For nearly 2 decades, mostly from foreign governments, America has been under a cyberattack. Only in recent times have everyday Americans become aware of the attacks over the Internet because they are now directly affected. Likewise, we have Social Media Harassment, Manipulation, Mis/Dis-information. Now, multiple states are telling companies to block adults from kids sites, or to block kids from adults sites or prevent it all together. All with NO DECENT WAY to solve this. Ping, ID.Me, and others want full copies of our IDs that are then stolen, or sold to businesses and even foreign governments. The problem is enforced anonymity.
The simple solution:
A. Americans have REAL ID being used on passports, driver licenses and state identification cards to prevent fraud. Today, Americans have to give identification to buy alcohol or firearms, to drive a car, fly on an airplane, apply for a loan, open a bank account, lease an apartment or buy a car.
B. The Department of Homeland Security (DHS) can issue a DC with public/private key whenever they vet an American for a passport, state identification card or driver’s license. DHS would create the public/private key, and then register the digital certificate and public key with a verified Certificate Authority.
C. Have 3 American owned and secured companies (anybody with direct/indirect access to data must have clearance) be allowed to service these ( certificate authorities ). This creates competition but limits exposure.
D. If an applicant prefers, they must have the ability to generate their own kids and then turn over the public key to DHS.
E. This process makes it possible for American citizens, social media, businesses and the government to securely interact online but it will not solve all of the issues.
Note that 50-80% of all cyber attacks occur from stolen information via email, text, IM, or ppl giving it on-line. IOW, less than 50% , very likely less than 20%, comes from software issues.
DHS would issue a packet of certificates with varying amounts of information. All will contain a full name, along with a unique ID tied to that person:
- name, ID, nation.
- all of #1, AND if below age 21, your full b-date, and if 21 or old, then your birth year. If below 18, then it will include the unique IDs/names of 1-2 parents/legal guardians.
- #1, and address,
- #2 and 3 combined.
- #4, along with SSN.
Why different certs? Because of varying access. #1 is for anybody and all. In particular, this should be used for securing one’s emails, most social media, etc.
#2 would be for site that need it for porn, alcohol, etc. The sites would register with the 3 companies to be able to pull #2.
#3 is good for local businesses, local connections, etc.
#4, schools, more involved businesses such as banks, etc.
#5, Government only. There is no need for SSN to be used by non-government entities.