Kuwait Insurance Co. (KIC)

Business Needs & Challenges

1. Authenticating the Client

   First of all, it is imperative to identify the client and reduce chances of identity fraud. In the case of clients visiting a branch of KIC, the credentials of the client can be verified by one of KIC's staff. Forcing the client to visit a branch for authentication violates the very purpose of providing this service online. It is now increasingly difficult to identify a client in a way that is compliant with rules, does not violate the privacy of the client, and in case of repudiation, the action stands in the court of law.

2. Required Data

   To provide the required Insurance, Kuwait Insurance Co. (KIC) needs to register the details of every client. It is imperative to collect the name, phone, date of birth, nationality, area of residence and many more fields into the existing system. Although a one-time activity, this process is error-prone and time-consuming, not to mention that an inaccurate identification of a client may lead to legal and economic implications.

3. Digitally Signing Documents

   KIC Clients who visit the branch sign on the documents in the presence of KIC staff. However, if the client is interacting online, how can we make sure the client signed the document or not. Furthermore, how can we make sure that the signature is valid, not tampered with, and is relevant to this particular document? This challenge alone has stopped many insurance companies in Kuwait from pursuing online insurance offerings.

Characteristics of a viable solution

Kuwait Insurance Co. (KIC) needs a solution that should have the following characteristics:

1. When a client uses any of KIC's online channels requesting a product, s/he presents her/his Mobile ID (Hawyti) app using either the Push Notification service (by entering her/his Civil ID into a box), or scanning a QR Code displayed on the screen using the Mobile ID (Hawyti) app.
2. When the client receives the authorization request, s/he can review the request and reject or accept it.
3. Only when the client approves the authentication request will Kuwait Insurance Co. (KIC) receive the Civil Information of the client. Now KIC can prepare the necessary document(s) that the client needs to sign on. Once ready, each document will be sent securely to the client's Mobile ID (Hawyti) app for review and approval.
4. The client then reviews each document and either signs it, or rejects it. If rejected, the whole transaction is considered void and the process does not continue to the next step.
5. If the client approves the document and digitally signs it using her/his Mobile ID (Hawyti) app, this action needs to be recorded properly for auditing and repudiation review purposes. If a client repudiates an action, this solution should make sure the records show the accurate activity.

Solution

Kuwait Insurance Co. (KIC) decided to team-up with Sharper Software to develop a solution that could address the aforementioned challenges.

Mobile ID (Hawyti) Integration makes it possible for KIC's clients to apply for insurance products from the comfort of their seats.

How is this solution viable?

1. Since Mobile ID (Hawyti) app uses an authentication mechanism introduced by the Public Authority for Civil Information (PACI), every client who uses this service is identified by PACI first.

2. Privacy of clients is preserved, as their data will not be shared with any other entity unless they approve the process using the app.

3. To use the Digital Signature feature, clients will need to make a one-time visit to PACI to increase the authentication level of their Mobile ID (Hawyti) app. Once this is done, clients will be able to sign documents using the app.

4. Only a client who already has the Digital Signature feature enabled will be able to sign documents. Every document signed by a client is also verified by PACI and records kepts with KIC as well as PACI. In case of repudiation, these records will be matched and proved.