►
From YouTube: Blockchain, Biometrics and Geo-Location: Lessons Learned from the Implementation of... Shashank Rai
Description
Blockchain, Biometrics and Geo-Location: Lessons Learned from the Implementation of Innovative Technologies at the United Nations Joint Staff Pension Fund - Shashank Rai, United Nations Int
In January 2021, in accordance with its digital transformation strategy, UNJSPF deployed a solution based on blockchain and biometrics to transform a legacy process with a global reach (80K beneficiaries located in more than 195 countries). UNJSPF beneficiaries are required to sign and submit a ‘Certificate of Entitlement,’ or ‘CE,’ every year as a “proof of existence” and "proof of country of residence", to continue receiving their benefits. The UNJSPF ‘Digital CE solution" aimed to create, verify, and secure the digital identities of beneficiaries - while also preventing fraud – using biometrics; identifying their locations with geo-location technology; and storing transactions on an immutable, traceable and independently auditable ledger, using the Hyperledger Indy blockchain platform. This session highlights the lessons learned after the first year of implementation of the Digital CE solution, addressing both technical and process related aspects of the deployment. This solution was selected as a finalist of two prestigious awards: The 2021 UN-Secretary-General's award for innovation and sustainability; and the 2020 Gartner’s Eye on Innovation Awards for Government.
Sessions Details & Slides (if available): https://sched.co/14H5m
Access All Sessions: https://events.linuxfoundation.org/hyperledger-global-forum/program/schedule/
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Discord: https://discord.gg/rVCn4j7UFd
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
License
Creative Commons Attribution license (reuse allowed)
A
A
A
So
just
a
quick
introduction
about
myself:
I
am
Shashank
Rai
I'm,
the
chief
technology
officer
for
an
organization
called
the
unicc
and
another
gentleman
who
generally
presents
along
with
me
when
we
talk
about
this
project,
Mr
Dino,
the
last
CEO
is
not
here
with
us
due
to
personal
reasons.
He
couldn't
come
over
here,
but
he
is
the
CIO
of
the
joint
staff
pension
fund
unjspf.
So
in
a
way
he's
my
client,
as
as
we
serve
the
UN
ecosystem,
and
we
built
out
the
project
for
him
since
we're
going
to
talk
about
digital
annuities.
A
A
bit
I
always
like
to
start
off
with
this
cartoon
from
Peter
Steiner,
which
was
published
in
the
New
Yorker
magazine
in
1993,
which
I
think
is
still
very
valid
and
sort
of,
as
it
says,
on
internet,
nobody
knows:
you're
a
dog
and
unfortunately,
in
2022,
it's
still
valid
on
internet.
Nobody
knows
you're
a
dog
right,
so
I'll
do
a
quick
introduction
as
to
who
we
are.
What
is
the
joint
staff
pension
fund?
Who
is
what
is
United
United
Nations
International
Computing
Center
then
actually
go
down
into
the
business
challenge.
A
What
is
it
were
you
looking
to
solve?
How
did
we
solve
it?
Some
of
the
Lessons
Learned,
which
is
the
essence
of
this
talk
and
then
my
favorite
question,
which
I
always
like
to
ask
as
to
why
use
blockchain
and
in
fact,
over
the
last
one
and
a
half
days
that
we've
been
around
here,
I,
have
been
going
and
asking
the
people
the
same
question.
Why
blockchain
and
and
I'll
be
honest
with
you
in
50
of
the
cases?
A
They
do
need
to
do
discuss
very
important
stuff,
but
they
also
discuss
a
lot
of
administrative
things
and
all
that
administrative
things
is
forming
bodies
like
the
joint
staff
pension
fund
or
International
Computing
Center
the
pension
fund.
As
the
name
dictates,
they
are
responsible
for
a
pension
pot,
so
obviously
that
the
pension
fund
operates
from
an
I.T
point
of
view.
At
least
efficiently
is
in
my
personal
interest
as
well,
because
obviously
I
like
to
withdraw
my
pension
from
them
when
I
happily
retire.
A
Today
they
serve
about
24,
25,
odd
un
entities
and
for
those
of
you
who
might
not
be
deeply
familiar
with
the
UN
ecosystem,
as
I
like
to
sort
of
joke
about
un
is
united.
In
name
only,
you
know
it's
a
it's
a
quite
a
multilateral
organization
itself.
For
example,
you
see
on
on
the
right
the
names
of
the
25
un
entities
that
the
staff
pension
fund
supports,
but
un
is
far
larger.
Some
of
the
names
you
will
know
you
know
likes
of
Unicef
or
UNESCO.
A
These
are
household
names,
others
you
might
have
heard
of
like
unhcr,
high
commission
for
refugees
or
the
word
food
program,
but
they
are
ones
that
you
might
not
know.
If
you're,
not
in
the
industry
like
ankhtar,
they
they
establish
standards
on
trade
or
unido
which
helps
Industries
in
developing
nations
Etc.
A
When
we
talk
about
a
pension
fund,
obviously
the
size
of
the
kitty
or
the
pot
matters,
so
pension
fund
handles
close
to
91.5
billion
dollars
of
assets.
Today
there
are
about
137
000
benefit
people
registered
with
the
Pension
funds.
That's
all
the
staff
of
those
25
organizations.
They
are
contributing
into
the
pension
fund
and
they're
about
82
000
beneficiaries,
so
people
who
have
retired
out
of
the
UN
ecosystem
and
the
pension
fund
actually
serves
those
people,
so
the
pens
people
who
are
withdrawing
the
pension
from
the
UN
ecosystem.
A
That's
about
82
000
people
from
their
geographical
location
point
of
view
they
pretty
much
spread
across
the
globe,
so
you
can
think
of
a
country
and
and
there'll
be
somebody
from
un
who's
retired
over
there
and
for
this
82
000
people.
The
fund
is
December,
saying
roughly
close
to
3
billion
dollars
worth
of
disbursement
per
year.
