Document ID: chunk:federal_register_of_legislation:F2024L01435:reg:2
Version: federal_register_of_legislation:F2024L01435
Segment Type: reg
Provision Reference: reg 2
Character Range: 74481–76331

2                                  The out-of-band device:                                                                                                                                                                                       must uniquely authenticate itself in one of the following ways when communicating with the entity's information technology system:
                                                                                                                                                                                                                                                  1.      establish an authenticated protected channel to the entity's information technology system that:
                                                                                                                                                                                                                                                      (i) uses approved cryptography; and
                                                                                                                                                                                                                                                      (ii) stores relevant cryptographic keys in suitably secure storage available to the authenticator application; or
                                                                                                                                                                                                                                                  1.     only where a secret is being sent from the entity's information technology system to the out-of-band device via the PSTN, authenticate to a public mobile telephone network using a SIM card or equivalent that uniquely identifies the device.