text: ofthetext,thereading ofwhichrequires application ofthecorresponding decoding key.Forexample, suchasystemisusedbythetheSociety for Worldwide Interbank Financial Telecommunications S.A.(S.W.I.F.T.), which recently adopted a newauthentication algorithm. Thesecretkeyisintended tobelongenoughandthealgorithm issaidtobe"sufficiently resource-hungry" todiscourage anyone fromattempting allthe possibilities. 35/Techniques combining several keyscanalsobeusedasa meansofidentifying theoperator ofthesending machine. Atextusingmodern cryptography couldnotbedeciphered byanunauthorized personina y commercially significant periodoftime. 55.Moregenerally, asregards identification ofpersons inanEDIcontext, verification procedures canbebasedupononeormoreofthreeparameters: whattheoperator knows(passwords, secretcodes), whattheoperator holds (microcircuit cards)orwhattheoperator is(biometrics). Ofthethree, biometrics (i.e.thephysical characteristics oftheoperator) isthemost exact. Sixbiometric technologies arecurrently available: retinascanswhich recordtheeyesignature ofanindividual andstoreitinamicroprocessor;)A/CN.9/333 English Page15 thumbprint orfingerprint identification systems; handgeometry systems which measure, recordandcompare fingerlength, skintranslucency, handthickness orpalmshape;voiceverification devices whichrecordvoicepatterns and inflections; signature verification devices whichtraceeitherthestaticor dynamic characteristics ofaperson's signature; keystroke dynamics which identify individuals bytheirtypingpatterns andrhythms. Allofthese biometric products compare thestoredtemplets withfreshpatterns orscansto allowordenyaccesstothesecured mechanism. 36/ 56.Electronic formsofauthentication usingcomputers offeronemajor advantage overvisualcomparison ofmanualsignatures. Theprocedure isso rapidandrelatively inexpensive, exceptforbiometric techniques, whichare currently tooexpensive forgeneral commercial use,thateveryauthentication canbeverified asaroutine matter. Thereisnoneedtorestrict verification tothemostimportant transactions. 57.Anindividual document sentbytelecommunications canbeconfirmed by a subsequent signedwriting, ashasbeenacustomary practice inregardto telegrams andtelex. Although inmanycasesthiscouldbeseenasdefeating thepurpose ofEDI,ithasbeenreported thatsuchapractice iscommonamong EDIusers.37/However, twoparties whoanticipate communicating frequently by EDI may agreeinwriting beforehand ontheformofthecommunications and themeanstobeusedtoauthenticate thedocuments. Itcouldbeexpected that suchanagreement wouldbesufficient toallowtheuseoftherecordofthe EDImessage asevidence. Asimilar agreement maybealsorequired byan administrative organoftheStatebeforeitwillaccept documents in electronic form,whether bytelecommunication orbymanualtransmission ofa computer memorydevicesuchasadiskette ormagnetic tape. 58.Itisclearthatthefundamental issueattheheartofallaspects ofthe legaladmissibility ofdigitally transmitted andprocessed dataand information isthatofthelegalreliability ofinformation andcommunication technology. fI'Legalreliability' actually implies 'demonstrably andunarguably high standards ofauthorization, operational andaccesscontrol and management' ofuseofinformation andcommunication technology systems. 'Authorization' further implies 'accurate, precise anddependable identification, verification andauthentication technologies and techniques whichare,ormaybecome, aslegally acceptable asthe conventional trustandcomfort ofamanualsignature written ininkon paper' fI.38/ 59.However, theextenttowhichsuchmethods wouldreceive legalrecognition inStateswheresignature isrequired bylawforaparticular document remains amatterofgreatuncertainty. Wherethelawhasnotbeeninterpreted bythe courtsorotherreliable sourcesoastoconsider anelectronic formof authentication asa"signature", itislikelythatthisuncertainty willbe overcome onlybylegislation. Aquestion forconsideration ishowfarsuch legislation, whenspecifically permitting orrequiring authentication tobe made by EDI, shouldrequire evidence ofconformity withanapplicable EDI protocol, atleastasacondition ofattracting apresumption ofauthenticity, theonusofproofbeingshifted tothepartyasserting theauthenticity ofthe
analysis: The text appears to be discussing the legal and technical aspects of electronic data interchange (EDI) and authentication methods, such as biometrics and cryptography. It highlights the importance of ensuring the legal reliability of information and communication technology systems, particularly in the context of electronic signatures and document authentication.