Who wants to know?

Increasing amounts of electronic data about us are being collected as we go about our daily lives. This has some advantages — it makes it easier to access medical records when and where they are needed, provides better personal security against theft and violence and enables more precisely targeted supermarket special offers. The disadvantage is the loss of privacy.

In a recent report, a working group of the

argues it is possible to have security, convenience and privacy — if good engineering principles are followed.

raises a number of points that engineers involved in the specification, design and implementation of IT systems need to consider.

For many electronic transactions, a name or identity is not needed; just an assurance that one can pay or is eligible for the service. In short, authentication (do you have the right to perform some activity?), not identification (who are you?), should be all that is required.