OCR Labs achieves Strong level (IP3) under the Trusted Digital Identity Framework

Following the announcement by the Australian Government of OCR Labs being the first private Australian identity provider to be accredited under the Australian Government’s Trusted Digital Identity Framework (TDIF) and Identity Proofing Level 2 (IP2), the company has already elevated to the next accreditation level.

The bolstering of accreditation means OCR Labs has scaled to Identity Proofing Level 3 (IP3) or Strong level; the highest accreditation level applicable to OCR Labs without requiring in-person checks. IP3 is used for higher risk transactions that require a user to prove they are who they say they are, through remote face verification. 

This level of accreditation equals the current standard reached by the Australian Government’s identity provider myGovID and makes OCR Labs the only private entity to be accredited at IP3.

The TDIF is the Australian Government’s accreditation framework for Digital Identity services. It sets the standards, rules and guidelines for digital identity providers based on international best practice and industry standards.

The move from IP2 to IP3 includes OCR Labs ongoing independent testing for its Near Field Communication (NFC) capabilities plus additional checks to ensure the individual being verified is active in society, a so-called ‘death check’. NFC technology is becoming more and more prevalent due to advancements in mobiles equipped with NFC readers, meaning you can now scan your passport chip directly from your mobile phone.

Speaking about the IP3, Paul Warren-Tape, Head of Risk and Compliance at OCR Labs says, “Our elevation from IP2 to IP3 in just a few months is an exceptional milestone in putting us at the heart of solving digital identity solutions in Australia.

“Regulation that addresses identity document verification and biometric technologies is aligning. The TDIF accreditation in Australia is a positive step forward to ensure there are standards to protect Australians when using identity verification solutions. 

“Companies have an ethical responsibility to be transparent in how their solutions help people in everyday life, whilst preserving their privacy at all times. So the boost to IP3 gives our customers the trust and confidence that we maintain the very highest level of security and compliance.

“We hope that other industry regulators consider the TDIF as best practice and make the move to its use of technology for remote identity and age verification,” said Paul.

With the pandemic continuing to shape contactless interactions, OCR Labs is at the forefront of compliant frameworks for digital identities, making it safe, secure and accessible to all Australians and Australian businesses.

Key Points

• OCR Labs is approved to have our TDIF accreditation step up from Identity Proofing Level 2 to Identity Proofing Level 3
• An Identity Proofing Level refers to the extent of proof someone needs to provide to prove they are who they say they are. Identity providers can seek accreditation under TDIF for a specific Identity Proofing Level ranging from 1+ to 4. This Identity Proofing Level provides assurance to their customers that they meet the privacy and security standards for that level and the associated verification activities.
• The level of assurance required for identity proofing is important for managing the associated risk for a particular service or transaction. Services that have a higher level of identity risk will require a higher identity proofing level. Higher levels of proofing processes will often require collection of greater amounts of personal information. 
• This will include having our NFC capability independently tested, plus the additional checks to ensure the individual being verified is alive and well in society, i.e. death check.
• This will mean that we are the same level identity proofing level as myGovlD and the first and only private entity to be accredited at IP3. IP3 is the highest accreditation available to OCR Labs as IP4 requires providers to have a shopfront to conduct in-person physical interviews. 
• Once accredited, providers need to continually demonstrate they meet their TDIF obligations by undergoing annual assessments.  
• We are well positioned for when NFC starts to become more prevalent in Australia as currently this is restricted to only a small subset of passports produced post 2016.
• OCR Labs have also been providing regular feedback on the TDIF enhancements as well as feedback on the Trusted Digital Identity Bill