'Provisional Agreement' Reached on eID, a 'Digital Identity for All Europeans' (europa.eu) 194
This week the Council of the European Union made an announcement. "With a view to ensuring a trusted and secure digital identity for all Europeans, the Council presidency and European Parliament representatives reached today a provisional agreement on a new framework for a European digital identity (eID)."
The proposed new framework would also require member states "to issue a digital wallet under a notified eID scheme, built on common technical standards, following compulsory certification."
"With the approval of the European digital identity regulation, we are taking a fundamental step so that citizens can have a unique and secure European digital identity," said Nadia Calviao, acting Spanish first vice-president and minister for economy and digitalisation.
From the announcement: The revised regulation constitutes a clear paradigm shift for digital identity in Europe aiming to ensure universal access for people and businesses to secure and trustworthy electronic identification and authentication. Under the new law, member states will offer citizens and businesses digital wallets that will be able to link their national digital identities with proof of other personal attributes (e.g., driving licence, diplomas, bank account). Citizens will be able to prove their identity and share electronic documents from their digital wallets with a click of a button on their mobile phone.
The new European digital identity wallets will enable all Europeans to access online services with their national digital identification, which will be recognised throughout Europe, without having to use private identification methods or unnecessarily sharing personal data. User control ensures that only information that needs to be shared will be shared...
The revised law clarifies the scope of the qualified web authentication certificates (QWACs), which ensures that users can verify who is behind a website, while preserving the current well-established industry security rules and standards.
"When finalised, the text will be submitted to the member states' representatives (Coreper) for endorsement. Subject to a legal/linguistic review, the revised regulation will then need to be formally adopted by the Parliament and the Council before it can be published in the EU's Official Journal and enter into force."
The proposed new framework would also require member states "to issue a digital wallet under a notified eID scheme, built on common technical standards, following compulsory certification."
"With the approval of the European digital identity regulation, we are taking a fundamental step so that citizens can have a unique and secure European digital identity," said Nadia Calviao, acting Spanish first vice-president and minister for economy and digitalisation.
From the announcement: The revised regulation constitutes a clear paradigm shift for digital identity in Europe aiming to ensure universal access for people and businesses to secure and trustworthy electronic identification and authentication. Under the new law, member states will offer citizens and businesses digital wallets that will be able to link their national digital identities with proof of other personal attributes (e.g., driving licence, diplomas, bank account). Citizens will be able to prove their identity and share electronic documents from their digital wallets with a click of a button on their mobile phone.
The new European digital identity wallets will enable all Europeans to access online services with their national digital identification, which will be recognised throughout Europe, without having to use private identification methods or unnecessarily sharing personal data. User control ensures that only information that needs to be shared will be shared...
The revised law clarifies the scope of the qualified web authentication certificates (QWACs), which ensures that users can verify who is behind a website, while preserving the current well-established industry security rules and standards.
"When finalised, the text will be submitted to the member states' representatives (Coreper) for endorsement. Subject to a legal/linguistic review, the revised regulation will then need to be formally adopted by the Parliament and the Council before it can be published in the EU's Official Journal and enter into force."
Stop! Show your papers! (Score:5, Insightful)
Re:Stop! Show your papers! (Score:5, Informative)
Anonymity was never an option in most cases: if you want to access some services you need to identify yourself first.
Most European countries already have identity documents: this is merely the digital version of them which would allow for accessing services online in a consistent manner.
Re: (Score:3)
They mean surveillance.
Re:Stop! Show your papers! (Score:5, Insightful)
Re:Stop! Show your papers! (Score:5, Insightful)
On the other hand, the EU has consistently defended personal liberty and privacy. Germany, for example, has some of the strictest rules in the world.
Re: (Score:2)
In some senses, from corporations. Sure. Are Germans' activity private from the government?
Corporations want to gather personal information to sell you stuff. Governments want information to control you.
Re: (Score:3)
Re: (Score:3)
What, that the government would make a digital version of the physical ID they already give you?
