footnote 53 A broader definition of three-party registration would involve use of the registration authority to allow
clients to identify each other to a required level of assurance, in support of peer-to-peer transactions (the e-
Bay model of identity registration). 54 For example, if a service provider has registered a client at
Registration IL2, and an appropriate set of measures has been put into place to maintain that identity
registration information, other service providers with Registration IL2 assurance requirements and below
should be able to assert the client's identity without needing to gather further identity registration information
themselves. This would be subject to establishing a mutually agreeable trust relationship, and to explicit and
informed consent by the client. 55 This might be required, for example, if a client withes to enrol for
additional services or requires access to more sensitive functionality within a service for which they are
already enrol ed.
Email this to a friend.
Previous item —