Study Group on Installation of My Number Card Functions on Smartphones (7th)

Overview

Date and time: 15:30 to 17:00 on Friday, November 7, 2025
Location: Online
Agenda:
1. Opening
2. Administrative communication
3. Agenda
  1. Smartphones equipped with My Number Card function
  2. Operating status of "iPhone My Number Card"
  3. Electronic certification Installation Service for Android Smartphones
  4. Basic Policies of "My Number Card"
  5. Exchange of views
4. Notes
5. Adjournment

Material

Summary of the Proceedings

Date and

Friday, November 7, 2025, from 15:30 to 17:00

US>

Held online

Attendees

Knowledgeable person

Chairman
- Obi clan
Acting chairman
- Ota clan
Member
- Nomura clan
- Miyauchi clan
- Moriyama clan
- Kanda clan
- Sakae Fuji

Local governments and industry groups

Maebashi-shi
- Manager, Business Improvement Office, Information Policy Division, Future Creation Department, Jinbo
Kobe-shi
- Takagi Planning and Coordination Bureau, Digital Strategy Department
Japan Agency for Local Authority Information Systems
- Director of Nishiizumi Number Center
- Deputy General Manager, Mizuochi Number Center
- Hayashi, Individual Number Center, Public Personal Authentication Senior Executive Officer New System Development Department
Telecom Services Association of Japan
- Sasaki MVNO Committee Steering Subcommittee Chief
Telecommunications Carriers Association
- SAJI, General Manager of
- Toyama clan
- Matsui clan
- Bandō clan
- Ikeda clan
- Ken Maruyama
- Sato clan
- Wataru Maruyama
- Fujita clan
- Kuriyama clan
- Baba clan
- Ōno clan
- Hangai clan
- Harayama clan
- Yoshimasu clan
- Harada clan
- Kato clan

Observer

FeliCa Networks Corporation
Graduate School of Information Security
NEC Corporation
NTTD DoCoMo Business Inc.
Hitachi, Ltd.
Reuse Mobile Japan
The social promotion association of Information Economy
National Association of Cellular Phone Distributors
TRUSTDOCK, Inc.

Ministries and agencies concerned

Ministry of Internal Affairs and Communications

Secretariat, etc.

Digital Agency
- CxO
  - Slope Chief Information Security Officer
  - Mizushima Chief Product Officer
  - Fujimoto Chief Technology Officer
- Group of Service for Citizens
  - Miura Director-General
  - Deputy Director-General Kamikariya
  - Kiriyama Director for Policy Planning, etc.

Main opinions from the members (summary)

Reference 1: Installation of My Number Card function on smartphones Reference 2: Operation status of "My Number Card for iPhones" Reference 3: Operation status of "electronic certification Installation Service for Android Smartphones"

