搜尋此網誌

2010年3月12日星期五

德國新晶片身份證更新

信任問題
A Matter of Trust

The new ID, to be presented by the German Federal Ministry of the Interior at CeBIT 2010, will be issued for the first time in November 2010. In order to make sure that it brings not only technical progress but also improves practical life, it must be secure and must have a range of applications enabling this personal security card to be used as identification as well as for electronic signatures.
新的身份證,由德國聯邦內政部在CeBIT 2010年提交,將在2010年11月第一次發出。為了確保它不僅帶來技術進步,而且還改善實際生活中,它必須是安全和必須提供一個廣泛的應用,使這個人安全卡被用作識別以及電子簽名。


Until now, if you wanted to change your tax classification in Germany, you needed to take your printed income tax card along with your ID to the federal tax office and, after a period of waiting, go through the relevant forms with an official advisor and turn them in. The only convenient part of the process was the fact that the new tax card could be sent to you by mail. Though the paper income tax card will be discontinued after 2010, the effort required to change tax classification would have remained the same, had it not been for the introduction of the new ID.
到現在為止,如果你想在德國改變你的稅務分類,你需要帶同您的印刷入息稅卡連同您的ID,去到聯邦稅務部門和,經過一段時間的等待,正式顧問睇過有關的表格一遍及提交。過程的唯一方便部分事實是,新的稅卡可以郵寄給你。雖然紙的所得稅卡將在2010年後被停止,如果不是引進新的身份證,所需的努力去作稅收分類將保持不變。
"I can hardly wait," says Markus Linnemann, managing director of the Institute for Internet Security at the University of Applied Sciences in Gelsenkirchen, which is currently examining various security features offered by the new ID. According to Linnemann, "We live in a digital world. It therefore makes sense to work with digital data, and it's an obvious solution to store the data securely on the Internet where it can be made available for processing. But the all-important question that keeps coming up is one of trust."
“我等不切,”在蓋爾森基興的應用科學大學互聯網安全研究所常務董事馬庫斯林內曼說,大學目前正在研究由新身份證提供的多種安全功能。據林內曼說:“我們生活在數字世界。因此,它是合理的去與數字數據一起工作。這是一個明顯的解決方案,在互聯網上安全地儲存數據,在那裡它能提供處理。但不斷來的最重要問題是信任的一種。“
Peter Schaar, Federal Commissioner for Data Protection and Freedom of Information, comments: "The new ID can make E-commerce and E-government processes easier and faster - as long as it's trustworthy, meaning secure, and user-friendly." In this case, security means protecting the bearer's identifying data. As Schaar goes on to explain, there has to be a guarantee that a person's identity will not be stolen by a third party and their name misused for transactions - without their knowledge, but at their expense. This protection against misuse must be ensured on various levels - from encrypted transfers over the Web, to security measures put in place by users on their personal PCs to prevent tampering through viruses and other malicious software, to securely identifying the person on the other end of an e-mails. The latter is especially important, as phishing attacks become more and more refined.

Access to the identifying data on one of the new ID cards will only be entrusted to serious, reliable businesses. Schaar regrets: "I have worked towards making sure that participating businesses will only obtain the relevant certificate upon the successful completion of an independent review. Unfortunately, I wasn't able to push that through."

It's also important to have quick, easy and reliable systems in place for blocking access, so that lost or stolen electronic IDs can longer be used. In addition to these security features, it must also be ensured that a person's electronic activities cannot be centrally registered or traced.

沒有指紋
No fingerprints
In addition to the usual passport data like a picture, name and address, which collectively form the E-pass functionality of the card, the new ID card also contains an online authentication function. The option also exists to have a qualified electronic signature included. Instead of insecure, error-prone magnetic strips, the electronic interface takes the form of a radio transmitter, which transmits encrypted signals. Biometric data such as photos and signatures currently appear as conventional print-outs, but in the new ID cards, the photo will be stored on the card as a digital biometric feature. In addition, but only with the consent of the card-holder, a print taken from the index finger can also be included. These prints may only be read for government purposes - at the outer border control of the EU, for example. The issuers of the new ID card at the Federal Office for Administrative Affairs estimate that ID cards are only required for 10% of government purposes in comparison to passports. The ID card is most often used for secure authentication when doing business.

Schaar emphasizes: "It's critical in terms of privacy concerns that government data remain strictly separate from the other, optional functions not required by the government, such as identification for E-commerce." Any unauthorized access to biometric data intended for government purposes must be rendered technologically impossible through the development and realization of the applications, or programs, that handle the data on the electronic ID. "The new electronic ID card can only be viewed as secure when the two areas are completely isolated from each other," explains the Federal Commissioner for Data Protection.

數碼簽名入線
The digital signature goes online

In order for the new electronic ID card to be accepted by Germans, the federal, state and municipal administration, as well as independent businesses and banks, must develop solutions on their side that enable the smooth running of business processes with the new electronic ID card. With the new electronic procedures for filing taxes, the changeover to the new ID system is already underway. Banks and companies that require personal signatures for doing business are under particular pressure to perform. Markus Linnemann, from the Institute for Internet Security, places great hopes in the new electronic ID: "currently have about 120 passwords for various purposes. It would really make my life easier to have one, secure means of identification, such as the authentication function of the new electronic ID card, in order to prove my identity. That would seriously minimize the burden of passwords."
http://www.cebit.de/78032

RFID晶片又進一步

Congressman Paul discusses NationalID with Megyn Kelly
眾議員保羅與凱利討論國民身份證
西元2010年03月10日



德國新身份證上有撒旦和納粹標誌

沒有留言: