PETweb II - Privacy-respecting Identity Management for e-Norge

-

The computerization of administration and private business requires the management of various aspects of people?s identities on information systems. Identifiers, passwords, personal profiles, pseudonyms, person numbers, social security numbers, patient nu mbers and various other identifiers such as e-mail addresses, credit card numbers, passport numbers and bank account numbers are used to uniquely identify information system users or citizens. Some of these identifiers and their attached authentication a nd identity information are very mobile, and spread out many information systems and purposes. As recently discussed concerning the Norwegian citizen person number, such a function shift can pose serious risk to government and citizens, and open opportuni ties for criminals. The choice of an identity management approach has severe consequences on the way the information system can use, store, combine and possibly misuse person-related information . The choice of a scheme for identity management and electr onic identifiers is a critical step for IT projects. PETweb II aims at providing scientific support for such choices, in particular supporting: - The analysis of specific technical and regulatory privacy and security risks connected to the choice of a n identity management approach - The development of a reference model for privacy-respecting identity management - Research and development of a simulation and modeling method for privacy consequences of identity management systems The project addresse s societal challenges concerning the future of electronic identifiers and electronic identities. The implication of such identities reach from today's crime ('identity theft') to long-term privacy implications and fundamental rights such as informational self-determination. Electronic identifiers penetrate all aspects of information systems and their contact with society, ranging from e-mail addresses up to social security numbers and electronic passport.