End matter

The following organisations contributed representatives to the Authentication Keys working group:

Accident Compensation Corporation
Auckland City Council
BSA Limited
Gen-i
Government Communications Security Bureau
IBM New Zealand Limited
Inland Revenue
Land Information New Zealand
Land Transport New Zealand
Ministry of Education
Ministry of Health
Ministry of Social Development
New Zealand Customs Service
New Zealand Police
State Services Commission

Acknowledgement

The State Services Commission gratefully acknowledges the contribution of time and expertise from all those involved in developing this Standard. During the development of this Standard, the working group used both NZSIT 400 and the Electronic Authentication Guideline (NIST 800-63).

Copyright

This Standard is subject to Crown copyright. The material may be used, copied and re-distributed free of charge in any format or media, provided that the source and copyright status is acknowledged (i.e. this material was produced by the State Services Commission © Crown copyright 2006).

Referenced documents

Joint Australian/New Zealand Standards and Handbooks

AS/NZS ISO/IEC 17799:2006 Information technology - security techniques - code of practice for information security management. www.standards.co.nz

AS/NZS ISO/IEC 27001:2006 Information technology - security techniques - information security management systems - requirements. www.standards.co.nz

AS/NZS 4360:2004 Risk management (Australian/New Zealand Standard). www.standards.co.nz

SAA/SNZ HB 231:2004 Information security risk management guidelines (Australian/New Zealand handbook). www.standards.co.nz

SAA/SNZ HB 436:2004 Risk management guidelines - companion to AS/NZS 4360:2004 (Australian/New Zealand handbook). www.standards.co.nz

American Standard

National Institute of Standards and Technology. 2006. Electronic authentication guideline (NIST 800-63). Version 1.0.2. www.csrc.nist.govt

Other

Asia Oceania Electronic Marketplace Association (AOEMA). 2002. SafetyNet guide. www.aoema.org

Bradner, S. March 1997. Key words for use in RFCs to indicate requirement levels. (RFC 2119). www.ietf.org

Department of Internal Affairs. 2006. Evidence of identity standard. Version 1.0. www.dia.govt.nz

Department of the Prime Minister and Cabinet. 2002. Security in the government sector (SIGS). www.security.govt.nz

Department of the Prime Minister and Cabinet. 2001. Guidelines for protection of official information. www.security.govt.nz

Government Communications Security Bureau. October 2005. New Zealand Government information technology security manual - NZSIT 400 (NZSIT 400). Version 1.0. www.security.govt.nz

State Services Commission. 2006. Authentication key strengths standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Data formats for identity records standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Guidance on multi-factor authentication. www.e.govt.nz

State Services Commission. 2006. Guide to authentication standards for online services. Version 1.0. www.e.govt.nz

State Services Commission. 2006. New Zealand e-government interoperability framework (NZ e-GIF). Version 3.0. www.e.govt.nz

State Services Commission. 2006. Security assertion messaging framework. www.e.govt.nz

State Services Commission. 2005a. Development goals for the State Services. www.e.govt.nz

State Services Commission. 2005b. Authentication for e-government: Government Logon Service design overview. www.e.govt.nz

State Services Commission. 2004. Authentication for e-government: Best practice framework for authentication. www.e.govt.nz

State Services Commission. New Zealand security assertion messaging standard. (In preparation.) www.e.govt.nz

Related Websites

www.aoema.org
www.ccip.govt.nz
www.dia.govt.nz
www.e.govt.nz
www.gcsb.govt.nz
www.netsafe.org.nz
www.security.govt.nz
www.ssc.govt.nz

Latest revisions

This Standard is to be reviewed from time to time by the working group, so that it keeps up to date with changes in the sector.

Users should ensure they access the latest revisions of the NZ e-GIF authentication standards, including amendments (if any). These can be found at www.e.govt.nz. Users should also access the latest revisions of the documents included in the list of referenced documents set out in this Standard.

Review of standards

Suggestions for improvement of this Standard are welcomed. They should be sent to the Manager, e-GIF Operations, State Services Commission, PO Box 329, Wellington. Alternatively, suggestions can be sent by email to e-gif@ssc.govt.nz