Alien Citizen Digital Certificate

The new ID format is great!

4 Likes

Mea culpa. Should be fixed ~60 hours from now.

5 Likes

Long term a central service for authentication from Taiwan government could be useful that handles auth for all government services. Then handles over the user with a signed token to the service.
Google does this with all their services.

Can have some configuration, like level of security that only allows certain login types and limits personal data access to only necessary data.

Should improve compatibility, serviceability and security.

Future projects and event based websites will benefit from easier implementation and faster rollout, when devs do not need to worry about messing up authentication.

I see Taipei Pass is partially used in that fashion already. IMHO Taipei Pass is very well done.

Edit:
Or make an auth SDK for government projects to use.

3 Likes

Let’s compare this to the developed world that don’t exclude non citizen residents from the national SDK… or shouldn’t we?

It’s 2023 and Taiwan still has these issues… The system needs to be “unified” and unifying the numbers and not the system doesn’t seem to be working…

@au 3 years after implementation Richart bank. A bank that wants to accept online applications can’t without manually verifying ones ARC… Why? I thought the ARC have been electronic since 2008. I also thought the number change would help… but it didn’t.

While citizens can punch in their numbers on something like a credit card application and everything appear… We are still limited to scanning our cards and filling out paper applications.

I wonder @au and @slawa is this part really the banks fault or the governments fault?

I am not angry at you @au but I hope you can understand how bad the situation still is and I wonder what is being done to fix it.

1 Like

It sounds like mygov in Australia?

There is a web service or an API that allows banks to verify the existence of ID numbers in the government database. For some reason this exists only for citizen ID’s.

Banks can verify the ID numbers alien residents give them are valid, but valid ID numbers’s can be easily generated. That is why they opted out to in person applications for alien residents, so the employees can check the physical ID documents.

Such web service for foreign residents is in the works, but I have not heard any ETA.

This is the ‘reason’ the online applications for foreigners for bank accounts and credit cards are not available.

3 Likes

Frigging NIA r slackers on this

Unfortunately this sort of thing is rarely anybody’s fault specifically, and is endemic to large bureaucracies. The key point here (for me at least) is that the effort continues even after some years and high-level changes in political focus. Quite often this sort of thing is a talking point that never gets legs, or falls by the wayside as soon as “the powers that be” change over or find a new Shiny Thing.

Additionally, it seems there’s some real thought going into the execution and systems requirements, rather than a hand-wave with the technology du jour. So, overall, it’s actually not bad! :man_shrugging:

The plan here is to open up TW FidO for more widespread use before end of the year, so that providers automatically support unified ID authentications & signatures (and early next year, encryption/decryption) for citizens and residents alike.

@slawa would you like to re-test the MyData website’s member center?

6 Likes

Sure. I will check it out in a bit. Thanks for quick fix.

Very similar!

1 Like

mydata.nat.gov.tw has been fixed. @au
No error popup and I get notification in the app to authorize the login.

Much easier; no messing around with the card reader and certificate software on pc! :partying_face:

9 Likes

@au it seems that the digital certificate tool to access the JCIC is broken for good, can’t make it work.

The Hicos tool days my drivers and equipment work fine, could indeed even link my new phone with the FIDO app, but the JCIC website won’t just work. It might be an issue of the extra software needed which the website compels I to download and install.

Can anyone have a look too?

2 Likes

Monday I can have a look. Worked for me last month.

1 Like

Last time I remember I managed to get it working was like may, same PC and same card reader, nothing changed

1 Like

@slawa did u manage to have a look by any chance?

Sorry, I keep forgetting to bring my card reader to work.
I will make a reminder on my phone for today.

1 Like

Could not login right away.

First the DNS seems to have an issue. I could not load the website at all. Only after disabling enforcing DNSSEC in my DNS.
Checked their DNS status and one of three name servers is down dns3.jcic.org.tw IP 211.21.149.199. I think it has to do with that.

Next I could not log in. I prompted me to download JCICSecMiddleware_v4_2_3_33.exe. I had installed v4.2.3.32. So I uninstalled the previous version through Windows programs manager. Then installed latest 33 and rebooted the PC.

Now I was able to login and get my latest credit report.

4 Likes

For a layman, what does that mean?

How can I get in? Already downloaded and installed that Middleware thing

If you can open the page and have latest software, it should technically work.

debug

Try opening the debug window and login.
You can send me the debug log to have a look.

Capture

1 Like