The Federal Government’s Digital Transformation Agency (DTA) has called for submissions on draft national standards and rules that will frame its emerging digital identity program.
Assistant Minister for Digital Transformation, Angus Taylor, has released the Trusted Digital Identity Framework (TDIF) for public feedback, following a period of consultation with other government agencies and with industry and privacy representatives.
“The framework sets out a nationally-consistent approach to how digital identity will managed,” Mr Taylor said.
The TDIF comprise 14 documents, outlining how providers will be accredited, privacy, security, risk and fraud management requirements, as well as standards for usability and accessibility.
“The framework sits alongside the Digital Transformation Agency’s Govpass technology platform, which is currently in private beta,” said Mr Taylor.
“This will give people the choice to set up a digital identity once, and complete their business with a range of online government services rather than visiting a shop front.”
The 14 documents are:
- Trust Framework Structure and Overview
- Trust Framework Accreditation Process
- Glossary of Terms
- Privacy Assessment
- IRAP Assessment
- Core Privacy Requirements
- Core Protective Security Requirements
- Core User Experience Requirements
- Core Risk Management Requirements
- Core Fraud Control Requirements
- Digital Identity Proofing Standard
- Digital Authentication Credential Standard
- Information Security Documentation Guide
- Risk Management Guide
“Traditional identity systems have often been based on a network of bilateral agreements or loosely coupled Service level Agreements (SLAs),” says the overview document.
“These frequently lack transparency and do not readily scale on a national basis. In contrast, a trust framework approach provides an efficient and scalable approach that readily facilitates the operation of federated style identity systems.
“A ‘trust framework’ describes a legally enforceable and agreed set of specifications, rules, and agreements for the governance of a federated style identity system. Trust frameworks therefore enable all participants (including end users) to have confidence in the key components of identity verification and authentication and the security and privacy of people’s personal information.”
The draft Trusted Digital Identity Framework is available for feedback until 8 December 2017 at the Digital Transformation Agency website.
Feedback can be submitted by way of a survey on the site.
Leave a Reply