Friday, December 28, 2007

Could this be the most reliable form of age verification yet?

I have some of my best ideas while lying in the bath. This one came about as a result of me thinking that if I wanted to start a “mature” MMORPG, how would I go about age verification in such a way that it was the most secure and policeable ever? I then attacked it with two criteria: How would I implement it, and if I was deliberately setting out to abuse it, how would I do so?

And then it came to me.

What I would do would be to make a deal with a telephone service company that provided specialist premium rate numbers. I’d tie my computer system to theirs in a similar but more extensive way that Ebay and Paypal use. The age verification routine on my website would give the person about to go through the check a unique identifying number. It would also feature prominently the warning “CALLING THE AGE VERIFICATION NUMBER WILL COST $5 PLUS APPLICABLE LONG DISTANCE CALL CHARGES. YOU ARE RESPONSIBLE FOR THIS CHARGE, AND BY CALLING THE NUMBER AND PROCEEDING YOU ACCEPT LIABILITY FOR ALL CHARGES RESULTING FROM THIS CALL.”

Here’s the thing. The number it gave me to call and give my identification number that I’d just been given can ONLY be called from a domestic residential landline. It can’t be called from a mobile, and it can’t be called from a public callbox or a business landline. It can only be called from a domestic landline, which, correct me if I’m wrong requires the owner of the landline to be over the age of consent in their country.

So, I call the number, and I enter my code, and I’m age verified. I haven’t passed ANY identifying information that could be abused to any third party, and by verifying that I called from the number at that address, I do provide a method for legitimate law enforcement to track me down should that ever be necessary.

Now here’s the kick. I know you’re all thinking “How does that prevent my 12 year old calling the number?” Well, the answer is, it doesn’t. BUT, when the parent/owner of the bill gets their monthly telephone bill, ONE call costing at least $5 is going to stick out like a sore thumb. What happens if my 12 year old has done this? Here’s part two of my idea.

Say my underage son/daughter has done this, and I get my bill and find out someone made a call to “ age verification” which cost me $5. I contact my phone company, and ask who the hell this is? They do a check their end, and they say “Well, we can’t refund the money, but there IS an abuse line on their record for people who feel that they’ve been the victim of fraudulent use.” I call that number, and register my telephone number, then I go and ground my kid.

My kid throws an almighty sulk, and decides that while grounded they’ll play the mature game. They go to sign on – and their account has been banned. Raising a query about the number automatically results in an account ban for the misusing account. Furthermore, the telephone number is ALSO banned, so when (s)he goes to open a new account and tries to age verify again, the number won’t connect from that landline. Without it connecting, they can’t verify.

I’m not claiming this is foolproof. I don’t know any system that WOULD be foolproof and implementable across the globe. But as far as I know It’s the best I’ve seen to date… I would welcome feedback on this, and if anyone wants to knock the idea around a little, I think this is a firm foundation for a secure method of age verification that doesn’t require giving away potentially illegal information, it would work worldwide, it wouldn’t require very much in the way of equipment to make it work and I recommend this idea to the population!

No comments: