Establishing a Culture of User Centre Design
SIT - Smart Internet Technology CRC
Home
People
Events
Papers
Projects
Newsletters

Contact Us
Subscribe to our newsletter

ANewsletter 10th October 2005

User Centred Design of Financial Services Project News Edition 09, October 10, 2005

User Centred Design (UCD) of Financial Services Project News is a fortnightly e-newsletter that keeps you in touch with what is happening in the Banking and E-Commerce streams of the Smart Internet Technology CRC project on Security, Trust, Identity and Privacy. The aim is to stimulate interaction with our wider project team, industry partners and researchers involved with the use and design of financial services.
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><

In this issue:
1. Margaret Jackson and Julian Ligertwood – Identity Cards
2. DRM – Abstracts of accepted papers
3. Upcoming conferences
4. Call for papers

<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><

*********************************************************************************
1. Identity Cards: Is there a need in Australia?
*********************************************************************************

Identity management has become a major problem in the electronic and wireless environments, particularly when the Internet is involved. The buying and selling of goods and services over the Internet is now a part of our society, and yet such electronic commerce is conducted often without either side of the transaction being confident about the identity of the other party. Criminal fraud involving the adoption of a false identity or the assumption of someone else’s identity is a growing problem for vendors, credit providers and for individuals.

Identifying the risks
---------------------------
Different aspects of a person’s identity are at risk. First, individuals are concerned that parts of their identity represented by their credit card information are being used by others. This also places pressure on vendors, who accept false information about identity or about credit card ownership, and on banks who must handle the transfer of funds based on fake identity.

Second, there are risks in that the collection of different pieces of personal information about an individual can be consolidated in databases to form a whole picture of an individual, to be used for direct marketing, for fraud and for credit and related` checking.

Third, the final aspect of a person’s identity at risk is when the identity is assumed by terrorists or by criminals. It is this aspect of identity that has concerned governments around the world.

The concern of governments about identity, however, focuses primarily on security issues and on money laundering. On 11 October, 2005, the Federal Government announced the introduction of stricter anti-money-laundering laws. These new laws, which will be released in the form of an exposure draft in November, will apply initially to the financial and gambling sectors and bullion dealers. These industry sectors will be required, amongst a number of responsibilities, to verify the identity of customers.

Identity Cards
-------------------
Linked to the concerns over money laundering and security and the need for verification of identity, governments have started again to consider the need for national identity cards and for the introduction of greater security measures within passports and other documents used for identification.

The possibility of a national identity card (ID) being introduced in Australia was first raised on 14th July 2005 when some comments were made by Queensland Premier Peter Beattie on ABC radio to the effect that an ID card would be in the interests of national security. When asked about Beattie’s comments, Mr Howard did not support them but his own comments were vague and he was reported in the press as not ruling it out altogether in the government’s review of security arrangements. On 16th July, while in Washington, Howard was more supportive of the idea of an ID card and the Attorney-General subsequently stated that the government will be examining the possibility of an ID card. On 29 September, the Special Minister of State and the Minister for Human Services announced that a project was underway to introduce a smartcard to cover health and concession payments through Centrelink. This card could also be used to deal with identity theft and fraud activities.

Given the lack of information about how such a card scheme could work, it is not clear whether the introduction of a national identity card could solve the problems of identity theft, identity fraud, and anti-money-laundering. It is worthwhile, however, to examine what is happening the United Kingdom.

Identity Card Bill UK
------------------------------
In April 2004, a draft Identity Cards Bill was published proposing the introduction of a UK identity card scheme coupled with a national database. Most of the detail was left to future unspecified regulations. There was sufficient opposition to the Bill to ensure that it ran out of time in the run up to the General Election on 5 May 2005.

The draft Identity Cards Bill was reintroduced into Parliament on 17 May 2005 and the Government narrowly won a second reading of it in the House of Commons on 28 June, after the Home Secretary agreed to put a cap on the cost of obtaining the card. There was opposition to the Bill from within the Labour Party, the Tories and the Nationals. The Bill has now moved onto the committee stage where it will be examined in detail, and then onto a vote in the House of Lords.

Under the draft ID Cards Bill, the cards are intended to store basic personal information (such as name, age, nationality, unique identifier), a digital photo, and a biometric which could include facial recognition, iris scans or fingerprints.

The Government proposes linking the cards to a national secure database on which further personal information may be stored and to which many services, both public and private, would have limited access. The database will be a source of information for the Security Services, Government Communications Headquarters, the police, any other organization involved in the prevention or detection of crime, the collection of tax and any other organization given the power to gain access to the personal data.

