Digital identity in Australia

Last updated

Digital identity is used in Australia by residents to validate who they are over digital media, such as over the Internet.

Contents

While many organisations use their own mechanisms, increasingly, aggregated digital identities are in use. Many Australian organisations leverage popular ubiquitous Internet identities such as those provided by social login services including Facebook, Google, Twitter and LinkedIn to perform the following functions:

In addition to these services, in order to validate identities in Australia additional services are used, such as government, and bank digital identities.

SIM as digital identity

The use of a mobile phone SIM as a digital identity in Australia provides some level of validation of the digital identity of the holder. Validation of the holder can be done by sending them an SMS to their phone number. The advantage of this mechanism is:

For this reason the mobile phone is often used as a primary or second-factor validation of identity on Australian digital services.

myGov

myGov is a service provided by the Government of Australia that provides a strong level of validation of digital identity. [3] It is used primarily for government (including some state government) and semi-government services such as:

myGov also integrates with Australia Post MyPost Digital Mailbox to facilitate secure electronic document delivery, as most government departments avoid the use of e-mail to directly deliver private documents.

myGov logins also support a number of other login services, especially in government.[ clarification needed ]

A myGov account can be created without the use of identity documentation, so it is possible to create an account without a valid natural person. However, as services are added, access to private information, such as documents or identity that should only be known by the individual concerned, is required, making the identity stronger. Many services require a second factor of authentication – SMS via a SIM-based mobile phone number as mentioned above.

myGovID

Separate from myGov, myGovID is a digital ID component, that allows a form of multi-factor authentication to government websites through a mobile app. A user attempts a login online using their email, a pin is generated, and the user types the online pin into their mobile app, and online login can be completed.

The myGovID application supports government departments building their own websites, and does not require the single portal access of myGov.

Australia Post Digital iD

Digital iD by Australia Post is a smart phone based app that allows users to create and validate their ID against the Australian Government Document Verification Service (DVS) and then use it as a primary ID system online and in person.

Users can use their Passports, Drivers Licenses or Medicare Card to assert and confirm ID online. A photo is taken, and head movement is detected to ensure the holder is real and their face matches. Your passport can be scanned using the phone's near-field communication (NFC) reader and used to assert biometrics. [4] The user's image with dynamic security features, and an updating QR code are then displayed to people to verify the ID. The date of birth and full name are displayed on the app. [4] Australia Post claims it is acceptable for use to validate the holder's identity. [4] It can be used instead of KeyPass for holders 18 years and older. [4]

The Digital iD website states that it is used by over 50 government and private organisations across a variety of industries and sectors. [4] Launched in 2016, questions were raised as to longevity of the offering after the founder quit, [5] however, continued investment from Australia Post has seen Digital iD become the first industry provider accredited under the federal government’s Trusted Digital Identity Framework (TDIF). [6] Usage of Digital iD is growing, and Keypass in Digital iD is now accepted as proof of age to enter participating licensed venues and to purchase alcohol in Vic, Tas, Qld, ACT and NT (excluding takeaway alcohol in NT). [4]

Online banking

Online banking in Australia requires digital identification. As in other jurisdictions, access to bank accounts statements and making payments are the primary services available. In addition to these, it is possible to access documents (almost exclusively bills) from other corporations online using BPAY View. Over 300 billers are supported via this mechanism. [7]

For some transactions multi-factor authentication is required. Normally this is a password in combination with a code sent via SMS or in some cases, especially for business customers, a bank-issued security token.

Most online banking services, especially if accessing an account requires the holder to complete stringent identity requirements sometimes in a bank branch. This ensures the quality of the identity.

The four major online banking sites in Australia are:

State government services

Some states and territories of Australia offer access points to government services in those states, and require a digital identity to access these services.

Service NSW is an example – an account can be created without any verifiable identity, however as services (such as Transport for NSW) are added, private details need to be accessible, increasing the validity of the identity.

The South Australian government has made several digital licences available via the mySA GOV app (Driver's licence, Proof of Age Card etc). [8]

NSW also provides some licences online. [9] [10]

As at 2020, Queensland's Department of Transport & Main Roads was trailing a digital license in the Fraser Coast Region. [11]

Tax file number

The Australian Tax file number (TFN) is a 9 digit identity document issued to tax payers. There is no card or official identity document in popular use that shows this number and strict rules on its use means that it is not required to be provided, and there is no practical way a non government entity to verify the holder against the number. It is therefore not an effective widespread digital identity (unlike the US Social Security number). However it is used to digitally identify tax paying entities behind transactions via financial institutions when the number has been disclosed. Failure to disclose the tax file number can draw attention to the transaction and/or result in tax being withheld, so it is used for specific purposes.

