Sector specific IDs - An EU or user requirement

["Anders Rundgren" <anders.rundgren@telia.com>]

Hi Guys,

You may not be aware of this, but on the continent, the privacy issue in
eIDs is a core consideration.  It has forced the Austrians to even abandon
the X.509 certificate, as the Austrians claim you should have one ID for each
site (or sector).  They currently in some way, create IDs locally to achieve this.

http://europa.eu.int/idabc/en/document/3910/5803 presentation 
http://europa.eu.int/idabc/servlets/Doc?id=19404 and paper (in the 
proceedings http://europa.eu.int/idabc/servlets/Doc?id=20734).

Although I consider privacy less vital, I would not ignore it, since such
ideas could become EU standards.  I'm rather proposing that the
requirements should be studied and agreed-upon before going further.

Particularly the idea that you gradually could reduce the myriad of logins
you have today and replace them with TTP based ID-solutions seems nice.
This should also be very important for commercial certificate vendors, since
it could increase eID usage by a mile.

Anders Rundgren