Feeds

Homeland Security plays real reasonable on Real ID

Chertoff: technology will make privacy better

Choosing a cloud hosting partner with confidence

The Department of Homeland Security fronted up as a reasonable gent yesterday when it granted state civil servants extra time to implement the Real ID Act.

In what amounted to a standard "we're listening" tip of the hat to civil liberties campaigners, the DHS issued guidelines for implementing the Real ID Act, which play down many of the most contentious aspects of program to nationally standardise identity documents.

The long-awaited rules (PDF), issued on Thursday in Washington DC, will ease the timetable for state governments to adopt the Act, and delay an initial insistence on RFID technology and biometrics.

The Real ID Act had required states to put the new system in place by May 11 2008. The DHS recommendation will allow extensions until the end of 2009. The program should see the country's 245 million licensed drivers Real ID-compliant by the close of 2013.

The DHS agreed that the expected cost to state governements of implementing Real ID, will be $11bn. Congress in Washington has ponied up $100m.

At a press conference to set out the rules, DHS chief Michael Chertoff, played the Honest Joe card: "It's very simple and it's really a matter of common sense. Applicants for driver's licenses will need to bring documents to their state Department of Motor Vehicles offices to validate or prove five things: who they are, what their date of birth is, what their legal status is in the United States, their social security number and their address. None of this is top secret stuff."

There are no solid plans to encrypt the barcode, meaning for example that bars might have access to patrons' home addresses. Inviting comment in its recommendations, the DHS said it "leans toward" scrambling the data, but said that cost might outweigh any privacy benefits. Further, Chertoff said the way that organisations use data from a Real ID is a matter for state legislatures.

RFID is still under consideration. But to begin with, Real ID driving licenses and ID cards will carry a two-dimensional barcode. Chertoff played down the distinction between data on a chip and data printed on plastic or paper. He said: "I don't think that technology increases the threat to privacy. Whether you read the card and copy it down or whether you run the magnetic strip through like you do with a credit card, I think the bottom line is the person who gets the card can read the information."

He added: "I don’t think that technology makes it worse. In fact, I actually think it makes it better."

Such a comment is unlikely to pacify opponents: the rules would effectively create a national database of personal data callable by any state. The history of such systems, such as the National DNA Database in the UK, suggest they are susceptible to mission creep; civil libertarians point out that once established, the only way for a database to go is bigger.

The DHS is taking comments for 60 days. ®

Intelligent flash storage arrays

More from The Register

next story
Scrapping the Human Rights Act: What about privacy and freedom of expression?
Justice minister's attack to destroy ability to challenge state
WHY did Sunday Mirror stoop to slurping selfies for smut sting?
Tabloid splashes, MP resigns - but there's a BIG copyright issue here
Google hits back at 'Dear Rupert' over search dominance claims
Choc Factory sniffs: 'We're not pirate-lovers - also, you publish The Sun'
EU to accuse Ireland of giving Apple an overly peachy tax deal – report
Probe expected to say single-digit rate was unlawful
Inequality increasing? BOLLOCKS! You heard me: 'Screw the 1%'
There's morality and then there's economics ...
While you queued for an iPhone 6, Apple's Cook sold shares worth $35m
Right before the stock took a 3.8% dive amid bent and broken mobe drama
4chan outraged by Emma Watson nudie photo leak SCAM
In the immortal words of Shaggy, it wasn't me us ... amirite?
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.