We are developing the social individualist meta-context for the future. From the very serious to the extremely frivolous... lets see what is on the mind of the Samizdata people.

Samizdata, derived from Samizdat /n. - a system of clandestine publication of banned literature in the USSR [Russ.,= self-publishing house]

U.K. passport agency begins trial on biometric IDs

Computerworld reports that the U.K. Passport Service (UKPS) launched its six-month trial of biometric technology involving 10,000 volunteers, the same day that the U.K. government introduced a draft bill that could mandate compulsory biometric identity cards and a central database of all of its citizens.

As proposed by U.K. Secretary of State for the Home Department David Blunkett in November, the ID cards would carry biometric identifiers in an embedded chip, which would be linked to a secure national database called the National Identity Register.

The draft bill introduced today will be followed by a period of consultation, during which the public and politicians can voice their concerns or support of the proposal. The finalized bill will be introduced to Parliament sometime in the last three months of this year and will most likely become law before the next general election, which is expected to take place in the second quarter of 2005, Blunkett said.

The database would be created by 2010, and by 2013 ministers would decide if the ID cards would become compulsory for all U.K. citizens through the use of biometric passports or driver’s licenses. Though citizens would have to own and pay for the ID cards, they most likely wouldn’t be forced to carry them at all times, Blunkett said.

Blunkett has repeatedly hailed the biometric ID cards as a powerful weapon in the government’s fight against identity fraud, illegal workers, illegal immigration, terrorism and the illegal use of the National Health System (NHS) as well as other government entitlement programs.

The database is expected to contain information such as name, address, date of birth, gender, immigration status and a confirmed biometric feature such as electronic fingerprint, a scan of the eye’s iris or of a full face, according to a Home Office spokesman.

The UKPS trial will test for all three biometric traits: electronic fingerprints, iris scans and full-face scans, according to Caroline Crouch, a spokeswoman for Atos Origin SA, the Paris-based company running the trial for the government.

This is the first time that three different biometric technologies from three different suppliers have been integrated into one solution. The technical challenges may also account for why the trial, launched at Globe House, the London Passport Office, is three months behind the originally announced launch date.

Oh, joy… But there is a good fight put up by the Law Society in its official response to the program. Apart from technology issues, the professional body for lawyers in England and Wales has expressed concerns that the program is too wide-reaching and that the Home Office has been unable to prove it would stop identity fraud.

The Government has failed to show that similar schemes in other countries have helped to reduce identity fraud. Indeed, in the U.S., the universal use of Social Security numbers – a scheme not unlike the one the U.K. Government is proposing – has led to a huge growth in identity fraud.

Despite a compulsory identity card scheme, France continues to battle problems such as illegal working, illegal immigration and identity fraud – the very things the Home Office hopes to address with identity cards. If an identity card has not eliminated these challenges in France, what makes the Home Office believe that these problems can be resolved with an identity card scheme in the U.K.?

Janet Paraskeva, the chief executive of the Law Society concludes an article in Law Gazette with a useful reminder:

History shows that all types of cards are forgeable. From National Insurance numbers to passports, each scheme has been riddled with technological problems and linked with forgery and a profitable black market. The government’s proposals do not inspire confidence that practical problems will be effectively addressed or principled fears allayed. It is the Law Society’s view that the case for identity cards has not yet been made, and extreme caution should be exercised before the government plunges headlong into implementing these proposals.

Quite. I am yet to hear one truly convincing argument for ID cards. It seems there is about five ‘arguments’ for ID cards – immigration and asylum seekers, NHS, terrorism, identity fraud and ‘what-does-it-matter-we-already-have-passports-driving-licences-and-store/loyalty cards… None of these bear closer examination and each raises practical and civil liberties objections. However, the majority of the population probably believes in at least one of them (they all agree that paying for is a bad idea) and so the government does not need to make a clear case, as most people make it for themselves.

Unless a clear and forceful case is made about how ID cards will make matters worse for each one of us, I cannot see how the Big Blunkett will be stopped.

ID Bill will give officers right to scan eyes

Another article in The Times on ID and the ID Bill that will give officers right to scan eyes. The Home Secretary’s long-awaited draft Bill on ID cards, published today, will attempt to reassure civil liberties opponents by confirming that it will not be obligatory to carry the card even if, as expected, the scheme becomes compulsory in the next decade.

But police will be able to take biometric data from suspects on the spot if they are not in possession of their card. Officers would then be able to check the national database to find out who the suspect is.

Remember Minority Report?

There’s no way to play these appalling cards right

The Times reports that David Blunkett will today publish his draft Bill on identity cards. Tim Hames writes:

Unless obliged to do so for professional reasons, I have no intention of reading it. He can appear in as many radio and television studios as he likes, talking about the virtues of his blueprint, but I will not listen to him. I neither desire nor need to know about the provisions of his forthcoming pilot scheme either. I am against it.

