Trusted Identity Across Channels and Organisations

Connecting Identity Information with Everyday Services

Banks and enterprises need to establish who a person is, which organisation they represent and what they are authorised to do. Repeated document collection and disconnected accounts can make that process difficult to maintain.

Hengbao supports digital identity processes that connect trusted attributes with credentials, applications and access policies. Customers, employees and partners can use identity information across agreed services, while the organisation retains control over issuance, verification and changes.

Digital Identity Credentials

Represent identity attributes, professional qualifications, organisational relationships and business authorisations as verifiable credentials. An issuer creates the credential, a holder presents it and a verifier checks the issuer, signature, validity and status before applying its own business rules.

Credentials can carry information such as organisation, role, qualification, authorisation scope and expiry date. Sharing the attributes required for a service reduces repeated submission of complete records and creates a more consistent basis for verification.

• Employee and contractor identity, department and role credentials
• Partner relationships, project roles and service authorisations
• Customer eligibility, membership and qualification attributes
• Professional qualifications for restricted operations

Issuance controls bring together approvals, separation of responsibilities and protected signing keys. Trusted issuer records, signature checks and credential status mechanisms help receiving systems assess the information they accept.

Mobile Identity

Bring registration, authentication and credential use into a mobile application. Mobile identity connects identity directories, authentication services and business applications, providing a familiar entry point for customers and employees.

Applications include mobile banking activation, device binding, sign-in, payee-related verification and employee access from branches, field locations or remote workplaces. Mobile credentials can also support presentation of identity and qualification information at service points.

Device registration, authenticator addition and replacement are governed as part of the identity lifecycle. Device-platform biometrics can provide local authenticator user verification, alongside FIDO2/WebAuthn, certificates or other configured methods. Lost or replaced devices are addressed through unbinding, re-registration and recovery processes.

Digital Credential Wallets

A digital identity wallet allows a holder to manage credentials from trusted issuers and present them to a service with their authorisation. Wallet integration connects the issuance and verification journey with a compatible wallet application supplied by the customer or a third party.

This can support customer eligibility checks, cross-organisation employee roles, partner authorisation and presentation of qualifications at in-person service points. The selected wallet and credential formats determine the available presentation and verification flows.

The solution design brings together holder authorisation, issuer and signature checks, credential validity and status, and the information required for each request. Renewal, revocation, device migration and recovery are considered across the credential journey.

Digital Identity and IAM Platforms

Connect identity directories, sign-in, application integration and access policies through a coordinated identity and access management framework. Manage customers, employees, partners and service accounts from identity creation and change through deactivation.

Financial institutions can maintain distinct customer identity and access management processes and workforce IAM processes while coordinating policies and audit views. Customer channels can share a consistent identity entry point; employees can use single sign-on across connected workplace and business applications.

• Central authentication, single sign-on and multi-factor authentication policies
• Access based on role, resource and context
• Least privilege, approvals, separation of duties and access reviews
• Stronger authentication for administrators and sensitive systems
• Account provisioning, permission-change and authentication records

Application authorisation, authoritative identity sources and existing privileged access management systems can be connected through the integration design.

A Credential Journey That Remains Governable

From identity checks and controlled issuance to presentation, verification and retirement, credentials remain connected to the relationships they represent. Role changes, contract expiry and device replacement can trigger updates, suspension or revocation, with lifecycle actions retained for audit.

Designed Around Real Identity Journeys

Support customer access across mobile banking, online banking and service portals; coordinate workforce onboarding and departure; verify partner authorisations; and reuse trusted qualification information across participating organisations. Credential trust and interoperability are defined around the services involved.