Advertisement
Promo

Security management Toolkit in association with http://ad.doubleclick.net/clk;214682528;14505427;f?http://uk.blackberry.com/ataglance/security/

ID must 'engage consumers' hearts and minds'

Kable

Published: 10 Mar 2008 11:39 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

A government report says the National Identity Scheme will fail if it does not primarily serve the public, including being free to join.

"To engage consumers' hearts and minds on the scale required, enrolment and any tokens should be provided free of charge," says Sir James Crosby, the former HBOS chief executive, in his much-delayed report on identity, published on 6 March, 2008.

Crosby's report shifts the emphasis of government policy away from identity management and towards identity assurance. It states: "ID assurance meets a clear and growing consumer need, whereas ID management addresses the interests of the owners of any identity database."

He recommends that the scheme should be accountable to Parliament, rather than government; that the amount of centrally held data should be minimised; and that citizens should be able to block reuse of their data except for national security purposes.

Crosby writes that there is a "fundamental" difference between providing individuals with a useful "ID assurance" service, which they would use enthusiastically and frequently in the manner of Google's free service, and constructing an "ID management" system, designed to serve the owner of the database through data sharing and consolidation.

He says that people must want to use an identity scheme, or it will fail — even from a security point of view. "An ID system will only help fulfil national security goals if it achieves mass take-up and usage. If citizens don't use a system regularly, it will be capable of providing very limited data for national security agencies. Thus, even the achievement of security objectives relies on consumers' active participation."

He adds: "Ironically therefore, the system that is genuinely consumer-led, because it meets consumers' needs and inspires their trust, would deliver a better national security outcome than one with its origins explicitly in security and data sharing across government."

Sir James also wrote that biometric data has its uses in tackling multiple identities, in reissuing tokens or in tackling identity fraud. But he warns that it "isn't the silver bullet", and that cross-checking biographical data on a number of databases — as financial services firms do — provides "the highest levels of assurance".

He concludes that, without a universal ID assurance system, British consumers will have to use a complex array of processes. "As a result, the UK will fail to secure the economic and social advantage achievable at the forefront of ID assurance systems and process," he wrote, which would become "tantamount to locking in disadvantage".

"James Crosby's report strongly challenges the Home Office concept of identity," said Philippe Martin, senior analyst at Kable, adding that it represented "another serious blow" to what he called the department's "stubborn authoritarian ambition". He noted that the fact that it had taken 18 months to produce a 48-page report — commissioned by Gordon Brown as chancellor &mda sh; suggested the original draft had been somewhat longer.

Martin added: "Luckily Jacqui Smith, the new home secretary, seems to have scaled down the vision, originally put forward by David Blunkett, in the latest NIS delivery plan published yesterday."

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?


Company/Topic Alerts

Create a new alert from the list below:




Video icon

Video

Sentry Posts Blog

DNA details of innocent will be kept f...

The government has announced that it plans to keep innocent people's DNA details for up to six years. In response to a consultation it launched last December, the government said... More

5 comments

Motorola Droid Drops Today: Happy Droi...

Motorola Droid Drops Today: Happy Droid Day America! Author: Eric Everson, Mobile Security Expert If you’re wondering what all of the buzz is about with words like Droid and Android... More

Post a comment

Mobile Security Profile: BlackBerry St...

Mobile Security Profile: BlackBerry Storm2 Author: Eric Everson BlackBerry handsets are a staple of office culture; from syncing calendars to sharing business-related data,... More

Post a comment

Featured Talkback

In association with Network Liberation Movement
It seems to me this is a burden being placed on the wrong shoulders. There is not an It system in the world that can stop an individual taking information in their heads and spewing out at the nearest undesirable third party.

By: RonaldWilkins

Read full story:
Deloitte: People are still weakest security link


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters