search

MrChrisJ / World-Citizenship

Globally orientated citizenship with private passport services using available cryptographic tools
Creative Commons Zero v1.0 Universal
402 stars 72 forks source link

Tamper Proof ID #10

Closed dharmocracy closed 10 years ago

dharmocracy commented 10 years ago

Before issuing the ID for anybody.. can we do a test to ensure they are hack proof and not open to forgery. I have a few lads who can help on that front. (the forgery side not the hacking)

MrChrisJ commented 10 years ago

The killer app in this design is that you cannot tamper with the ID without it violating the hash that was originally published in the blockchain at the party.

You sign the ID Image at the party with your PGP Key. For extra security you hash it as well. As long as you keep a copy of the original files you will always be able to prove your ID card existed in that exact state at that time.

patcon commented 10 years ago

Is this good to close out, @dharmocracy? As I understand it, so long as you know the data on your card, have the original profile photo, and your secured private PGP key, there's nothing to forge, right? The only item with forgery concern would be the private key, which is impossible because crypto :)

ie. holograms and the like are not necessary, since anyone can copy the ID and alter it -- it just won't verify anymore if the alteration affected the important data, rather than pretty pixels

dharmocracy commented 10 years ago

my coding and hacking skills are severely lacking. most forgery is done using simple tech and basic tools. most times forgers are not trying to con or fool people who understand the tech behind it. Case in point.. someone taped their own public QR code over a restaurants public key, Staff did not wait 6 confirmations. Scammer got coins. -- the concept of having some form of digital ID etc that does not belong to Gov is very important. I see any future problem coming when people try to interact with officialdom. In the west this may not be a big concern.. where i am the police can detain you for 84 days while deciding whether to prosecute (lesser offences 48 days). It is a terrible system but that is how it is at the moment. Perhaps watching the implementation will help me understand more. All BTC prosecutions have come when interacting with fiat system... so i will watch for the first dispute with the Blochain ID / Passport when that happens ,, in whatever country. Forgers will attempt to use this tech ... that is what forgers do. I am sure Chris and others will be able to tell if tampering has occurred but if such an ID was presented to me i would need guidance to check authenticity. I presume the average official will be same as me. IF use is intended outwith official gov bureaucracy then no real concerns.

patcon commented 10 years ago

Hm. Ok, thanks. I wasn't thinking big enough. And thanks for the context on your country. It's good to be reminded that I'm from away and my situation might be very different

dharmocracy commented 10 years ago

Patcon .. imagine you are stopped by police. They ask what "this is".. you say passport/ digital passport. You will have a language problem (their english is basic at best).. please come with us. You could be 48 hours detained without charge. ID would be best term... but bribery here is the usual form of detaching yourself from situation... cops don't yet accept BTC kickbacks here but I,m sure they will get around to it eventually lol. (you tech guys keep going.. you are our best hope.. thanx)

MrChrisJ commented 10 years ago

I don't expect the change to take place over night. Acharn is right that this could get people in to trouble in some parts of the world. We have to make this in to a formal Request For Comment or RFC and try it out in low risk areas like Europe and North America first. Perhaps Calais would also be a good place in conjunction with an NGO.