Saturday, January 8, 2011

The Trusted Identities in Cyberspace National ID Card Won't be a National ID Card

"Obama to hand Commerce Dept. authority over cybersecurity ID"
Declan McCullagh, CNET (January 7, 2011)

"President Obama is planning to hand the U.S. Commerce Department authority over a forthcoming cybersecurity effort to create an Internet ID for Americans, a White House official said here today.

"It's 'the absolute perfect spot in the U.S. government' to centralize efforts toward creating an 'identity ecosystem' for the Internet, White House Cybersecurity Coordinator Howard Schmidt said...."

The CNET article points out that this federal online identity authority could have gone to the National Security Agency or the Department of Homeland Security. As the author says:

"...The move ... is likely to please privacy and civil-liberties groups that have raised concerns in the past over the dual roles of police and intelligence agencies....

The Lemming isn't often on the same page as many "privacy" and "civil liberties" advocates. This time, though, it's a (slight) relief that the DHS or NSA didn't get this particular authority.

This is not a political blog, by the way, and the Lemming will get back to that.

National Strategy for Trusted Identities in Cyberspace: 'Trust Us'

"...The Obama administration is currently drafting what it's calling the National Strategy for Trusted Identities in Cyberspace, which [U.S. Commerce Secretary Gary ]Locke said will be released by the president in the next few months. (An early version was publicly released last summer.)

" 'We are not talking about a national ID card,' Locke said at the Stanford event. 'We are not talking about a government-controlled system. What we are talking about is enhancing online security and privacy, and reducing and perhaps even eliminating the need to memorize a dozen passwords, through creation and use of more trusted digital identities.'

"The Commerce Department will be setting up a national program office to work on this project, Locke said.

"Details about the 'trusted identity' project are remarkably scarce. Last year's announcement referenced a possible forthcoming smart card or digital certificate that would prove that online users are who they say they are. These digital IDs would be offered to consumers by online vendors for financial transactions...."

As far as it goes, this sounds okay. A major program like this might take a few months to get planned and organized. As for this not being a "national ID card," the Lemming is fairly confident that the national ID card will not be called a national ID card.

Still: How dim do the folks inside the beltway think the rest of us are?

The Lemming said that this isn't a political blog. It's not. Not in the sense that the Lemming claims that everything done by one particular person or group is brilliant: and that everybody who disagrees is a doo-doo head. If you're curious about this blogger, check out "About the Lemming."

Back to the national ID card that won't be a national ID card.

The National ID Card That's Not a National ID Card

Some folks - not quite the same as the lot who have fits over being seen in public and other 'privacy' issues - got their skivvies in a knot a few decades back, when Americans started getting Social Security Numbers. "The mark of the Beast" was a phrase that came up fairly often. They didn't like credit cards, either, some of them: and that's another topic.

It's the Lemming's considered opinion that there isn't anything wrong, in principle, with a national online ID system. Good grief, a global system that includes anybody in Earth orbit makes sense. ("More Postcards From the Frontier" (April 7, 2010))

The Internet is big.

It's also the Lemming's considered opinion that any sort of ID system is subject to abuse. It's that "sparks fly upward" aspect of human nature. (Job 5:7)

Does that mean that the Lemming thinks the Obama administration is planning to restrict who gets to put information and opinions online, and who gets to see what? The Lemming doesn't know: but having experienced the trailing edge of McCarthyism and done time in academia when political correctness was in flower, the Lemming is - concerned.

Assuming that the feds follow through on what's been said so far, the national-ID-card-that-isn't may be well inside the Lemming's comfort zone. Back to that CNET article.

"...Schmidt stressed today that anonymity and pseudonymity will remain possible on the Internet. 'I don't have to get a credential, if I don't want to,' he said. There's no chance that 'a centralized database will emerge,' and 'we need the private sector to lead the implementation of this,' he said.

"Jim Dempsey of the Center for Democracy and Technology, who spoke later at the event, said any Internet ID must be created by the private sector--and also voluntary and competitive..."