Government Objectives’
-----------------------------
There will be legislation setting up the ‘national identity register’, empowering the Secretary of State to enforce registration, setting up a requirement for individuals to notify the register of relevant changes to their circumstances (including loss or damage of the ID card), creating a family of ID cards based on designated existing and new documents, empowering the Secretary of State to authorise various agencies to access the database with appropriate privacy safeguards, establishing new offences for the possession of false identity documents, enabling a date when it would be compulsory to register and be issued with a card (but not compulsory to carry a card), setting out civil and criminal penalties to make the scheme effective, setting out what information can be stored on the database to prevent ‘function creep’, and empowering the Secretary of State to change almost all elements of the scheme by Order, subject to parliamentary approval.

One of the main attractions of the ID card for the Government appears to be that it could help to improve the efficiency of the public service, particularly in accessing personal information of citizens. The Office of National Statistics is also planning additional uses for the ID card database that are unconnected with terrorism, crime, anti-money-laundering, identity fraud and immigration.

The UK Government is introducing an ID card and database which is intended to meet a variety of needs, including combating crime and identity theft, but has yet to spell out clearly how they will work. It is to be hoped that the approach taken in Australia by the Federal Government, if it decides that an ID card is to be introduced, will be more cautious and will not attempt to use the card to solve a range of identity management and verification issues. Whether the card is born as a national “Australia Card” or whether it is born under other auspices such as a health care card, it is the centralised, multi purpose and cross institutional nature of such a card that raises serious privacy, security, and trust issues.

*********************************************************************************
2. DRM – Abstracts of accepted papers
********************************************************************************

DRMs, Fair Use and Users’ Experience of Sharing Music
By Margaret Jackson, Supriya Singh, Jenny Waycott and Jenine Beekhuyzen
DRM 2005, the fifth ACM Workshop on Digital Rights Management, Alexandria V.A. USA - November 7, 2005.

This paper reports on the different copyright regimes in the United States and Australia. It describes some of the current DRM systems. Against this background, the paper draws on a qualitative study to explore Australian users’ experience of listening to and sharing music. A design for a good DRM has to take into account the schism between the copyright regimes and users’ sharing behavior.
----------------------------------------------------------------------------------------------------

Downloading vs Purchase: Music Industry vs. Consumers
By Supriya Singh, Margaret Jackson, Jenine Beekhuyzen and Jenny Waycott
DRMTICS 2005, Sydney.

In this paper we draw on a qualitative study of music consumers in Australia to show there is not a clear dichotomy between downloading and purchase of music. Most often downloading is a way of exploring new music, which leads to purchase. From the users’ perspective the activity of downloading is transformed to the activity of accessing and exploring music. DRM systems and the industry could more fruitfully focus on satisfying this basic aspect of the listening experience in order to work together with their customers.
----------------------------------------------------------------------------------------------------

Digital Rights Management and consumers’ use of music: An activity theory perspective
by Jenny Waycott, Supriya Singh, Margaret Jackson, and Jenine Beekhuyzen
Second QualIT Conference, Brisbane, November 24-25.

In this paper, we focus on the context of music access and use, and the increasingly prominent role that technologies such as the Internet play in music consumers’ activities. We explore the contradictions between DRM technologies and music consumers’ behaviours, and describe how our study data will be further analysed using an activity theory lens. This research is being carried out as part of a wider investigation into media use and digital technologies that aims to develop guidelines for the user-centred design of new digital rights management systems (DRMs). This paper contributes to developing a better understanding of consumers’ music listening behaviours and beliefs regarding the use of the Internet as a medium for accessing music.

*********************************************************************************
3. Upcoming conferences
*********************************************************************************

QualIT 2005,
hosted by Griffith University in Brisbane, Australia on 23-25 November.
For details, go to http://www.cit.gu.edu.au/conferences/QualIT2005/

QualIT2005 – Challenges for Qualitative Research, will attract qualitative researchers concerned with the analysis, design, development, application, usability and evaluation of information systems and information technologies.
----------------------------------------------------------------------------------------------------------------

Symposium On Usable Privacy and Security
http://cups.cs.cmu.edu/soups/2005/program.html

This symposium will bring together an interdisciplinary group of researchers and practitioners in human computer interaction, security, and privacy. The program will feature technical papers, workshops and tutorials, a poster session, panels and invited talks, and discussion sessions.

*********************************************************************************
4. Call for Papers
*********************************************************************************

Designing Information and Organizations with a Positive Lens
A Special Issue of Information and Organization
http://weatherhead.case.edu/design/positivedesignCFP-IandO.pdf

The special issue provides space for compelling studies and provocative ideas that approach information and organization with a positive lens and are theoretically grounded.
------------------------------------------------------------------------------------------------------------------

The Journal of Information, Information Technology, and Organizations (JIITO) has just been launched.

JIITO is an academically peer reviewed journal. All submissions are blind refereed by three or more peers. It is also available online at http://JIITO.org, without charge.