Transcript Presentation at Intellect Identity and Information Event, October 2009

Perceptions of Government
Technology, Surveillance
and Privacy: The UK
Identity Cards Scheme
Dr Edgar A. Whitley
Reader in Information Systems
London School of Economics
and Political Science
Perceptions of Government
Technology, Surveillance
and Privacy: The UK
National Identity Service
Dr Edgar A. Whitley
Reader in Information Systems
London School of Economics
and Political Science
(Updated)
• Indicates slides updated after presentation
to include reflection on comments from
James Hall
Demand drops
Passports and identity cards
Cost
report
Products issued
over 10 years
Oct 2009
88.2 million
May 2009
96.7 million
8%-9% decrease in
projected number of
products issued over
10 years
Cost
report
Products issued
over 10 years
Oct 2009
88.2 million
May 2009
96.7 million
British/Irish citizens
and EEA/Swiss
nationals resident in
the UK
British and Irish
citizens resident in
the UK
Support slumps
• Research carried out by ICM research on
behalf of NO2ID shows
– 60 per cent of the UK population think that ID
cards are a "bad idea"
– 38 per cent say they are a “good idea”.
– The National Identity Register is opposed by a
two to one majority.
Support for the service has
decreased ... This continues the
general downtrend in levels of
support over time.
Main reasons for disagreement
•
•
•
•
It infringed personal freedom
It would not work
There was no need for it
It would be too costly
How identity cards might
work
Proving age
• Sita’s gone out with a group of
friends after college. They’re
all celebrating and Sita offers
to buy a round. When she gets
to the bar the barman asks for
proof that she’s over 18. Sita
laughs and says she’s 19, but
the barman is new and
demands proof of age. Sita
digs in her bag and pulls out
her identity card. She hands it
over which confirms that she is
in fact 19. As she puts the card
back in her purse she is
relieved that she no longer has
to hand over documents with
her address on them to prove
her age.
(Updated)
• James Hall: Different levels of assurance
offered:
– Physical inspection “flash and go”
– Phone call centre to confirm card is valid
– Online verification of card: “not as of day 1”,
“a medium term intent”
Does this functionality have to
be provided by a State issued
credential?
Press images
• Home Secretary Alan Johnson and his
identity card
• Details his full name, date of birth, place
of birth
Mother’s maiden name
(Updated)
• James Hall: Birth certificates of celebrities
and politicians are frequently requested
• Identity card design means that they can
be requested from anyone who presents a
card for visual inspection
Should this risk be introduced
by a State issued credential?
A way forward?
A way forward?
Breaking the link with passports
Passports
• Intended for travel purposes
• Design specified by International Civil
Aviation Organization
What is required
• A ‘relying party’ needs to know that the
other party is who they say they are (or
has the attributes that they claim to
possess)
• Needs to know the basis of this assertion
(i.e. who is the ‘identity service provider’?)
• Ability to operate securely in online
environments
What isn’t required
• A one size fits all solution
– Different levels of assurance and risk
• Excessive data collection and disclosure
– Data minimisation
– Yes / No rather than full name, date and place
of birth
Towards a marketplace of
identity service providers
• Offering different levels of assurance
• Providing interoperable functionality
• Fingerprint biometrics not required for all
service levels
Contact details
Dr Edgar A. Whitley
Department of Management
London School of Economics and Political
Science
[email protected]
http://personal.lse.ac.uk/whitley
http://identityproject.lse.ac.uk