2014年-世界发展银行全球_Identification_for_Development___Morocco_86页_3mb

Summary of Identification for Development (ID4D) Report: Morocco

Core Content

This report provides an analysis of Morocco's identification systems as part of the Social Protection Assessment (SPA) multiagency platform. It evaluates the strengths and weaknesses of existing identity programs and outlines options for improving the country's identification ecosystem to support a unified and efficient system for identity management and service delivery.

Main Identity Programs in Morocco

1. National Electronic Identity (CNIE System)

• Overview: Established in the late 1970s, the CNIE system was introduced in 2008 as a more secure and modern identity solution. It uses biometric data (fingerprints) and an electronic smart card with advanced security features.
• Legal Basis: Instituted by Law No. 35-06 and Royal Decree No. 1-07-149 of 2007, with support from the Prime Minister Decree No. 2-06-478 of 2007.
• Management: Administered by the DGSN (Direction Générale de la Sureté Nationale), which operates with a high degree of autonomy within the Ministry of Interior.
• Coverage: The CNIE system covers approximately 60% of the total population (around 20 million as of 2014), with a higher rate of 75-80% among adults over 18.
• Accessibility:
  • Not universal due to:
    • Exclusion of children under 18.
    • High cost of enrollment for adults (75 Dirhams).
    • Limited enrollment centers (around 100) leading to long distances for remote populations.
  • Mobile enrollment teams were used in the past but not systematically.
• Robustness:
  • Enrollment Process: Robust, with in-person application, biometric capture, and documentary verification.
  • Validation Process: Robust, using AFIS for deduplication and future face recognition integration.
  • Credential and Data Security: Robust, with state-of-the-art smart cards and cryptographic signatures.
  • Authentication: Non-robust, as it is manual and lacks cross-checking with the CNIE database, except for ePassport integration.
• Integration:
  • The CNIE replaces four key documents: birth certificate, certificate of residence, proof of life, and certification of nationality.
  • It is used in most transactional processes, but integration with other programs is mostly manual and not electronic.
  • Lack of electronic integration leads to inconsistencies in identity data across different systems.
• Legal Framework:
  • Morocco has a comprehensive legal framework for privacy and data protection.
  • The CNIE system is not fully aligned with this framework due to a national security exemption.

2. ePassport

• Integration with CNIE: A successful example of functional program integration with a foundational identity system.
• Process:
  • Applicants provide CNIE number, name, and date of birth.
  • Information is checked against the CNIE database.
  • If matched, fingerprints are securely uploaded to the ePassport's smart chip.
  • Discrepancies result in application rejection.
• Outcome:
  • The ePassport database is fully harmonized with the CNIE system.
  • Over 4 million ePassports have been issued since 2009.

3. Civil Register

• Management: Administered by DGCL, a decentralized system with around 2200 local offices.
• Structure:
  • Principal offices: 1503 (1282 rural, 221 urban).
  • Subsidiary offices: 700.
  • Overseas offices: 69, attached to consular missions.
• Technology:
  • Most offices lack connected computer systems.
  • Use paper registers for births and deaths.
  • Each entry is a permanent record, not modifiable without court order.
• Limitations:
  • Not digitized.
  • No interoperability with other identity systems.
  • Leads to fragmentation and duplication.

4. Massar (National School Register)

• Purpose: Focuses on children's education and is linked to the CNIE system.
• Coverage: Targets children aged 12-18 for enrollment in electronic passport and other programs.
• Integration: Not fully electronic with CNIE, but relies on it for enrollment and data sharing.

5. RAMED (Health Assistance Register)

• Purpose: Serves as a health assistance register for vulnerable populations.
• Integration: Relies on CNIE for identity verification, but not fully electronic.

6. CNSS (Social Security Register)

• Purpose: Manages social security data for citizens.
• Integration: Also relies on CNIE for identity, but lacks electronic integration with other systems.

Key Findings and Analysis

Strengths

• Highly developed and extensible identity registers.
• Multiple points of contact with the population.
• Robust legal framework for privacy and data protection.
• Existing identity programs with complementary strengths.

Weaknesses

• Lack of digitization and full decentralization in the civil register.
• Proliferation of identity numbers across different systems.
• Strong online presence but non-transactional.
• No authentication infrastructure.
• Vendor lock-in due to the use of proprietary biometric templates.
• Biometric enrollment not done according to best practices.
• Absence of a national identity strategy.
• High cost of main credential.

Options for Consideration

• Establishing a national organization for identity management.
• Implementing a unique identity number (UIN) for individuals.
• Securing the UIN with a PIN.
• Conducting a legal and privacy impact assessment.
• Modernizing the civil register.
• Linking household registers to unified individual registers.
• Creating a unique digital identity.
• Upgrading the CNIE enrollment process.
• Improving openness and interoperability of the CNIE.
• Conducting a technical review of identity assets.

Conclusion

The report emphasizes the need for a national identity strategy to unify the current fragmented systems. A unique identifying number (UIN) could serve as the key to integrating and harmonizing data across different registers. The CNIE system is identified as a foundational program with potential, but its authentication process is currently weak, and it lacks electronic integration with other systems. The civil register, while extensive, is not digitized and suffers from inconsistencies and duplication. The ePassport serves as a positive example of integration with the CNIE system, but the overall ecosystem requires modernization, standardization, and legal alignment to support efficient and secure identity management for all citizens and residents.