MIT Solve

Basic Information

Solution Name

IDP :an ID system that respect people's Privacy

Tagline:

Wherever you live, we will provide you with an ID card that respects your privacy

Pitch:

In developing countries, an estimated 1 billion people lack an ID. The problem in these countries lies in the following points:

- A large number of people in the rural and poor area are illiterate.

- Lack of infrastructure in roads and communications.

- Lack of minimum privacy in the current system.

We propose the use of Mobile Registration Centres (MRCs) and Local Registration Centres (LRCs) which will be distributed in a way that covers all target area. IDP system will use Delay tolerant networks (DTNs) for communication for between registration centers and the central database.

DTN is a wireless network does not require the sender and recipient to be connected at the same point of time. This adds flexibility for IDP system, so IDP registration centers and IDP central database doesn't need to be connected at the same point in time. DTN employ any available transportation such as a car and a wireless connection to transfer encrypted data. DTNs effective and low-cost technology that can provide the required connectivity.

By establishing registration centers in villages and rural area will encourage rural community leaders to get their ID. The social influence of community leaders will encourage the rest of the community to get their ID.

The IDP includes a screen reader in its design. Screen reader responsible for reading screen data to the illiterate people during the registration process.

Privacy is a fundamental human right recognized in the UN Declaration of Human Rights, therefore, Privacy was a main concern in our design. To protect people privacy, IDP takes the following steps:-

Our proposed system uses the Finger Vien as biometric data. instead of other biometrics such as facial and iris which could break people privacy without their permission. It easy to capture facial/ear/iris biometric without people consent.

IDP system use user biometric for data authorization. While IDP uses the biometric to grant access to user data, the biometric information never transmitted over the net, instead, IDP system locally generate a passcode key from the biometric data and other information to create one time passcode to grant permission for specific service.

IDP system enables people in villages and rural areas to apply for any government service by using government local verification points where people need to go to present their ID and their biometric to issue a valid application form which includes an encrypted QR code. The application form valid only for the required service one time only.

IDP Card will include only name, picture, a random number and expire date. The card does not include any information about your address or religion to avoid any discrimination may arise in one stage. The card will not reveal your age or your marital status.

IDP cards will have two colors, one for adult and one for children but all have same design and should have tactile markings to help blind people identify them.

Solution location:

Tripoli, Libya

Solution's stage of development:

Idea

About Your Solution

What makes the solution innovative:

The Innovation points are:-

The use of Delay Tolerant Networks for low connectivity area. It’s an effective and cost-efficient way to extend registration ecosystem to include all areas.

IDP uses one-time passcode approach, i.e for every time the need to access user data, IDP requires user consent. This has been achieved by use 2FA authentication system includes biometric information. While the authentication process uses biometric information, the biometric information never transmitted over the net, instead, IDP system locally generates a passcode key from the biometric data, time and other information to grant permission for specific service for one time only.

How the solution demonstrates 'privacy by design':

To protect people privacy, IDP includes the following features in it's design:-

Use of Biometric needs consent

Our proposed system uses the Finger vein based authentication as biometric, instead of other biometrics such as facial or ear which could break people privacy without their permission. For example, it’s easy to capture facial or ear biometric without people consent.

One Time Passcode

IDP system use user biometric for data authorization. While IDP uses the biometric data for authorization, the biometric information never transmitted over the net, instead, IDP system locally generate a passcode key from the biometric data, time and other information to create one-time passcode to grant permission for specific service.

Card that protect you

IDP Card will include only name, picture, a random number and expire date. The card does not include any information about your address or religion to avoid any discrimination may arise in one stage. The card will not reveal your age or your marital status. IDP card will have two colors, one for adult and one for children but all have same design and should have tactile markings to help blind people identify them.

How the solution can be incorporated into digital identification systems:

Using a one-time passcode to grant access to people data will add an extra layer of security and make people have more control over their data.
The use of delay tolerant networks will make registration process for any digital identification system more effective in the rural and remote area.
In countries, where the ID cards have not yet printed, it's good to see the IDP card approach "A card that protects you." implemented in their system. IDP Card does not include irrelevant information such as religion, address, and date of birth. Include this information in some cases in the third world may enough to be killed on the basis of regional, tribal or religious discrimination. Some people may argue that age is important because we want to distinguish children from adults. The IDP cards use two colors, one for children and another for adult, therefore goal has been achieved without break of people privacy.

How the solution is 'user-friendly':

IDP uses ‘go to them approach’ in the registration process to make the registration process accessible to remote and rural communities. This has been achieved by using delay tolerant networks and mobile registration centers
IDP System will have separate registration stations for women and men for each registration centers. Each registration desk equipped with two screens and screen reader to make sure people are able to verify their data by reading or listen to it.
The IDP Card should have tactile markings to help blind people identify them in their wallet.

How the solution ensures interoperability:

Not Applicable

How the solution accounts for low connectivity environments and for users with low literacy and numeracy levels:

For low connectivity, IDP proposes the use of Mobile Registration Centres (MRCs) and Local Registration Centres (LRCs) which will be distributed in a way that covers all target area. IDP system will use Delay tolerant networks (DTNs) for communication for between registration centres and the central database. DTN is a wireless network does not require the sender and recipient to be connected at the same point of time.
For literacy, In IDP, each registration desk equipped with a screen reader to make sure people are able to verify their data by listening to it.

Vision over the next three to five years to implement or grow the solution to affect the lives of more people:

Perhaps in many countries, raising awareness of privacy to government authorities is a step we must work on. In a country like Libya, where the ID number itself reveals data such as date of birth and sex, it needs to address the basic concepts of privacy before we ask for proper respect for the privacy of people.

Countries with limited resources should be encouraged to use DTNs because it's a cost-effective way to make invisible people visible. While convincing a country usually needs an international organization, but we will do our best to promote this idea.

Solution website

https://sites.google.com/site/idpcard1/home

Find out more

https://www.taylorfrancis.com/books/e/9781351780162/chapters/10.1201/9781315200804-2

Country where the solution primarily operates:

Libya

About Your Team

Partnership Potential