Speaker: Androids and JPKI for iPhones, alternative electromagnetic records for cards are steadily becoming available to the public. The iPhones in particular have received a positive response, and about six companies have started using them in the private sector. At the last meeting of this study group, since identity verification will become increasingly important for private sector use, in the form of supporting laws and regulations, I conveyed that I would like you to make efforts to develop ministerial ordinances (Act on Prevention of Improper Use of Mobile Phones, Act on Prevention of Transfer of Criminal Proceeds) and received a response that it would proceed. I would like to thank you for your efforts.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by system, due to the occurrence of fraud cases, etc., the Act on Prevention of Improper Use of Mobile Phones and the Act on Prevention of Transfer of Criminal Proceeds are going to strengthen the obligation of identity verification, including the installation of My Number Card on smartphones. For identity verification under the Act on Prevention of Improper Use of Mobile Phones, in the case of non-face-to-face meeting, the E method (a method of checking by sending an image of a identity verification document (driver's license, My Number Card, etc.) and an image of a selfie appearance) is often used, but the E method will be abolished at the end of March next year, and a method of using an IC chip such as a real My Number Card or a My Number Card equipped with a smartphone will be used. The situation will be the same at the end of the fiscal year after next (the end of March 2027) for non-face-to-face meeting of Act on Prevention of Transfer of Criminal Proceeds. In society, the significance of a real My Number Card and a My Number Card equipped with a smartphone will increase. At the end of the fiscal year after next, it will be obligatory not only to confirm the face of certificates under the Act on Prevention of Improper Use of Mobile Phones and the identity verification equipped with a Act on Prevention of Transfer of Criminal Proceeds, but also to read IC chips or receive the transmission of electromagnetic records as a substitute for cards. Furthermore, the ministerial ordinance that positions other identity verification will be revised if necessary to include the transmission of electromagnetic records as a substitute for cards installed in smartphones, not only in the real My Number Card. I would like to proceed firmly in accordance with your guidance.
Speaker: Android-based service was launched first, but the number of iPhone users has increased by an order of magnitude in just about four months. Does this mean that users are seeking services that allow them to use electromagnetic records as an alternative to cards rather than electronic certification services for smartphones? Please provide an analysis of the reasons for the significant increase in the number of iPhone users. This question may be helpful in promoting the spread of Android in the future.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by smartphones are Mynaportal and delivery at convenience stores for both Androids and iPhones. This is shown on page 4 of Reference 2 for iPhones and on page 4 of Reference 3 for Androids. Since both of them use electronic certification, there is almost no difference in available services between electronic certification for Androids' smartphones and My Number Card for iPhones. I assume that the reason for the large spread is the easy-to-understand operability from the wallet. In addition, I think that the large number of iPhone owners and the prior announcement by the Minister of Land, Infrastructure, Transport and Tourism ahead of the launch of the service on June 24 and the large coverage of the service on the launch day along with the image of the wallet on the service by most of the media are also factors. I assume that the high operability is due to the synergistic effect of the simple installation method, the ease of use after installation, Face ID for login, and the high evaluation on the Internet, etc. I will try to increase the number of users in order to realize the use from the wallet for Androids next autumn.
Speaker: There is almost no difference between the services available on Android and iPhone. The only difference is the degree of PR and recognition. In that case, I think it is necessary to publicize Android as well.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by Android. We would like to consider it in the future.
Speaker: card, is it correct to understand that it is no longer necessary to enter the verification number B, which is required when using the actual My Number Card? Please tell us the background to why it became unnecessary.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by In order to enable both real My Number Card and My Number Card with smartphones to be used with two-factor authentication, electronic certification for signatures cannot be used unless a security code of six digits or more is entered. electronic certification for user signatures can be replaced with biometric authentication, but it is designed to be the same as real My Number Card so that it cannot be used unless one of them is used and it is safe in the event of loss or theft.
Speaker: ticket information?
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by smartphone.
Speaker: smartphones is safer than the control of the actual My Number Card?
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by Collation number B is a function that is necessary for businesses to read out the information on IC chips by entering the information on the face of the card, but in the case of smartphones, similar functions are not included because it is not assumed that there are use cases in which businesses keep and use information from the holder.
Speaker: has become more convenient. I would like to ask whether a survey on what is happening due to the increased convenience is being conducted or planned to be conducted in the future. For example, I would like to ask if a survey is being conducted on the spread of private use and the spread in the confirmation of qualifications.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by We took it as an insightful indication that it is useful to investigate new use cases and fields that could not be expected in the actual My Number Card due to the increased convenience of smartphones. At present, we are in a phase where we are making efforts to make what can be done in the actual My Number Card possible in the smartphone-equipped My Number Card because we have just launched smartphone-equipped services. However, we are constantly conducting research and studies on target fields in cooperation with contractors regarding utilization. We would like to promote utilization as a whole based on the viewpoints received.
