Age verification

Romek <[email protected]> Mon, 5 Dec 2016 23:24:15 +0000
Newsgroups gmane.law.cryptography.uk
Message-ID <CAODbCxQA+iGQTV_H=s61BuP3TU_eg1-Z0=tD4oMPqA8YW3OGrQ@mail.gmail.com>
Hi,

Current age verification techniques are flawed. Ask any child if they
will tick the box stating that they are =E2=80=9COver 18=E2=80=9D and I sus=
pect all
children will do so. Once they access adult sites, they can typically
follow links to other sites without further age checks.

In 2013, Ofcom decided that we cannot use credit cards as the basis
for age verification. See =E2=80=9CPlayboy fined =C2=A3100,000 for failing =
to
protect children=E2=80=9D
https://www.ofcom.org.uk/about-ofcom/latest/media/media-releases/2013/playb=
oy-fined-100000-for-failing-to-protect-children

Age verification needs to be more sophisticated and more associated
with real life. In real life, the adult decides and is responsible for
whether the child can view the adult material.

We have designed a system that allow authorities to protect sensitive
websites with a one-time QR code, that can only be unlocked by using
an identity app on a phone. An adult can use this app to show age
verification to a validation service. Then, if the adult consents, the
child is allowed to view said sensitive material.

This can be achieved as follows (see page 17):
http://www.slideshare.net/feyeleanor/anonymity-trust-accountability

There is also a backchannel for the adult to see which websites that
the child is looking at, so that they can allow continued surfing or
terminate the link at any time. This also provides an audit trail for
the child=E2=80=99s web viewing and who authorised their viewing.

We cannot 100% guarantee that no underage person would access
sensitive web sites. It is hard to avoid these cases. For example, in
real life, a child can ask an adult to buy cigarettes for them.

There are probably other solutions to this problem, but we have not
yet seen any which makes the adult responsible for the child=E2=80=99s acti=
ons
as this does.

Kind regards
Romek Szczesniak
Innovative Identity Solutions Ltd
romeks-/[email protected]