Electronic Authentication

Authentication is a process that attests to the attributes of participants in an electronic communication or to the integrity of the communication. All Canadians - individuals, businesses, and governments - share an interest in ensuring that electronic communications are secure. As our use of public electronic networks continues to evolve from searching the Internet for information to the exchange of information or money, we need greater assurance that these messages and transactions are secure and that our privacy is protected. Authentication can make a significant contribution to meeting this need and to building user confidence.

Current Developments

In May 2004 Industry Canada published the Principles for Electronic Authentication - A Canadian Framework. The Principles represent a public/private sector accord, or shared agreement, on how electronic authentication services should be designed, developed and deployed in Canada.

In 2006, Industry Canada reconvened the Authentication Principles Working Group to assess the need to update the Principles to address technological advances, developments in the marketplace (domestic and international) and new public policy pressures. While the specifics of the forward work plan have not yet been defined, it has been agreed that the Group will review the Principles to ensure their applicability to new authentication environments (e.g., mobile commerce, RFID technology), assess the need for additional policy instruments to underpin the Principles (e.g., to provide additional guidance) and to explore their relationship to the management of identities in the online environment.

For more information see:

• Authentication Principles
• Authentication Policy Framework
• Consultation Program
• International Dimensions
• Related Links
• Authentication Principles Working Group (Members Only)