RE: keeping secrets from myself

[GERSTEIN <GERSTEIN@SCSUD.CTSTATEU.EDU>]

On 8-MAR-1994, Cortland D. Starrett (cort@ecn.perdue.edu) said...
==========
Here is a practical problem that has me frustrated....

Situation:
Assume that I am the treasurer at my local church.  This implies responsibility 
to record each Sunday's offering (the money collected) in the church financial 
books.  An account is maintained for each member of the church.  Money received 
from members each Sunday is credited to their respective accounts. Each 
January, a report is prepared for each parishioner showing a summary of the 
charitable contributions for the previous year. This information is used for 
tax purposes.

Currently, the treasurer knows EVERYTHING about EVERYONE (regarding charitable 
giving).  As a privacy advocate, this is indeed uncomfortable (for giver and 
treasurer).

Problem:
I want to know as little as possible about church member giving.

Give and Take:
It will be difficult/impossible to prevent the treasurer from seeing each 
weeks' checks.  However, a privacy improvement may be achieved if the running 
totals are kept hidden.

How can I provide a comprehensive year-end statement to each parishioner while 
maintaining maximum privacy?

Does cryptography have anything to offer to this situation?

What procedures/protocols could be implemented?

What privacy enhancements could be included with the church
accounting software?

Cort.
===========

	I would think that the easiest way to take care of this would be to 
assign each member a randomly generated id (probably alphanumeric, and you can 
keep it around 6 characters), and then just use that number from then on. When 
a new member joins, create a new id and once they have a copy of it, put the id 
in a file that is stored out of your hands (but accessable if need be) in case 
you need to add someone else or if someone forgets their id.
	I know that this isn't as secure as some of the other methods 
suggested, but this (the method above) would seem to make the most sense simply 
because once it's started, there's not that much upkeep:
	1- Member gets an id.
	2- Member makes a deposit using just their id and only looking at the 
check amounts. For this, you would have to trust yourself or get some envelopes 
that only show the amount through a window. When you are done doing all the 
checks on the computer, dump them all into a bag or something and then start 
endorsing them.
	3- At the end of the year, all you have to do is print a list of the 
id's and how much they have in their "account".
	At no time does anyone but the member know their id (unless they happen 
to share with someone, and it's up to them).
	As treasurer, you only know the account numbers. If you really didn't 
want to take the chance that you might learn some of the numbers (doubtful, as 
there would probably be 100's [maybe 1000's] of members), you could get someone 
else in the church (that you trust) to assign the id's and just have them let 
you know the new id's as they come along.

	Just my 0.02� worth.

Adam Gerstein
-=-=-=-=-=-=-=-=-
Have _you_ said no to Clipper yet?

To sign on to the letter, send a message to:
	Clipper.petition@cpsr.org

with the message "I oppose Clipper" (no quotes)
You will receive a return message confirming your vote.