Digital identity verification services

Identity and associated information can be verified a number of ways:

See also

Related Research Articles

An identity document is any document that may be used to prove a person's identity. If issued in a small, standard credit card size form, it is usually called an identity card, or passport card. Some countries issue formal identity documents, as national identification cards that may be compulsory or non-compulsory, while others may require identity verification using regional identification or informal documents. When the identity document incorporates a person's photograph, it may be called photo ID.

<span class="mw-page-title-main">Electronic identification</span> Digital proof of identity

An electronic identification ("eID") is a digital solution for proof of identity of citizens or organizations. They can be used to view to access benefits or services provided by government authorities, banks or other companies, for mobile payments, etc. Apart from online authentication and login, many electronic identity services also give users the option to sign electronic documents with a digital signature.

Digital identity is the phrase referring to the data that computer systems use to identify individuals, organizations, applications, or devices. For individuals, it involves the collection of personal data that is essential for facilitating automated access to digital services, confirming one's identity on the internet, and allowing digital systems to manage interactions between different parties. It is a component of a person's social identity in the digital realm, often referred to as their online identity.

<span class="mw-page-title-main">Identity document forgery</span> Fake IDs and their production

Identity document forgery is the process by which identity documents issued by governing bodies are copied and/or modified by persons not authorized to create such documents or engage in such modifications, for the purpose of deceiving those who would view the documents about the identity or status of the bearer. The term also encompasses the activity of acquiring identity documents from legitimate bodies by falsifying the required supporting documentation in order to create the desired identity.

A Google Account is a user account that is required for access, authentication and authorization to certain online Google services. It is also often used as single sign-on for third party services.

Electronic authentication is the process of establishing confidence in user identities electronically presented to an information system. Digital authentication, or e-authentication, may be used synonymously when referring to the authentication process that confirms or certifies a person's identity and works. When used in conjunction with an electronic signature, it can provide evidence of whether data received has been tampered with after being signed by its original sender. Electronic authentication can reduce the risk of fraud and identity theft by verifying that a person is who they say they are when performing transactions online.

<span class="mw-page-title-main">Driver licences in Australia</span> Australian driving permit

Driver licences in Australia refer to the official permit required for a person to legally drive a motor vehicle in Australia. The issue of driver licences, alongside the regulation and enforcement of road use, are all managed by state and territory governments.

<span class="mw-page-title-main">Multi-factor authentication</span> Method of computer access control

Multi-factor authentication is an electronic authentication method in which a user is granted access to a website or application only after successfully presenting two or more pieces of evidence to an authentication mechanism. MFA protects personal data—which may include personal identification or financial assets—from being accessed by an unauthorized third party that may have been able to discover, for example, a single password.

<span class="mw-page-title-main">Ghana Card</span> National identity card of Ghana

The Ghana Card is the national Identity card that is issued by the Ghanaian authorities to Ghanaian citizens – both resident and non-resident, legal and permanent residents of foreign nationals. It is proof of identity, citizenship and residence of the holder. The current version is in ID1 format and biometric. It is issued by the National Identification Authority of Ghana and Regarded as a property of the country as such. In July 2023, through the initiative of the Vice President, Dr. Mahamudu Bawumia, new card numbers were issued to newborn babies as part of pilot program to incorporate newborn babies unto the database.

The Lebanese identity card is a compulsory Identity document issued to citizens of the Republic of Lebanon by the police on behalf of the Lebanese Ministry of Interior or in Lebanese embassies/consulates (abroad) free of charge. It is proof of identity, citizenship and residence of the Lebanese citizens.

<span class="mw-page-title-main">Apple Wallet</span> Digital wallet platform by Apple

Apple Wallet is a digital wallet developed by Apple Inc. and included with iOS and watchOS that allows users to store Wallet passes such as coupons, boarding passes, student ID cards, government ID cards, business credentials, resort passes, car keys, home keys, event tickets, public transportation passes, store cards, and – starting with iOS 8.1 – credit cards, and debit cards for use via Apple Pay.

ID.me is an American online identity network company that allows people to provide proof of their legal identity online. ID.me digital credentials can be used to access government services, healthcare logins, or discounts from retailers. The company is based in McLean, Virginia.

