SIMs data to be shifted to PTA for authentication, verification

The SIMs data currently secure at the Cellular Mobile Operators (CMOs)' level is to be shifted to the Pakistan Telecommunication Authority (PTA) for authentication and verification as the authority is reviewing SIM sale and authentication process, official documents revealed.

Admitting that grey SIMs are available in the market, the PTA has stated that the cases related to illegal issuance of SIMs against thumb/finger impression of innocent/ignorant people/villagers enticing them against meager incentives have been reported and all such cases are referred to the Federal Investigation Agency (FIA).

So far, 10 cases of misuse of biometric verification system (BVS) have been reported to the FIA with no forthcoming response/results, according to PTA documents. The PTA is reviewing SIM sale and authentication process.

With a view to minimize and eventually eliminate misuse of the BVS, currently the whole process is being reviewed in consultation with all stakeholders. Dual factor authentication process is proposed to be implemented - outline and modalities are expected to be finalized in six to eight weeks time. Data currently secure at the CMOs' level is to be shifted at the PTA's level for authentication and verification.

Data/SlM integrity will be monitored and stored at the PTA - for the purpose a "data center" will be established - to be equipped with resources including manpower (10-12 persons).

In 2014, SIM sale through biometric verification was implemented. The SIMs are activated after online verification of biometrics (thumb/finger impressions). In 2015, PTA carried out re-verification of SIMs issued prior to the BVS era from January to May 2019. A total of 114.9 million SIMs were verified, whereas 98.3 million SIMs were blocked. Still grey SIMs are available in the market.

In order to ensure that BVS is not misused, a buffer of eight hours on each CNIC has been enforced between successive BVS transactions for all activities i.e. new sale, duplicate SIM, change of ownership, and MNP. Unauthorized movement of the BVS devices will be penalized by respective CMOs. No SIM can be disowned before 60 days of (MSP) issuance.

In order to eliminate misuse of biometric verification through fake fingers, current BVS devices are being replaced with Live Finger Detect (LFD) devices in a phased manner. Penalty Matrix upon misuse of BVS was imposed in parallel with referring all misuse cases to the FlA.

The penalty imposed so far include: Jazz-16 franchises - warning with penalty of Rs 1.68 million, 38 franchises - warning issued and 80 retailers terminated, Telenor - five franchises terminated, 19 franchises penalized and 501 retailers terminated, Zong - two franchises terminated and 60 franchises warned with penalty of Rs0.742 million, Ufone - six franchises terminated, 98 franchises - strict waning letters with penalty of Rs 1.275 million, two franchise - final warning with penalty of Rs0.15 million, and 302 retailers terminated.