Digital Identity Forum

How do these ideas make it through to implementation?

[Dave Birch] In the US, there is something called the Enhanced Drivers Licence (EDL) which is used not primarily as a means to demonstrate someone's entitlement to drive a motor vehicle but as a proxy identity card.

The Smart Card Alliance says it recommends an immediate review of the decision to use EPC Gen 2 RFID technology in US travel documents. “The Alliance is prepared to endorse the correct use of any technology that provides adequate protection of privacy and identity information. However, as the US Passport Card and EDL programmes were being defined, the Smart Card Alliance went on record advising against using an insecure EPC Gen 2 RFID solution that puts the privacy and security of US citizens’ personal information at risk.”

[From Security Document World - Biometrics, Passports, ID Cards and Visas]

Who cares? After all, what does it matter if a fraudster gets hold of your driving licence details. All they can look up is whether you have a licence or not, right?

Still, victims-rights and privacy advocates remain concerned about one important Real ID requirement, which dictates that state DMVs interlink their databases and make all their drivers' records and identity documents available. The final rule says that both an individual's "full legal name" and "true address" must be stored in the DMV database, regardless of what's displayed on the card and encoded on its bar code. It also requires that motor vehicle departments scan and store "source documents," such as birth certificates, to verify a driver's license applicant's identity.

[From Real ID worries domestic violence groups | Tech news blog - CNET News.com]

Hhhmmmm. There may be some interacting unexpected consequences around the collision between identity and entitlement here. This is what happens when you jumble together entirely different concepts under the banner of "common sense".

Digital Identity Forum will be on October 15th/16th in London

[Dave Birch] A date for your diary. We've chosen 15th/16th October for this year's Digital Identity Forum in London. We're looking at a couple of venues and hope to confirm something in the next week or two. The web site will go up tomorrow and I'm looking forward to starting work on the programme soon. As always, constructive suggestions are welcome, but at this time I'm thinking that we should take another look at where the UK is with ID cards (I'm afraid it's the 800lb gorilla), some kind of OpenID/Cardspace "bootcamp" to explain them to a business audience, an update on biometrics and a big session on identity in social networking. And of course, a pub quiz (sponsor please!) and a electronic "Game of Life" for charity, excellent company and conversation.

Yoof

[Dave Birch] Dealing with the government online is precisely the kind of activity that is subverted by bad identity management. Case in point:

 

Ambitious plans to switch the majority of provisional licences from postal to online could not be taken up by one of the largest group of customers - teenagers - because they couldn't prove their identity. Only 40,000 out of the 1 million people seeking a provisional licence were able to complete an online application. The remaining 960,000 had to stick to postal applications. One of the main reasons, according to the NAO, was that online applicants had to have either a new digital passport or a credit record to prove their identity.

[From DVLA plan fails ID test | Special Reports | Guardian Unlimited Politics]

The government has portal for accessing public services -- DirectGov -- but it's of limited usefulness, precisely because of this issue. And I'd lay a pound to a penny that the new ID card won't make the slightest difference, since I've not heard a single minister or official say anything about using it in this way. Speaking of which, young people won't have to worry about this problem for much longer because they'll soon be able to get a splendid new identity card that will solve that problem for them. As the Home Secretary said recently

 

We will start to make identity cards available to young people on a purely voluntary basis in 2010. I believe there are clear attractions in the scheme. It will make it easier to enrol on a course, apply for a student loan, open a bank account, or prove your age - especially as we get tougher on sales of alcohol to those under-age.

[From BBC NEWS | Politics | In full: Smith ID card speech]

Anyone familiar with the U.K. will recognise the wisdom of making it more difficult for children to buy alcohol.

1% of the way

[Dave Birch] Things haven't been going terribly well for America's ambitious Real ID scheme. Government agencies missed the end of October deadline to complete background checks for employees and contractors who have worked for the federal government for 15 years or less and to begin issuing the new identity cards that include employees' fingerprints as required under Homeland Security Presidential Directive 12, which President Bush issued in 2004. In all, about 1.9 million federal employees and 591,358 contractors require credentials. As of that deadline, 97 percent of federal employees and 79 percent of contractors had completed the required background checks, but federal agencies had issued only 1 percent of the new cards. Now it turns out that some of the other deadlines around driving licenses are being rolled back as well.

Get real

[Dave Birch] At the RSA conference, Forum friend Toby Stevens from EPG was on a panel asking "Does Real ID really work?".  A quick primer: The US Real ID initiative aims to establishes a de facto national ID by establishing national standards for state driver’s licenses and ID cards. It mandates that states maintain accessible databases of documents used to establish identity but makes no provision for securing this data or controlling how data on the card is used.  So never mind "will it work", perhaps a better question is "will it be implemented".

Technorati Tags: identity

Driving forwards

[Dave Birch] Driving licences are always a good example to study in the world of digital identity because they are making the transition from dumb to smart, as ID cards are, and could clearly be used to pivot across real and virtual services.  The European Parliament has cleared the way for a new law harmonising EU driving licenses across the European Union, but the new license will not be obligatory until 2033!  There are currently 110 driving licenses held by almost 200 million people - which range in shape, size, the length of time they are granted for and the ease with which they can be counterfeited -- so there are obvious efficiencies to come from replacing them.  However, the law will only come into practice in 2013 – when newly-issued driving licenses must be in the new ID1 format – and will then set a firm schedule for replacing all of the old kinds driving licences during the next 26 years.

Technorati Tags: identity, interoperability