Re: (Score:3)
Like I stated in another post. You have a real persecution fetish.
Re: (Score:2)
He's not being willfully ignorant. He is a huge pro-big-government guy. Government good, more government better.
Very simple.
Re: (Score:2)
After the OPM breach all I got was a letter saying I could get a year of free ID monitoring.
Not even an "oops, sorry!"
Gosh, thanks guys! Made me feel so safe and taken care of.
Re: (Score:3)
Anonymity was never an option in most cases: if you want to access some services you need to identify yourself first.
In the U.S. you need to show [voanews.com] ID [time.com] to buy [cnn.com] groceries [huffpost.com].
Re:Stop! Show your papers! (Score:5, Insightful)
God help you, there is a chance that nut-job could be back, with even more nonsense.
I'll pray for you.
Re: (Score:2)
That's just Trump babbling.
Re:Stop! Show your papers! (Score:5, Informative)
That's just Trump babbling.
This is him babbling [imgur.com]. His comment about needing ID to buy groceries is his senility kicking in.
Re: (Score:2)
The closest I can come to needing ID to buy groceries is if for whatever reason the store wants to confirm it's not a stolen credit card. Last time I had to show ID to verify I was actually the owner of the card was pre-pandemic. I think the stores dropped that idea HARD when literally everyone was asked to please pay with card instead of cash if at all possible ...
Re: (Score:2)
That's funny because as someone that works in a fucking grocery store, that's 100% not true. I buy groceries nearly every work day and NEVER do I show ID. I even pay cash on some of these purchases with nothing else identifying me to the system.
Re: (Score:2)
I could buy supplies to make beer without an id and craft my own beer!
The vast majority of products in a grocery store don't have any ID restrictions attached to them. So to say you need ID to shop at a grocery store is really far fetched. Yes, we do sell controlled substances but it's a small portion of our business.
Also, beer isn't "groceries", its alcohol and totally an optional purchase that many people do completely without.
Nothing wrong with beer of course but let's not pretend beer is a banana or bre
Re: (Score:3)
They are not checking ID when you buy a six pack of beer?
Or is beer and such not allowed in grocery stores where you live?
Wait... are they REALLY checking ID when you buy beer in the U.S.? Even if the person buying it is clearly over the age limit?
Re: (Score:2)
Re: (Score:3)
Re: (Score:2)
Your tax guy can just grab money from your account?
Holy fuck!
The IRS said I owed $150k. By the time we were done and their bad numbers were corrected they sent me a check for $94k.
Fuck them just reaching in and grabbing 150k when they owe me almost 100k. Or reaching in at any time for any reason.
Re: (Score:3)
Re: (Score:2, Informative)
While I have a bit concern in power concentration to EU, what "anonymity" you want to the government? If you want anonymity of your money, the solution is NOT refusal to link your bank account to that eID. Your bank account is not anonymous since the beginning. All banks are required to collect enough personal private data so that government can catch you when that bank account involves crime.
If we want better anonymity in what we buy and where we go in daily life, we should either (1) make sure everythi
Re: (Score:2)
There is also a separation between anonymity and privacy. In theory, in a government that knows what they are doing, they may know a lot about Alice's banking, but Mallory working for Lower Elbonia's intelligence corps is not going to be able to find out anything about what Alice likes buying, and Mallory won't know what Alice likes a certain (legal, but odd) kink, which she could be fired from her job for if it was made public.
However, because this often isn't the case, where if the government knows somet
Re:Stop! Show your papers! (Score:5, Informative)
why on earth would expect or even want anonymity when transacting with the administration?
e.g. (quote from https://commission.europa.eu/s... [europa.eu]):
public services such as requesting birth certificates, medical certificates, reporting a change of address
opening a bank account
filing tax returns
applying for a university, at home or in another Member State
storing a medical prescription that can be used anywhere in Europe
proving your age
renting a car using a digital driving licence
checking in to a hotel
well, if this auth system were mandatory for any business or activity online you would have a point, but it just isn't. for that they would have to 1) pass an explicit law and ofc 2) get every single service (even your shady dealer) to comply. the existence of a common id would be indeed a prerequisite for that, but both are highly unlikely, .
