Digital identity in Australia

Digital identity in Australia is used by residents to validate who they are over digital mediums, such as over the Internet.

While many organisations use their own mechanisms, increasingly, aggregated digital identities are in use. Many Australian organisations leverage popular ubiquitous Internet identities such as those provided by social login services including Facebook, Google, Twitter and Linked In to perform the following functions:

  • Single sign-on to help users avoiding creating new user names and passwords for each site.
  • To provide some basic validation of identity
  • To provide some integration, especially with social media, e-mail and contacts
  • To identify the natural person behind a transaction for statutory purposes such as a monetary transfer

In addition to these services, in order to validate identities in Australia additional services are used, such as government, and bank digital identities.

SIM as Digital identity

The use of a mobile phone SIM as a Digital identity in Australia provides some level of validation of the digital identity of the holder. Validation of the holder can be done by sending them an SMS to their phone number. The advantage of this mechanism is:

  • SIMs are generally unique
  • The mobile phone number is known to the holder, and often the trusting organisation, and used as the contact of the customer
  • The mobile phone generally is carried by the person wherever they go
  • There is a high penetration of mobile phones in Australia, in 2015 covering almost 80% of individuals[1]
  • There is are some Identity requirements in obtaining a SIM, so there can be a level of certainty that the holder is a known natural person, and resident (or temporary resident) of Australia even if the plan is Prepaid[2]

For this reason the mobile phone is often used as a primary or second-factor validation of identity on Australian digital services.

myGov

myGov is a service provided by the Government of Australia that provides a strong level of validation of digital identity.[3] It is used primarily for Government (including some state Government) and semi-Government services such as:

myGov also integrates with Australia Post MyPost Digital Mailbox to facilitate secure electronic document delivery, as most government departments avoid the use of e-mail to directly deliver private documents.

myGov logins also support a number of other login services especially in government such as

Origination of a myGov account can be done without the use of identity documentation, so it is possible to create an account without a valid natural person. However, as services are added, access to private information, such as documents or identity that should only be known by the individual concerned, is required, making the identity stronger. Many services require a second factor of authentication - SMS via a SIM based mobile phone number as mentioned above.

myGovID

Separate to myGov, myGovID is a digital ID component, that allows a form of Second Factor Authentication to Government websites through a mobile app. A user attempts a login online using their email, a pin is generated, and the user types the online pin into their mobile app, and online login can be completed.

The myGovID application supports government departments building their own websites, and does not require the single portal access of myGov.

Australia Post Digital iD

Digital iD by Australia Post is a smart phone based app that allows users to create and validate their ID against the Australian Government Document Verification Service (DVS) and then use it as a primary ID system online and in person.

Users can use their Passports, Drivers Licenses, Medicare Card to assert and confirm ID online. A photo is taken, and head movement is detected to ensure the holder is real and their face matches. Your passport can be scanned using the phone's NFC reader and used to assert biometrics.[4] The user's image with dynamic security features, and an updating QR code are then displayed to people to verify the ID. The date of birth and full name are displayed on the app.[4] Australia Post claims it is acceptable for use to validate the holder's identity.[4] It can be used instead of KeyPass for holders 18 years and older.[4] 

The Digital iD website states that it is used by over 50 government and private organisations across a variety of industries and sectors[4]. Launched in 2016, questions were raised as to longevity of the offering after the founder quit[5], however, continued investment from Australia Post has seen Digital iD become the first industry provider accredited under the federal government’s Trusted Digital Identity Framework (TDIF)[6]. Usage of Digital iD is growing, and Keypass in Digital iD is now accepted as proof of age to enter participating licensed venues and to purchase alcohol in Vic, Tas, Qld, ACT and NT (excluding takeaway alcohol in NT)[4].

Online Banking

Online Banking in Australia requires digital identification. As in other jurisdictions, access to bank accounts statements and making payments are the primary services available. In addition to these, it is possible to access documents (almost exclusively bills) from other corporations online using BPAY View. Over 300 billers are supported via this mechanism.[7]

For some transactions multi-factor authentication is required. Normally this is a password in combination with a code sent via SMS or in some cases, especially for business customers, a bank-issued security token.

Most online banking services, especially if accessing an account requires the holder to complete stringent identity requirements sometimes in a bank branch. This ensures the quality of the identity.

The four major online banking sites in Australia are:

State Government Services

Some States and territories of Australia offer access points to Government services in those states, and require a digital identity to access these services.

