User Centred Design of Financial Services Project
News Edition 09, October 10, 2005
User Centred Design (UCD) of Financial Services Project News is
a fortnightly e-newsletter that keeps you in touch with what is
happening in the Banking and E-Commerce streams of the Smart Internet
Technology CRC project on Security, Trust, Identity and Privacy.
The aim is to stimulate interaction with our wider project team,
industry partners and researchers involved with the use and design
of financial services.
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
In this issue:
1. Margaret Jackson and Julian Ligertwood – Identity Cards
2. DRM – Abstracts of accepted papers
3. Upcoming conferences
4. Call for papers
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
*********************************************************************************
1. Identity Cards: Is there a need in Australia?
*********************************************************************************
Identity management has become a major problem in the electronic
and wireless environments, particularly when the Internet is involved.
The buying and selling of goods and services over the Internet is
now a part of our society, and yet such electronic commerce is conducted
often without either side of the transaction being confident about
the identity of the other party. Criminal fraud involving the adoption
of a false identity or the assumption of someone else’s identity
is a growing problem for vendors, credit providers and for individuals.
Identifying the risks
---------------------------
Different aspects of a person’s identity are at risk. First,
individuals are concerned that parts of their identity represented
by their credit card information are being used by others. This
also places pressure on vendors, who accept false information about
identity or about credit card ownership, and on banks who must handle
the transfer of funds based on fake identity.
Second, there are risks in that the collection of different pieces
of personal information about an individual can be consolidated
in databases to form a whole picture of an individual, to be used
for direct marketing, for fraud and for credit and related` checking.
Third, the final aspect of a person’s identity at risk is
when the identity is assumed by terrorists or by criminals. It is
this aspect of identity that has concerned governments around the
world.
The concern of governments about identity, however, focuses primarily
on security issues and on money laundering. On 11 October, 2005,
the Federal Government announced the introduction of stricter anti-money-laundering
laws. These new laws, which will be released in the form of an exposure
draft in November, will apply initially to the financial and gambling
sectors and bullion dealers. These industry sectors will be required,
amongst a number of responsibilities, to verify the identity of
customers.
Identity Cards
-------------------
Linked to the concerns over money laundering and security and the
need for verification of identity, governments have started again
to consider the need for national identity cards and for the introduction
of greater security measures within passports and other documents
used for identification.
The possibility of a national identity card (ID) being introduced
in Australia was first raised on 14th July 2005 when some comments
were made by Queensland Premier Peter Beattie on ABC radio to the
effect that an ID card would be in the interests of national security.
When asked about Beattie’s comments, Mr Howard did not support
them but his own comments were vague and he was reported in the
press as not ruling it out altogether in the government’s
review of security arrangements. On 16th July, while in Washington,
Howard was more supportive of the idea of an ID card and the Attorney-General
subsequently stated that the government will be examining the possibility
of an ID card. On 29 September, the Special Minister of State and
the Minister for Human Services announced that a project was underway
to introduce a smartcard to cover health and concession payments
through Centrelink. This card could also be used to deal with identity
theft and fraud activities.
Given the lack of information about how such a card scheme could
work, it is not clear whether the introduction of a national identity
card could solve the problems of identity theft, identity fraud,
and anti-money-laundering. It is worthwhile, however, to examine
what is happening the United Kingdom.
Identity Card Bill UK
------------------------------
In April 2004, a draft Identity Cards Bill was published proposing
the introduction of a UK identity card scheme coupled with a national
database. Most of the detail was left to future unspecified regulations.
There was sufficient opposition to the Bill to ensure that it ran
out of time in the run up to the General Election on 5 May 2005.
The draft Identity Cards Bill was reintroduced into Parliament
on 17 May 2005 and the Government narrowly won a second reading
of it in the House of Commons on 28 June, after the Home Secretary
agreed to put a cap on the cost of obtaining the card. There was
opposition to the Bill from within the Labour Party, the Tories
and the Nationals. The Bill has now moved onto the committee stage
where it will be examined in detail, and then onto a vote in the
House of Lords.
Under the draft ID Cards Bill, the cards are intended to store
basic personal information (such as name, age, nationality, unique
identifier), a digital photo, and a biometric which could include
facial recognition, iris scans or fingerprints.
The Government proposes linking the cards to a national secure
database on which further personal information may be stored and
to which many services, both public and private, would have limited
access. The database will be a source of information for the Security
Services, Government Communications Headquarters, the police, any
other organization involved in the prevention or detection of crime,
the collection of tax and any other organization given the power
to gain access to the personal data.