A
Quick
word
about
us
again.
We
were
established
by
the
U.N
General
Assembly,
but
in
1970,
so
we
as
International
Computing
Center
are
about
50
odd
years
old
administratively,
for
whatever
difference
it
makes.
In
today's
presentation.
We
are
part
of
the
World
Health
Organization,
so
I'm
a
who
staff
member
and
our
mandate
as
International
Computing
Center
is
to
really
provide
Digital
Services
to
U.N
organizations
to
other
International
organizations,
World
Bank,
Asian
development.
Bank.
You
know
sort
of
entities
which
are
unlike
as
well
as
member
states,
which
is
just
a
fancy
term.
A
A
What
is
it
that
the
pension
fund
faced
and
came
to
us
to
talk
about
so
every
year
those
82
000
people
that
I
mentioned
they
need
to
prove
to
the
pension
fund
that
they're
alive
and
they're
living
at
the
address
they
promise
to
live
at
specifically
the
country
and
the
country
is
important
because
the
pension,
if
they
may
choose
to
do
so,
to
receive
the
pension
in
local
currency.
The
pension
is
slightly
adjusted
based
on
exchange
rate
and
other
factors.
A
So,
obviously,
if
you
promise
to
live
in
a
particular
country,
it
is
important
and
the
fund
knows
you
continue
to
live
at
in
that
country,
so
that
they
can
continue
giving
you
adjusted
pension.
Now.
The
way
the
pension
fund
has
been
doing
it
for
the
last
70
years
of
their
existence
is
every
year
they
send
out
a
letter
to
these
82
000
people
they
on
the
registered
address,
and
they
wait
for
those
letters
to
come
back
with
the
signature
of
the
individual
and
then
based
on
that.
A
Needless
to
say,
you
know
we,
none
of
us
have
to
sort
of
think
about
how
long
this
process
is
how
inefficient
this
process
is
and
the
challenges
it
brings
and
not
to
mention
the
fact
that
the
fund
has
always
been
challenged
by
Auditors
to
try
and
quantify
potential
fraud
that
may
take
place
and
is
always
very
difficult.
Obviously,
if
somebody
continues
signing
the
letter
when
they
are
150
year,
old
I
think
that's
a
dead
giveaway
that
that
they
may
not
not
be
alive,
but
somewhere
around
85
1995.
A
It
starts
becoming
challenging
and
they
try
and
scrutinize
the
signatures
more.
What
not,
but
then
at
that
age
people
might
be
encapsulated,
so
you
know
they
might
not
be
able
to
sign
and
it
gets
far
more
complicated.
So
so
that
was
the
the
business
challenge.
Is
there
some
way?
Can
we
bring
in
modern
technology
to
solve
this
problem?
Can
we
make
this
more
efficient,
so
the
fund,
as
as
I
said,
the
role
of
iccs
to
provide
them
Technical
Solutions,
the
fund
Dino
and
the
team
came
over
to
us.
A
However,
again
one
of
my
standard
jokes
is:
if
you
worked
with
one
government,
you
know
how
how
much
red
tapeism-
and
you
know
how
slow
the
bureaucracy
is
multiply,
that
by
200
governments
that
we
work
with.
So
you
know
it's
an
exponential
Factor.
My
point
is:
there
is
a
lot
of
audit.
There
is
a
lot
of
accountability
that
has
to
take
place,
and
rightly
so,
because
we're
spending
public
money.
A
We
have
to
be
accountable
for
that
and
again,
when
we
are
dealing
with
some
sensitive
information,
such
as
people's
personal
information
about
the
eligibility
for
payments,
there
were
certain
key
guiding
principles.
The
fund
laid
down
and
one
of
the
key
ones,
was
no
matter
what
technology
we
use.
We
have
to
make
sure
we
are
taking
good
care
of
the
personally
identifiable
information.
A
Now,
just
a
point
to
note
over
here
from
a
legal
point
of
view,
U.N
is
not
bound
by
any
national
law.
That's
how
U.N
was
created
back
in
the
days
when
League
of
Nations
was
converted
into
United
Nations.
All
the
signatory
countries
said:
U.N
is
not
bound
by
the
national
law.
What
that
practically
means
things
like
gdpr
don't
apply
to
us
now.
Having
said
that,
it
doesn't
mean
we
will
play
willingly
about
people's
privacy
and
information.
A
So
the
course
of
last
few
years,
un
has
drafted
U.N
privacy
principles,
and
these
are
sort
of
The
Guiding
Commandments
for
any
solution.
We
work
on
that
will
comply
with
these
U.N
privacy
principles
so
but
obviously
any
technology
solution
we
would
look
at
for
the
pension
fund
had
to
comply
with
the
Privacy
principles.
A
As
I
mentioned,
strong
audit
Trails
we're
talking
about
transforming
you
know
70
audio
process.
It's
deeply
embedded
into
everybody's
mind.
This
is
how
it
works.
This
is
how
we
track
it:
70
years
of
audit
by
different
National
bodies,
because
visually
audited
by
national
governments,
they
send
their
National
Audit
offices
to
come
in
Auditors.
So
you
know
it's.
A
So
with
those
guiding
principles
and
the
discussions
that
that
started
with
the
pension
fund,
I
think
we
all
just
said:
blockchain
is
the
answer.
As
long
as
you
have
got
the
right
question
right.
That
is
how
we,
we
all
and
as
I
sort
of
started
this
conversation
with
some
of
you
when
we
start
starting
my
presentation,
which
is
why
blockchain
and
and
even
in
the
last
one
and
a
half
days
when
I've
had
this
question
with
number
of
people
just
over
here,
I'm,
not
convincing
50
of
the
cases
that
they
need
blockchain.
A
A
So
what
we
did
from
a
solution
point
of
view
is
we
built
a
mobile
app.
