Authentication Technologies and Their Privacy Implications

应美国政府隐私问题首席顾问向CSTB提出的请求，CSTB对计算和通信系统中的新兴认证方法进行了评估，重点是认证技术对隐私的影响。 对认证技术的这一评估将审查最新技术水平和相关趋势。 它将把技术放在一个更大的背景下：它将考虑技术和非技术趋势，解决能力的性质及其实施，以及程序和其他非技术保护的性质及其可重复性。 它将审查与公共部门和私营部门使用认证技术有关的关切的差异。 将注意各种备选办法的不同组合的可能性（例如，不同的技术，以适应不同的人口和一套需要，而不是狭隘的标准化，为经济原因。 委员会将编写一份报告，并经核管理委员会批准。 它将描述认证技术，认证的技术和非技术方面的相互作用，以及隐私的替代方法的影响;它将提出有关促进相关研究和制定适当政策的建议。 它将分发给计算机科学和隐私社区，相关组织，消费者组织，政府机构和国会。 网络分发、简报、在重要会议和相关国家科学院场所的讨论以及在期刊和通讯中发表文章和公告，对于传播信息和进一步讨论至关重要。 将通过公开介绍报告启动传播进程。

In response to a request to CSTB from the United States Government's Chief Counselor for Privacy, CSTB has framed an assessment of emerging approaches to authentication in computing and communications systems that focuses on the implications of authentication technologies for privacy. This assessment of authentication technologies would examine the state of the art and relevant trends. It would put the technology into a larger context: it would consider technical and nontechnical trends, addressing both the nature of capabilities and their implementation, and the nature of procedural and other nontechnical protections and their enforceability. It would examine differences in concerns associated with public sector versus private sector uses of authentication technologies. Attention would be paid to the likelihood of different mixes of options (e.g., diverse techniques to accommodate, a diverse population and set of needs versus narrower standardization for economic reasons. A report will be produced by the committee and subject to NRC approval. It will describe authentication technologies, the interplay of technical and nontechnical aspects of authentication, and the implications of alternative approaches for privacy; it will make recommendations about fostering relevant research and shaping appropriate policy. It will be distributred to the computer science and privacy communities, associated organizations, consumer organizations, and government agencies and the congress. Web distribution, briefings, discussions at key conferences and in relevant National Academies venues, and articles and announcements in journals and newsletters would be important to getting the word out and furthering discussion. The dissemination process would be launched by a public briefing about the report.