Re: (Score:2)
Why is "checking in to a hotel" transacting with the administration?
Re: (Score:2)
Because you might wreck the place. Have you met any rock stars?
Re: (Score:3)
Why is "checking in to a hotel" transacting with the administration?
Because the administration would be able to identify you through an online service and would allow for that identification to happen in an authoritative and standardized way.
In case you don't realize it, "contactless check-in" is actually a thing nowadays.
Re: (Score:2)
Contactless check in? Sounds horrible. How am I getting a free upgrade or extra services by checking in through a computer?
Hell, even small stuff is great. After an airline scheduling fuckup caused a missed connection I showed at a convention 8 hours late and was a wreck. No idea where my luggage was and needed to clean up. The front desk gave me a pile of shampoo, soap, tooth paste, tooth brush, comb, etc just for asking. Try that with a computer screen or a card reader.
Re: (Score:2)
Hotels already have to report the name of their guests to the administration, at least for the non-nationals. I guess it has to do with immigration regulations (so they can check you do not overpass your visa days). Have you ever stayed at a hotel where you did not have to give your name?
Re: (Score:3)
In some countries it has to do with immigration (e.g. in the UK hoteliers have to maintain a register of guests except those with British or Irish nationality). In other countries, AIUI, it was introduced to make it harder for criminals on the run to remain undetected.
Re: (Score:2)
it is in most of the world afaik. where have you checked in without supplying an id or passport?
Re: (Score:2)
well, if this auth system were mandatory for any business or activity online you would have a point, but it just isn't.
Yet.
Re: (Score:3)
Re: (Score:2)
You have five extra words at the end of that sentence.
Re: (Score:2)
Why would there be more identity checks than there is currently?
Re: (Score:2)
Re: (Score:2)
OK but my question was actually why converting national schemes to this scheme would make that more likely.
Mandated ID for social networks (Score:4, Informative)
How long until those IDs are mandated to log in onto social networks?
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Who are these people? Genuine question.
Re: (Score:2)
Re: (Score:2)
Oh come on you can't forget about Soros!
Re: (Score:2)
Re: (Score:2)
You've just waved a finger at WEF & the UN. That's your entire argument so far.
Do you have anything substantial?
Re:Mandated ID for social networks (Score:5, Insightful)
These huge conspiracies fall apart when you ask some basic questions
1) Who is doing it?
2) Why are they doing it?
3) Who gets to benefit?
Re: Mandated ID for social networks (Score:2)
1. Powerful billionaires.
2. So they get richer and more powerful.
3. They do.
Those answers aren't all that complex. Just because there are stupid shitty conspiracy theories about the rich and powerful doesn't mean the rich and powerful are a benign group.
Re: (Score:3)
What limits does GDPR place on governments?
When it was new I read through it, don't recall anything like that.
GDPR also concerns MOST of the public sector. I believe the law enforcement is the only exception, but there is a separate directive to govern that: https://eur-lex.europa.eu/lega... [europa.eu]
Similar approach, but of course allowing exchange of information when investigating criminal cases.
A quote from the beginning: "(1) The protection of natural persons in relation to the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union (‘the Cha
Re: (Score:2)
How long until those IDs are mandated to log in onto social networks?
Yes, because the most dangerous thing about THE form of identification being hacked, stolen, or destroyed, is the ability to access your Instafarce account.
At least we know what the critical priority will be for Gen LookAtMe.
Re: (Score:2)
Re: (Score:2)
Err, citizenship is guaranteed by EU treaty.
Re: (Score:2)
Re: (Score:2)
Do you even live in the EU?