The
idea
of
the
mobile
app
was
that
the
beneficiary,
the
people
who
are
receiving
the
pension
would
undergo
an
enrollment
process.
They
would
actually
use
the
phone
and
they'll
try
and
take
a
selfie
and
that
selfie
will
basically
be
used
to
build
their
biometric
profile.
A
The
important
bit
was
that
this
biometric
measurement
of
the
face
and
the
resulting
biometric
data
is
stored
locally
on
the
phone,
because
we
did
not
want
anything
going
out
of
the
local
phone,
then
they
undergo
an
enrollment
verification
process.
I'll
talk
a
bit
about
this
in
my
next
slide
and
once
this
enrollment
verification
process
is
complete,
they
actually
use
the
same
mobile
app.
So
the
pension
fund
prompts
them
saying
hey
it's
time.
You
prove
that
you're
alive
and
you
know
sort
of
living
at
the
in
the
country
you
promised
us
to
live
in.
A
Can
you
use
the
app
and
prove
that
so
they
open
up
the
app
they
again
take
a
selfie,
but
while
they're
taking
this
selfie
with
the
app
prompts
them
to
change
their
facial
features
so
it'll
make
them
ask
them
to
smile.
You
know
it
will
read
if
their
eyes
are
blinking
Etc,
why
is
it
doing
it?
Because
first,
it's
taking
the
biometric
profile
of
the
face?
It's
matching
with
the
biometric
profile.
That's
been
verified
on
the
mobile
phone.
A
It's
doing
the
liveness
check
to
make
sure
nobody,
your
your
loved
ones,
are
not
holding
your
photograph
in
front
of
the
camera
and
claiming
your
pension
and
obviously
it's
trapping
the
location
based
on
the
GPS
of
the
phone
and
again
on
technology
side.
We
had
a
lot
of
discussions
on
GPS
poofing
and
you
know
how
it
is
avoided
and
it's
it's
a
cat
and
a
mouse
game,
and
we
are
in
that
cat
and
a
mouse
race
as
well,
but
broadly.
This
is
the
three
things
we
do
and
through
this
process.
A
What
you
see,
for
example,
on
in
the
image
over
here
is
the
person
goes
through
that
whole
process
and
they
get
a
valid
dce
and
then
they
are
eligible
for
their
pension
for
next
one
year.
That's
a
business
process.
Now,
if
some
of
you
are
wondering
why
am
I
here
at
a
hyperledger
forum
and
talking
about
this
whole
thing
when
there
is
no
blockchain
involved,
the
answer
is
well.
There
is
some
blockchain
involved,
the
underlying
platform
for
all
of
this,
that
we
built
was
using
Aries
and
indie.
A
So
we
do
have
a
un
ND
chain
running
and
again,
we've
had
different
discussions
most
over
coffee
and
in
different
forums
about
the
need
for
a
sort
of
a
chain.
In
that
sense,
should
it
be
a
public
chain
or
what
not
I
think
from
a
governance
point
of
view,
there
is
no
way
I
can
see.
Just
as
I
mentioned,
you
know
the
Privileges
of
communities.
There
is
no
way,
for
example,
un
can
start
embarking
and
doing
business
on
public
chains.
Where
it
you
know,
National
laws
apply.
So
we
built
an
indie
chain.
A
The
wallets
are
in
the
cloud.
These
are
all
user
wallets,
so
obviously
we
in
that
sense
control
them.
So
we
open
up
those
wallets
and
we
write
the
transactions
into
the
wallet.
But
what's
getting
written
into
this
is
are
basically
three
sets
of
transactions.
The
first
credential
that
we
write
into
it
into
the
wallet.
Sorry
I
should
say
credentials.
The
first
credential
that
we
write
into
the
wallet
is
basically
once
the
verification
is
complete.
The
enrollment
verification
that
this
is
the
person
who
they
claim
to
be
then
once
they
undergo
the
liveness
check.
A
The
retirees
and
the
idea
was
there
will
be
in
personal
contact
with
these
officers
of
the
UN
or
what
food
program,
or
you
know,
whatever
organization
they
belong
to,
so
that
the
the
officer
can
actually
sort
of
certify
that
yes,
this
is
the
individual
who
is
enrolled
into
the
system
and
based
on
that
certification,
they
can
then
go
and
produce
the
dce
Etc.
But
obviously,
when
the
pandemic
held,
the
best
LED
plans
failed
and
we
had
to
quickly
scramble
and
try
and
figure
out.
A
How
can
we
sort
of
avoid
the
pandemic
bottle
like
or
the
hurdle
the
pandemic
had
placed?
So
what
we
did
or
well
when
I
say
V,
it's
more,
the
the
smart
people
who
work
for
me.
What
they
did
was
they
adapted
the
app
to
build
and
they
built
in
a
scheduling
system
in
the
app
so
so
sort
of
you
see
that
little
screenshot
over
there,
which
is
in
French,
because
it's
a
multilingual
app.
You
choose
a
time
and
date
of
your
preference
and
you
book
a
call.
A
And
then
we
built
the
whole
system
whereby
the
pension
fund
has
a
service
desk,
a
help
desk
who
get
onto
a
call
with
the
beneficiary
on
the
pointed
r,
and
they
do
sort
of
a
verification
where
they're.
Looking
at
this
video
feed
of
the
person,
the
person
also
scans
a
government-issued
document
photo
ID,
so
they're.
Looking
at
that
document
on
the
screen
and
they're
sort
of
saying
yes,
we
looked
at
the
document.
Id,
we
looked
at
the
details.
A
We
spoke
with
this
person,
it's
the
individual
who
they
claim
to
be,
and
they
approve
that
enrollment,
and
this
is
important
because
the
distinction
we
like
to
make
in
this
solution
is
that
the
we
are
not
at
this
stage
of
the
solution
taking
who
what
the
person
is
claiming
to
be
on
the
face
value.
There
is
human
in
the
loop
who
is
doing
a
degree
of
verification.
