News - Authentication Standards update

Authentication Standards update

3 March 2005

Standards are one of the three projects in the current phase of the All-of-government Authentication programme - the others are the Shared Logon Initial Implementation and Passport Authentication Design Synergies. The Standards team has finished the scoping work and is now ready to confirm this scope and start the formal process of developing the required standards.

Standards are a critical part of the programme because they provide the glue that will hold all the components of the system together. The team has focused on standards that are essential for interoperability. Other means of ensuring consistency, such as technical specifications and legal agreements containing service levels and technical specifications will supplement the standards.

The standards cover the following areas:

• Evidence of Identity
• Data formats for identity records
• Authentication key types including username/passwords and a second key type
• Authentication key strengths
• Trust levels for online transactions
• Shared Logon security assertion messaging

Government agencies managing evidence of identity processes will have a keen interest in the identity related standards. In today�s environment of identity theft and fraud, this group of standards will help protect both individual New Zealanders and government agencies.

For the more technically minded, the security and data standards related to Shared Logon Initial Implementation are likely to be of interest. The Shared Logon project provides a common logon service for those people using government services over the Internet. When fully implemented, the Shared Logon service will allow people to have one key - initially a username/password - that can be used to access multiple government services. By the end of 2005, up to four agencies will be using this secure and privacy-compliant service.

The E-government Interoperability Framework (e-GIF) methodology will be used for development of the standards. This is based on the Standards New Zealand model and will ensure that robust and transparent processes are followed. Working groups will be formed to draft the standards and these drafts will then be made available for consultation. Long-term, the e-GIF Management Committee, a committee made up of representatives of government agencies, will oversee the management of the standards.

Further background information is contained in Evidence of Identity Framework published by the Department of Internal Affairs, Identity Services and the Authentication Best Practice Framework.

For further information please email authentication@ssc.govt.nz