Can FAPI specs support ecosystems where smart phones aren't common, e.g. by using USSD

[Dave Tonge]

We have received this request from an OpenBanking entity in Nigeria.

For context re USSD: https://encyclopedia.kaspersky.com/glossary/ussd-unstructured-supplementary-service-data/

[Dave Tonge]

From my perspective, I think that CIBA could utilize USSD, i.e.

Prerequisite

1. User registers for USSD services from their bank (e.g. https://www.firstbanknigeria.com/personal/ways-to-bank/ussd/)

Payments

1. User enters phone number and selects bank at RP (at physical terminal or website)
2. RP starts CIBA flow with bank using the phone number as a login_hint
3. Bank uses USSD to send a notification to user to approve payment
4. Optional: User compares binding_code received via USSD and shown at RP
5. User approves payment (maybe using pin)
6. Bank issues access token to RP (either via poll or ping)

‌

‌

[Bjorn Hjelm]

For additional information, a presentation by T-Mobile Poland and GSMA on USSD provided at the MODRNA WG call on July 19 is available at https://openid.net/wordpress-content/uploads/2022/07/USSD-Authenticator-Overview-MODRNA-meeting-FINAL.pdf

[Tom Jones]

Is it wise to use a comms protocol where financial messages are not stored on users device like they are on sms?

[Dave Tonge]

Resolving this as no recent updates from OB Nigeria