A
Now,
obviously,
it's
not
the
most
optimal
solution
we
would
like
to
for
it
to
scale.
We
would
like
to
bring
in
a
degree
of
Automation
in
some
other
projects
as
you
and
ICC.
We
have
done
that
just
a
sort
of
sidebar
mention
when
Corp
26
took
place
in
Glasgow
last
year.
You
know
the
climate
change
conference
because
it
was
a
hybrid
conference
and
they
had
to
register
a
lot
of
people
coming
in.
A
We
took
this
solution
and
we
used
machine
learning,
algorithms
to
actually
scan
the
government
issued
ID
and
do
a
phase
comparison
of
the
selfie
so
that
the
onboarding
of
the
users
could
take
place
quickly
for
the
corporate
six
conference.
So
we
we
now
want
to
bring
some
of
those
automations
over
here,
but
at
this
stage
this
is
basically
a
human
in
the
loop
verification
of
the
person
right
from
a
timeline
point
of
view.
A
The
sort
of
the
idea
initial
idea
started
in
about
mid
2018
dino
had
just
taken
over
as
the
CI
of
the
pension
fund.
Obviously
this
was
the
one
of
the
biggest
challenge
organization
had
been
facing,
so
that
is
when
the
discussions
all
started
and
then
and
and
when
that
whole
discussion
started,
obviously
the
experimenting,
the
technical
experimenting
from
the
teams
at
ICC
started,
because
none
of
us
knew
what
Indy
was.
None
of
us
knew
what
blockchain
I
mean.
A
We
all
had
heard,
blockchain
and
I
think
that
was
one
of
the
big
things
where
I
think
every
Tech
he
was
investing
in
in
crypto
at
that
stage,
I
think
it
was
2018
2019
when
Bitcoin
had
first
hit
20K
or
something
so
so
we
were
all
quite
excited.
You
know
looking
to
retire
early,
maybe
without
the
Pension
funds
pensions,
but
our
dreams
are
slightly
dashed,
anyways
back
to
the
topic.
So
so
that's
when
we
started
experimenting
with
with
the
technology
trying
to
understand
how
it
all
works.
What
are
the
intricacies
of
it?
Then?
A
In
q1
Q2
we
started
building
some
pocs
proof
of
Concepts
both
on
the
mobile
side,
and
the
technical
challenge
obviously
was
to
do
all
that
liveness
and
biometric
in
Mobile
itself,
as
well
as
trying
to
understand
Indie
and
then
obviously
independent
on
us.
You
know,
suddenly
you
had
Indian
Aries,
so
we
had
to
scratch
our
head
around
that
and
you
know,
work
around
with
echapai.
A
That's
fine
I'm,
not
complaining
here
then
then
we
moved
into
a
business
pilot
and
obviously,
as
the
techies
in
the
room
will
know,
a
business
pilot
means
it's
in
production,
so
it
was
really
a
production
Network
for
us
and
there
is
an
implication
of
that.
I'll
talk
about
in
in
as
Lessons
Learned,
so
around
2019
till
end
of
2019.
We
moved
into
a
business
pilot.
The
idea
was
in
2020.
We
would
go
into
a
full
what
you
call
production
deployment,
but,
as
I
said,
we
are
un.
A
We
would
like
to
go
through
our
own
channels,
so
most
of
2020
was
really
spent
in
in
getting
the
right
set
of
approvals
and
I
think
that
was
important,
one,
a
joke
about
it.
Obviously
it's
it's
a
very
transformative
process
and
it
needs
to
be
well
understood.
There's
a
lot
of
conversation
about.
You
know
why
blockchain
what
blockchain
I'll
touch
upon
that
also
in
Lessons
Learned?
Probably
it
was
not
best
on
our
part
to
sort
of
use.
A
A
She
saw
when
she
had
just
taken
over
the
pension
fund
and
she
was
like
this
is
this
is
it
this
is
where
we
are
transforming
and
obviously
I
think
we've
all
sort
of
seen
that
Meme
that
you
know
what
about
what
brought
about
digital
transformation
in
your
company.
So
it
was
not
the
CEO,
it
was
not
the
CIO
or
the
CTO
it
was
covered,
so
we
were
at
the
peak
of
pandemic
lockdowns
Etc
at
this
stage,
and
the
fund
was
scrambling
to
go
paperless
because
historically,
there
was
a
lot
of
paper
that
moved
through.
A
A
We
got
ISO
271
certified
earlier
this
year,
so
obviously
we
went
through
that
whole
process
of
certification
and
again
that
was
an
important
one,
because
we
wanted
to
demonstrate
and
when
I
say
we
I'm
speaking
about
the
pension
fund
and
ourselves
that
while
this
is
new
and
Innovative-
and
you
know
it
might
see
that
you
know
where
the
techie
is
trying
to
bring
in
glitzy
toys
to
play
with
it-
is
mature,
stable
and
proven.
We
are
right
now.
It's
work
in
progress,
working
on
ISO,
27
7
over
certification.
A
For
those
of
you
who
don't
know
I
mean
I,
don't
know
if
you
know
27
0001,
that's
the
internationally
recognized
certification
for
Information
Security
Management,
which
sort
of
just
goes
on
to
say
that
for
this
solution
we
are,
you
know,
trying
to
follow
good
practices.
We
we
wash
our
hands
before
we
eat
our
food
kind
of
stuff
and
27
701
is
the
certification
for
data
privacy.
A
So
again,
we
want
to
prove
again,
as
I
said.
None
of
these
National
laws
apply
to
us.
Gdpr
doesn't
apply,
but
we
still
want
to
prove
that
we
are
very
cognizant
of
the
sensitivity
of
the
data
and
we
are
treating
it
carefully.
So
so
that's
the
progress
as
it
stands.
This
is
sort
of
the
user
distribution
across
the
globe.
