How VIP Online Security Works

The VIP Online Security service works by authenticating a person when they perform certain actions at a participating organisation's website or service. These actions could include performing high value financial transactions or accessing an online account. As already mentioned, VIP Online Security is designed to enable a person to use the one device to access their online accounts and services at multiple participating organisations.

Authentication is achieved by VIP Online Security determining if the one-time-password (OTP) entered by a person matches the device linked to their account at the participating organisation. The positive or negative authentication response from the VIP Online Security service is then passed to the requesting participating organisation. Because participating organisations are able to independently manage their own business rules and level of customer access, they can then take appropriate action based on the response from the service. It is important to note that the rules and security standards of one participating organisation do not impact on other participating organisations. Although the authentication infrastructure will be shared by multiple participating organisations, the service itself does not store any user account or identity information, and no information about the user will be transferred from or between participating organisations.

Categories of participation

There are two categories for organisations participating in the service:

 to enquire about VIP Online Security for your organisation.

<click on image to enlarge>

Enhanced security plus a range of additional benefits

As well as the increased security multi-factor authentication provides, Australia Post's VIP Online Security service can provide participating organisations with:

• Reduced infrastructure and device costs. Australia Post aims to offer reduced infrastructure and device costs compared to what individual organisations would pay to implement and manage their own authentication systems and devices.
• Shared Authentication Network. Shared authentication network with leading online communities as participants.
• Technology agnostic service. VIP Online Security supports a wide range of authentication device types, including tokens, mobile phones, PDAs, and smart cards. In some cases existing investments can be reused.
• Improved customer convenience. A single, shared service allows participating organisations to offer their customers the convenience of using one trusted device to access many different services.
• Logistics and distribution of authentication devices. Australia Post can provide a complete end-to-end service. Australia Post can bulk purchase authentication devices on behalf of issuing customer organisations and manage the logistics from the manufacturer to the customer. Each customer organisation has the option to tailor the delivery service to their customers through Australia Post's existing delivery services such as standard mail and registered mail.
• Identity and Verification Services. The delivery service can also be tailored to support additional security and authentication requirements by incorporating Australia Post's identity and verification services. These include:
  • In-Person Proofing. Service options include 100 point identity checks, tailored identity checks, selected document sighting, interviews, and background identity checks.
  • Receiver ID Collect. Designed to provide additional assurance that sensitive or valuable items are only received by the intended recipient. The recipient is notified when their item arrives at a post outlet. They then must bring the required identification in order to obtain the article.
  • Photocard. Includes image capture at post outlets and identity card production.
• Applications and forms processing. Enables customers to access and lodge application forms requiring In-Person Proofing. When a form is presented at an Australia Post outlet, staff check it has been completed properly and, as required, confirm details from supporting documents: photo id, certificates etc.

About Australia Post

Australia Post is a statutory corporation wholly owned by the Commonwealth of Australia. It is one of Australia's top-ranking companies and, as a progressive and commercial government business enterprise, is continually extending and adapting its services to harness innovations in technology and meet the changing needs of its customers.

Unmatched credentials and experience

Australia Post is uniquely positioned to provide nationwide access to a shared online authentication service. It has extensive experience in supplying identity and verification services such as In-Person Proofing, Receiver ID Collect, Photocard services and Applications and Forms Processing to a range of business and government sector organisations. Australia Post operates one of the nation's largest and most accessible retail and financial services network with a total of over 4,400 outlets serving over one million customers each business day. Real-time transactions are available at over 3,100 outlets. As the trusted host of Bank@Post, one of the nation's largest personal agency banking networks, Australia Post processes transactions on behalf of 76 financial institutions.

About VeriSign

Australia Post's VIP Online Security service is enabled by VeriSign® Identity Protection. VeriSign operates intelligent infrastructure services that enable and protect billions of interactions every day across the world's voice and data networks. Additional news and information about the company is available at www.verisign.com.au.

 to enquire about VIP Online Security for your organisation.

For more information

• Download the VIP Online Security Service Overview