The Communications Authority of Kenya is planning to procure an ID-to-SIM card verification system that will allow mobile phone users to confirm which numbers are registered under their identity.
- •Under the proposed framework, the solution will be delivered as a cloud-based service and accessed primarily via SMS.
- •Users will send their identification document number to a dedicated short code, prompting the system to query participating mobile network operators and mobile virtual network operators.
- •The proposed system is intended to enhance oversight of SIM registration records and provide individuals with greater visibility into how their IDs are being used within the mobile ecosystem.
The response will list numbers associated with the submitted ID.
The system must generate comprehensive audit trails capturing user actions and system events, with the ability to export logs for further analysis.
The technical specifications require the platform to integrate all licensed operators and support high transaction volumes, with capacity to process thousands of SMS queries per minute. The system must also verify primary number ownership before proceeding to query other networks, a measure intended to strengthen data accuracy and reduce misuse.
In addition to public-facing features, CAK Kenya has outlined detailed operational and security requirements. These include encryption or masking of sensitive data, multi-level access controls, and integration between application-level and database security. The system must generate comprehensive audit trails capturing user actions and system events, with the ability to export logs for further analysis.
Administrative features such as configurable password policies, user authorization profiles, session timeouts, and account lockout thresholds are also specified. Monitoring dashboards for system administrators and structured error logging mechanisms form part of the expected deliverables.
