What is Registration?

Registration is the process of a user being accepted or provisioned into and identity management or credential issuance system. In the case of those applying for a digital credential, it often involves the collection of information from the individual and systems they are known to. This allows for the positive identification of the individual, ensuring that the integrity of the registration process is maintained through a high level of assurance that the individual is who they say they are.

What is EOI?

Evidence of Identity (EOI) information is the information that an individual presents at registration to prove who they are. The EOI required is dependent on the use and the level of trust required. In Australia, the Australian Government Information Management Office (AGIMO), as part of the Department of Finance and Deregulation, offers a framework that Government and Commercial bodies can adhere to if they wish.

The AGIMO proof of identity framework classifies documents as follows:

  • Evidence of commencement of identity in Australia.
  • Linkage between identity and person such as photo and signature.
  • Evidence of identity operating in the community.
  • Evidence of residential address (if not established by one of the above categories).

What are the benefits?

Ensuring a rigorous registration process and requiring significant levels of EOI allows a high level of trust to be afforded to the identity and credentials that are created as part of the registration process. This allows for a common understanding of the requirements and rigor of the process that has been undertaken by another party. This, in turn, allows decisions of trust to be made.

For example, deciding if an externally created identity is to be accepted by an organisation when making system access control decisions, based on the certainty that the correct person oversees the correct digital credential. In many organisations proof of identity is required as part of the staff onboarding process, but in most cases this induction process is not integrated with enough safeguards for it to be used for the credential registration process.

Are There Alternatives to a Second Registration?

If an organisation does not perceive a threat and the relying parties are happy to accept a lower level of identity assurance, an organisation may use a known customer model. That is that they would accept an individual presenting themselves and use system data as proof of identity.

An alternative approach is to link the staff onboarding process with the credential registration process. One way this can be done is by the collection of a biometric with the EOI confirmation at induction. This biometric can then be used as a trust or assurance anchor by conducting a biometric confirmation as part of credential registration.

A further approach is to use the credential registration process as the front end to other onboarding processes. That is, the credential registration process is the first and authoritative source for other systems such as the HR system.