Document ID: chunk:federal_register_of_legislation:F2024L01435:front:0:p4
Version: federal_register_of_legislation:F2024L01435
Segment Type: other
Provision Reference: 
Character Range: 9525–12725

phishing resistance means authentication methods implemented by an accredited entity for preventing and addressing impersonation attacks.
presentation attack instrument species means a class of presentation attack instrument created using a common production method and based on different biometric characteristics.
PSTN means public switched telephone network.
reauthentication means the process by which the accredited entity reconfirms that a session is still under the control of the individual.
replay resistance means protection against the capture of transmitted authentication or access control information and its subsequent retransmission with the intent of producing an unauthorised effect or gaining unauthorised access.
second-generation document image means a digital or printed image of a reproduced (for example, photocopied, scanned, or photographed) unedited genuine document.
SF crypto device is short for single-factor cryptographic device.
SF crypto software is short for single-factor cryptographic software.
SF OTP device is short for single-factor one-time password device.
single-factor cryptographic device means a hardware device that performs cryptographic operations using one or more protected cryptographic keys and authenticated by proving possession and effective control of the cryptographic key.
single-factor cryptographic software means a cryptographic key that is stored in some form of soft media.
single-factor one-time password device means a device that generates and displays OTPs, including hardware devices, SMS or software‑based OTP generators installed on devices such as mobile phones.

1.5  Incorporated instruments
  If a provision of this instrument applies, adopts or incorporates, with or without modification, any matter contained in any other instrument or other writing (incorporated instrument), then the reference to the incorporated instrument is as in force at the commencement of this instrument.

1.6  Application—transitioned accredited entities
 (1) Paragraph (b) in column 2 of item 3 of the table in section 3.13 applies to a transitioned accredited entity starting on the day that is 12 months after the day on which this instrument commences.
 (2) Every provision of this instrument not specified in subsection (1) applies to a transitioned accredited entity in accordance with its terms and on and from the commencement of this instrument.

Chapter 2—Data standards for ISPs

Part 1—Biometric testing

2.1  Definitions
  In this Part:
document false accept rate means the proportion of document verification transactions with credential fraud that are incorrectly confirmed as authentic.
document false reject rate means the proportion of genuine document verification transactions with truthful claims of a genuine document that are incorrectly denied.
document fraud attack means the techniques used to create fraudulent documents.
Note: Techniques can be digital or physical and can include document tampering or creation of a counterfeit document.
document fraud instrument means an object or image used in a credential fraud attack.
Example: A forged or counterfeit photo ID.
document fraud instrument species means a class of