Study Group on Installation of Smartphones on function in My Number Card (7th Meeting)

Outline

Date and time: Friday, November 7, 2025, from 15:30 to 17:00
Venue: Online
Agenda:
1. Opening
2. Office communication
3. Proceedings
  1. Smartphone Installation in My Number Card function
  2. Operational Status of My Number Card on iPhone
  3. Operation Status of electronic certificates on Android smartphones Onboard Service
  4. Basic Policies for My Number Card on Android
  5. Exchange of views
4. Matters to be reported
5. Closing

Data

Summary of the proceedings

Date and time

Friday, November 7, 2025, from 15:30 to 17:00

Place

Holding online

Attendee

Knowledgeable person

Chairman
- Obi clan
Acting chairman
- Ōta clan
Constituent
- Nomura clan
- Miyauchi clan
- Moriyama clan
- Kanda clan
- Sakae Fuji

Local governments and industry groups

Maebashi-shi
- Jinbo Director of Business Improvement Office, Information Policy Division, Future Creation Department
Kobe-shi
- Takagi Planning and Coordination Bureau Digital Strategy Department
Japan Agency for Local Authority Information Systems
- Director of Nishiizumi Individual Number Center
- Deputy Director, Mizuochi Individual Number Center
- Hayashi Individual Number Center Public Personal Authentication Senior Advisor, New System Development Department
Telecom Services Association
- Sasaki MVNO Committee Steering Subcommittee Chief
Telecommunications Carriers Association
- SAJI General Manager
- Toyama clan
- Matsui clan
- Bando clan
- Ikeda clan
- Mr. Ken Maruyama
- Sato clan
- Mr. Wataru Maruyama
- Fujita clan
- Kuriyama clan
- Baba clan
- Ōno clan
- Hangai clan
- Harayama clan
- Yoshimasu clan
- Harada clan
- Kato clan

Observer

FeliCa Networks Corporation
Graduate Institute Of Information Security
NEC Corporation
NTT DoCoMo Business Corporation
Hitachi, Ltd.
General Incorporated Association Reuse Mobile Japan
The Japan Information Economy social promotion association
Japan Mobile Phone Distributors Association
TRUSTDOCK Co., Ltd.

Relevant ministries and agencies

Ministry of Internal Affairs and Communications

Secretariat, etc.

Digital Agency
- CxO
  - SAKA Chief Information Security Officer
  - Mizushima Chief Product Officer
  - FUJIMOTO Chief Technology Officer
- Group of Service for Citizens
  - Miura Director-General
  - Deputy Director-General Kamikariya
  - Director for Policy Planning Kiriyama and others

Main opinions from members (summary)

Appendix 1: Smartphone installation at My Number Card function; Appendix 2: Operation status of "My Number Card on iPhone"; Appendix 3: Operation status of "electronic certificates on Android smartphones Equipped Service"

