Evidence of Identity

1
Evidence of Identity

• Kate Antonievich
• Identity Services
• Department of Internal Affairs

2
Overview

• All-of-government Authentication Programme
• Purpose of EOI Standard Project
• EOI Standard development process
• Conceptual framework establishing identity
• Applying the EOI Standard to agency services
• Where to from here?

3
Authentication Programme

• Initial Implementation Phase
• Standards for online authentication stream
• Shared Logon service
• Feasibility of identity credential service
  aligned with existing services
• Policy and privacy work
• EOI Standard also applies to offline service
  delivery

4
Purpose of EOI Standard Project

• To standardise business processes for
  establishing identity
• Developed because
• lack of guidance on how to establish identity
• inappropriate use of certain documents, e.g.
  birth cert
• EOI process required for online authentication
• Consistency of EOI processes across government
• assurance for public that good practice being
  applied
• assists in managing identity fraud risks

5
Development Process

• Adaption of Standards NZ development process
• Cross-agency working group
• issuers of evidence of identity
• users of evidence of identity
• law enforcement perspective
• E-government perspective
• Cross-government input August/September
• EOI Standard to sit in e-GIF

6
Conceptual Framework

• Assumptions behind EOI Standard
• Cant prove identity 100 too costly/intrusive
• Can only gain confidence in the claimed identity
• Fit for purpose (risk-based) application
• Different components to establishing identity
• Most evidence only tells part of the story
• An identity fraud mitigation but not the only
  one

7
Establishing Identity

• EOI process involves gaining confidence that
• the identity exists
• is a living identity
• belongs to the presenting person
• has not been claimed by another person
• is used by the person in the community.
• Critical that all objectives met for high risk
  services

8
Applying the Standard

• Four process phases
• Identity risk assessment
• Design and operation
• Service delivery
• Monitoring and evaluation
• DIA to support Standard with supplementary
  guidance and advice

9
(No Transcript)
10
Issues

• Quantifying identity-related risk in services
• Automation of EOI processes
• Achieving accessibility and cost objectives
• Customer expectations of
• convenience
• personal privacy
• protection from identity theft
• Handling of exception cases

11
Where to from here?

• Consultation across government in July/August
• agency views on content of Standard
• agency barriers to implementation
• accessibility issues for customers
• Mechanism for ensuring compliance?
• Scoping of DIAs Custodian role

12
Questions?