ATO re-tenders for myGovID anti-spoofing facial recognition software – Strategy – Software

The Australian Taxation Business has absent again to the sector to come across a facial recognition answer to underpin the government’s myGovID digital identification credentialing application.

The nationwide income company issued a tender for a ‘liveness’ answer late last 7 days, extra than two yrs right after the Electronic Transformation Company first sought to examination this sort of a system.

It suggests a community beta of the app’s facial recognition part will now not take position right up until September 2021.

Liveness detection, or a proof-of-are living examination, is essential for myGovID to move earlier remaining merely a digital equal of the 100 stage ID look at.

Although the application can currently be made use of to build a digital identification and to log into a confined vary of online govt solutions, extra confidential solutions demand a higher identification proofing level.

The DTA calls this identification proofing level 3 (IP3), which gives “high self confidence in the claimed identification and is meant for solutions with a chance of critical repercussions from fraud”.

All govt solutions are anticipated to be readily available by means of online channels by 2025, making liveness detection central to the government’s digital eyesight.

The DTA and ATO experienced been testing liveness detection program from IDEMIA given that September 2018 right after tendering for it in March 2018.

The ATO has also performed a liveness proof-of-concept with myGovID buyers making use of program from sellers iProov and FaceTec.

Tender documents unveiled on Friday now suggest a seller will be located by Christmas, with a contract of up to seven yrs on offer you.

The ATO said the new liveness detection program will “allow the person to take a ‘selfie’ which will then be made use of to verify their identification towards a saved identification document”.

It will also “prove the person registering is a are living person and bodily present” in a bid to stop the creation of fraudulent digital identities.

The seller will be responsible for the “ongoing management of the licenced software”, such as any updates and support, whilst the ATO requires on integration duties.

Any web hosting of the program will be finished by the ATO on Amazon World-wide-web Companies, as is the circumstance with the relaxation of myGovID.

The ATO programs to invest the first 50 % of next year building the IP3 answer, which will entail the integration of the liveness program, prior to a personal beta in June 2021.

Submissions to the tender will close on October 20.

Past 7 days, scientists warned Australians not to use myGovID due to an implementation flaw in the login process that they said could see attackers achieve entire entry to their accounts. 

The ATO, who have explained the so-termed flaw as a scam that could use to most online login units, instructed the scientists that it did not intend to transform the protocol.