Announcement:
The OpenID Foundation announced today it will continue expanding the scope of its award-winning OpenID Certification program, adding new profiles and capabilities. The new Form Post Response Mode profiles were launched this week during the Identiverse conference. The OpenID Foundation is pleased to announce its plans to expand the scope of the certification program to enable certification of deployments of Financial-grade API (FAPI) specifications.
Background:
The Open Banking Implementation Entity (OBIE) have developed the UK Open Banking standard. The first version of this went live in the UK on 13th January 2018. This is a fully open standard and the OBIE are actively working with other standards bodies and banks and fin techs across Europe and in other markets to build a truly global Open Banking standard. Throughout the first half of the year, the OBIE, the OpenID Foundation (OIDF), and the Open Identity Exchange have held a series of workshops to engage the community.
The OBIE security model is based closely on the OpenID Foundation's FAPI (Financial-grade API) specifications. The OBIE has made key contributions over the course of 2018, to move its security model closer to the full FAPI profile. The key driver behind aligning with OIDF’s FAPI was to adopt an existing open standard, and thus realise the following:
- SECURITY: To provide the best possible security in protecting access to sensitive customer data
- OPENNESS: Using a core standard that is widely used and understood by as many developers as possible
- IMPLEMENTATION: Based on technology that can be supported by as many vendors as possible, and thus can be implemented by banks in a timely manner
- FLEXIBILITY: Can be extended to other use cases beyond finance (e.g., retail, utilities, health)
- CUSTOMER BENEFIT: Thereby maximising adoption and facilitating the delivery of use cases that provide benefits to the end personal and business customers