Service NSW is an example - an account can be created without any verifiable identity, however as services (such as Roads and Maritime Services) are added, private details need to be accessible, increasing the validity of the identity.

The South Australian government has made several digital licences available via the mySA GOV app (Driver's licence, Proof of Age Card etc).[8]

NSW also provides some licences online.[9][10]

Queensland's Department of Transport and Main Roads is currently trailing a digital license in the Fraser Coast Region.[11]

Tax file number
See also: Tax file number

The Australian Tax file number (TFN) is a 9 digit identity document issued to tax payers. There is no card or official identity document in popular use that shows this number and strict rules on its use means that it is not required to be provided, and there is no practical way a non government entity to verify the holder against the number. It is therefore not an effective widespread digital identity (unlike the US Social Security number). However it is used to digitally identify tax paying entities behind transactions via financial institutions when the number has been disclosed. Failure to disclose the tax file number can draw attention to the transaction and/or result in tax being withheld, so it is used for specific purposes.

Digital identity verification services

Identity and associated information can be verified a number of ways:

  • The Australian Attorney-General's Department provides a Document Verification Service (DVS) that allows for validation of some licences.
  • The Australian Attorney-General's Department also provides a bio-metric face verification service[12]
  • Visas, identity, and right to work status can be checked online through the Department of Immigration and Border Protection's Visa Entitlement Verification Online (VEVO) service.[13]
  • Some States and territories allow for drivers licences, photo cards and certificates to be validated online e.g. NSW[14] and Victoria.[15]
  • Electoral enrollment can be verified electronically, and may help to verify an identity.[16]
  • Private companies offer aggregated online identity checking services e.g. Vix Verify[17] and Equifax[18]
  • In addition, certain aspects of individuals can be verified digitally - online, such as:
gollark: Maybe in the late endgame we can do that with the stupidly OP combat stuff there is.
gollark: I would kind of like some sort of PvP thing eventually, could be fun.
gollark: No.
gollark: I can't do anything which requires actual access to the game until Friday but I do have SSH access.
gollark: <@267332760048238593> NO SALTÏRE.

See also

References
  1. "Mobile Consumer Survey 2015 – The Australian Cut" (PDF). Landing.deloitte.com.au. Retrieved 13 December 2017.
  2. "ID checks for prepaid mobiles". ACMA.
  3. "Sign-in - myGov". My.gov.au. Retrieved 13 December 2017.
  4. "Digital iD™ - ID on Your Phone". www.digitalid.com. Retrieved 4 October 2019.
  5. "Digital iD founder quits AusPost". InnovationsAus.com. Retrieved 14 March 2019.
  6. "Australia Post secures TDIF accreditation". Retrieved 24 July 2019.
  7. "About BPAY - Overview - BPAY". Bpay.com.au. Retrieved 13 December 2017.
  8. "mySA GOV". My.sa.gov.au. 1 February 2018. Retrieved 19 February 2018.
  9. joss.willbond (14 November 2016). "Digital licences are now available". Service.nsw.gov.au. Retrieved 13 December 2017.
  10. "Digital NSW driving licences by 2019, says minister". Governmentnews.com.au. 21 November 2016. Retrieved 13 December 2017.
  11. "Digital Licence App". Queensland Government. 2 February 2020. Retrieved 2 February 2020.
  12. "Face Matching Services". Ag.gov.au. Archived from the original on 1 December 2017. Retrieved 13 December 2017.
  13. "Visa Entitlement Verification Online (VEVO)". Border.gov.au. Retrieved 13 December 2017.
  14. "Driver Licence Check". Myrta.com. Retrieved 13 December 2017.
  15. "Archived copy". Archived from the original on 2017-03-26. Retrieved 2017-03-26.CS1 maint: archived copy as title (link)
  16. "Archived copy". Archived from the original on 2017-04-09. Retrieved 2017-04-09.CS1 maint: archived copy as title (link)
  17. "Home - VIX Verify". Vixverify.com. Retrieved 13 December 2017.
  18. "IDMatrix". Equifax.com.au. 22 May 2016. Retrieved 13 December 2017.
  19. "Verifying a Check - NSW Office of the Children's Guardian". Kidsguardian.nsw.gov.au. Retrieved 13 December 2017.
  20. "Verify Police Check - Veritas Check". Veritascheck.com.au. Retrieved 13 December 2017.
  21. "Online verification of qualifications". Griffith.edu.au. Retrieved 13 December 2017.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.