I
think
you
only
find
couple
of
gray
spots
there,
that's
North,
Korea
and
again
sort
of
I'm,
not
sure
which
country
is
that,
but
otherwise
yeah.
A
A
Well,
I
wasn't
sure
this
is
business
track,
so
I
didn't
want
to
bring
a
lot
of
tech
stuff.
But
if
you
want
to,
please
do,
to
my
whatever
extent
possible,
I'll,
try
and
answer
some
of
the
tech
questions,
but
I
divided
the
Lessons
Learned
into
two
parts,
the
business
side
of
it
in
the
tech
side
of
it
from
a
business
side
of
it.
A
Really,
nobody
cares,
except
the
fact
that
the
moment
we
said
blockchain,
there
was
a
huge
perception
that
built
up
that
this
is
something
we
are
using,
which
is
destroying
the
planet
because
everybody
Associates
blockchain
with
Bitcoin
and
everybody
knows
how
much
energy
Bitcoin
networks
consume.
So
there's
a
massive
backlash
and
it
it
was
a
tremendous
effort
on
part
of
the
communication
Department
of
the
pension
fund,
to
really
try
and
and
reach
out,
and
explain
this.
A
In
fact,
at
the
bottom,
you
see
the
link
for
their
the
FAQs
for
the
public
face
or
the
pension
fund
there's
like
still
a
lot
of
material
around
no.
This
is
this
is
not
energy
consuming,
and
we
tried
and
also
explain
this
because,
practically
speaking,
we
have
this
running
in
three
data
centers
across
the
Atlantic.
Those
are
all
un
data
centers
because
of
again
the
U.N
Privileges
and
communities
U.N
laws.
A
So
from
a
practical
point
of
view,
they're
like
I
would
say
six
Hardware
machines,
but
then
you
have
layers
of
abstraction
because
of
the
VMS
and
then
the
pods
in
the
VMS
Etc,
so
really
from
an
energy
point
of
view,
basically,
from
a
hardware
point
of
view,
looking
at
six
physical
machines
doing
this,
so
that
was
one
big
Challenge
and
the
second
Big
Challenge.
Everybody
has
heard
that
blockchain
is
immutable,
so
once
you
write
on
to
it,
you
cannot
change
it.
A
I
generally
also
try
and
ask
what
about
the
51
attack
on
bitcoin
Network
and
then
most
of
the
people
who
talk
about
immutability
do
not
understand
which
might
be
a
lot
of
people
around
in
this
conference
as
well,
but
we
had
to
sort
of
go
again
on
the
war
footing
to
explain
that
no
personal
information
is
being
written
in
the
blockchain.
The
way
the
solution
is
designed.
Actually,
all
the
information
is
being
held
in
your
wallet.
A
Well,
in
this
particular
case,
obviously
pension
fund
already
owns
the
information,
so
there
is
no
nothing
new
pension
fund
is
asking
of
you.
The
only
new
element
in
this
is
your
biometric
model,
but
we
are
not
taking
it
away
from
your
phone,
so
it's
in
your
phone,
it's
securely
put
in
your
phone
and
it's
with
you
all
the
time,
but
again
those
were
sort
of
the
perception
issues
that
we
had
to
deal
with.
A
They
were
obviously
the
adaptation
problems,
so
we
we
realized,
everybody
tries
to
take
selfie
this
way
and-
and
this
is
not
a
best
angle-
to
get
a
biometric
profile
so
really
to
try
and
get
the
selfie
this
way
and
and
you're
looking
at
an
average
age
of
50
plus
for
a
consumer
over
here
was
was
a
difficult
piece
again.
We
try
to
build
in
a
lot
of
cues
in
the
app
to
sort
of
prompt
them
to
move
the
camera
up
and
take
good
selfies.
A
Now,
we've
adapted
the
app
to
also
try
and
detective
the
lighting
conditions
are
good
and
try
and
prompt
them
to
have
lightning
conditions.
People
had
their
family
photographs
behind
them
and
then
you
had
like
all
sorts
of
biometric
profiles
being
built
off
the
grants,
grandkids
and
everybody.
You
know
everything
being
done
so
so.
A
As
I
said
for
the
biometric
piece,
we
were
very
careful
on
security,
so
most
modern
phones,
so
I
would
say
after
2017
have
a
hardware
chip
on
that.
That
generates
a
pair
of
keys
for
you.
So
each
app
can
use
that
Hardware
chip
to
generate
a
set
of
public
private
keys
and
then
use
that
to
encrypt
and
store
information
locally.
But-
and
we
use
that
feature
because
we
use
it
to
encrypt
the
biometric
information
on
the
local
phone.
A
A
A
You
know
you
don't
want
to
know
which
knife
was
used
to
cut
the
onions
when
you
walk
into
a
restaurant
order,
food
and
and
to
my
mind
this
is
just
back
kitchen
stuff
from
a
technical
point
of
view,
remember
I
mentioned
the
business
pilot
and
then
we
went
to
production,
so
obviously,
in
the
business
pilot
we
didn't
want
to
invest
in
a
lot
of
infrastructure.
Logically,
so
so
we
had
just
the
two
data
centers
in
Europe
running
the
surf.
Now
we
wanted
to
build
up
the
third
node
resiliency
across
the
continent.
A
In
in
U.S,
and
we
found
obviously
the
the
seed
nodes
had
the
IP
addresses
hard
code
in
and
whatnot
you
have
it
and
really
to
expand
that
across
the
Atlantic
was
a
big
challenge
but
again
I'm
blessed
with
a
very
smart
set
of
technical
people
who
work
for
the
team,
so
they
were
able
to
expand
a
lot
of
help
from
the
community.
We
were
able
to
extend
that
out.
So
that
was
one
one
piece
of
lesson
learned.
A
We
had
some
challenges
with
the
Kappa
scaling,
because
we
were
using
the
SQL
light.