Not just a little bit against it, either. I am eye-swivellingly, limb-twitchingly, mouth-foamingly hostile to the enterprise. And, as will become starkly obvious, pretty unpersuadable to boot.

That works for us… We also like his summing up of the arguments against ID cards in Britain that he finds compelling:

It seems to me that there are three basic arguments against introducing ID cards in Britain which are so compelling that they should immediately end any discussion on the subject. These are “whose body is it anyway?”, “why should I have to?” and “it’s not British”.

The “whose body is it anyway?” thesis is in many ways the simplest. The cards are not the problem with this proposal, it is the implications they have for identity. The State exists because we individuals choose to permit it to exist, not the other way round. I might volunteer data to the authorities but bureaucrats and politicians are not entitled to obtain access to my personal details.

I am against ID cards for the same reason that I am vociferously opposed to the idea, put about by the donor card lobby, that parts of me should be whipped away on death unless I opt out of their beloved programme. It is my identity and I have every intention of keeping it.

The “why should I have to?” assertion is no less powerful. ID cards are, in theory, a weapon in the War on Terror. Now I am well aware that a small set of fruitcakes out there have convinced themselves that if they blow me up while I travel on the Central Line into work, then they will secure some kind of “Get Into Heaven, Free” pass. I think we should be draconian with them.

Let Mr Blunkett’s men follow them around, tap their telephone calls, lock them up without charge and throw away the key (although, admittedly, al-Qaeda’s de facto allies in the legal fraternity may well release them).

I personally couldn’t agree more with his cry:

Forget the Magna Carta when it comes to Osama bin Laden and his lackeys. I do not, though, see why the existence of these fanatics should compel me to carry, and at all times, a piece of plastic, possibly containing a photograph, which, if the mug shot accompanying this column is any indication, is hardly destined to be flattering. There must be a better way of dealing with terrorism.

Can anyone spot which continental country he means?

Finally, the real clincher, “it’s not British”. ID cards occur in dubious continental countries whose constitutions keep collapsing, which have been democracies for about 20 minutes and where the policemen wear funny-shaped hats and carry firearms. They do not happen here.

And a rousing finale:

So my sincere advice to the Home Secretary, who in most regards is a quite splendid chap, is to abandon this legislation. If you cannot move me on this matter, a person who is otherwise a model of moderation, pragmatism and sanity, then your chances of convincing an utterly unreasonable bunch of headcases such as the House of Lords that this is a decent idea are minimal.

Furthermore, do not take at face value opinion polls which imply that 80 per cent of the electorate favour ID cards. What they mean is that eight out of ten voters believe that other people should have to suffer the inconvenience of carting them around. As far as I am concerned, the letters ID stand for the place that this draft Bill should be directed. In the Dustbin.

Hear, hear.

Thanks to Alex Singleton for the link.

Muslim women exempt from ID card photos

The Guardian reports that thousands of Muslim women will be exempted from having to show their faces on identity cards as the Government moves to allay fears among British Muslims that the new cards will be used to target them in the ‘war on terror’.

As David Blunkett, the Home Secretary, faced attack for not allowing enough debate over the introduction of the first ID cards in Britain since the Second World War, officials made it clear that if Muslim women do not want to reveal their faces in public, that would be respected. Instead of a photograph, there would be an exemption for certain people, who would only have to give fingerprint and iris-recognition data.

How about wearing a veil and refusing to be taken a photo on ‘religious grounds’. It may be worth a try…

Citizen tagging just gets cheaper

As if to address Trevor’s post from Tuesday, QinetiQ gives evidence to Home Affairs Select Committee on ‘ID cards’ promising that cards which hold information confirming an individual’s identity, could be produced for far less than £30. Neil Fisher, QinetiQ’s director of security solutions, who gave evidence to the Home Affairs Select Committee today, outlined the potential ‘benefits’ of an appropriate biometric identity authentication system – one that incorporates a unique physical signature such as facial recognition.

Encapsulating individuals’ biometrics in one or more authentication devices will ensure that their identity cannot be stolen and that they can prove, swiftly and simply, that they are who they say they are. In today’s digital age, this will give them secure access to a huge range of services. Additionally, if a portable data storage device like a barcode is used, it can link people irrefutably to their possessions – to their luggage at an airport, to their cars, and even to their baby in a maternity ward.

Absolutely, just moving the cattle, move along, nothing to see here. But why do I have to prove, ‘swiftly and simply, that I am who I say I am? Missing the point here, Mr Fisher…

We automatically assume that the so-called smart chips, which are relatively expensive, will be used in identity authentication devices such as ID cards. But by using current technologies like 2D barcodes or memory sticks, which cost from fractions of a penny to less than £1 to produce, it is possible to develop low-cost data storage devices without compromising on security.

Yes, tag them all and keep the change. For you, Mr. Big Blunkett, only £5 a piece.

