Different identity transactions require different levels of assurance 44 WORLD ECONOMIC FORUM | 2016 The level of assurance (LoA) in an identity transaction is the degree of certainty that the transacting parties have in the veracity of the identity being presented.ASSURANCE IN TRANSACTIONS A high LoA in identity transactions is not always desirable, as a high LoA requires intensive onboarding and strong authentication processes that may be cumbersome for the user. The LoA required in an identity transaction should therefore generally be dependent on risk –the risk level of the transaction and the consequences of error. DETERMING ASSURANCE LEVELS The level of assurance of a given transaction is determined by two main factors: 1. Registration protocols: How stringently the identity provider verifies attributes when onboarding users 2. Authentication method: The strength of the authentication method used to complete transactions between the identity provider and the relying party Transactions that involve the release of sensitive and private information, or the transfer of money or assets, are high‐ assurance transactions Examples include banking and other financial transactions, such as using an online brokerage account, and many government services Transactions that do not involve a release of information and only involve an information flow from the user to the relying party are low‐assurance transactions Examples include online registrations (e.g., signing up for a news site) and some payments (e.g., paying a parking ticket online) Low assurance transactions High assurance transactions
