Feeds

US biometric ID request raises ID concern in UK

Don't want a betamax situation

  • alert
  • submit to reddit

Securing Web Applications Made Simple and Scalable

The UK government plans to issue its ID card as a passport with biometric identifiers stored in a chip – and the US wants those chips to be compatible with its own scanners, raising the possibility that US agencies could have access to the ID Card database.

The US call for biometric standardisation exceeds currently agreed international standards for airline navigation, safety and security. In 2003, it was agreed by the International Civil Aviation Organisation (ICAO) that the initial international biometric standard for passports would be facial mapping, although additional biometrics such as fingerprinting could be included.

Currently, for example, all foreign visitors entering the US have their two index fingers scanned, and a digital photograph taken before they are granted entry. Most visitors are also required to obtain a visa.

Nature of the US request

Michael Chertoff, US Secretary of Homeland Security, last week said this the EU and US were close to a deal on the introduction of biometrics in passports for those seeking entry to the US, and urged the EU to ensure compatibility between EU and US biometric systems.

According to press reports, Chertoff has also asked the UK to consider chip compatibility in respect of the proposed UK national identity card scheme.

He told reporters: "It would be a very bad thing if we all invested huge amounts of money in biometric systems and they didn't work with each other."

"Hopefully, we're not going to do VHS and Betamax with our chips,” he added.

Compatibility could deliver on-line data exchange

According to The Independent newspaper, this could mean that information held on UK identity cards could be accessed in the US.

The potential for this link arises because of the decisions of the International Civil Aviation Organisation (ICAO) to promote an international standard for passports. These decisions have been reinforced by a decision of the Council of Ministers of the European Community to introduce a common format passport for member states.

The decision of the UK government to link the ID cards with the passport means that the UK's ID card will be compatible with international passport standards. According to the Passport Office website, "For many UK citizens the identity card will be issued as passports come up for renewal or for first time applications." As a result, "The Home Office, the UKPS and other government departments will now work together "to start to lay the foundations for the scheme, which will establish a more secure means of proving people's identity."

As part of this process, the UKPS "will progress its major anti-fraud and secure identity initiatives including the addition of a biometric to the British passport. So if a biometric passport is linked to the ID Card in a common format which is compatible with the USA's travel requirement, then direct USA access to the ID Card/Passport database becomes an option in relation to travel to the USA."

Lack of biometrics still a problem

The US had initially set 26 October 2004 as the date by which Visa Waiver Program travellers were supposed to present a biometric passport for visa-free travel to the US, but extended it for one year when it became clear that the 27 states that are eligible for the Program – including the UK – would be unable to comply.

Unfortunately EU countries are still unable to produce the biometrically-enabled passports, and unless the US is prepared to extend its deadline again, EU visitors to the US will soon find themselves obliged to obtain a visa before they will be granted entry.

According to reports, the US and EU are now close to a deal on the timing of the biometric passport requirement.

Biometric passports and terrorism

Biometric passports have been identified by governments throughout the world as a key factor in the fight against terrorism, and their implementation is being driven by the US.

The USA-PATRIOT Act, passed by the US Congress after the events of September 2001, included the requirement that the President certify a biometric technology standard for use in identifying aliens seeking admission into the US, within two years.

The schedule for its implementation was accelerated by another piece of legislation, the little-known Enhanced Border Security and Visa Entry Reform Act 2002. Part of this second law included seeking international co-operation with this standard. The incentive to international co-operation was made clear:

"By October 26, 2004, in order for a country to remain eligible for participation in the visa waiver program its government must certify that it has a program to issue to its nationals machine-readable passports that are tamper-resistant and which incorporate biometric and authentication identifiers that satisfy the standards of the International Civil Aviation Organization (ICAO)."

Citizens from those countries belonging to the Visa Waiver Program (including many EU countries, Australia, Brunei, Iceland, Japan, Monaco, New Zealand, Norway, Singapore, and Slovenia) do not require a visa, but as from 26 October last year, have been obliged to show a machine-readable passport.

Unless a further deadline extension is reached, VWP citizens entering the US after 26 October 2005 must, if their passport is issued after 26 October 2005, use a machine-readable, biometrically-enabled passport or obtain a visa.

Copyright © 2005, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

Related stories

Belgians in cunning misspelt ID card plan
ID cards technology is ready, says UK minister
UK ID scheme rides again, as biggest ID fraud of them all
EU biometric visa trial opts for the tinfoil sleeve
Congress passes Gestapo ID legislation
Malaysia to fingerprint all new-born children
HP to build EU's biometric ID, terror database
Not as guilty as he looks? The Met chief, Labour and ID cards
Clarke calls for ID cards after imagining huge poison terror ring
Carjackers swipe biometric Merc, plus owner's finger
Civil liberty group pans EU biometrics plans

The smart choice: opportunity from uncertainty

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
UK government officially adopts Open Document Format
Microsoft insurgency fails, earns snarky remark from UK digital services head
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
MPs wave through Blighty's 'EMERGENCY' surveillance laws
Only 49 politcos voted against DRIP bill
Help yourself to anyone's photos FOR FREE, suggests UK.gov
Copyright law reforms will keep m'learned friends busy
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.