什麼是自然人憑證
大家都知道網路很方便。但過去政府無法在網路上為人民服務,主要有以下兩個原因:
Everyone knows that the Internet is very convenient. But in the past, the government could not serve the people on the Internet. There are two main reasons:
- 在網路上每個人的身分都是很難確認的(假冒者可能會冒名辦土地權狀轉移而造成他人損失)。
It is difficult to verify the identity of every person on the internet. (Impostors may fraudulently transfer land ownership and cause losses to other.) - 在網路傳輸資料,如果未加密,有相當的風險(例如惡意駭客違法竊取資料或帳密)。
There is a considerable risk when transmitting data over the internet without encryption. (For example, malicious hackers illegally steal data or accounts and passwords.)
所以到目前為止,絕大多數政府服務都要求本人帶著身分證,親自到場辦理。
The vast majority of government services currently require individuals, to personally present their ID card on site for processing.
自然人憑證包含了由非對稱式加解密運算法演算所得的「金鑰」,當中包含「公開金鑰」(以下簡稱公鑰)及「私密金鑰」(以下簡稱私鑰),並儲存實體IC卡或行動裝置的安全區保護著。經由憑證即可進行數位簽章及身分識別,如啟用加解密的功能,資料加密後,即使被攔截了資料也無法輕易的解開。
The Citizen Digital Certificate contains the 'keys' obtained from asymmetric encryption algorithms, including the public key and the private key, and they are stored in the secure area of the physical IC card or mobile device. By using the certificate, one can perform digital signatures and identity verification. If the encryption and decryption function is enabled, the data will be encrypted, and even if intercepted, it can't be easily decrypted.
自然人憑證的三大功能分別如下:
The three major functions of a Citizen Digital Certificate are as follow:
- 身分識別:基於公開金鑰基礎建設的非對稱加密技術,使用金鑰來確認身分。當使用者註冊自然人憑證時,會被要求提供個人身分證明文件和其他相關資訊,然後這些資訊將被用來製作金鑰,當中包含著公鑰及私鑰,也正因為公私鑰的應用與交互驗證,使相關應用服務可因此進行使用者的身分驗證。
Identity verification: Based on public key infrastructure asymmetric encryption technology, a key is used to verify identity. When a user registers for a Citizen Digital Certificate, they are required to provide personal identification documents and other relevant information, which will be used to create a key containing a public key and a private key. It is because of the application and mutual verification of public and private keys that related application services can perform user identity verification. - 簽章:自然人憑證可以在電子文檔上簽名,確保文件的完整性和不可否認性。當要做驗證簽章時應該使用公鑰,若是要製作簽章時則應使用私鑰。簽章文件使用雜湊演算法,將輸入訊息轉換為固定長度的訊息摘要,並且具有唯一性,以確保簽章的安全性。文件發送後,接收者可使用簽署者的公鑰來驗證簽名的有效性。自然人憑證簽章於電子文件簽署,除可有效地確保文件的完整性和不可否認性,還能夠提高簽署效率,減少繁瑣的手工簽署流程,並可確保安全性。
Digital signatures: The Citizen Digital Certificate can be used to sign electronic documents, ensuring their integrity and non-repudiation. When verifying a digital signature, the public key should be used, while the private key should be used when creating a digital signature. Digital signature documents use hash algorithms, to create a unique, fixed-length message digest of the input message, ensuring the security of the digital signature. After sending the document, the recipient can use the signer's public key to verify the validity of the signature. Using a Citizen Digital Certificate for electronic document signing can effectively guarantee the integrity and non-repudiation of documents, as well as improve signing efficiency, reduce cumbersome manual signing processes, and ensure security. - 加解密:使用非對稱加密的原理來保護資料的機密性。自然人憑證有公私鑰,私鑰儲存於實體IC卡或行動裝置的安全區中,不論使用何種方式都無法取出私鑰,當您要做加密運算時應該使用公鑰,若是要做解密運算時則應使用私鑰。
Encryption and decryption: The principle of asymmetric encryption is used to protect the confidentiality of data. Citizen Digital Certificate have public and private keys. The private key is stored in a secure area of a physical IC card or mobile device and can't be extracted by any means. When you perform encryption operations, should use the public key, and perform decryption operations, should use the private key.
