Canadian Government Publishes Electronic Authentication Principles

On May 13, 2004, Industry Canada published Principles for Electronic Authentication. The Principles are meant to serve as benchmarks for the development, provision and use of electronic authentication services in Canada. They attempt to do this by identifying the functions and responsibilities of participants in authentication processes and providing those participants with a framework to assess and manage the risks in meeting those responsibilities. In addition, the Principles identify security, privacy, disclosure, and complaint handling matters that need to be considered at each stage of the design, development, implementation, and assessment of an authentication process. However, the Principles do not address the liabilities that could be borne by various participants involved in the authentication process. In particular, the Principles do not consider issues of consumer protection or liability. The Principles are underpinned by a number of "guiding beliefs" set out below: The Principles will be reviewed at least every five years and interested parties are encouraged to submit comments by mail (Richard Simpson, Director General, Electronic Commerce Branch, Industry Canada, 300 Slater Street, Room D2090, Ottawa, Ontario, K1A 0C8), by fax (613-941-0178) or by e-mail (authen@ic.gc.ca). To view the Electronic Authentication Principles, see: http://e-com.ic.gc.ca/epic/internet/inecic-ceac.nsf/en/h_gv00240e.html. Summary by: Colin Adams