Archive for the 'Authentication systems' Category
eGovernance - Authentication Systems
In my opinion technology of electronic governance will revolutionize social communication in very near future. Although there are lots of aspects in eGovernance and eGovernment Systems, I am going to focus mainly on authentication systems as it is one of the most important issues in Modern Internet Society.
As this is the first post devoted to this category it should contain my vision of the future and perspectives on Authentication systems which, actually, I dream to develop. I am strongly sure that these systems will change the life of all people on earth - maybe turning it to be easier.
Authentication systems are created by nowadays authorities and developing organizations based on super databases. I am confident that this way of development is wrong. Authentication systems of the future should not be based on databases at all. Instead of developing systems with super defence, user-centric systems must be created and all information should be carried by a person. During each authentication transaction the main information should be transferred from user (citizen) to server (organization). This process should be authorized by the government by special authorization body. The Government should only provide information for authorization process but services should be provided by different companies on the market bases.
The authorization process should be conducted on “Two-factor authentication” principle but besides password or PIN that should be provided, the user also should have an URI (Uniform Resource Identifier) and a hardware which generates the codes. This will be the cornerstone of this future system. The hardware, provided by company who supports authorization services, will connect to citizens’ general database on the moment of the transaction. The user will keep his info on this universal hardware as well as it will be cryptographic. The hardware will provide encryptic code which will be transferred to organization with user information and must also be authorizied by governmental database at the same time (during the transaction). So in this case the government should not keep all citizens’ private information in one place and citizens can easily manage it. This concept will replace passports and all other biometric authentications in future and will help to fight against all kinds of frauds.
I completely understand that in order to express these sort of thoughts (or better to say imaginations), one must have an extraordinarily sharp-sighted prospection. At least it is all I have for now.
Albert Poghosyan
No comments