Then
we
moved
to
post
query
as
a
backend
for
acapai
that
has
obviously
helped,
but
that
brings
a
different
set
of
complexities,
because
now
the
post
query
has
to
be
replicated
and
what
not,
across
multiple
data
centers
for
this
to
really
work
on
our
side
on
the
development
side.
Obviously,
when
all
of
this
started,
you
know
we
were
just
a
team
of
five
six
people.
You
know
playing
around
with
different
things.
The
solution
is
scaling
up.
A
I'll
talk
about
how
this
is
scaling
up
within
un,
so
we
onboarding
more
people
and
it's
a
it's
a
bit
of
a
challenge
even
for
the
most
seasoned
veterans
on
technology.
We
get
it's
a
bit
of
a
learning
curve
for
them
to
understand.
What's
this
whole
business
about
akapai
how
it
is
working
and
in
the
blockchain
bit?
So
so
that's
that's
a
bit
of
a
challenge
from
what
you
call
Manpower
or
person
power
point
of
view.
As
I
mentioned,
the
wallets
are
still
running
in
our
data
centers.
A
For
the
moment,
Our
intention
is
to
push
the
wallets
out
in
a
separate
set
of
projects.
We
have
now
made
mobile
apps
with
the
wallet
in
the
mobile
app
and
there
again,
the
last
one
year
with
the
JavaScript
library
came
in
to
really
help
build
the
mobile
apps.
It's
a
breeze.
I
mean
you
know.
I
know
some
of
the
people
from
the
team
are
online
and
they
would
really
love
to
thank
everybody.
A
Anybody
who's
involved
with
that
JavaScript
framework
for
the
wallet
in
the
mobile-
that's
been
a
real
blessing
that
but,
as
I
mentioned,
the
jspf
wallets
are
still
in
the
in
the
cloud.
But
Our
intention
is
to
push
it
out
right.
So
the
famous
question,
why
just
another
database
and
actually
half
my
team
was
thinking
I'm
crazy.
A
A
Now
traditionally,
when
we
have
looked
at,
you
know,
let's
say
the
old
school
databases,
if
I'm
a
say,
so
you
put
Solutions
on
top
to
make
them
immutable
in
terms
of
really
having
immutable
database
engines.
Technology
in
2018
was
not
so
Advanced,
I.
Think
qldb,
for
example,
on
Amazon
came
in
2019
and
I
think
that's
an
amazing
solution.
There
are
now
various
very
mature
open
source,
implementations
for
immutable
databases
and
I,
genuinely
think
50
of
the
cases
where
I
hear
blockchain.
Probably
they
need
an
immutable
database
and
that's
not
my
words.
A
Those
are
the
words
of
now
CEO
of
Amazon
and
djc.
He
sort
of
said
that
when
they
launched
qldb,
you
really
do
you
really
need
a
blockchain
or
not
think
about
it,
but
we
did
not
have
immutable
databases,
so
we
were
looking
at
Solutions
and
we
looked
at
Sovereign
and
that
made
sense
but
more
important.
Another
aspect
which
has
been
a
bit
of
a
at
least
heal
for
the
pension
fund,
is
the
user
information
because
of
those
25
different
unit
organizations
they're
serving
each
of
them
have
their
own
Erp.
A
A
If
this
product
is
successful,
if
we
are
able
to
bring
out
a
digital
identity
solution,
then
it
might
be
possible
for
us
to
really
expand
it
and
then
have
a
European
un
ecosystem
solution
which
will
allow
transfer
and
exchange
of
data
and-
and
that
was
sort
of
the
eye
on
the
future
bit
and
I'm
quite
happy
to
say
actually
and
I'll
play
a
little
bit
of
video
over
here
that
now
at
the
real
highest
levels
within
the
UN,
there
has
been
a
consensus.
That's
reached
to
really
roll.
A
So
the
program
has
been
conceived.
It's
been
funded
by
these
multiple
organizations,
and
this
is
really
where
the
the
blockchain,
the
decentralized
nature
of
this
solution
is
helping.
Because
now
we
can
sort
of
go
out
to
these
organizations
and
say
hey.
You
know
what
you
go
Define
your
schema,
because
there
have
been
attempts
in
the
past
using
traditional
Technologies
for
this
to
work
and
it
doesn't
scale
because
one
of
them
is
using
sap
other
one
I'm
using
Oracle.
A
The
third
one
is
using
something
else,
and
then
you
say:
okay
I
need
to
exchange
data
with
your
Erp,
and
here
is
my
API
endpoints.
How
do
we
do
that
and
all
that
hodgepodge
and
then
you
bring
tki
in
and
it's
a
technical
mess,
so
what
we
are
saying
is
we
will
build
using
indeed
the
data
exchange
platform.
A
You
manage
your
schema
life
cycle,
you
manage
your
credential
life
cycle
and
I
know
trust
over
IP
is
not
mature.
Yet
so,
if
you're
doing
a
hack
with
the
central
registry
of
our
own
for
the
moment,
but
if,
as
a
consumer
of
a
credential,
if
I'm
verifying
somebody
I
can
then
basically
say
okay,
you
say
you
are
part
of
wfp.
Please
provide
me
these
credentials
and
the
user,
with
user
being
in
between
using
the
UN
digital
ID
wallet,
can
give
those
credentials
to
the
verifying
agency.
A
So
it
took
again
a
bit
of
a
process
within
the
U.N
to
get
over
here
over
the
course
of
2021.
You
know
this
was
the
idea
was
socialized.
We
we
had
number
of
internal
U.N
hackathons
Etc,
where
we
showed
and
made
this
how
this
is
working
and,
as
a
result,
this
this
project
is
now
going
ahead
and
from
a
business
point
of
view,
I
think
this
sort
of
video
really
gives
us
an
idea
as
to
what
this
is
digital.
B
The
United
Nations
is
ready
to
digitally
transform
how
it
deals
with
identity,
with
a
system
to
streamline
information,
sharing,
daily
workflows,
access
to
platforms
and
buildings
operating
across
agencies
by
providing
its
personnel
with
a
universal
system-wide
identity
solution
introducing
the
UN
digital
ID,
a
unique
and
digital
identity
for
un
Personnel.
