Secure User Identification Without Privacy Erosion

Individuals are increasingly confronted with requests to identify themselves when accessing services provided by government organizations, companies, and other service providers. At the same time, traditional transaction mechanisms are increasingly being replaced by electronic mechanisms that underneath their hood automatically capture and record globally unique identifiers. Taken together, these interrelated trends are currently eroding the privacy and security of individuals in a manner unimaginable just a few decades ago. Privacy activists are facing an increasingly hopeless battle against new privacy-invasive identification initiatives: the cost of computerized identification systems is rapidly going down, their accuracy and efficiency is improving all the time, much of the required data communication infrastructure is now in place, forgery of non-electronic user credentials is getting easier all the time, and data sharing imperatives have gone up dramatically. This paper argues that the privacy vs. identification debate should be moved into less polarized territory. Contrary to popular misbelief, identification and privacy are not opposite interests that need to be balanced: the same technological advances that threaten to annihilate privacy can be exploited to save privacy in an electronic age. The aim of this paper is to clarify that premise on the basis of a careful analysis of the concept of user identification itself. Following an examination of user identifiers and its purposes, I classify identification technologies in a manner that enables their privacy and security implications to be clearly articulated and contrasted. I also include an overview of a modern privacy-preserving approach to user identification. *************** De plus en plus on demande aux individus de s’identifier afin d’accéder aux services fournis par les organismes gouvernementaux, les entreprises et d’autres fournisseurs. En même temps, peu à peu les mécanismes de transaction traditionnels sont remplacés par des mécanismes électroniques qui automatiquement, mais subrepticement, saisissent et enregistrent globalement les identificateurs uniques. Ces nouvelles tendances, ensemble, érodent la vie privée et la sécurité des personnes d’une fa on inimaginable il y a quelques décennies à peine. Les personnes activement engagées dans la protection des renseignements personnels se heurtent désespérément à ces nouvelles mesures d’identification qui portent atteinte à la vie privée : le co t des systèmes d’identification automatisés baisse rapidement; leur fiabilité et leur efficac