Australian state and territory issued identity photo cards are photo identification cards issued by the States and Territories of Australia. While the drivers license is similar to the photo identity card, the photo identity card is treated separately here.

Australia does not have a national identity card. Although Australia Post, which is government owned, does have a nationwide identity card called a Keypass but it is not accepted everywhere and you may need alternate forms of ID. Various Identity documents of Australia may be used or required to prove a person's identity instead of a national identity card, whether for government or commercial purposes such as:

GOV.UK Verify was an identity assurance system developed by the British Government Digital Service (GDS) which was in operation between May 2016 and April 2023. The system was intended to provide a single trusted login across all British government digital services, verifying the user's identity in 15 minutes. It allowed users to choose one of several companies to verify their identity to a standard level of assurance before accessing 22 central government online services.

Account verification is the process of verifying that a new or existing account is owned and operated by a specified real individual or organization. A number of websites, for example social media websites, offer account verification services. Verified accounts are often visually distinguished by check mark icons or badges next to the names of individuals or organizations.

<span class="mw-page-title-main">Civil registration in Australia</span>

Civil registration in Australia of births, deaths and marriages as well other life events is carried out and maintained by each state and territory in Australia, in an office called a Registry of Births, Deaths and Marriages. It is compulsory in each jurisdiction, though the procedures and information recorded varies between jurisdictions. Access to information on the register is restricted by period or relationship, and is usually provided at a fee in the form of certificates. Nowadays, certificates can also be ordered online, and will be posted to the applicant, often with some delay.

A mobile driving licence is a mobile app that replaces a physical driver's license. An International Organization for Standardization (ISO) standard for the mobile driving licence was approved on August 18, 2021 and published on 30 September 2021.

The NZ Pass Verifier is a free mobile app developed by the New Zealand Ministry of Health for businesses and organisations to scan and verify their customers' My Vaccine Pass certificates. The app was launched on 23 November 2021 for use on smartphones.

Many nations have implemented, are implementing, or have proposed nationwide digital identity systems.

References

  1. "Mobile Consumer Survey 2015 – The Australian Cut" (PDF). Landing.deloitte.com.au. Retrieved 13 December 2017.
  2. "ID checks for prepaid mobiles". Australian Communications & Media Authority .
  3. "Sign-in - myGov". My.gov.au. Retrieved 13 December 2017.
  4. 1 2 3 4 5 6 "Digital iD™ - ID on Your Phone". www.digitalid.com. Retrieved 4 October 2019.
  5. "Digital iD founder quits AusPost". InnovationsAus.com. 12 September 2018. Retrieved 19 January 2021.
  6. "Australia Post secures TDIF accreditation" . Retrieved 24 July 2019.
  7. "About BPAY - Overview - BPAY". Bpay.com.au. Archived from the original on 30 June 2019. Retrieved 13 December 2017.
  8. "mySA GOV". My.sa.gov.au. 1 February 2018. Retrieved 19 February 2018.
  9. joss.willbond (14 November 2016). "Digital licences are now available". Service.nsw.gov.au. Retrieved 13 December 2017.
  10. "Digital NSW driving licences by 2019, says minister". Governmentnews.com.au. 21 November 2016. Retrieved 13 December 2017.
  11. "Digital Licence App". Queensland Government. 2 February 2020. Archived from the original on 2019-09-08. Retrieved 2 February 2020.
  12. "Face Matching Services". Ag.gov.au. Archived from the original on 1 December 2017. Retrieved 13 December 2017.
  13. "Visa Entitlement Verification Online (VEVO)". Border.gov.au. Retrieved 13 December 2017.
  14. "Driver Licence Check". Roads & Traffic Authority . Retrieved 13 December 2017.
  15. "About the online identity verification - Births, Deaths & Marriages Victoria". Archived from the original on 2017-03-26. Retrieved 2017-03-26.
  16. "NSW Electoral Verification Facility". Archived from the original on 2017-04-09. Retrieved 2017-04-09.
  17. "Home - VIX Verify". Vixverify.com. Retrieved 13 December 2017.
  18. "IDMatrix". Equifax.com.au. 22 May 2016. Retrieved 13 December 2017.
  19. "Verifying a Check - NSW Office of the Children's Guardian". Kidsguardian.nsw.gov.au. Retrieved 13 December 2017.
  20. "Verify Police Check - Veritas Check". Veritascheck.com.au. Retrieved 13 December 2017.
  21. "Online verification of qualifications". Griffith University . Retrieved 13 December 2017.