Digital Identity

One of the really big issues for the digital era is identity. There seems no end of problems but one country may be on the right track.

The Economist Reports (28 June 2014)

Private providers are offering their own schemes; miiCard, for example, uses bank accounts as a way of issuing a verified online identity. But these fall short of the reliability of a state-backed identity, issued by a government official, checked against other databases, using biometric data (such as fingerprints and retinal scans) and backed by law—in effect an electronic passport.There is one place where this cyberdream is already reality. Secure, authenticated identity is the birthright of every Estonian: before a newborn even arrives home, the hospital will have issued a digital birth certificate and his health insurance will have been started automatically. All residents of the small Baltic state aged 15 or over have electronic ID cards, which are used in health care, electronic banking and shopping, to sign contracts and encrypt e-mail, as tram tickets, and much more besides—even to vote.Estonia’s approach makes life efficient: taxes take less than an hour to file, and refunds are paid within 48 hours. By law, the state may not ask for any piece of information more than once, people have the right to know what data are held on them and all government databases must be compatible, a system known as the X-road. In all, the Estonian state offers 600 e-services to its citizens and 2,400 to businesses.Estonia’s system uses suitably hefty encryption. Only a minimum of private data are kept on the ID card itself. Lost cards can simply be cancelled. And in over a decade, no security breaches have been reported. Also issued are two PIN codes, one for authentication (proving who the holder is) and one for authorisation (signing documents or making payments). Asked to authenticate a user, the service concerned queries a central database to check that the card and relevant code match. It also asks for only the minimum information needed: to check a customer’s age, for example, it does not ask, “How old is this person?” but merely, “Is this person over 18?”

 I remember, a long time ago, that is Before the Internet  Era (BIE) the Australian government wanted to issue an identity card - in effect a social security card which other countries have. There was the usual controversy and at the time it became to hot too touch. The problem is the world has changed radically and now the identity crisis needs an answer - perhaps Estonia is on the right track. We look forward to more serious experiments. It seems contradictory but perhaps to protect privacy and individuality we need a step like this - digital birth certificate.