From
the
day
you
join
to
the
day.
B
You
part
all
of
your
personal
HR,
medical
travel,
security,
payroll
and
pension
data
in
the
palm
of
your
hand,
giving
you
full
control
on
what
you
share
and
with
whom,
with
blockchain
and
Biometrics
the
UN
digital
ID,
makes
verification
efficient,
secure,
transparent,
immutable,
portable
and
Universal.
It's
been
piloted
by
different
agencies
and
the
UN
pension
fund,
where
they've
replaced
current
manual
processes
with
certainty
for
who
and
where
pension
recipients
say
they
are
at
any
given
time.
Imagine
a
regional
field
officers
just
joined
the
UN.
B
She
uses
the
mobile
well
app
to
obtain
a
digital
wallet
stored
securely
in
her
smartphone
and
only
accessible
to
her,
with
Biometrics,
even
better
than
a
physical
wallet.
She
can
store
all
her
credentials
issued
by
any
un
organization
in
her
digital
wallet.
She
has
immediate
access,
to
course,
certificates
travel,
clearances
from
undss
medical
records
from
allergies
to
vaccinations,
also
making
any
transfer
to
another
organization.
A
breeze
as
Innovation
transforms
the
world.
We
can
improve
the
way
we
manage
our
identities
online,
un,
digital
IDs,
a
building
block
for
digital
cooperation,
unlocking
the
promise
of
the
sdgs.
A
But-
and
you
see
some
of
the
the
names
over
there
and
as
I
said,
other
agencies
have
joined
in
we've
got
that.
Thank
you
very
much,
and
now
the
tricky
bit
to
move
to
the
next
slide
bear
with
me
there.
We
are
right-
and
my
just
last
bit
a
word
of
thank
you
and
and
then
we
can
certainly
take
questions
from
the
audience,
but
clearly
all
the
app
users
they've
been
through
a
bit
of
a
journey
with
us.
A
You
know
from
the
very
initial
app
where
we
had
this
mask
of
Zoro
kind
of
a
band
to
tell
them
where
their
eyes
should
be
to
a
bit
more
user
friendly.
Now,
pension
fund
staff
has
been
amazing,
they've
kept
up
with
this,
and
you
know
obviously
there's
the
whole
learning
aspect
for
them
as
well.
I'd
like
to
shout
out
to
the
BC
girl,
BC
gov
people.
You
know
a
lot
of
work
that
you
had
done
on
your
initial
implementation
of
of
Indian
Aries.
We
were
heavily
influenced
by
that.
A
So,
thank
you
very
much
for
all
that
the
community
over
here
again
as
I
like
to
say,
I'm,
I'm
sort
of
presenting
here
by
standing
on
the
shoulders
of
giants.
A
lot
of
people
have
done
our
work
and
and
some
of
my
amazing
talented
team
who
I
think
are
online
and
looking
at
this.
So
thank
you
for
to
them
as
well
with
that
I'm
open
to
questions.
If
you
have
any
please.
C
Scheduled
online
and
then
they
transitioned
because
of
covet
they
they
had
to
go
one
step
you
were
and
they
went
to
a
filmed,
interaction,
sort
of
things,
look
up,
look
down,
smile
and
and
then
having
a
human
look
at
it,
and
that
was
the
that
was
a
was
a
human
interaction
to
allow
for
a
reliable
therapy.
So
none
of
this
holding
a
picture-
and
you
know
moving
around
and
stuff
like
that
so
anyway,
I
just
wanted
to
pass
that
on.
That
was
just
they
were
doing.
C
A
Now
the
app
yeah-
yes,
so
when
so
that
the
intention
is
what
the
way
it
works.
Is
you
get
a
notification
saying
you
need
to
get
your
dce,
you
open
up
the
app
punch
in
the
pin.
What
not
you
hold
it
in
front
of
you,
it
basically
wrong.
We
boiled
it
down
to
again
something
like
15-20
seconds,
even
less
I'm
talking
about
worst
case
scenarios.
It
basically
does
the
facial
biometric
Compares
it
with
the
biometric
profile
that
was
previously
created
and
parallely
looks
at
liveness.
A
A
A
Hopefully
it
should
it
should
so
from
an
algorithm
point
of
view,
basically
just
using
MN
net
and
ml
ml
net
and
face
net
and
we've
sort
of
trained
the
algorithms
Etc.
So
yes,
there
is,
there
is
a
degree
of
knowledge
which
I
think
will
benefit
the
community.
The
thinking
is
there.
You
just
have
to
bear
with
us,
as
we
just
navigate
our
sort
of
little
challenges
through
multiple
U.N
agencies
to
make
this
open
source.
A
C
A
Yes,
indeed,
so
the
solution
we
came
we
have
built,
it
is
still
not
cross-platform.
What
we
do
is
we
generate
a
long,
random
passphrase
in
the
app
we
use
that
to
encrypt
the
biometric
file,
the
The
Matrix
that's
been
generated.
We
pull
the
biometric
file
on
our
servers,
but
that
random
passphrase
that
we
have
generated.
A
We
use
your
phone's
native
capability
of
Apple
and
Google
to
store
it
in
the
local
key
store
that
still
does
not
work
for
cross-platform,
because
if
you
move
from
Apple
to
Google
it
will
not
work
and,
as
I
said,
I
like
apple
in
that
sense,
because
it
is
it's
a
bit
easier
to
do
in
apple
in
Google.
It
will
prompt
you
with
the
question
and
if
you
click
no,
then
if
you
want
to
revert
your
decision
and
that
decision
of
not
saving
the
passphrase
in
the
Google
keychain,
it
goes
across
devices.