自然人憑證不僅僅是憑證,它是由內政部憑證管理中心所簽發的憑證。辦理了自然人憑證以後,即可取得多項政府提供的E化服務(例如:線上申辦戶籍登記、申辦報稅、全民健康保險個人健保資料網路服務作業、勞農保應用查詢服務等),並且降低個人資料外洩的危險。
The Citizen Digital Certificate is not only a certificate, it is issued by the Certificate Authority of the Ministry of the Interior. After applying for a Citizen Digital Certificate, individuals can access various government e-services, such as Household Registration Online, File Taxes Online, National Health Insurance Personal Health Insurance Data Online Inquiry Service, Labor or Farmers Insurance Application Inquiry Service Online, which can reduce the risk of personal information leakage.
111年2月16日自然人憑證應用再升級推出「行動自然人憑證APP,提供可安裝在行動裝置上的自然人憑證服務。使用者透過手機或平板等行動裝置,就可進行身分識別及簽章等功能。使用相關應用系統時,使用者無需輸入密碼,透過臉部掃描或指紋按壓等生物特徵進行辨識,通過驗證後即可使用相關應用服務。使用行動自然人憑證系統免除操作自然人憑證實體IC卡及讀卡機,憑藉行動裝置就能隨時隨地進行身分識別或數位簽章,進一步提升數位化的便利性,更保有原本的安全性。首次使用行動自然人憑證請先至網頁(網址:https://fido.moi.gov.tw/)使用有效的自然人憑證實體IC卡註冊,再於Google Play/App Store下載"行動自然人憑證"APP,並綁定行動裝置(手機或平板等)後即可使用。
On February 16, 2022, the Citizen Digital Certificate application was upgraded to introduce the Mobile Citizen Digital Certificate App, which provides a Citizen Digital Certificate service that can be installed on mobile devices. Users can perform identity verification and digital signature functions through mobile devices such as smartphones or tablets. Users can access the relevant application services without the need to enter a password, by using biometric features such as facial recognition or fingerprint scanning for identification. Once verified, users can use the relevant application services. The use of Mobile Citizen Digital Certificate system eliminates the need for physical IC cards and card readers for Citizen Digital Certificate operations. With a mobile device, users can perform identity verification and digital signatures at any time and place, further enhancing the convenience of digitalization while maintaining the original level of security. To use the Mobile Citizen Digital Certificate for the first time, please register with a valid physical IC card for Citizen Digital Certificate at the website (URL: https://fido.moi.gov.tw/), and then download the Mobile Citizen Digital Certificate App from Google Play/App Store. After binding the mobile device such as smartphones or tablets, the service can be used.
政府本來就有很多基礎建設服務,但仍請您提出申請,才能享受到這些基礎建設所帶來的福利。比方說,你要享受用電的方便,就得先申請電表;要享受自來水的方便,就得先申請水表;要享受在網路上申辦政府業務的方便,別忘了先申請自然人憑證。有了自然人憑證「網路就是馬路」,有了自然人憑證就像帶著「網路身分證」。優質的網路人生,政府與您共同實現。
The government has a lot of infrastructure services, but you are still asked to apply to enjoy the benefits of these infrastructure constructions. For example, if you want to enjoy the convenience of using electricity, you must first apply for an electricity meter; if you want to enjoy the convenience of tap water, you must first apply for a water meter; if you want to enjoy the convenience of applying for government business on the Internet, don't forget to apply for a Citizen Digital Certificate first. With a Citizen Digital Certificate, the internet is like a street, having a Citizen Digital Certificate is like carrying an online identification card. The government will work with you to achieve a high-quality online life.