Speaker: 's proposal, Verifiable Credentials (hereinafter referred to as "VC") are being increasingly considered in various countries. Personally, I think it would be good to combine JPKI, which has a strong basis for issuance, with VC, which users have a high sense of security regarding the handling of personal data. I would like to hear what you think about technical and institutional considerations as a result of the spread of VC, as well as interoperability regarding cross-border uses such as passports.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by As you pointed out, VCs equipped with certificates are progressing at an accelerating pace around the world. As for smartphones in My Number Card, since they are equipped with very important and advanced certificates, strong personal holder binding is required, and it is assumed that information will be handed over only to specific parties and will not be distributed from one place to another. With regard to information that will be distributed from one place to another, open ID-based specifications have been released, and from the viewpoint that it is very important to define and develop protocols and data items, etc., we are holding a VC study meeting in Group of Common Functions for Digital Society, studying, creating mocks, and moving forward diligently. As the installation on smartphones in My Number Card is an actual service release of VC in a broad sense, I think that what kind of electronic records will be issued as a substitute for cards, or what kind of regulations will be created in VC of open ID itself, and whether digital certificates will be installed on smartphones and users will be able to create a convenient, safe, and prosperous society are very important themes. As a whole, we will proceed with the study and research while receiving guidance from experts. Digital Agency
Speaker: iPhones and Androids. Now that My Number Card smartphones have been released on iPhones first, it is assumed that there will be a considerable number of people who will switch from Androids with electronic certification smartphones. I would like to know the results of your analysis. Also, do you expect parallel use with iPhones in the future due to the release of the Android side? Do you expect the number of Android users to increase due to this assumption?
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by We do not have statistics on people who switched from Androids to iPhones, and we have not been able to confirm whether it is possible to analyze them at this time. We will report if it is possible to analyze them, including the number of people who switched from Androids to iPhones. Parallel use of iPhones and Androids, including smartphone-equipped electronic certification, is stipulated in the Public Personal Authentication Act as a system design. In addition, the Number Act on Electromagnetic Records in the Form of Substitute Cards stipulates the same as the real My Number Card, but in both cases, the system is designed so that only one person can copy the My Number Card (install it in a smartphone), so it is designed to be installed in either iPhones or Androids.
Speaker: Currently, smartphones cannot be equipped with both the U.S. mDL and the Japanese My Number Card due to constraints. In the future, as the use of smartphones spreads, including in cooperation with overseas companies, we need to make adjustments so that they can be equipped with both. Otherwise, I am somewhat concerned that technology debts may occur. I would like to hear your thoughts on this.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by Regarding coordination of use with other countries, there are no issues at present, but I would like to receive guidance including concerns in the future. I would like to proceed with the investigation response with flexibility and promptness.
Speaker: I understand. I will give my opinion in the future.
Speaker: : With regard to the sluggish growth in the number of electronic certification for Android-based smartphones, electronic certification's basic design requires a four digit PIN, and there are various restrictions that need to be improved, such as the procedure for biometric authentication. If it is possible to set the current My Number Card for Android-based smartphones and switch to electronic certification without any inconvenience, Digital Agency and the government as a whole should be encouraged to promote the use of Android-based for smartphones.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by As we continue to consider the installation of My Number Card on Androids, we will also consider its convenience. With regard to My Number Card on Androids, those who have already installed electronic certification for smartphones can also install electromagnetic records as an alternative to cards. There is almost no difference in the procedure between those who have installed electronic certification for smartphones and those who have not, and we assume that the procedure will be the same as when installing My Number Card on iPhones. However, we will adjust the procedure while watching the balance so that users do not feel disappointed, such as having to repeat the same procedure. In particular, we plan to consider the use of health insurance cards and services that can already be provided, such as JPKI.
Speaker: The use of APIs by the private sector is highly expected. However, as explained at the previous review meeting, etc., there is not much information on the release of APIs. Since the native OS is used, the APIs are different for Android and iPhone. On the other hand, the APIs used for the web version have also been announced, and at WWDC, a message to developers about the available APIs was announced. Since there is also an expectation that the same APIs for the web version can be used for Android and iPhone, we would like you to actively prepare and disseminate them.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by APIs as a challenge. While we do not know the market sentiment of whether private sector mainly wants to use JPKI or Electromagnetic Records as Card Substitutes, we have started to feel that inquiries about Electromagnetic Records as Card Substitutes are increasing as receptionists. In terms of materials, etc., for iPhone, it is mandatory to use the library on the iOS side, so after installing it, we are basically only able to guide you to browse the Apple website. We are not able to immediately support all of the web version APIs you mentioned because the market is growing, but we recognize that it is necessary to clearly indicate what can be supported and what cannot be supported, and to actively guide people about what can be supported, as well as to guide people about JPKI on Android, not passively.
Speaker: , In order to prevent phishing attacks, we received information from Financial Services Agency that it is necessary to make phishing resistant authentication methods mandatory, and the Securities Association of Japan revised its guidelines on October 15. From this perspective, My Number Card, which uses identity verification mounted on smartphones, is expected to be a simple identity verification for setting passkeys for service providers and financial institutions to prevent phishing attacks. I hope that you will promote it from this point of view or make it convenient to use it in the future.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by Fishing Resistance, the Digital Agency Group of Service for Citizens has not yet advanced in its consideration, but the Digital Agency as a whole recognized the need to strengthen cooperation with knowledgeable members centered on the identity unit. The Digital Agency will consider the opinions received from the guidance.

