Netcetera Identity

Identification

It is all about who you are and whether the other party can assure that. The Netcetera Identity offers various ways to integrate or produce identities that fit the required Identity Assurance Level (IAL) by providing solutions, using 3rd party products or by brokering existing already assured identities.

Authenticity

Authenticity is about the mutual confidence in a digital relationship during the authentication process. During the login to a website, it should be ensured that no identity theft leads to misuse. Using two-factor authentication (2FA), biometrics, or technology such as FIDO/WebauthN helps ensure authenticity. To prevent identity attacks securing authenticity is a key element to securing a digital identity and their digital relationship. Based on something the user knows (knowledge), has (possession), and is (biometric), strong customer authentication is built.

Trust

Trust isn’t binary! Multiple actions, preventions, and how a service is made, influence whether trust exists or not. Trust in our solution is established based on cryptography and industrial standards and by using well-curated and well-maintained software components. This, including our service offering, gains confidence and trust in our platform.

Sovereignty

End users want their data to be handled carefully and sparingly. They want to be sure that the interaction between them and the used web services only serves the desired purpose. No unnecessary data must be collected and analyzed; only context-related data should be shared. The end-user should be empowered to consent to all data sharing. We use our solution and our innovative strength with this in mind. Specifically, we are working on SSI-based verification and issuing procedures.

Safety

The use of our services should feel safe. We take technical, organizational and UX measures that help our users and customers to feel safe.

Security

Security measures protect the Netcetera Identity Platform and the processes provided. We do everything to not let intruders in, are constantly making it hard for denial of service attackers, and fight against misuse. We use best-of-breed security systems to secure highly critical data and processes. Beyond technology, we also achieve protection through compliance with regularly audited standards such as PCI-DSS.