National Network Identity Authentication Standards Set for 2026 Implementation
Key Takeaways:
- New Standards: Six public security industry standards for online identity authentication are set to be implemented on May 1, 2026.
- Enhanced Security: These measures bolster identity verification and reduce risks of personal information leaks in digital transactions.
- Public Service Platform: The standards will streamline services for natural persons to manage online identities and personal data securely.
On December 28, the Cyber Security Bureau of the Ministry of Public Security announced significant developments in China’s national infrastructure for online identity verification. Following the release of the "National Network Identity Authentication Public Service Management Measures" on May 23, 2025, these regulations are slated to take effect on July 15 of the same year. To complement this initiative, the Ministry recently issued "Announcement No. 2 of 2025," which outlines six stringent public security standards for online identity authentication. These standards will be officially enforced starting May 1, 2026, establishing a robust framework for public security in digital transactions.
Overview of the Newly Released Standards
The following is a summary of the key standards outlined in the announcement:
1. General Terminology for National Network Identity Authentication
GA/T 1721-2025 defines the fundamental terms associated with national online identity authentication services. It encompasses essential terminologies relevant to management, business processes, and equipment, facilitating advancements in research, development, and operational activities.
2. Authentication Factor Requirements
GA/T 1723.1-2025 focuses on the authentication factor categories applicable to nationality. This document delineates the types of authentication factors pertinent to identity verification within the national online identity authentication framework.
3. Real Identity Authentication Interface
GA/T 1723.2-2025 sets forth the interaction methods and authentication modalities for real identity verification services. It specifies the interface requirements necessary for parties interacting with the national identity authentication platform, ensuring consistency and security in user identification processes.
4. Face Live Image Collection Control
GA/T 2364-2025 outlines the technical requirements for live face image data collection. This standard details the structure, functionality, performance metrics, and data security stipulations needed to ensure safe collection of facial images during identity verification, thereby enhancing the accountability of facial recognition technologies.
5. Security Access Equipment Specifications
GA/T 2365-2025 delineates the technical specifications for secure access equipment interfacing with the national identity authentication platform. It covers functionality, service protocols, performance metrics, and security concerns, along with relevant testing methodologies to ensure that equipment meets mandated standards for safety and reliability.
6. Personal Identity Information Processing
GA/T 2366-2025 outlines requirements for processing personal identity information during interactions between the national platform and access agencies. It addresses the overall, technical, and managerial requirements essential for safeguarding user data and facilitating regulatory scrutiny over applicable processes.
The aforementioned standards work collectively to create a cohesive and efficient framework for identity verification in digital transactions, improving supervision and management protocols.
Future Implications for Online Transactions
As reported earlier, the "National Network Identity Authentication Public Service Management Measures" will implement real-name verification protocols in online shopping and business transactions beginning July 15, 2025. A key innovation in this initiative is the introduction of an "online ID card," which will streamline the verification processes and significantly mitigate risks associated with personal identity information leaks.
In essence, the National Network Identity Authentication serves as a public service platform designed to facilitate secure online identity management. This platform allows individuals to apply for unique network identifiers and certificates, both devoid of sensitive personal details but linked to their identity information. Users can conveniently acquire and utilize these credentials through the "National Network Identity Authentication App," greatly simplifying the digital identity verification process.
Conclusion
As China moves towards an increasingly digital society, the establishment of these standards signifies a proactive approach to enhancing security and trust in online transactions. Through these robust frameworks, the government aims to safeguard personal identity information while providing seamless services for users, ultimately aiming for a more secure online environment.
By investing in these technologies and regulations, China is paving the way for a future where online identity authentication is reliable, efficient, and secure.
