User Centred Design of Financial Services Project News Volume 4 (11), August 31, 2006
User Centred Design (UCD) of Financial Services Project News is a fortnightly e-newsletter that keeps you in touch with what is happening in the Banking and E-Commerce streams of the Smart Internet Technology CRC project on Security, Trust, Identity and Privacy. The aim is to stimulate interaction with our wider project team, industry partners and researchers involved with the use and design of financial services.
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
In this issue:
1. The Health and Social Services Access Card
2. Team News
3. Readings
4. Upcoming conferences & call for papers
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
*********************************************************************************
1. The Health and Social Services Access Card
*********************************************************************************
In April the Federal Government revealed plans to introduce a health and social services access card scheme to be phased in from 2008. The Government believes that the access card will make it easier to do business with the Government, increase its capacity to provide online services and enhance emergency services in areas such as health care. The Government says that the card will reduce the number of cards required to access benefits, provide a one off registration process which will improve processing efficiency, eliminate the need to contact several agencies to update information, provide a more efficient method of replacing lost or stolen cards, and reduce identity fraud.
The Government has stated that the Access Card will be a plastic card containing an electronic chip. On the front of the card will be the cardholder's name and photograph, on the back will be the cardholder's reformatted Medicare number and digital signature. The chip will contain data such as addresses and names of dependants in addition to optional information relevant to a medical emergency.
Registration for the card will be facilitated by the Secure Customer Registration Service (SCRS). The database will contain:
- Information in each card
- Address,
- Date of birth,
- Documentation presented during registration,
- Dependant information,
- Concession status, and
- a flag for each of the agencies that the customer has an existing relationship with.
The Government is adamant that the SCRS will not contain any agency specific data, nor will it provide agencies with access to other agencies' data.
Many privacy groups believe that the current proposal for the Access Card already has the features of a national identity card. For example, the card will be required by almost all Australians. There will also be a central database used to establish identity as well as to facilitate access to government services. Another concern is that the purposes for which the card will be used are vulnerable to function creep. There are apprehension over whether the current data protection laws are strong enough to provide adequate privacy protection against the operation of the Access card. There are also uncertainties about the practical operation of the scheme. For example, what would be an appropriate legislative framework? Would the technologies used provide adequate data security? How would people be registered and issued with a card?
The Access Card Consumer and Privacy Taskforce and several privacy groups have emphasised the importance of establishing the need for an Access Card and articulating the purposes for which it will be used so that there can be an appropriate evaluation of exactly how the scheme would address those objectives.
Julian Ligertwood
Julian.ligertwood@rmit.edu.au
*********************************************************************************
2. Team News *********************************************************************************
Supriya Singh and Anuja Cabraal presented at an RMIT Business Research Intern Seminar on the 7 th of August. The presentation was based on our qualitative study of banking, trust, privacy, identity and security The research shows it is not uncommon for married couples in Australia to access each other's individual Internet and phone banking accounts through shared user names and PINs. Our work shows the importance of empirical sociological user studies, so that security design can be built on social practice.
--------------------------------------------------------------------------------
Supriya Singh will be visiting the Carnegie Mellon University Usable Privacy and Security Lab. She will also be giving a seminar on Placing the Social and Cross-Cultural at the Centre of Security Design. In the seminar she will report on the Banking study. She will propose we build on the approaches of user-centered security, but see the user in his or her social and cultural context. This will mean that security designers would start with an understanding of social and cultural practice, and design for the shared use of access codes and the public use of communications devices. Social and cultural practice centered security design will enable the Internet to be used in ways that are effective for individuals and their communities.
*********************************************************************************
3. Readings
*********************************************************************************
Information, Communication & Society Volume 8, Number 4 / December 2005
“Socioeconomic implications of broadband services: Information economy in Korea” Dal Yong Jin
“ This article explores key aspects of broadband services in Korea and its implications for the information economy. It examines why and how Korea has developed broadband service by examining several institutional factors. It also analyses whether government ICT policy frameworks have contributed to economic and social development. Then, it investigates how the government neoliberal economic policies have influenced the transnationalization of the broadband service market and the impact on the information economy.”
--------------------------------------------------------------------------------
Information, Communication & Society , Volume 9, Number 1 / February 2006
“Making mammograms mobile Suggestions for a sociology of data mobility” Catelijne Coopmans
“ By focusing on the ways in which mammograms are re-presented as ‘mobile data', and on how their movement is practically organized in the context of this project, the paper indicates a new direction for the sociological study of data mobility: one that understands the relationship between ‘data' and ‘mobility' as accomplished and emerging rather than fixed and inherent.”
*********************************************************************************
4. Upcoming conferences & call for papers
*********************************************************************************
Call for Papers
The International Workshop on Security and Privacy in Mobile Multimedia and Mobile Learning (SPM3L-06)
4-6 December 2006, Yogyakarta, Indonesia
”This workshop addresses current research on methods, concepts, models and technologies for security and privacy issues with special focus on mobile computing and multimedia. Its goal is to bring together experts from both academia and industry to exchange ideas and discuss future challenges on these issues.”
Website: http://www.securityresearch.at/SPM3L06/
----------------------------------------------------------------------
Call for Papers
First International Workshop on Broadband and Wireless Computing, Communication and Applications (BWCCA-2006)
“ The aim of this workshop is to present the innovative researches, and technologies as well as developments related to broadband networking, mobile networking and wireless communications.”
Website: http://www.csc.lsu.edu/~durresi/BWCCA-2006/
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><>< |