Which implantable technology is the most secure, flexible and big scale adaptable?

Most of you have thought about this before. How can we bring implanted chips to a level of usefulness for the society?
Given that one could convince big actors such as governments, banks, car manufacturers, lock manufacturers etc. to play along, everything should already be in place.
Which implantable technology has the most versatile and secure solution?

I live in a tiny country. Norway. We are 5 million people, quite technologically advanced and eager, and rather not poor. In addition to this, our interpretation of “socialism” works very well for us. Most systems are centralized, especially for identification. We’re done with the transition to being able to do anything with our phones. We pay, sign documents, unlock doors, start cars etc., just with the phone. Some of this is NFC, some is Bluetooth, and some is just as 2FA.
I haven’t used physical cash for about 10 years, and I haven’t physically signed a document in 5. During covid, the use of electronic authentication and payment has advanced even further, and has truly become the norm.
For instance, we bought and moved into a new house last month, and we haven’t physically signed a single document during the entire process. Everything is digital.
This country is a practical playground for trying this.
I feel I should also stress that this is not a “business idea”. I will not make money out of this. This is purely for advancing technology on a national level.

The national standard for such electronic identification across all utilities is a centralized national system called “BankID”. Originally used with a personal “calculator”-device for 2FA, later expanded to “BankID on mobile”, which all cell carriers and phones support. You only need your phone. However, this is just for electronic authentication, an area where implantables wouldn’t be used.

There’s a “new” initiative for creating an “equally” simple physical authentication, the next step beyond passports. However, this is in the form of a National Identity Card with a photo and a chip. Anywhere where a physical authentication is required, there already are (or will be) physical card/chip readers.

What I want to explore is obviously the possibilities of implanting this information, in addition to having this card - as an option made available by the government.

In addition to this, physical cash stood for only 11% of all physical store transactions in 2018, declining from about 40% in 2010(1). With covid, I expect this to be less than 5% today.
Virtually every single store has supported contactless payment for more than a decade, by tapping your credit/debit card (or more recently Google/ApplePay) on the terminal - and the vast majority of people use this. Nobody I know actually uses cash.
The technology for supporting payment using implanted chips is already in place, virtually everywhere.

Both physical identification and physical payment should be possible to do using a personal implanted chip. It is also the natural next step, technologically.

I do have some pushing power for this. Far more than some “I’m 17 years old and this is cool”-child.
What I need to know before approaching and “making a case” for this is the technical specifications, the pros and cons, the implications, what do each joined institution need to do to support this, and thoughts/ideas for how to proceed with caution.

An initiative like this will likely take at least a decade to see through, but will ultimately fast-forward the willingness of other companies to join the wave of support, exactly like how I’m able to buy a house through a private actor using BankID. ChipID is the next step.

I don’t know much about the actual technologies, specifications, encryptions and the security of it all.
Am I wrong in thinking this is already technologically possible with the existing hardware, and that public/official willingness is the only barrier?
Is there a single chip (or chip-cluster) that can be manufactured that can be supported by several of the existing hardware-technologies (as they have different specs), but which will ultimately work as one system?

Any help is appreciated.

1 Like

I don’t think you are wrong there. There already are Javacard chips NXP P71 which are payment capable, but EMV are vary of allowing their use in implants on their network. The chips in the upcoming Apex line will already have preloaded payment applets, which will be disabled since EMV doesnt allow it (with the idea being that they might change their mind in the future. if implants become more acceptable/a better bussiness opportunity).

The question, of course, is what kind of chip will be used in the next generation identity documents you mentioned. If it will be contactless as well, I think it could probably be done.

I think something like the NXP p71 would be perfectly capable of doing something like this, having multiple applets for ID, payment, keys, whatever. The problem is of course that this then all becomes a centralised point of failure, with a high incentive for malicious actors to try to exploit it.

I could, of course, be completely of the mark so I invite the others to share their thoughts :slight_smile:

Edit: keep in mind that implants tend to be a bit of a PR landmine in the current climate, especially with very religious types. Thread carefully

I would say you’re definitely not wrong, however actually getting the infrastructure to be secure / rolled out is an issue.

Probably, yes. That current National Identity Card likely uses a secure element very similar (maybe identical) to the ones available in other Javacard contactless chips, like the NXP P71 axolotl mentioned. In fact, there are ones available which support both contactless and chip communication, so if the infrastructure was based around that, it shouldn’t be too hard to use that in an implantable form. Both systems would probably run on a variant of the Javacard OS.

Yes it’s possible with Javacards which are being converted into implants as we speak. The BankID contactless cards are running an applet to handle the authentication. This applet could be uploaded to the Fidesmo app store, and then deployed onto the VivoKey Apex, or any other javacard implant (chuckles in capitalism) immediately. It’s just a matter of will

To echo what has already been said, VivoKey Apex would be the implant to do this. It would probably involve getting a registered eID applet Electronic ID | Norge.no and going through cert and all that.

The important thing (as mentioned) is that all the elements come together to support this kind of system. For example, the implant must be contactless for obvious reasons. In Estonia they have their e-resident program and the applet can easily be deployed to the VivoKey Apex… but all the readers deployed throughout the country to businesses and individuals are contact readers, and all the supporting software and drivers and plugins supporting connection of that contact card to the backend are written for direct APDUs to contact cards.

It’s something VivoKey definitely wants to look into, but I think would need support from people with contacts in the right places to get any traction.

Was that intentional or a Typo?
Either way, I like it

i like it