Speaker: (hereinafter referred to as "JPKI"), iPhones' JPKI, plus card-substitute electromagnetic records, are steadily becoming available to the public. In particular, iPhones have received a good response, and about six private companies have started using them. In the previous Study Group, because identity verification is becoming more important for private use, we asked for efforts to develop ministerial ordinances (Act on the Prevention of Inappropriate Use of Mobile Phones, Act on Prevention of Transfer of Criminal Proceeds) in a way that supports laws and regulations, and we received a response that we would proceed with this. I would like to thank you for your efforts.
- Secretariat: Regarding systems, identity verification obligations are expected to be further strengthened under the Act on the Prevention of Abusive Use of Mobile Phones and the Act on Prevention of Transfer of Criminal Proceeds due to the occurrence of fraudulent cases, etc., and, including the installation of smartphones on My Number Card, is becoming increasingly important. Regarding identity verification under the Act on the Prevention of Abusive Use of Mobile Phones, in the case of non-face-to-face meetings, the E-method (a method to confirm by sending images of identity verification documents (driver's licenses, My Number Card, etc.) and images of selfies) is often used. However, the E-method will be abolished at the end of March next year, and it will be a method to use IC chips of My Number Card or My Number Card equipped with a smartphone. The non-face-to-face meetings of Act on Prevention of Transfer of Criminal Proceeds will be the same at the end of the fiscal year after next (the end of March 2027). My Number Card and smartphone-equipped My Number Card will become more important in society. Under the Act on the Prevention of Abusive Use of Mobile Phones, at the end of the fiscal year after next, not only checking the face of the ticket but also scanning IC chips or receiving transmission of electromagnetic records substituted for cards will be mandatory for identity verification with a Act on Prevention of Transfer of Criminal Proceeds. In addition, ministerial ordinances that position other identity verification will be amended not only for My Number Card but also for ministerial ordinances that need to be amended to include transmission of electromagnetic records substituted for cards equipped with smartphones. We will proceed firmly in accordance with your guidance.
Speaker: Android started earlier than that of iPhones. However, in only about four months, the number of iPhone users is one digit larger than that of Android users. Does this mean that there is a demand for a service that allows the use of an electromagnetic record alternative to a card, rather than a electronic certificate service for smartphones? I would like to ask if you have any analysis, etc. on the reasons for the significant increase in the number of iPhone users. My question was raised in the hope that it would serve as a reference for the spread of Android in the future.
- Secretariat: Regarding The main services that can be used with smartphones are Mynaportal or convenience store delivery for both Android and iPhones. iPhones are described on page 4 of Appendix 2, and Android is described on page 4 of Appendix 3. Since both services use electronic certificate, there is almost no difference in available services between electronic certificate for smartphones in Android and My Number Card on iPhone. We assume that the reason for the large diffusion may be the easy-to-understand operability from the wallet. In addition, we believe that the main factors are the large number of iPhone holders, the Minister's announcement prior to the service launch on June 24, and the fact that most media reported on the day of the service launch with an image of a wallet placed on it. Regarding high operability, we assume that the simple installation method, good usability after installation, Face ID for login, and fairly high evaluation on the Internet, etc. have created a synergistic effect. We will strive to increase the number of users as we will realize the use of Android from the wallet next autumn.
Speaker: and on iPhones, and that the only differences are the degree of publicity and recognition. In that case, we need to publicize Android as well.
- Secretariat: Regarding Android. We would like to consider it in the future.
Speaker: card, is it correct to understand that it is no longer necessary to enter the reference number B, which is required to be entered when using a My Number Card? Please tell us the circumstances under which it became unnecessary.
- Secretariat: Regarding My Number Card and My Number Card with smartphones to be used with two-factor authentication, the electronic certificate for signature cannot be used unless a PIN of six digits or more is entered. The electronic certificate for user signature can be replaced with biometric identification, but it is controlled so that it cannot be used unless either one is used. In addition, the system is designed in the same manner as My Number Card so that it is safe even in the case of loss or theft.
Speaker: tickets?
- Secretariat: Regarding smartphones, there is no input equivalent to the reference number B.
Speaker: 's smartphone access control is no longer available because it is considered more secure than My Number Card's control?
- Secretariat: Regarding checking number B is a function required for a business operator to read information on IC chips by inputting information on the ticket surface. However, in the case of smartphones, a use case where a business operator receives and uses information from the holder is not assumed, so the same function is not included in the design.
Speaker: has increased, but I would like to ask if you are conducting a survey on what is happening due to the increased convenience, or if you plan to conduct such a survey in the future. For example, I would like to ask if you are investigating the spread of private use and the spread of qualification confirmation.
- Secretariat: Regarding due to enhanced convenience with the installation of My Number Card smartphones. Currently, as smartphone-equipped services have just started, we are in the phase where we are making efforts to enable My Number Card equipped with smartphones to do what can be done in My Number Card. However, regarding utilization, we are constantly conducting surveys and research on areas that can be targeted in cooperation with commissioned companies. We would like to proceed with utilization as a whole based on the perspectives received from them.
Speaker: . Countries are increasingly considering the use of Verifiable Credentials (hereinafter referred to as "VC"). Personally, I think a combination of JPKI, which has a strong rationale for its issuance, and VC, which users feel secure about the handling of their personal information, may be a good idea. What do you think about taking measures from now on for technical and institutional examinations of the spread of VC, and for mutual operation of cross-border use such as passports?