Re: (Score:2)
Re: (Score:3)
European is NOT a race. You are probably thinking at Europoid, which is an alternate name for the Caucasian race.
Re: (Score:2)
Since you can just pretend to be from the US, you can't be banned.
But why would the EU co-operate with democracy-damaging US corporations?
Re: (Score:2)
Re: (Score:2)
One might be able to take you a little bit more seriously if you knew the expression is to 'toe' the line, as in standing right up against it rather than pulling it somewhere.
Re: (Score:2)
Re: (Score:2)
Maybe not, but it is a serious reason to not take you seriously as you appear to be regurgitating sound bites without an actual understanding of what you're saying.
Re: (Score:2)
not "mandated ID for social networks" (Score:3, Informative)
Must be funny for those where Napoleon didn't visit, but the rest of us all have ID's since, just like we use the metric system. Now the digital ID is just being standardized.
For social networks? Nope, that's not how it works. Citizens use it for any and all communication with official instances.
Tax papers? Long since I've seen one. Medical documents? Previous and current residencies and real estate, criminal records (or better, lack thereof;) if the new job demands a clean sheet, you name it. It's all ther
Re: (Score:3)
All the ID card schemes in existence are left over from WW2. Whilst the EU at least has the strongest privacy and other rights in the world, with the far right's prominence, it is far from guaranteed that this data won't be abused. It's not impossible the left will abuse it too.
I haven't looked at this scheme yet and will campaign for improvements. The devil is in the detail of course. Nobody should have access to this data except on a strictly limited basis where needed. The line about user control is
Re: not "mandated ID for social networks" (Score:3)
Govt and it institutions has such data on is anyway. With eID, one gets to access it and has free access. Anytime, from anywhere.
Some muricans here think just because their data is handed out to the highest bidder in DC, corporate and commercial black boxes they never get to see, that it doesn't exist. They better think again.
Also, I'd pick my ID that I can block, revoke and change like any bank card over a hardcoded [p]Social Serial Number[/pun] any time. Any time.
Re: (Score:2)
Re: (Score:2)
How long until those IDs are mandated to log in onto social networks?
How long until social networks *prefer* you to "login with eid"?
If apple created an app for this, people would line up to try it.
Re: (Score:2)
How long until social networks *prefer* you to "login with eid"?
If apple created an app for this, people would line up to try it.
What's stopping social networks from requiring the number from the physical ID card people already own? This line of thought is so dumb.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
You sound like conservative talk radio in the 1990s. Nothing they ever said came to fruition. The closest they came to being right was saying how bad a company Monsanto was.
Re: (Score:2)
Re: (Score:2)
You've tried your best to convince them Nom. They seem to think that history couldn't ever repeat itself and that some future dictator could never gain power ever again.
It's the same problem here in the US. Democrats want to essentially ban gun ownership, thinking that there is no possible way we may need those guns when a future government goes full on authoritarian on us. You would think after seeing someone like Trump actually win and he could win again, would be enough to wake them up to the realities o
Re: (Score:2)
Re: (Score:3)
well, as soon as those social networks decide they want to see their user totals plummet ...
note i'm not defending or endorsing this particular initiative, but you folks could really take it a bit easier with the tinfoil ...
Re: (Score:2)
Re: (Score:3, Interesting)
Terrible reasoning. What is stopping social networks from mandating the number from the physical ID card you already own?
I must ask, do you give money to the NRA? All guns owners are scared to death of some national firearms registry. So they pay money to an organization which is a glorified registry of gun owners.
Re: (Score:2)
Re: (Score:2)
Do you really think it's not possible for a future law, think of the children!, to be passed requiring all social media to only allow people to log in if they use their official ID? Seems like a natural progression to me.
Re: (Score:2)
Why would the EU let US corporations that threaten the EU's safety have that data?
Facebook caused Brexit.
X is run by an insecure MAGA-ist nut job and is literally actively promoting hatred of Jews today. It's listed as a trending topic FFS.
