1. Introduction

This Guide to Authentication Standards for Online Services is one of the NZ e-GIF authentication standards. These standards outline current accepted good practice for the design (or re-design) of the authentication component for online services that require confidence in the identity of parties transacting with government agencies. Implementation of these standards by agencies will reduce the possibility of misuse and abuse of identity arising from services being delivered online.

The authentication process consists of establishing and then confirming the established identity over time. Establishing identity requires verified evidence of a person’s identity, so that he or she can be set up as an online service customer. The ongoing confirmation of identity requires the use of an ‘authentication key’, such as a username and password combination, to authenticate identity across the Internet. This Guide emphasises the relationship between two other authentication standards – Evidence of Identity and Authentication Key Strengths – by providing a consistent approach for government agencies to identify appropriate evidence of identity processes and authentication keys for online services.