- Secretariat: Regarding As you pointed out, certificate-equipped VCs are becoming increasingly popular around the world. My Number Card's smartphone-equipped VCs are equipped with extremely important and high-level certificates, so they require strong holder-binding. This is based on the premise that information is provided only to specific parties and is not circulated from place to place. Regarding information that is circulated from place to place, open-ID-based specifications are emerging, and it is very important to define and develop protocols and data-items, etc. Based on this perspective, we held a VC Study Group in Group of Common Functions for Digital Society and are actively proceeding with the study and preparation of mocks, etc. My Number Card's smartphone-equipped VCs are an actual service release of VCs in a broad sense, so I think the following are extremely important themes: What kind of card-substitute electromagnetic records will be released? What kind of regulations will be created for VCs that are open-ID-related systems? Whether a convenient, safe, and affluent society can be created for users by having digital certificates stored on smartphones? Digital Agency as a whole will conduct studies and research with the guidance of experts.
Speaker: iPhones and transitions in number of cases in Android. However, since My Number Card's smartphone-equipped iPhone was released first, I assume that there will be a certain number of users who have switched from Android's service equipped with electronic certificate. Please tell me if you have any analytical results. Also, once Android side is released, do you assume parallel use with iPhones in the future? I would like to know if you assume that the number of users on Android side will increase due to that assumption.
- Secretariat: Regarding to iPhones, and we have not been able to confirm whether it is possible to analyze at this point. We will report if it is possible to analyze, including understanding the number of transfers from Android to iPhones. In terms of institutional design, there are provisions in the Public Personal Authentication Act regarding the parallel use of iPhones and Android, including electronic certificate equipped with smartphones. In addition, there are provisions in the Number Act regarding electromagnetic records substituted for cards in the same manner as My Number Card. However, in both cases, the institutional design is such that the reproduction (installation in smartphones) of My Number Card is limited to one per person. Therefore, they are designed to be installed on either iPhones or Android.
Speaker: : At present, smartphones cannot contain both the U.S.'s mDL and the Japanese My Number Card. In the future, as smartphones become more widespread, including through overseas collaboration, I am somewhat concerned that technical debt may arise if we do not proceed with adjustments to include both. I would like to hear your thoughts on this.
- Secretariat: Regarding and other countries, we do not have any issues at this point, but we would like to receive guidance in the future, including concerns. We would like to proceed with the investigation with flexibility and speed.
Speaker: OK. I will give my opinion in the future.
Speaker: , I recognize that various restrictions need to be improved, such as the basic design requiring entry of a four digit PIN number, and there are procedures for using biometric identification. If the current smartphone electronic certificate can be set in Android, and the My Number Card can be installed without inconvenience, how about Digital Agency and the national government working together to promote the use of the smartphone electronic certificate in Android?
- Secretariat: Regarding We would like to consider the convenience as we continue to consider the installation of My Number Card on Android. Regarding My Number Card on Android, those who have already installed electronic certificate for smartphones will also be able to install card substitute electromagnetic recording. There is almost no difference in the procedure between those who have installed electronic certificate for smartphones and those who have not installed it, and it is assumed that the procedure will be the same as that for My Number Card on iPhone installation. However, we will make adjustments while considering the balance so that users do not feel disappointed such as requiring the same procedure again. In particular, we plan to consider the use of health insurance cards and services that can already be provided such as JPKI.
Speaker: , but we consider that there are few announcements regarding the disclosure of APIs, as explained in the previous review meeting. Since native OSs are used, APIs differ between Android and iPhones. On the other hand, APIs to be used in the Web version have also been announced, and at WWDC, a message to developers was announced regarding available APIs. There are also expectations that the same Web version of APIs can be used in Android and iPhones, so I would like to see active preparation and dissemination.
- Secretariat: Regarding APIs as a challenge. We have just started groping without knowing the market situation, whether private sector wants to mainly use JPKI or JEMS as a substitute for a card. However, as a receptionist, I feel that inquiries about JEMS as a substitute for a card are increasing. In terms of materials, iPhones are required to use the library on the iOS side, so basically we have only been able to guide you to the Apple website after it has been installed. Regarding the APIs of the web version that you mentioned, it is not possible to respond to all of them right now because the market has become exciting. However, we recognize that it is necessary to clearly indicate what can and cannot be responded to, and to actively guide those that can be responded to. In addition, regarding JPKI in Android, we recognize that it is necessary to guide them accordingly rather than passively.
Speaker: There was an announcement from Financial Services Agency that a phishing-resistant authentication method should be made mandatory to prevent phishing fraud damage, and the Japanese Securities Dealers Association revised its guidelines on October 15. From that viewpoint, identity verification, which uses My Number Card installed on smartphones, is highly expected as an easy identity verification when setting service providers and financial institutions passkeys to prevent phishing fraud damage. In the future, I would like you to promote from this aspect as well or make it convenient to use.
- Secretariat: Regarding : Regarding phishing resistance, the Digital Agency Group of Service for Citizens has not yet advanced its consideration, but the Digital Agency as a whole recognized the need to strengthen cooperation with members with knowledge, focusing on the identity unit. The Digital Agency will consider the opinions received.

