News

Real ID Act: Smart Card ID Requirements Questioned

Senators and privacy advocates on Monday questioned a U.S. government plan to move ahead with smart card drivers license requirements

By Grant Gross, IDG News Service

March 28, 2007CSO

Senators and privacy advocates on Monday questioned a U.S. government plan to move ahead with smart card drivers license requirements, saying the cost will run into the billions of dollars and the cards could allow the government to track residents.

The Real ID Act, tacked on to a military spending bill in 2005, would require states to save digital copies of source documents such as birth certificates for drivers licenses and it would require states to share information in their drivers license databases. The goal of the new cards, which would include digital photographs and personal information in a machine-readable chip, would be to better ensure that the people carrying the ID cards are who they say they are.

Congress passed the Real ID Act in response to the Sept. 11, 2001, terrorist attacks on the U.S. The 9/11 Commission recommended that the government take steps to better ensure the validity of U.S. IDs. The pilot of the airplane that crashed into the Pentagon held three state drivers licenses, all of them fake, said Robert Barth, assistant secretary for policy development at the U.S. Department of Homeland Security.

"Real ID is fundamental to the security of our nation," Barth told the Senate Subcommittee on Oversight of Government Management.

But Senator George Voinovich, an Ohio Republican, complained that much of the cost for implementing Real ID would be passed on to states. DHS has estimated the cost of implementing Real ID at $14.6 billion over 10 years.

Voinovich also questioned how secure the cards would be. "You’re going to be able to guarantee that information is going to remain private?" he asked Barth.

No one can guarantee that any data will be 100 percent secure, Barth answered, but a federal system would be "vastly, vastly" more secure than 50 separate state drivers license systems. "Whenever you have human beings involved ... you can’t say there’s zero risk," he said.

Voinovich pressed the question, asking if there were technological methods of defeating the proposed ID cards.

"We’re going to provide the safeguards and do everything possible to prevent that from happening," Barth said.

Privacy advocates have also questioned the Real IDs, saying the data on the cards would allow the government to track citizens. "The machine readable zone on each Real ID license will provide a digital trail everywhere it is read," said Timothy Sparapani, legislative counsel for the American Civil Liberties Union.

Members of Congress have proposed that the Real ID card be required in order to vote, get a new job, obtain government benefits and travel on airplanes and trains, Sparapani said. "Senators should expect that no person would be able to function in our society without providing a Real ID-compliance license," he said.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WEBCAST
The Surest Path to Effective and Efficient Compliance

VeriSignIn this webcast, we explore why and how — with best practices, practical tips and solutions that work — to ease your compliance challenge.

» View the webcast

Featured Sponsors
Sponsored Links

Think your data is safe? Think again. It's time to Outthink the Threat. Get eBook now

Prepare for (ISC)2® Certification With Villanova - Online

ITCi White Paper: Challenges and Opportunities of PCI

Effective Security with a Continuous Approach to ISO 27001 Compliance

Rolling the dice with your security? Take the Self-Assessment Test now

Digital Identity Protection and Data Security Get Personal

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Diebold: Frost & Sullivan Global Physical Security Systems Integrator of the Year

Revolutionizing Endpoint Security with a Single Agent

Envision Identity-Based Access Control for the Datacenter

IT Service Management: Metrics That Matter

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

The Case for Business Software Assurance ~ Securing Your Applications

Learn how the new Quad-Core AMD Opteron™ processor improves performance

Configuration Audit and Control for Virtualized Environments

The PCI Data Security Standard

Configuration Audit and Control for Virtualized Environments

IDC Defines an Identity and Access Management Submarket

Welcome to the age of Service-Oriented Security (SOS)

Solving Online Credit Fraud Using Device Reputation

Take our CSO role survey and receive a copy of the results

Ponemon Study: How Much Does a Data Breach "Cost"?

Data Protection: Challenges for the Traveling User

Key strategies for C-level executives and security staff

Configuration Assessment: Choosing the Right Solution

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

Using Likewise to Comply with PCI Data Security Standard

Enabling Compliance with Converged Mainframe Security and Storage