澳大利亚新的数字身份证计划不符合全球隐私标准。这是修复它的方法

联邦政府仍在开发该系统，预计明年将进行试点。它被称为“信任交换”，是可信数字身份框架的一部分，旨在使用数字令牌安全地验证人们的身份。

Australia’s federal government is developing a new digital ID system, known as the “Trust Exchange”, which is designed to simplify the way we prove our identities online. The system will work alongside the myID platform, where Australians can store and manage their digital ID documents.

澳大利亚联邦政府正在开发一种新的数字身份系统，称为“信任交换”，旨在简化我们在线证明身份的方式。该系统将与 myID 平台一起工作，澳大利亚人可以在该平台上存储和管理他们的数字身份证件。

The Trust Exchange is part of the Trusted Digital Identity Framework, which is being developed by the federal government to securely verify people’s identities using digital tokens. The tokens will contain a person’s key digital identity documents, such as their driver’s licence and Medicare card.

Trust Exchange 是可信数字身份框架的一部分，该框架由联邦政府开发，旨在使用数字令牌安全地验证人们的身份。这些令牌将包含一个人的关键数字身份文件，例如驾驶执照和医疗保险卡。

When a person wants to access a service, such as banking or applying for a government service, they will be able to use a digital token to prove their identity and share personal information, such as their age, visa status or licence number — without handing over any physical documents or revealing too much personal information.

当一个人想要访问银行服务或申请政府服务等服务时，他们将能够使用数字令牌来证明自己的身份并共享个人信息，例如年龄、签证状态或执照号码，而无需提交超过任何物理文件或透露太多个人信息。

For example, instead of showing a full driver’s licence to enter a licensed premises, a person will be able to use a digital token that confirms, “Yes, this person is over 18”.

例如，人们无需出示完整的驾驶执照即可进入有执照的场所，而是可以使用数字令牌来确认“是的，此人已年满 18 岁”。

The system is designed to be both secure and convenient. However, it has several privacy issues, especially when compared to international standards like those in the European Union.

该系统的设计既安全又方便。然而，它存在一些隐私问题，特别是与欧盟等国际标准相比。

The World Wide Web Consortium sets global standards around digital identity management. These standards ensure people only share the minimum required information and retain control over their digital identities without relying on centralised bodies.

万维网联盟围绕数字身份管理制定全球标准。这些标准确保人们仅共享所需的最低信息并保留对其数字身份的控制，而无需依赖中央机构。

The European Union’s digital identity system regulation builds on these standards. It creates a secure, privacy-centric digital identity framework across its member states. It is decentralised, giving users full control over their credentials.

欧盟的数字身份系统法规建立在这些标准的基础上。它在其成员国之间创建了一个安全、以隐私为中心的数字身份框架。它是去中心化的，使用户可以完全控制自己的凭据。

In its proposed form, however, Australia’s digital ID system falls short of these global standards in several key ways.

然而，就其提议的形式而言，澳大利亚的数字身份系统在几个关键方面未达到这些全球标准。

First, it is a centralised system. Everything will be monitored, managed and stored by a single government agency. This will make it more vulnerable to breaches and diminishes users’ control over their digital identities.

首先，它是一个中心化的系统。一切都将由一个政府机构监控、管理和存储。这将使其更容易受到破坏，并削弱用户对其数字身份的控制。

Second, the system does not align with the World Wide Web Consortium’s verifiable credentials standards. These standards are meant to give users full control to selectively disclose personal attributes, such as proof of age, revealing only the minimum personal information needed to access a service.

其次，该系统不符合万维网联盟的可验证凭证标准。这些标准旨在让用户完全控制有选择地披露个人属性，例如年龄证明，仅披露访问服务所需的最少个人信息。

As a result, the system increases the likelihood of over-disclosure of personal information.

结果，该系统增加了过度披露个人信息的可能性。

Third, global standards emphasise preventing what’s known as “linkability”. This means users’ interactions with different services remain distinct, and their data isn’t aggregated across multiple platforms.

第三，全球标准强调防止所谓的“可链接性”。这意味着用户与不同服务的交互仍然不同，并且他们的数据不会跨多个平台聚合。

But the token-based system behind Australia’s digital ID system creates the risk that different service providers could track users across services and potentially profile their behaviours. By comparison, the EU’s system has explicit safeguards to prevent this kind of tracking – unless explicitly authorised by the user.

但澳大利亚数字身份系统背后的基于代币的系统带来了不同服务提供商可能跨服务跟踪用户并可能分析他们行为的风险。相比之下，欧盟的系统有明确的保障措施来防止这种跟踪——除非得到用户的明确授权。

Finally, Australia’s framework lacks the stringent rules found in the EU which require explicit consent for collecting and processing biometric data, including facial recognition and fingerprint data.

最后，澳大利亚的框架缺乏欧盟的严格规则，这些规则要求收集和处理生物识别数据（包括面部识别和指纹数据）明确同意。

It is crucial the federal government addresses these issues to ensure its digital ID system is successful. Our award-winning research offers a path forward.

联邦政府解决这些问题对于确保其数字身份系统的成功至关重要。我们屡获殊荣的研究提供了一条前进的道路。

The digital ID system should simplify the verification process by automating the selection of an optimal, varied set of credentials for each verification.

数字身份系统应该通过自动为每次验证选择一组最佳的、多样化的凭证来简化验证过程。

This will reduce the risk of user profiling, by preventing a single credential from being overly associated with a particular service. It will also reduce the risk of a person being “singled out” if they are using an obscure credential, such as an overseas drivers licence.

通过防止单个凭证与特定服务过度关联，这将降低用户分析的风险。如果一个人使用的是海外驾驶执照等不起眼的凭证，这也将降低一个人被“挑出”的风险。

Importantly, it will make the system easier to use.

重要的是，它将使系统更易于使用。

The system should also be decentralised, similar to the EU’s, giving users control over their digital identities. This reduces the risk of centralised data breaches. It also ensures users are not reliant on a single government agency to manage their credentials.

该系统还应该是去中心化的，类似于欧盟的系统，让用户能够控制自己的数字身份。这降低了集中数据泄露的风险。它还确保用户不依赖单个政府机构来管理他们的凭据。

Australia’s digital ID system is a step in the right direction, offering greater convenience and security for everyday transactions. However, the government must address the gaps in its current framework to ensure this system also balances Australians’ privacy and security.

澳大利亚的数字身份系统是朝着正确方向迈出的一步，为日常交易提供了更大的便利和安全。然而，政府必须解决当前框架中的缺陷，以确保该系统也能平衡澳大利亚人的隐私和安全。