Appendix 4: Basic Policies of My Number Card on Android

Members, etc. only

Exchange of views

Speaker: , there are many medical institutions that can only handle My Number Card. I have heard that in the future, additional card readers will be installed to handle My Number Card equipped with smartphones. I would like to ask about the progress.
- Secretariat: Regarding , is different between iPhones and Android. The fact is that most card readers today are designed to read My Number Card cards, so an external card reader is necessary. In fact, there are about 230,000 places in Japan where health insurance cards are used, including 105,000 clinics, 8000 hospitals, more than 50000 pharmacies, and dental clinics. Among these, the number of institutions that have installed card readers and have used them at least once is more than 40000 per day. Ministry of Health, Labor and Welfare is making efforts to spread the use of card readers, such as providing subsidies for one half of the cost and up to 7000 yen per set in virtual offices using Amazon Business.
Speaker: : Looking at the situation of Apple in the United States, it is recognized that the situation is progressing very quickly. In addition to passport services, airlines have started issuing digital tickets in anticipation of the situation, and function services that allow the location of an item to be traced to oneself in a wallet have been started. In the future, I request you to take measures so that a system can be used by the public while watching overseas trends.
Speaker: : How will the revocation of an electromagnetic record substituted for a card be carried out? Are there any means to confirm whether an electromagnetic record substituted for a card received by a business has been revoked? In the case of a electronic certificate for smartphones, it is expected that this will be confirmed using OCSP and CRL. Is it correct to believe that there is a similar mechanism?
- Secretariat: Regarding . When a My Number Card electronic certificate for signature purposes expires, the Number Act provides for grounds for invalidation of an electromagnetic record substituted for a card. When a corresponding ground for invalidation occurs, there is a function that prevents the wallet side from presenting an electromagnetic record substituted for a card at the user's terminal itself. However, if the terminal itself is offline and is unable to receive a ground for invalidation, it is possible that an electromagnetic record substituted for a card may be presented immediately after the terminal is brought back online and before the notification of invalidation is received. For this reason, a mechanism has been prepared whereby the recipient can also confirm online that the electromagnetic record substituted for a card that has actually been received has not been invalidated, and it is possible to make an inquiry. A double measure has been established so that it can be confirmed with a concept close to the CRL for electronic certificate for smartphones.
Speaker: Is it acceptable to assume that recipient's revocation confirmation can be done without authorization, unlike JPKI?
- Secretariat: Regarding revocation confirmation, unlike JPKI, the scope of ministerial certification is not business operators, but certification for programs that verify when receiving card substitute electromagnetic records, and the service form is based on the premise that the program will be used. Although the requirements themselves for confirmation programs do not obligate revocation confirmation, if you use the approved programs, including the confirmation program distributed by Digital Agency, the reference function is basically established.
Speaker: I understand. If the same can be done for JPKI, the use of JPKI would be further promoted. I would like you to consider this in the future.

Greater Than