Digital identity is used in Australia by residents to validate who they are over digital media, such as over the Internet.
While many organisations use their own mechanisms, increasingly, aggregated digital identities are in use. Many Australian organisations leverage popular ubiquitous Internet identities such as those provided by social login services including Facebook, Google, Twitter and LinkedIn to perform the following functions:
In addition to these services, in order to validate identities in Australia additional services are used, such as government, and bank digital identities.
The use of a mobile phone SIM as a digital identity in Australia provides some level of validation of the digital identity of the holder. Validation of the holder can be done by sending them an SMS to their phone number. The advantage of this mechanism is:
For this reason the mobile phone is often used as a primary or second-factor validation of identity on Australian digital services.
myGov is a service provided by the Government of Australia that provides a strong level of validation of digital identity.[3] It is used primarily for government (including some state government) and semi-government services such as:
myGov also integrates with Australia Post MyPost Digital Mailbox to facilitate secure electronic document delivery, as most government departments avoid the use of e-mail to directly deliver private documents.
myGov logins also support a number of other login services, especially in government.
A myGov account can be created without the use of identity documentation, so it is possible to create an account without a valid natural person. However, as services are added, access to private information, such as documents or identity that should only be known by the individual concerned, is required, making the identity stronger. Many services require a second factor of authentication – SMS via a SIM-based mobile phone number as mentioned above.
Separate from myGov, myGovID is a digital ID component, that allows a form of multi-factor authentication to government websites through a mobile app. A user attempts a login online using their email, a pin is generated, and the user types the online pin into their mobile app, and online login can be completed.
The myGovID application supports government departments building their own websites, and does not require the single portal access of myGov.
Digital iD by Australia Post is a smart phone based app that allows users to create and validate their ID against the Australian Government Document Verification Service (DVS) and then use it as a primary ID system online and in person.
Users can use their Passports, Drivers Licenses or Medicare Card to assert and confirm ID online. A photo is taken, and head movement is detected to ensure the holder is real and their face matches. Your passport can be scanned using the phone's near-field communication (NFC) reader and used to assert biometrics.[4] The user's image with dynamic security features, and an updating QR code are then displayed to people to verify the ID. The date of birth and full name are displayed on the app.[4] Australia Post claims it is acceptable for use to validate the holder's identity.[4] It can be used instead of KeyPass for holders 18 years and older.[4]
The Digital iD website states that it is used by over 50 government and private organisations across a variety of industries and sectors. Launched in 2016, questions were raised as to longevity of the offering after the founder quit,[5] however, continued investment from Australia Post has seen Digital iD become the first industry provider accredited under the federal government’s Trusted Digital Identity Framework (TDIF).[6] Usage of Digital iD is growing, and Keypass in Digital iD is now accepted as proof of age to enter participating licensed venues and to purchase alcohol in Vic, Tas, Qld, ACT and NT (excluding takeaway alcohol in NT).[4]
Online banking in Australia requires digital identification. As in other jurisdictions, access to bank accounts statements and making payments are the primary services available. In addition to these, it is possible to access documents (almost exclusively bills) from other corporations online using BPAY View. Over 300 billers are supported via this mechanism.[7]
For some transactions multi-factor authentication is required. Normally this is a password in combination with a code sent via SMS or in some cases, especially for business customers, a bank-issued security token.
Most online banking services, especially if accessing an account requires the holder to complete stringent identity requirements sometimes in a bank branch. This ensures the quality of the identity.
The four major online banking sites in Australia are:
Some states and territories of Australia offer access points to government services in those states, and require a digital identity to access these services.
Service NSW is an example – an account can be created without any verifiable identity, however as services (such as Transport for NSW) are added, private details need to be accessible, increasing the validity of the identity.
The South Australian government has made several digital licences available via the mySA GOV app (Driver's licence, Proof of Age Card etc).[8]
NSW also provides some licences online.[9] [10]
As at 2020, Queensland's Department of Transport & Main Roads was trailing a digital license in the Fraser Coast Region.[11]
See also: Tax file number. The Australian Tax file number (TFN) is a 9 digit identity document issued to tax payers. There is no card or official identity document in popular use that shows this number and strict rules on its use means that it is not required to be provided, and there is no practical way a non government entity to verify the holder against the number. It is therefore not an effective widespread digital identity (unlike the US Social Security number). However it is used to digitally identify tax paying entities behind transactions via financial institutions when the number has been disclosed. Failure to disclose the tax file number can draw attention to the transaction and/or result in tax being withheld, so it is used for specific purposes.
Identity and associated information can be verified a number of ways: