Skip to Content

A More Anonymous Internet

New software would let you shop online without disclosing your identity.

Identity theft and credit card fraud are surging international problems, fueled partly by the need to reveal credit card and Social Security numbers in the course of common Internet transactions. Although most businesses immediately encrypt such numbers, researchers at IBM’s Zurich Research Laboratory and elsewhere are devising ways to avoid having to submit the numbers in the first place.

IBM calls its solution Idemix. The software could, for example, allow you to prove to online merchants that you have a valid credit card with certain spending limits, without actually entering the card number. The software starts by enabling you to get an anonymous digital credential from the bank that issued your credit card. This credential contains a pseudonym you choose, the credit card number and its expiration date, and encoded data from the bank that helps verify the credential later.

Then, let’s say you want to buy a Kenny G. disc online. The Idemix software in your PC sends information encrypted in the credential to the online music store, informing it that you have a valid credit card. At the store’s payment center, another part of the Idemix software reads that information. It uses cryptographic algorithms to confirm bank authorizations and spending limits and to collect payment-all without knowing your actual card number. “This set of techniques is really out in front,” says Ronald Rivest, a computer scientist at MIT and a coinventor of a widely used encryption algorithm. Idemix changes the encrypted version of your credential each time you use it, making it harder for Web sites to track your habits.

Just as banks could issue anonymous credentials, so too could government agencies that issue driver’s licenses, Social Security numbers, and other forms of identification. Consider car rentals: an anonymous credential could allow you to prove you are a licensed driver without your having to hand over your actual license. IBM already has prototypes running and could have a version ready for market in one to two years, says Jan Camenisch, lead cryptographer of the Idemix project in Zurich.

Of course, IBM isn’t the only company trying to provide secure e-commerce. Credentica of Montreal, Quebec, is also working to commercialize digital credentials for broader applications. And many academic and corporate research groups are pursuing strategies for more anonymity on the Internet. There’s good reason for all this research: last year, according to the Federal Trade Commission, 162,000 identities were stolen in the United States alone, and Internet fraud cost consumers more than $122 million. And someone out there knows you love Kenny G.

Keep Reading

Most Popular

open sourcing language models concept
open sourcing language models concept

Meta has built a massive new language AI—and it’s giving it away for free

Facebook’s parent company is inviting researchers to pore over and pick apart the flaws in its version of GPT-3

transplant surgery
transplant surgery

The gene-edited pig heart given to a dying patient was infected with a pig virus

The first transplant of a genetically-modified pig heart into a human may have ended prematurely because of a well-known—and avoidable—risk.

Muhammad bin Salman funds anti-aging research
Muhammad bin Salman funds anti-aging research

Saudi Arabia plans to spend $1 billion a year discovering treatments to slow aging

The oil kingdom fears that its population is aging at an accelerated rate and hopes to test drugs to reverse the problem. First up might be the diabetes drug metformin.

Yann LeCun
Yann LeCun

Yann LeCun has a bold new vision for the future of AI

One of the godfathers of deep learning pulls together old ideas to sketch out a fresh path for AI, but raises as many questions as he answers.

Stay connected

Illustration by Rose WongIllustration by Rose Wong

Get the latest updates from
MIT Technology Review

Discover special offers, top stories, upcoming events, and more.

Thank you for submitting your email!

Explore more newsletters

It looks like something went wrong.

We’re having trouble saving your preferences. Try refreshing this page and updating them one more time. If you continue to get this message, reach out to us at customer-service@technologyreview.com with a list of newsletters you’d like to receive.