"4. Basic Policies of" "My Number Card" ""

Limited to the members

Exchange of views

Speaker: , many of them can only handle actual My Number Card, and I heard that they will add card readers to support My Number Card equipped with smartphones in the future. I would like to ask about the status of progress.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by The position of the reading part, which corresponds to the IC chip of the actual My Number Card, is different for iPhones and Androids. Most current card readers assume that they can read the actual My Number Card, so it is a fact that an external card reader is required. In fact, there are about 230,000 places nationwide where health insurance cards are used, including 105,000 clinics, 8000 hospitals, more than 50000 pharmacies, and dental clinics. Among them, the number of institutions that have actually installed card readers and have used them at least once is more than 40000 on a daily basis. They are trying to spread the use of card readers by subsidizing it in Ministry of Health, Labor and Welfare, using Amazon business with a half subsidy and a maximum of 7000 yen per set, and doing it in virtual offices.
Speaker: Looking at Apple's situation in the United States, it is recognized that it is progressing very quickly. In addition to passport support, each airline has begun issuing digital tickets in anticipation of this, and the wallet has a function that allows you to trace the location of your luggage. Please take measures so that the system can be used by the public while watching overseas trends.
Speaker: card substitute electromagnetic record is invalidated. Is there any means to confirm whether the card substitute electromagnetic record received by the business operator has been invalidated? In the case of electronic certification for smartphones, it is thought that it is confirmed by OCSP and CRL. I would like to ask if it is right to consider that there is a similar mechanism.
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by method. When the real My Number Card for signature expires, the reason for the expiration of the electromagnetic record as a substitute for the card is specified by the Number Act. When the relevant reason for the expiration occurs, the wallet has a function to disable the presentation of the electromagnetic record as a substitute for the card in the user's terminal itself. However, if the terminal itself is in an off-line environment, etc., and the terminal cannot receive the reason for the expiration, the wallet may present the electromagnetic record as a substitute for the card immediately after the terminal is brought back online and before the expiration notice is received. Therefore, the recipient side has also prepared a mechanism to confirm online whether the electromagnetic record as a substitute for the card that was actually received is expired, and it is possible to make an inquiry. A double measure has been established so that the confirmation can be made with a concept similar to CRL of electronic certification for smartphones. electronic certification
Speaker: without certification?
- Secretariat: Unlike JPKI, the scope of certification by the Minister of Land, Infrastructure, Transport and Tourism is not for business operators, but for programs that verify the receipt of electromagnetic records as a substitute for cards, and the service format is based on the premise that the program will be used. In the requirements for the verification program itself, revocation verification is not mandatory, but if you use certified programs, including the verification program distributed by , the inquiry function is basically in place. Digital Agency
Speaker: I understand. If JPKI were to do the same, its use would be further promoted. I would like you to consider it in the future.

Greater than or