UK digital verification services trust framework: supporting documents
The supporting documents for certification against the UK digital verification services trust framework.
The UK digital verification services trust framework is the set of rules and standards that show what a good digital identity looks like. Services can become independently certified against the trust framework to prove they are following the rules.
The trust framework refers to other government guidance to provide additional rules and guidance for those fulfilling particular roles (for example, to provide an identity checking methodology for providers of identity services).
This page contains links to the core additional guidance which underpins the trust framework, which we refer to as the ‘supporting documents’.
How to check someone's identity (1.0)
This guidance, also known as Good Practice Guide (GPG) 45, helps you decide how to check, or ask others to check, the identity of those you interact with, such as your customers or employees. It describes a methodology for creating digital identities.
It is the GPG 45 version that accompanies the 1.0 trust framework, and replaces ‘How to prove and verify someone’s identity’.
How to prove and verify someone's identity (0.4)
This guidance, also known as Good Practice Guide (GPG) 45, helps you decide how to check, or ask others to check, the identity of those you interact with, such as your customers or employees. It describes a methodology for creating digital identities.
It is the GPG 45 version which accompanies the 0.4 trust framework, and is replaced by the ‘How to check someone’s identity’ guidance in the 1.0 trust framework.
How to use authenticators to protect an online service (1.0)
This guidance, also known as Good Practice Guide (GPG) 44, will help you choose an authenticator that will give you the level of protection that’s most suitable for users accessing your service.
It is the GPG 44 version that accompanies the 1.0 trust framework, and replaces ‘Using authenticators to protect an online service’.
Using authenticators to protect an online service (0.4)
This guidance, also known as Good Practice Guide (GPG) 44, will help you choose an authenticator that will give you the level of protection that’s most suitable for users accessing your service.
It is the GPG 44 version which accompanies the 0.4 trust framework, and is replaced by the ‘How to use authenticators to protect an online service’ guidance in the 1.0 trust framework.
How to create a vouch as evidence of someone’s identity (1.0)
This guidance describes a methodology for creating, storing and checking evidence of someone’s identity that relies on a ‘vouch’.
It accompanies the 1.0 trust framework, and replaces ‘How to accept a vouch as evidence of someone’s identity’.
How to accept a vouch as evidence of someone’s identity (0.4)
This guidance describes a methodology for creating, storing and checking evidence of someone’s identity that relies on a ‘vouch’.
It accompanies the 0.4 trust framework, and is replaced by ‘How to create a vouch as evidence of someone’s identity’.
Data schema (1.0)
The data schema describes a data taxonomy, data model and data dictionary for two other supporting documents:
- How to check someone’s identity; and
- How to use authenticators to protect an online service.
How to create, bind and share attributes (1.0)
Guidance on creating, binding and sharing attributes for organisations certified against the trust framework as an ‘attribute service provider’, with an optional attribute scoring methodology.
This is the attributes guidance for the 1.0 trust framework, and replaces three separate pieces of attribute guidance for the 0.4 trust framework.
Guidance on creating, binding sharing and scoring attributes (0.4)
Guidance on creating, binding and sharing attributes for organisations certified against the trust framework as an ‘attribute service provider’, with an optional attribute scoring methodology.
These three documents are collectively the guidance for attribute services certifying against the 0.4 trust framework, and have been subsumed into the ‘How to create, bind and share attributes’ guidance for the 1.0 trust framework.
How to check whether someone has delegated authority (1.0)
Guidance for services certified against the UK digital verification services trust framework who offer delegated authority as part of their service.
It accompanies the 1.0 trust framework, and replaces the 0.4 ‘Delegated authority guidance’.
Delegated authority guidance (0.4)
Guidance for services certified against the UK digital verification services trust framework who offer delegated authority as part of their service.
It accompanies the 0.4 trust framework, and is replaced by ‘How to check whether someone has delegated authority’.