Tun2U is the first Italian agency to launch an e-commerce site with SPID access. It is the Orofirst Shop portal, from the Roman jewelry store of the same name, which went online in early February.
A procedure has been implemented on the platform to allow the user to purchase refurbished jewelry, diamonds, and used watches without having to send IDs during checkout, a procedure that occurs in the physical store by law.
In the case of online purchase, therefore, logging in with SPID digital identity is automatically registered. This step guarantees to all intents and purposes that the buyer is an individual or a legal entity duly registered with the public digital identity system, a particularly safe and secure system designed by AgID – Agenzia per l’Italia Digitale.
“Access through SPID,” explained Alessandro Portale, CTO of Tun2U Group , “will determine the future online for citizens and businesses. In fact, the greatest advantage is to access an innumerable amount of services offered by public administrations and individuals through the use of a single authentication tool. This will change the life of every telematics user.”
On the legal side, the transaction was followed and supervised by attorney Niccolò Rossi of the law firm Rossi e Associati.
SPID offers 3 levels of security:
– The first level provides access to online services through a username and password chosen by the user (SPID credentials).
– The second level, which is necessary for services requiring a higher degree of security, allows access through SPID credentials and the generation of a temporary access code (One time password), provided through text messages or through the use of an app (provided by the digital identity manager) usable through a device, such as a smartphone or tablet.
– The third SPID security layer, in addition to SPID credentials, requires a special physical medium that handles cryptographic keys. Such a medium can be a smart card or a remote digital signature device (HSM).
What are the differences with ‘classic’ access? “The main difference from a normal login system,” Portale said, “is to encapsulate all information in one account and access multiple services through a single digital identity.
This is definitely “an innovation in the field of technology. Through SPID access, the digitization process is implemented and the life of citizens and businesses is simplified in their relations with the Public Administration and private members. Extending this technology also to the e-commerce world could be a breakthrough precisely to make it as easy as possible for the user in his or her telematic journey.”
Is it more complicated to implement e-commerce with SPID access? “Technically, it is an added complexity that is built into an e-commerce and can require medium to extensive development time, depending on the platform we decide to use. Definitely,” the CTO concluded , “it is good to rely on experts in the field, the only ones who can integrate the system within an e-commerce.
