Document ID: chunk:federal_register_of_legislation:F2024L01435:front:0:p1
Version: federal_register_of_legislation:F2024L01435
Segment Type: other
Provision Reference: 
Character Range: 0–3691

Digital ID (Accreditation) Data Standards 2024

I, Katy Gallagher, Minister for Finance, acting as the Digital ID Data Standards Chair, make the following instrument.

Dated 7 November 2024

Katy Gallagher
Minister for Finance
Digital ID Data Standards Chair

Contents
Chapter 1—Preliminary
1.1  Name
1.2  Commencement
1.3  Authority
1.4  Definitions
1.5  Incorporated instruments
1.6  Application—transitioned accredited entities
Chapter 2—Data standards for ISPs
Part 1—Biometric testing
2.1  Definitions
2.2  Biometric testing entity
2.3  Testing of presentation attack detection technology
2.4  ISP's response to testing report
2.5  Testing of biometric matching algorithm
2.6  Testing of source biometric matching
2.7  Testing of eIDVT
Part 2—Authenticating to a digital ID
Division 1—Authentication levels
3.1  Authentication levels: AL Table
Division 2—Binding authenticators to a digital ID
3.2  Binding an authenticator when generating a digital ID
Division 3—Standards for kinds of authenticators
3.3  Memorised secrets
3.4  Look-up secrets
3.5  Single-factor one-time password devices
3.6  Multi-factor one-time password devices
3.7  Single-factor cryptographic software
3.8  Multi-factor cryptographic software
3.9  Multi-factor cryptographic devices
3.10  Single-factor cryptographic devices
3.11  Out-of-band devices
Division 4—Standards for security requirements
3.12  Standards for security requirements
Division 5—Authentication using biometric information
3.13  Standards for authentication using biometric information

Chapter 1—Preliminary

1.1  Name
  This instrument is the Digital ID (Accreditation) Data Standards 2024.

1.2  Commencement
  This instrument commences at the same time as the Digital ID Act 2024 commences.

1.3  Authority
  This instrument is made under section 99 of the Digital ID Act 2024.

1.4  Definitions
Note 1: A number of expressions used in this instrument are defined in the Act, including the following:
                1.      accredited entity;
                2.      accredited identity service provider;
                3.      authenticator;
                4.      biometric information;
                5.      digital ID.
Note 2: A number of expressions used in this instrument are defined in the Accreditation Rules, including the following:
                1.      biometric matching;
                2.      cryptographic key;
                3.      eIDVT;
                4.      presentation attack instrument;
                5.      presentation attack detection;
 (1) Expressions defined in the Accreditation Rules have the same meaning in this instrument.
 (2) In this instrument:
AACA means an ASD-Approved Cryptographic Algorithm as referred to in the Guidelines for Cryptography published by the Australian Signals Directorate.
Note:  At the time this instrument was made, the Guidelines for Cryptography are located at https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism/cyber-security-guidelines/guidelines-cryptography.
Accreditation Rules means the Digital ID (Accreditation) Rules 2024.
Act means the Digital ID Act 2024.
AE-compromise resistance means authentication protocols that do not require an accredited entity to persistently store secrets that could be used for authentication.
AL Table: see section 3.1.
APCER means an attack presentation classification error rate.
authentication level: see section 3.1.
authenticated protected channel means a communication channel that uses approved cryptography where the client connection has authenticated to the relevant server.
authentication protocol means a defined sequence of messages between an individual