Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:14:p4
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 14 (pt 4/17)
Character Range: 148163–150926

time the matching is being conducted:
 (a) a driver's licence issued under a law of a State or Territory;
 (b) a proof-of-age card issued by or on behalf of a State or Territory; or
 (c)  an Australian passport.
Note: A biometric sensor includes a camera within a phone or a webcam.
        (2) The ISP must ensure that its eIDVT includes processes to:
 (a) identify and verify that the photo ID physically presented is authentic and original;
 (b) detect the presence of false, counterfeit, forged or inconsistent photo IDs; and
 (c) determine whether the relevant photo ID was physically present at the time of capture, including by:
 (i) implementing testing for document liveness;
 (ii) not allowing individuals to submit previously captured images of photo IDs; and
 (iii) making checks to ensure the image acquired of the photo ID is of the original document or other credential, and not a second‑generation image such as an image of a document or other credential or a photocopy of a document or other credential.
 (3) An entity's eIDVT must:
 (a) use optical character recognition (OCR) to convert an image of an acquired document or other credential into a machine-readable text format as part of the automated document verification process;
 (b) ensure the OCR technology is effective and performs checks for information inconsistency, data quality and accurate information extraction; and
 (c) not use any manual human review processes.
Example:  The checks referred to in paragraph (b) may include image pre‑processing, text recognition, data extraction and conversion into a digitised format (such as JSON, XML or delimited text), checksum values to reduce the likelihood of character substitution errors, and self-learning models for continuous improvement
 (4) An ISP must only process a photo ID through eIDVT that is:
 (a) successfully verified as authentic; and
 (b) determined by the entity to have been physically present at the time of capture by testing for document liveness.
 (5) When processing a photo ID through eIDVT, the entity must ensure that the eIDVT:
 (a) identifies at least 5 security features in the photo ID and compares the security features against an identity document template;
 (b) compares the photo ID's expiry date to the date on which the matching is attempted;
 (c) ensures the facial image on the photo ID is genuine and has not been altered, changed or modified in any way;
 (d) only processes images with a resolution of at least 300 dpi; and
 (e) limits the number of attempts to verify the authenticity of a photo ID using eIDVT to 5.
 (6) In this rule, identity document template means a model representation of a particular identity document that is used to verify a captured image of an identity document of