Age verification
Romek <[email protected]> Mon, 5 Dec 2016 23:24:15 +0000
| Newsgroups | gmane.law.cryptography.uk |
|---|---|
| Message-ID | <CAODbCxQA+iGQTV_H=s61BuP3TU_eg1-Z0=tD4oMPqA8YW3OGrQ@mail.gmail.com> |
Hi, Current age verification techniques are flawed. Ask any child if they will tick the box stating that they are =E2=80=9COver 18=E2=80=9D and I sus= pect all children will do so. Once they access adult sites, they can typically follow links to other sites without further age checks. In 2013, Ofcom decided that we cannot use credit cards as the basis for age verification. See =E2=80=9CPlayboy fined =C2=A3100,000 for failing = to protect children=E2=80=9D https://www.ofcom.org.uk/about-ofcom/latest/media/media-releases/2013/playb= oy-fined-100000-for-failing-to-protect-children Age verification needs to be more sophisticated and more associated with real life. In real life, the adult decides and is responsible for whether the child can view the adult material. We have designed a system that allow authorities to protect sensitive websites with a one-time QR code, that can only be unlocked by using an identity app on a phone. An adult can use this app to show age verification to a validation service. Then, if the adult consents, the child is allowed to view said sensitive material. This can be achieved as follows (see page 17): http://www.slideshare.net/feyeleanor/anonymity-trust-accountability There is also a backchannel for the adult to see which websites that the child is looking at, so that they can allow continued surfing or terminate the link at any time. This also provides an audit trail for the child=E2=80=99s web viewing and who authorised their viewing. We cannot 100% guarantee that no underage person would access sensitive web sites. It is hard to avoid these cases. For example, in real life, a child can ask an adult to buy cigarettes for them. There are probably other solutions to this problem, but we have not yet seen any which makes the adult responsible for the child=E2=80=99s acti= ons as this does. Kind regards Romek Szczesniak Innovative Identity Solutions Ltd romeks-/[email protected]