保險科技與數位⾝份的挑戰—以數位信賴框架及⽣物辨識技術⾵險探討為中⼼

Abstract

數位身份的核心在於如何在數位化、遠距化金融互動之中獲取信任。本文先自我國保險產業關於數位身份的推動及法規出發，提出四種不同的數位身分管理系統，分別是集中式、聯合式、用戶中心、自我主權身份，進而歸納數位身份相關風險。另外鑑於區塊鏈技術的優勢，許多區塊鏈基礎的身份管理模式也相繼出現。而在數位信賴框架的探討上，本文借鏡英國、歐盟、澳洲等近年來的立法舉措，內容涵蓋對於不同數位身份系統參與者的認證及義務要求、隱私確保措施、身份資料共享規定；此外隨著人工智能（生物辨識）技術大量用於數位身份的註冊及驗證程序中，本文也一併探討歐盟、美國近年相關立法舉措。以此回顧我國現況並提出建議。

The core of digital identity lies in how to gain trust in digital and remote financial interactions. Starting from the promotion and related regulations of digital identity in Taiwan's insurance industry, this paper proposes four different digital identity management systems, namely centralized, federated, user-centric, self-sovereign identity, and then summarizes the risks pertained to digital identity. In addition, given the advantages of blockchain technology, many blockchain-based identity management schemes have emerged and applied. In the discussion of the digital trust framework, this paper introduces and dissects the recent legislative initiatives of the United Kingdom, the European Union, and Australia from the perspectives of comparative law, covering the accreditation and obligations of participants in digital identity systems, privacy assurance measures, and identity data sharing regulations. Besides, Artificial Intelligence (biometrics) technology is widely used in the registration and authentication procedures of digital identities. This paper also discusses the relevant legislation of the European Union and the United States in recent years. In this way, we then review the current situation in Taiwan and make recommendations.