identity verification of customers, with document requests from the bank side when opening a new account.
"KYC" being released as open source herewith is a program that reduces human and financial costs of identity verification through use of the blockchain.
GMO Blockchain OSS is currently preparing for the development of smartphone application for certification body and demonstration experiments in collaboration with GMO GlobalSign to put this mechanism into practical use.
The overall structure is as follows.
Certification body's authentication of user's personal information and recording on the blockchain
- The user submits the "personal information" necessary for identity verification to the certification body, and signs the signature (acceptance with the "key" paired with the address) from the terminal owned by the principal.
- The certification body confirms the "personal information" of the user, generates "hash value of personal information,” and records it on the blockchain in association with the address of the user associated with the signature.
Proof of identity in services
- The user performs registration procedures for various services (such as opening a bank account).
- Various services (banks, etc.) generate a QR code containing the user's "registration ID" information and display it on the screen.
- The user reads the QR code with the user's terminal, confirms the displayed "registration ID,” agrees to the provision of the "personal information,” signs it and submits it to the service side. (Personal information registered when it was submitted to certification body is sent to the service side)
- Various services (banks, etc.) obtain the address of the user from the submitted signature and request "the hash value of personal information" associated with the address on the blockchain.
By acquiring "hash value of personal information,” various services (banks, etc.) can confirm that the information has been authenticated by the certification body.
Further, the hash value generated from the sent "personal information" is compared with the requested hash value. If they match, it can be confirmed that the application is by the user himself, and the personal identification is complete.
Mechanism of KYC
The mechanism of "KYC" takes advantage of the characteristic of the blockchain, that is, only the owner of the "key" corresponding to the address can initiate processing for that address.
By recording a user's personal identity information as authenticated by a certification body on the blockchain along with the user's blockchain address (a public key, hereinafter referred to as "address"), services such as banks can easily and quickly confirm identity.
Once the identity is authenticated by the certification body, it can be verified through verification of the personal information provided by users and the information recorded on the blockchain.
This mechanism can be applied to a usage that requires identity verification, such as opening a bank account, creating a credit card, and trading at token exchange. It leads to a reduction in process to verify identity through sending written documents and a reduction in monetary costs.
Personal information is not stored on the blockchain and only the hash value is recorded, so there is no risk of personal information being leaked from the blockchain.
Features of KYC
KYC supports other programs offered by "GMO Blockchain OSS"
By combining the identity confirmation mechanism based on "KYC" with various programs offered by "GMO Blockchain OSS”, it is possible to create more advanced services.
For example, in "Token Trader" which can build exchanges of tokens, reliability can be guaranteed by incorporating the mechanism of identity verification for users participating in the transaction.
Also, by combining with "Resale Deterred Ticket" which deters illegal resale and paperless tickets, we can realize tickets etc. which can be purchased only by authenticated users.
Easy to introduce for both certification bodies and services
Both the certification body and various service providers do not require much time to install this program. The certification body completes installation only by incorporating the process of "confirm user's address" and "register hash value into blockchain" into an existing identity confirmation flow.
Also, for various service providers, after incorporating "Generate and display QR code" and "Acquisition of personal information + Confirmation processing" into conventional account opening and service application processing, the program can be installed immediately.
It is unnecessary for the users to hold cryptocurrency (Ether)
In the blockchain, payment of expenses by cryptocurrency (Ether) is required every time some processing (recording) is done on the blockchain. However, it is not yet common for users and merchants to own and manage cryptocurrencies.
Since the service provider can prepay the cost of recording on the blockchain collectively in Japanese yen, the user does not need to pay each time in cryptocurrency, and can use KYC identification.
Toward Practical Application
Development of a Authorizing Application with GMO GlobalSign
With the aim of putting this mechanism into practical use, "GMO Blockchain OSS" is currently cooperating with GMO GlobalSign in order to develop smartphone applications for certification bodies and to build the proof of concept.
With GMO GlobalSign's authorization from the Minister for Internal Affairs and Communications as a platform business entity1 for personal identification service, we provide "GMO Online Identity Confirmation Service," which enables identity verification by utilizing the electronic certificate stored in My Number card2.
Based on the combined knowledge of our two companies, we aim to establish a mechanism that allows identity verification with My Number card and a smartphone application.
We will consider applying this mechanism of personal confirmation to various processes in the days ahead, such as simplifying the opening of bank accounts and verifying identity upon selling tickets.
1. Platform business entity refers to a business entity that serves as an intermediary between Japan Agency for Local Authority Information Systems (J-LIS) and corporations that seek identity confirmation with My Number card. ↩
2. My Number card refers to the personal Identification IC Card provided by the Government. ↩