Bhutan e-Government Master Plan the National Identification Number and the password will be sent to their email account. To use an e-Service that requires authentication, the user will need to first logon using the Authentication ID. The functionalities and features of the Authentication a) Service include: Single Sign-On The Authentication Service will provide single sign-on capability which uses one authentication method to verify the identity of a user while access to multiple applications and services. Once been successfully access to the authenticated, application. application and if the second and the first application, simplifies the a user’s credential has the user will be granted a user request access When granting appropriate to another application accepts credentials from the user no additional authentication will be required. authentication process by using the same This mechanism to verify the user identity from application to application. b) Authentication Method Authentication can be implemented by using something you know (e.g. password) or something you have (e.g. token). Single factor authentication which uses Authentication implementation ID and of government biometrics is recommended access a more password secure for one-time or generated password e-services. is generally or for the Two-factor authentication to increase the assurance system adopted sensitive using if there is a need to information. Alternatively, usage only can be randomly generated by a token, by a server and sent to a mobile phone via a short message service (SMS). c) The Encryption Authentication Authentication Service will ID and password. provide end-to-end encryption of the This is to provide more assurance on the confidentiality and integrity of these key parameters used for authentication. d) The Non-repudiation Authentication requirement Service by providing will conclusive need to support proof of participation non-repudiation by both sender