New E-identification

The tightened IT security requirements for electronic identification call for changes to the data systems of electronic banking services by the end of September 2019. Regulation 72 on electronic identification and trust services by the Finnish Communications Regulatory Authority requires that the TUPAS protocol used by banks in Finland be revised, as it does not in its current form meet the requirements for strong electronic identification which are harmonised with EU regulation. In practice, the banks and Finance Finland (FFI) have decided that the TUPAS protocol will not be developed further, but the banks will replace it by the OpenID and/or SAML 2.0 protocols that comply with the relevant international standards.

You can find more information from here.Opens new window

 

See the service description (pdf, 348 KB)Opens new window

Documentation for key exchange (pdf, 253 KB)Opens new window

E-identification to be revised

The tightened IT security requirements for electronic identification call for changes to the data systems of online public services by the end of September 2019. 

Regulation 72 on strong electronic identification and trust services by the Finnish Communications Regulatory Authority requires that the TUPAS protocol used by banks in Finland be revised, as it does not in its current form meet the requirements for strong electronic identification which have been harmonised with EU regulation.  

In practice, the banks and Finance Finland (FFI) have decided that the TUPAS protocol will not be developed further, but the banks will replace it by the OpenID and/or SAML 2.0 protocols that comply with the relevant international standards. 

Important dates in 2019

September 2019: The customers can use the old version of the e-identification service until 30 September

October 2019: On 1 October 2019, the old e-identification will no longer fulfil the requirements of strong electronic identification and all customers should have adopted a new version of the e-identification by that date or alternatively, started to use an e-identification broker service.

Questions and answers concerning the new e-identification

1. What is the new service all about?

The tightened IT security requirements for electronic identification call for changes to the data systems of online public services by the end of September 2019. In other words, the e-identification in its present format will no longer comply with legislation in September 2019 and the service will be closed from those customers who have not started to use the new e-identification or an e-identification broker service.

2. What does a strong identification broker service include?

Along with the changes in legislation, service providers can either acquire identification services directly from the providers of identification means or by concluding an agreement with an identification broker service. Nordea is an e-identification broker service approved by the Finnish Communications Regulatory Authority and is allowed to provide access for all means of Finnish identification. Want to hear more about the service? Get in touch with your Nordea contact person or our B2B sales. 

The up to date list of all broker services accepted to the trust network is available at Traficom / National Cyber Security Centre website.

3. How will the personal customers notice the change? Do personal customers have to do something?

The new e-identification service will no longer support the Nordea paper code cards but the end-customer must have the Nordea code app or code calculator.  Also the user interface of the service will be improved.

4. What does this change mean to companies using the identification solutions provided by banks?

The change involves some changes in the companies’ IT systems. Nordea is replacing the TUPAS protocol with the OpenID protocol recommended by the Finnish Communications Regulatory Authority. The exact amount of changes depends on if the company continues to use direct service contacts with the identification providers or if it chooses to use some broker service. Without changes the companys possibility to use bank identification will stop once the TUPAS based services are shut down.

5. Where do I get support?

Nordea's E-support for Corporate Customers 0200 67230 (in English). 

E-support assists you with your company’s electronic payment transfers.

  • The service hours on banking days are 9.00–17.00. 
  • On short banking days (New Year’s Eve and Maundy Thursday): 9.00–14.00.
  • The price of the call is either the local network charge or the mobile call charge.
  • Calls from abroad +358 200 67230 (international call charge). 

E-support for Corporate Customers gives the following support services:

  • Netbank user support and browser support
  • online services support (e-invoice, e-payment, e-salary, e-identification)
  • inspections related to uploads and downloads of files
  • electronic cross-border payments support
  • other questions related to electronic payment services