Re: (Score:2)
You and others like you, continue to push for conditions that will allow cyberattacks, political manipulation, and insane social media to continue.
Re: (Score:2)
In some countries, one has to type in their ID in order to log onto Internet cafes and social networks already before access is granted.
This is a great idea (Score:2)
Also a brain chip that can be used to control people's movements. In case they do something illegal, or untowards (to the government, not each other).
Not Sure (Score:2)
tattoo in progress https://www.youtube.com/watch?... [youtube.com]
I'm sorry your social credit is now negative (Score:2)
Kindly submit your body to the suicide booth and do society a favor.
What is the European Economic Community (Score:2)
Re: (Score:2)
The EU isn't a common market. It's part of a common market called The Single Market, which also includes non-EU countries like Norway and Iceland.
The EU is a level of multinational Govt with its power limited by treaty. Outside of that scope, all countries can veto measures on an individual basis.
And the EEC hasn't existed since 1993.
Re: (Score:2)
It can simplify cross-border sales of products and services where you have to prove your identity, such as prescription medicines and tobacco. you presently can't do that because websites don't implement an ID verification that would work for all the member states.
But I don't think it's the main motive. The main reason is "harmonization". Each time the occasion appears to change a system (e.g. ID systems), they do it EU-level instead of national level. When I was young, identity cards where a piece of brown
Actually something similar exists. (Score:2)
You could use SPID [spid.gov.it] That normally uses an email/password and a token or sms confirmation. An older system, that could also be used to digital sign documents it's the CNS [agid.gov.it] that require for 2FA a smart card, isn't widely used because it requires a smart card reader and it's difficult to use with smartphones. A new version stat uses NFC it's the CIE that's embedded with newer plastic ID cards.
So at the end i
About fucking time (Score:2)
If you have a VETTED digital cert from the government: 1) it does not mean that the dark web will go away.
2) it does not mean that all social media sites will require that you use them (though MOST likely will).
3) if a social media site requires that you use these, it does not mean that they will require you to have only 1 logon (few will likely do that).
4) if a social media site requires that you use
Re: (Score:3)
with a click of a button on their mobile phone (Score:3)
I oppose this
What about desktop computer users?
Will we be prevented from participating?
Re: (Score:2)
Some notes and insight on eIDAS 2 (Score:2)
The new regulation is called eIDAS 2 in brief.
Google "eidas 2" for background information and opinion articles.
Relevant Wiki page: https://en.wikipedia.org/wiki/... [wikipedia.org]
I assume most Slashdot readers are from US.
Some notes for the non-EU audience.
1) EU had eIDAS 2 in 2014. It was a complete failure, unable to fulfil any of its goals to any degree.
2) EU is not a country or government. The laws it creates are mostly a framework that the real Europe - member states and companies - should implement. Amend the local,
Re: (Score:2)
This is what is needed to SLOW DOWN cyberattacks, social attacks, etc. Just because you get a DC does not mean that you must use it everywhere.
But, I suspect that you KNOW that you will lose your ability to troll, even though you would still be able to post AC, etc.
Re: (Score:2)
I have been working on Internet protocols/language patches since late 80s. This is DESPERATELY NEEDED, as long as it is a vetted ID, which is then served by non-government groups.
We need this to kill off cyberattacks and improve social media. The amount of spam, virus from e-mail, text, etc will never stop until we have IDs available so that we KNOW who we are getting things from.
Re: (Score:2)
Re: (Score:2)
We have valid old fashioned IDs and yet we still have identity theft. It was even renamed from bank fraud to ensure that the consumer pays the price and that banks are no longer held responsible. It even created a credit industry to siphon even more money from the individual.
Until there are laws protecting people's privacy and what information can be accessed/collected by whom and when, this problem won't be solved.
Re: (Score:2)
I don't quite grasp your success criteria for the Microsoft vs. Google fights. I reckon you mean Microsoft doesn't control the PC because Linux exists, but surely other mail clients and servers than GMail also exist?