Those words - "private sector ... voluntary and competitive" - make this system seem a whole lot more reasonable to the Lemming.

You Want Scary? Try These On For Size

"The Lemming" is a pseudonym, but the Lemming doesn't make a secret of who and what he is: a middle-aged man living in central Minnesota. A few years ago, the Lemming settled on the screen name Aluwir for new online community accounts.

Not because the Lemming wants to hide his true identity: but because "Aluwir" is a whole lot more distinctive than something like Brian8327 or "Norski." There are even a fair number of folks named "Brian Gill" online. And, for a while, one of the other Brian Gills was in a line of work similar to mine. Which is yet another topic.

The Lemming doesn't mind - at all - that folks know it's really Aluwir/Brian Gill posting on this blog, and elsewhere online. Living in a small town, where quite a large portion of the population knows my by sight may have something to do with that. Sauk Centre is a wonderful place to live: but if you prefer to be a nonentity lost in a throng of anonymous strangers, this small town isn't for you.

The Lemming is getting off-track again.

Americans have had Social Security Numbers for several generations now, and it's the Lemming's opinion that the SSN system didn't bring on global warming, food riots, or communist oppression.

Actually, the Lemming thinks that eventually there will be a sort of more-or-less-universal ID system that should give privacy advocates, civil-liberties activists and end-times preachers fits.
DNA Database
This doesn't happen very often, but sometimes babies get mixed up in the hospital. Or kidnapped. It's not a perfect world: and that's yet again another topic.

What the Lemming foresees is an extension of procedures and technologies we have right now. Footprints of infants are, as the Lemming recalls, taken in the delivery room - along with a blood sample. The first is to identify the baby, a sort of backup to the wrist tag. The second is for some now-routine medical tests.

The Lemming can't remember running into someone who thinks that the 'footprint-and-blood-test' procedure is some kind of plot. Maybe common sense is more common than it sometimes seems.

We don't, to the best of the Lemming's knowledge, have a system for analyzing a person's DNA that's fast, accurate, and inexpensive enough for this: but that blood sample could be used to get a sample of the baby's DNA.

An interstate ID system that includes a person's DNA code? The folks who object to crooks being convicted because they left evidence at the scene of their crimes wouldn't like that a bit, the Lemming suspects. The rest of us might be glad when the system made it possible to track a missing child.
Tracking Chips
Outfits like 24PetWatch have been providing pet ID microchips for years. The chips are tiny, are injected in places that don't bother the pet, and make it possible to get a positive ID on a recovered animal.

So far, the Lemming doesn't recall anyone suggesting that they be used in people.

The Lemming doesn't see anything wrong, in principle, with the idea.

Right now, the microchips can't be picked up at a distance, so it takes something like an airport screening to find out if Bowser is really pedigree Huffelton III. Given what's happened with GPS devices, the Lemming figures it's only a matter of time before something like the cell phone network could be used to find out where a kidnap victim - or the kidnapper - is in minutes.

Could a system like that be abused? Of course it could. It could also save lives. The trick will be to work out a system of social and legal controls to keep some folks from taking advantage of others.

And that's the way it's been for thousands upon thousands of years. Which is several other topics.

Somewhat-related posts:

2 comments:

Brigid said...

There's something wrong here: "the national-ID-card-that-isn't well be well inside"

The Friendly Neighborhood Proofreader

Brian, aka Aluwir, aka Norski said...

Brigid,

Definitely something wrong there. It's fixed now. Odd, to say the least. A sort of ten-finger stutter?

Unique, innovative candles

Visit us online:
Spiral Light CandleFind a Retailer
Spiral Light Candle online store

Pinterest: From the Man Behind the Lemming

Top 10 Most-Viewed Posts

Today's News! Some of it, anyway

Actually, some of yesterday's news may be here. Or maybe last week's.
The software and science stuff might still be interesting, though. Or not.
The Lemming thinks it's interesting: Your experience may vary.
("Following" list moved here, after Blogger changed formats)

Who Follows the Lemming?

WebSTAT

Family Blogs - Blog Catalog Blog Directory