Age Verification in the Web -- Holy Grail to Control Access to Restricted Content

2026-05-06

AI Summary

This work proposes a privacy-preserving age verification scheme based on open standards such as Privacy Pass and Privacy Access Tokens to address critical limitations of existing mechanisms, which often entail significant privacy risks, rely on centralized infrastructures, and offer poor user experience—factors that collectively facilitate minors’ exposure to harmful online content. By leveraging cryptographic techniques within a decentralized architecture, the proposed approach eliminates the need for dedicated client software and enables users to autonomously select trusted verifiers while dynamically adjusting trust levels. The design achieves strong privacy guarantees alongside flexible access control, effectively mitigating key shortcomings in security, privacy, and usability inherent in current systems, thereby offering a viable pathway toward a safer online environment for minors.

Abstract

Age verification before accessing restricted content is critical to protecting minors from exposure to harmful material such as pornography, gambling, violence, hateful speech, and substance purchases like alcohol and tobacco. Currently, the absence of reliable age-checking mechanisms allows children extensive access to such adult content, posing significant risks to their worldview and mental development. While regulatory efforts like the European Union's Digital Services Act promote using Digital Wallets or Age Verification Apps, relying solely on government-based solutions raises concerns about data sensitivity and privacy risks. Effective age verification must therefore be trustworthy, user-friendly, privacy-preserving, and offer flexible assurance levels. We analyze currently implemented (UK or Australia) and proposed (UE) solutions from different angles, pointing out the weaknesses and threats, and come up with an alternative. Our proposal addresses these challenges by leveraging open standards - such as Privacy Pass and Privacy Access Tokens - and cryptographic techniques to enable secure, privacy-conscious age verification without requiring specialized software installation. This approach empowers users to select trusted providers from multiple options, reducing the risk of data breaches and ensuring a safer digital environment for minors.

Problem

• age verification
• online content restriction
• privacy preservation
• minors protection
• digital identity

Innovation

• Privacy-Preserving Age Verification
• Privacy Pass
• Privacy Access Tokens
• Open Standards
• Cryptographic Techniques