Government Objectives’
-----------------------------
There will be legislation setting up the ‘national identity
register’, empowering the Secretary of State to enforce registration,
setting up a requirement for individuals to notify the register
of relevant changes to their circumstances (including loss or damage
of the ID card), creating a family of ID cards based on designated
existing and new documents, empowering the Secretary of State to
authorise various agencies to access the database with appropriate
privacy safeguards, establishing new offences for the possession
of false identity documents, enabling a date when it would be compulsory
to register and be issued with a card (but not compulsory to carry
a card), setting out civil and criminal penalties to make the scheme
effective, setting out what information can be stored on the database
to prevent ‘function creep’, and empowering the Secretary
of State to change almost all elements of the scheme by Order, subject
to parliamentary approval.
One of the main attractions of the ID card for the Government appears
to be that it could help to improve the efficiency of the public
service, particularly in accessing personal information of citizens.
The Office of National Statistics is also planning additional uses
for the ID card database that are unconnected with terrorism, crime,
anti-money-laundering, identity fraud and immigration.
The UK Government is introducing an ID card and database which
is intended to meet a variety of needs, including combating crime
and identity theft, but has yet to spell out clearly how they will
work. It is to be hoped that the approach taken in Australia by
the Federal Government, if it decides that an ID card is to be introduced,
will be more cautious and will not attempt to use the card to solve
a range of identity management and verification issues. Whether
the card is born as a national “Australia Card” or whether
it is born under other auspices such as a health care card, it is
the centralised, multi purpose and cross institutional nature of
such a card that raises serious privacy, security, and trust issues.
*********************************************************************************
2. DRM – Abstracts of accepted papers
********************************************************************************
DRMs, Fair Use and Users’ Experience of Sharing Music
By Margaret Jackson, Supriya Singh, Jenny Waycott and Jenine Beekhuyzen
DRM 2005, the fifth ACM Workshop on Digital Rights Management, Alexandria
V.A. USA - November 7, 2005.
This paper reports on the different copyright regimes in the United
States and Australia. It describes some of the current DRM systems.
Against this background, the paper draws on a qualitative study
to explore Australian users’ experience of listening to and
sharing music. A design for a good DRM has to take into account
the schism between the copyright regimes and users’ sharing
behavior.
----------------------------------------------------------------------------------------------------
Downloading vs Purchase: Music Industry vs. Consumers
By Supriya Singh, Margaret Jackson, Jenine Beekhuyzen and Jenny
Waycott
DRMTICS 2005, Sydney.
In this paper we draw on a qualitative study of music consumers
in Australia to show there is not a clear dichotomy between downloading
and purchase of music. Most often downloading is a way of exploring
new music, which leads to purchase. From the users’ perspective
the activity of downloading is transformed to the activity of accessing
and exploring music. DRM systems and the industry could more fruitfully
focus on satisfying this basic aspect of the listening experience
in order to work together with their customers.
----------------------------------------------------------------------------------------------------
Digital Rights Management and consumers’ use of music: An
activity theory perspective
by Jenny Waycott, Supriya Singh, Margaret Jackson, and Jenine Beekhuyzen
Second QualIT Conference, Brisbane, November 24-25.
In this paper, we focus on the context of music access and use,
and the increasingly prominent role that technologies such as the
Internet play in music consumers’ activities. We explore the
contradictions between DRM technologies and music consumers’
behaviours, and describe how our study data will be further analysed
using an activity theory lens. This research is being carried out
as part of a wider investigation into media use and digital technologies
that aims to develop guidelines for the user-centred design of new
digital rights management systems (DRMs). This paper contributes
to developing a better understanding of consumers’ music listening
behaviours and beliefs regarding the use of the Internet as a medium
for accessing music.
*********************************************************************************
3. Upcoming conferences
*********************************************************************************
QualIT 2005,
hosted by Griffith University in Brisbane, Australia on 23-25 November.
For details, go to http://www.cit.gu.edu.au/conferences/QualIT2005/
QualIT2005 – Challenges for Qualitative Research, will attract
qualitative researchers concerned with the analysis, design, development,
application, usability and evaluation of information systems and
information technologies.
----------------------------------------------------------------------------------------------------------------
Symposium On Usable Privacy and Security
http://cups.cs.cmu.edu/soups/2005/program.html
This symposium will bring together an interdisciplinary group of
researchers and practitioners in human computer interaction, security,
and privacy. The program will feature technical papers, workshops
and tutorials, a poster session, panels and invited talks, and discussion
sessions.
*********************************************************************************
4. Call for Papers
*********************************************************************************
Designing Information and Organizations with a Positive Lens
A Special Issue of Information and Organization
http://weatherhead.case.edu/design/positivedesignCFP-IandO.pdf
The special issue provides space for compelling studies and provocative
ideas that approach information and organization with a positive
lens and are theoretically grounded.
------------------------------------------------------------------------------------------------------------------
The Journal of Information, Information Technology, and Organizations
(JIITO) has just been launched.
JIITO is an academically peer reviewed journal. All submissions
are blind refereed by three or more peers. It is also available
online at http://JIITO.org,
without charge.
|