I have been asked to appraise an interface
On the right is a scanned image and it contains information about a user. It contains a unique ID, name fields and an address.
The user has to find out if this information is already held on the system and types in the name and address information as contained in the scanned image. The user is not allowed to type in unique identifier at this time.
On click Find and match the system validates if the information is already held on the system, and if it is, returns a validated state for name and address
The final step is for the user to input the Unique identifier and the system automatically checks if this matches what's held on the system for the name and address and if it matches, returns a valid state:
The reason for this breakdown in input and validation is an extra security measure. After the name and address Find and match, the system does not auto populate the unique identifier even though it knows what it is: it forces the user to input it as an extra security measure.
My question: if the system knows all the data, why can't the user just input the unique ID? The system returns back all the information and the user clicks a button that might say 'confirm data' if everything matches up. Why force the user through so many validation steps?
Further complication: the unique identifier might contain tiny errors (like one digit smudged or missing) in which case the user will get a validation error when checking unique identifier and they would have to do another search to find out what is held on the system and judge whether or not the scanned form contains a genuine typo or not.