What are the Processes Involved?
E-authentication is an important element in establishment of trust on electronic transactions. Two major processes are involved:
Registration Process
The registration process will normally consist of 2 major components, namely Registration and Revocation.
Registration is
- to ensure that the claimed identity actually exists;
- to ensure that the applicant is who he/she says to be;
- to ensure that the information associated with the identity are consistent, accurate and recorded; and
- to issue a credential, or record details of an existing credential.
- to withdraw and where necessary replace credentials in case of holder's death, resignation or dismissal, change of name, cessation of trading or other significant change of circumstance;
- to withdraw and replace stolen/compromised credentials;
- to suspend credentials where there is suspicion of compromise, theft or significant change of circumstances; and
- to withdraw credentials at the client's request.
Authentication Process
Authentication is the process to identify and to prove the identity of a user/party who attempts to send message or access data. The objective is
- to check that the credential is valid for the transaction in question; and
- to check that the credential presented has not expired, been revoked or withdrawn.
|