澳洲新的數位身分證計畫不符合全球隱私標準。這是修復它的方法

聯邦政府仍在開發該系統，預計明年將進行試點。它被稱為“信任交換”，是可信任數位身分框架的一部分，旨在使用數位代幣安全地驗證人們的身分。

Australia’s federal government is developing a new digital ID system, known as the “Trust Exchange”, which is designed to simplify the way we prove our identities online. The system will work alongside the myID platform, where Australians can store and manage their digital ID documents.

澳洲聯邦政府正在開發一種新的數位身分系統，稱為“信任交換”，旨在簡化我們在線上證明身分的方式。該系統將與 myID 平台一起工作，澳洲人可以在該平台上儲存和管理他們的數位身分證件。

The Trust Exchange is part of the Trusted Digital Identity Framework, which is being developed by the federal government to securely verify people’s identities using digital tokens. The tokens will contain a person’s key digital identity documents, such as their driver’s licence and Medicare card.

Trust Exchange 是可信任數位身分框架的一部分，該框架由聯邦政府開發，旨在使用數位令牌安全地驗證人們的身分。這些令牌將包含一個人的關鍵數位身分文件，例如駕駛執照和醫療保險卡。

When a person wants to access a service, such as banking or applying for a government service, they will be able to use a digital token to prove their identity and share personal information, such as their age, visa status or licence number — without handing over any physical documents or revealing too much personal information.

當一個人想要訪問銀行服務或申請政府服務等服務時，他們將能夠使用數字令牌來證明自己的身份並共享個人信息，例如年齡、簽證狀態或執照號碼，而無需提交超過任何實體文件或透露太多個人資訊。

For example, instead of showing a full driver’s licence to enter a licensed premises, a person will be able to use a digital token that confirms, “Yes, this person is over 18”.

例如，人們無需出示完整的駕駛執照即可進入有執照的場所，而是可以使用數位令牌來確認「是的，此人已年滿 18 歲」。

The system is designed to be both secure and convenient. However, it has several privacy issues, especially when compared to international standards like those in the European Union.

該系統的設計既安全又方便。然而，它存在一些隱私問題，特別是與歐盟等國際標準相比。

The World Wide Web Consortium sets global standards around digital identity management. These standards ensure people only share the minimum required information and retain control over their digital identities without relying on centralised bodies.

萬維網聯盟圍繞數位身分管理制定全球標準。這些標準確保人們僅共享所需的最低資訊並保留對其數位身分的控制，而無需依賴中央機構。

The European Union’s digital identity system regulation builds on these standards. It creates a secure, privacy-centric digital identity framework across its member states. It is decentralised, giving users full control over their credentials.

歐盟的數位身​​分系統法規建立在這些標準的基礎上。它在其成員國之間創建了一個安全、以隱私為中心的數位身分框架。它是去中心化的，使用戶可以完全控制自己的憑證。

In its proposed form, however, Australia’s digital ID system falls short of these global standards in several key ways.

然而，就其提議的形式而言，澳洲的數位身分系統在幾個關鍵方面未達到這些全球標準。

First, it is a centralised system. Everything will be monitored, managed and stored by a single government agency. This will make it more vulnerable to breaches and diminishes users’ control over their digital identities.

首先，它是一個中心化的系統。一切都將由一個政府機構監控、管理和儲存。這將使其更容易受到破壞，並削弱用戶對其數位身分的控制。

Second, the system does not align with the World Wide Web Consortium’s verifiable credentials standards. These standards are meant to give users full control to selectively disclose personal attributes, such as proof of age, revealing only the minimum personal information needed to access a service.

其次，該系統不符合萬維網聯盟的可驗證憑證標準。這些標準旨在讓使用者完全控制有選擇地揭露個人屬性，例如年齡證明，僅揭露存取服務所需的最少個人資訊。

As a result, the system increases the likelihood of over-disclosure of personal information.

結果，該系統增加了過度披露個人資訊的可能性。

Third, global standards emphasise preventing what’s known as “linkability”. This means users’ interactions with different services remain distinct, and their data isn’t aggregated across multiple platforms.

第三，全球標準強調防止所謂的「可連結性」。這意味著用戶與不同服務的互動仍然不同，而且他們的資料不會跨多個平台聚合。

But the token-based system behind Australia’s digital ID system creates the risk that different service providers could track users across services and potentially profile their behaviours. By comparison, the EU’s system has explicit safeguards to prevent this kind of tracking – unless explicitly authorised by the user.

但澳洲數位身分系統背後的基於代幣的系統帶來了不同服務提供者可能跨服務追蹤用戶並可能分析他們行為的風險。相較之下，歐盟的系統有明確的保障措施來防止這種追蹤——除非得到用戶的明確授權。

Finally, Australia’s framework lacks the stringent rules found in the EU which require explicit consent for collecting and processing biometric data, including facial recognition and fingerprint data.

最後，澳洲的框架缺乏歐盟的嚴格規則，這些規則要求收集和處理生物辨識資料（包括臉部辨識和指紋資料）明確同意。

It is crucial the federal government addresses these issues to ensure its digital ID system is successful. Our award-winning research offers a path forward.

聯邦政府解決這些問題對於確保其數位身分系統的成功至關重要。我們屢獲殊榮的研究提供了一條前進的道路。

The digital ID system should simplify the verification process by automating the selection of an optimal, varied set of credentials for each verification.

數位身分系統應該透過自動為每次驗證選擇一組最佳的、多樣化的憑證來簡化驗證過程。

This will reduce the risk of user profiling, by preventing a single credential from being overly associated with a particular service. It will also reduce the risk of a person being “singled out” if they are using an obscure credential, such as an overseas drivers licence.

透過防止單一憑證與特定服務過度關聯，這將降低使用者分析的風險。如果一個人使用的是海外駕駛執照等不起眼的憑證，這也將降低一個人被「挑出」的風險。

Importantly, it will make the system easier to use.

重要的是，它將使系統更易於使用。

The system should also be decentralised, similar to the EU’s, giving users control over their digital identities. This reduces the risk of centralised data breaches. It also ensures users are not reliant on a single government agency to manage their credentials.

該系統也應該是去中心化的，類似於歐盟的系統，讓使用者能夠控制自己的數位身分。這降低了集中資料外洩的風險。它還確保用戶不依賴單一政府機構來管理他們的憑證。

Australia’s digital ID system is a step in the right direction, offering greater convenience and security for everyday transactions. However, the government must address the gaps in its current framework to ensure this system also balances Australians’ privacy and security.

澳洲的數位身分系統是朝著正確方向邁出的一步，為日常交易提供了更大的便利和安全。然而，政府必須解決目前框架中的缺陷，以確保系統也能平衡澳洲人的隱私和安全。