A
So
if
you
switch
to
a
new
Google
device
and
then
you
use
the
same
password,
your
decision
of
no
on
the
old
device
goes
forward
and
the
settings
and
what
you
have
to
guide
the
users
through
is
is
like
you
better,
go
off
and
have
root
canal,
then
you
know,
try
and
make
those
changes,
but
that's
the
solution
we
have
come
up
with
and
we
will,
unless
there's
a
better
solution
that
comes
out
from
the
committee,
we'll
be
thinking
to
continue
with
that.
When
you
push
the
wallet
into
the
mobile
app,
please
by
all
means.
A
A
So
so
we
we,
but
we
have
seen
roughly
52
percent
split
towards
iPhone
versus
48
percent
toward
Android.
So
it's
it's,
these
two
platforms
really,
so
we
support
Android
and
Apple
I.
Think
on
Android
we
ran
into
trouble
where
there
were
some
old
devices,
but
the
the
from
a
business
process.
Point
of
view
the
fund
is
saying:
look.
This
is
one
way
we
are
not
stopping
the
whole
paper
based
way.
A
So
if
if
this
doesn't
work
for
you,
that
will
continue-
and
there
is
a
large
population
which
is
not
comfortable
with
the
devices
because
you're
dealing
with
80
year
old
people,
you're
dealing
with
people
who
are
incapacitated.
You
are
dealing
with
people
who
are
in
some
sort
of
vegetative
state
and
they
have
legal
holders
who
are
standing
on
their
behalf
and
they
need
to
get
pension.
So
we've
got
all
those
use
cases.
The
the
main
Mainline
process
continues.
A
What
this
does
really
for
the
pension
fund
is
really
it
gives
them
then
time
to
focus
on
those,
because
you've
got
a
bunch
of
these
already
sorted
out
automatically,
but
when
we
extend
this
to
U.N
digital
ID
I
think
we
can
still
continue
with
phones.
That's
that's
not
going
to
be
a
big
challenge.
When
we
discuss
in
the
substantive
work
of
un
for
Refugee
for
Refugee
population
person
of
concerns
population,
then
yes,
we
need
to
figure
out
how
to
do
this.
A
So
since
we've
launched,
we've
got
roughly
15
000
people
who
so
that
chart
that
I
showed
is
the
spread
of
15
000
people,
that's
from
the
82
000
population.
So
it's
not
really
huge,
so
we're
doing
making
some
process
two
weeks
now
and
different
ways.
So
there
are
a
lot
of
pension
fund
associations,
so
retired
beneficiaries
from
the
U.N
system.
A
Unfortunately
well
I,
wouldn't
say,
unfortunately,
wrong,
choice
of
words,
but
there
is
no
incentive
we
can
give
to
the
user
in
this
case,
it's
only
when
they
run
into
trouble
with
the
paper
process
and
they
come
to
know
the
alternative
they
jump
on
to
this.
So
so
there
is,
there
is,
no,
you
know,
there's
no
incentive.
You
can't
say
you
know
what
we'll
get
two
dollars
more
per
month.
If
you
go
for
it,
it's
not
allowed
for
the
union
regulations.
So
that's
that's
the
challenge
and
yes,
I.
Think
from
on
the
usability.
A
A
And
I
just
realized
I
was
I
was
asked
to
repeat
the
questions
which
I
have
not
been
doing
because
people
online-
and
it's
maybe
it's
a
bit
too
late
now
for
you
to
tell
me
that
so
the
question
was:
is
there
any
regulation
to
undergo
that
certification,
one
and
two?
What
are
the
benefits?
If
any
of
that?
So
no
there
is
no
regulation.
There
is
no
mandate
to
undergo
that
certification
and
it's
it's
a
fairly
common
yardstick
for
a
solution
to
be
measured
on
security.
A
So
a
lot
of
mostly
commercial
entities
do
it.
We
again
the
pension
fund
and
ourselves
decided
amongst
ourselves
that
we
will
undergo
this
certification
because
we
wanted
to
demonstrate
the
the
strength
of
the
solution
and
sort
of
you
know
it's
it's
it's
it's
like
having
any
certification
to
say:
hey.
We
are
meeting
certain
bare
minimum
standards,
so
I
know,
for
example,
I
do
believe
a
lot
of
national
government
state
governments
they
when
they
build
solutions.
They
go
for
these
certifications.
A
It's
just
that
because
it
is,
you
know,
there's
an
outward
element
to
it.
Obviously,
which
is
you
are
basically
saying:
we
are
ready
to
be
audited
by
independent
third
parties,
and
you
know
open
up
our
systems
to
them
and
get
their
buy-in
and
then
their
certification
plus
it
does
bring
a
degree
of
hygiene
within
within
the
solution
itself.
You
know
so
now
the
the
the
the
technical
team
hates
it,
because
it's
not
that
they
do
a
PR
and
you
know
devsecops
and
the
build
is
in
private.
A
A
A
It
was
a
bit
easier
to
sort
of
go
in
and
again
pandemic
really
help
because
the
pensioners
were
struggling,
especially
if
they
had
to
go
to
offices
for
some
reason,
so
so
and
again
again
we're
talking
about
a
vulnerable
population.
So
it's
not
really
like
you're
talking
about
a
15-year
gold
allowed
to
go
out,
you're
talking
about
a
60
70
year
old,
most
vulnerable
set
of
people
who
you
cannot
ask
them
to
go
out
during
the
pandemic,
so
that
was
a
big
Catalyst,
but
it
was
a
single
board.
A
A
So
this
is
this
is
not
bringing
in
some
new
fancy
Tech
some
some
I
do
recall,
I
think
when
the
conversations
were
taking
at
that
level.
Somebody
started
saying
it
must
be
one
of
the
big
fours
or
some
high-paid
consultancy
who's
bringing
in
this
ideas
around
over
here
and
the
response
was
no.
Actually.
This
is
working
for
you
and
and
yeah,
so
it's
proven,
and
that
then
helped
quite
a
lot.