User verification vs database lookup

Online electronic identification is performed by finding existing records about a person on different databases. If it is found that there are records about a person then it is assumed that a person with a particular name exists.

A difficulty with this approach is that the information about a person may vary across different databases. This occurs for many valid reasons. Typical variations are missing middle names, a person using a shortened form of a name, a name being miskeyed when entered into a databases, an old address being on the database.

There are two approaches to addressing this issue. One approach is for the person to enter the name and address by which they wish to be know and for checks to be made against the different databases to see if the data matches. The other, better, approach is for a person to assert then verify how their information appears in different databases and to choose the name and address they wish to use for their online electronic identification.

The reason the second approach is better is that for a person to verify they are on many databases they have to know extra information that is unlikely to be known to a person trying to steal their identity. They need to know the different forms their name may take, or their previous addresses which may be unknown to an identity thief. To verify they have a passport they need to know their place of birth, their name at birth and their passport number.

In contrast is quite easy for an identity thief to find a person's name, address and date of birth. Hence checking that name, address and date of birth matches offers little protection from identity theft.

Identity theft can be further reduced if the person can be linked to their phone, smart card, ID cards, photograph, or voice recording. If a thief links their photograph or voice recording or smart card or phone then this provides enough evidence for the person to be convicted of identity theft when the crime is uncovered. This in turn will reduce the number of people attempting to steal identities. The lookup method provides no evidence that identity theft has taken place. Rather it makes it very difficult for the victim to prove their innocence and so helps protect thieves.

It is strongly recommended that online identification follow the second approach where a person verifies their identity information across different databases then passes the verified information they wish to use to the organisation wishing to identify the person.