Skip to content.
|Networking government in New Zealand.
 

3 Introduction

3.1 The Online Authentication Project

The Online Authentication Project contributes to an "all-of-government" authentication solution. Simply, it is a way for people to access Government services online (e.g. via Internet, cell phones, or other technologies) while maintaining their personal security and privacy; and ensuring Government agencies that the identification of those people is verified.

The parties that play a role in the authentication design are:

  • Client - an individual seeking to interact with a Service Agency and carry out a transaction
  • Service Agency - a government agency responsible for delivering a service to clients
  • Authentication Agency - the government agency or agencies responsible for establishing the identity of the client and, with the client's approval, authenticating the client to Service Agencies
  • Key Provider - an agent or agencies authorised to issue accredited keys to a client and confirm a key is valid when requested
  • Review Body - an independent agency that clients can ask to intervene when they believe they have been incorrectly treated or adversely affected by a decision made by an agency as part of the authentication process.

The E-government Unit of the State Services Commission (SSC) has established a project team that is:

  • Designing the system and processes
  • Identifying and resolving policy issues, including governance and privacy
  • Developing an interim framework or standards that will guide other agencies that have commenced their own authentication solution
  • Preparing a business case for submission to Cabinet to support a proposal to proceed with the subsequent phases of the project

When this work is completed, Cabinet will make a decision on how and when to implement online authentication [For more information on Cabinet's decision in June 2003, see www.e-government.govt.nz/authentication/ Note: Decisions for the next phase have not yet been taken.] .

In essence, online authentication allows the individual and the provider of government services to have confidence in the identity of the other party in an online transaction [See www.e-government.govt.nz/authentication/index.html for further background information about online authentication.] .

To undertake the first stage of this work the State Services Commission's E-government Unit (EGU) has established a project team that is currently:

  • designing the processes and systems architecture for all-of-government online authentication
  • identifying and resolving related policy issues
  • commissioning a detailed privacy impact assessment
  • preparing a business case setting out alternative implementation approaches

Once this work is completed, Cabinet will make a decision, on whether or not to proceed with stage two of the project (i.e. implementing and building an online authentication system).

3.2 Māori Perspective

Part of the policy work programme is to address specific issues for Māori. This was summarised in a Cabinet paper in June 2003 [Refer to "Authentication Project: M&3257;ori issues work programme (Phase 1)" dated 30 September 2003 for an outline of the Māori issues work programme] as follows:

  • ensure there is a process for obtaining Māori participation throughout the design, development and deployment of the authentication model
  • determine whether governance structures should include a Kaitiaki (guiding overview) group that formalises the interest of Māori stakeholders
  • explore the implications of protecting authentication data so that it cannot be used for statistical purposes (for example, to publicise Māori take-up of online authentication)
  • assess a view that government agencies should not collect or store whakapapa and, if appropriate, ensure that whakapapa is not included directly in the authentication model

On 6 November 2003, the State Services Commission organised a Hui at Te Wānanga-o-Raukawa in Ōtaki to discuss online authentication [The discussion at the Hui is outlined in "Report on 6 November 2003 Hui held at Te-Wānanga-o-Raukawa" dated 10 December 2003.] . The Hui identified a need for further consideration of the potential issues and requirements for consultation and research from a Māori perspective for subsequent project phases to be scoped. This advice will form an input into the recommendations put forward to Cabinet.

3.3 Terms of reference

This report draws upon earlier work by the EGU project team, learnings from the Ōtaki hui in November 2003, and Paua Interface Ltd's experience and knowledge in the field.

The assignment comprises three parts:

3.3.1 Assignment - Part 1

Further clarify the nature and extent of the potential issues. Specifically:

  • Participation/consultation: Describe options for consultation or participation with Māori regarding online authentication, and advise on the broad associated costs and timeframes for those options
  • Governance structures: Outline how a Kaitiaki group could be established (specifically membership, how membership would be determined, how a Kaitiaki group could work with the overall governance body, how wider Māori representation would be achieved - i.e. link with participation consultation processes, associated costs)
  • Use of authentication information for statistical purposes: Describe what the likely issues are, particularly in relation to the proposed business solution design which incorporates minimal personal information and transparent exchange of information between agencies
  • Whakapapa information: While whakapapa information is not part of the proposed business solution design [Refer to "Authentication for e-government: Business process design (version 1.0)" dated 15 November 2003.] , the E-government Unit is interested in a definition of what would be perceived to be whakapapa information

1.1.2 Assignment - Part 2

Apply Te Wananga-o-Raukawa's kaupapa (or "Elements of the World View") model [Te Wananga-o-Raukawa, (September 2003)Charter 2003,Pages 7-10] to the proposed project to identify any potential issues for Māori resulting from the authentication solution design.

This wide-ranging exploration of potential issues should identify issues early so that appropriate actions can be incorporated into the approach as the project goes forward (e.g. consultation and governance arrangements). Where appropriate, specify further research and/or consultation that would be required to achieve a satisfactory position for Māori.

1.1.3 Assignment - Part 3

Review the authentication policy and implementation principles agreed by Cabinet in April 2002 [Cabinet approved the authentication principles in April 2002. See Online authentication - 2002 Cabinet paper for a full discussion of these principles] and advise how the principles could be amended (if required) so that they are acceptable to Māori.

1.4 E-Government Unit

For the purpose of this report and in terms of applicability and acceptability of the recommendations, the E-Government Unit (EGU) recommends that we draw a distinction between it and the SSC. While from an external perspective EGU is part of the SSC, the EGU emphasise that its approach towards tikanga and Treaty issues is not necessarily representative of the approach taken by the SSC as a whole.

We recommend the scope and impacts in terms of the relationship that Māori have or will have with the EGU and/or SSC is further discussed to ensure that the potential gains from participation are achieved.

1.5 Informants

The informants to this report include some attendees of the Otaki hui, other Māori informants with active roles in matters linking Māori and technology. EGU and other Government agency staff also contributed but are not referred to as informants throughout the text. Rather, they are referred to as their role and by agency. Their views contribute to the 'thinking' and rationale relating to the project as it is now, and puts the report into a context and position from which to inform and interact with Māori informants.

Non-Government organisations

Māori Information Technology and Telecommunications Council

New Zealand Māori Internet Society

Te Waka Wahine Wa-Hangarau (Society of professional Māori women in information technology)

Manukau Urban Māori Authority

Te Wananga-O-Raukawa

Government organisations

Te Puni Kokiri

Department of Internal Affairs

State Services Commission EGU


[ Previous | Next ]