Note: Thanks to Malvern Gazette reporter for alerting us to the story.

Home Office Admits ID Card Costs Unknown

The Home office has admitted that it has no idea how much innocent citizens will be charged for being forced to have an Identity Card.

At Lord’s Question’s today, Home Office Minister Baroness Scotland of Asthal was asked to confirm the current estimate of £70 per person (already almost twice the figure that was being talked about a year ago). She refused to do so, saying that the Government would not be able to assess the costs until the compulsory phase begins.

So every single person in the country is effectively being told to write the Government a blank cheque.

The predicted cost has already almost doubled within a year. Given the Government record on IT projects, how much higher will it go?

Full report in the Scotsman.

Cross-posted from The Chestnut Tree Cafe

Bruce Schneier on why ID cards will not make us safer

This editorial by Electronic security expert Bruce Schneier that was published in the Minneapolis Star Tribune does a pretty good job of demolishing the case against compulsory ID cards. The case is a pretty familiar one to readers of this site, but the main points are there: it’s not about the card itself, it is about the people who use it and check for it. And the question really is does the card help or hinder them in improving security, and does it help or hinder them if they wish to break the rules themselves, and in any event, knowing someone’s identity doesn generally greatly help in knowing their intentions.

In fact, everything I’ve learned about security over the last 20 years tells me that once it is put in place, a national ID card program will actually make us less secure.

My argument may not be obvious, but it’s not hard to follow, either. It centers around the notion that security must be evaluated not based on how it works, but on how it fails.

It doesn’t really matter how well an ID card works when used by the hundreds of millions of honest people that would carry it. What matters is how the system might fail when used by someone intent on subverting that system: how it fails naturally, how it can be made to fail, and how failures might be exploited.

The first problem is the card itself. No matter how unforgeable we make it, it will be forged. And even worse, people will get legitimate cards in fraudulent names.

Two of the 9/11 terrorists had valid Virginia driver’s licenses in fake names. And even if we could guarantee that everyone who issued national ID cards couldn’t be bribed, initial cardholder identity would be determined by other identity documents … all of which would be easier to forge.

Not that there would ever be such thing as a single ID card. Currently about 20 percent of all identity documents are lost per year. An entirely separate security system would have to be developed for people who lost their card, a system that itself is capable of abuse.

Additionally, any ID system involves people… people who regularly make mistakes. We all have stories of bartenders falling for obviously fake IDs, or sloppy ID checks at airports and government buildings. It’s not simply a matter of training; checking IDs is a mind-numbingly boring task, one that is guaranteed to have failures. Biometrics such as thumbprints show some promise here, but bring with them their own set of exploitable failure modes.

But the main problem with any ID system is that it requires the existence of a database. In this case it would have to be an immense database of private and sensitive information on every American — one widely and instantaneously accessible from airline check-in stations, police cars, schools, and so on.

The security risks are enormous.

→ Continue reading: Bruce Schneier on why ID cards will not make us safer

Biometric ID card bill on its way ‘in a month’

David Blunkett said (on April 7) that he was pushing on with plan for an ID card, with a draft bill to hit Parliament within months. The ID cards will contain biometrics and may be in the wallets of UK citizens by 2007 at the earliest. Blunkett told Radio Five Live that the introduction is necessary to give the government better control over immigration and prevent terrorists using multiple identities.

Blunkett, however, acknowledged that getting compulsory ID cards into law wouldn’t be an easy process. “It would be very surprising if there were not misgivings,” he said. A number of high-profile Cabinet colleagues have expressed objections to the scheme, including Home Secretary Jack Straw and Trade and Industry Minister Patricia Hewitt.

He also admitted there were practical issues to be overcome before the cards were made compulsory. Among them, that Parliament could only vote on the issue of making the cards compulsory when 80 per cent of UK citizens carried them anyway and that estimates of how much the introduction would cost the taxpayer differ wildly – from around £1bn to around £3bn.

While biometrics are high on the UK government’s love list, the rest of the Europe is taking a step back from the idea.

The civil liberties wing of the European Parliament has delayed proposals for biometric passports until the tail end of this year, after elections to the parliament have taken place. MEP Ole Sørensen said

The European Parliament is [currently] not in a position to endorse the proposals… We need proper democratic scrutiny of this far-reaching legislation, which in the worst case scenario could represent a step towards systematic registration of EU citizens’ personal data.

Identity cards last time round

I am currently re-reading Are We At War?, a collection of letters to the Times 1939-1945. (Pub. Times Books 1989.) Here are some extracts from letters on the subject of identity cards:

From a letter from Antony Wells:

Sir, -While obtaining, recently, a National Registration identity card for my small daughter, I remarked that it was pleasant to think all this bothersome business would soon no longer be necessary. I was blandly informed by the clerk that my expectation was quite wrong, since registration was to continue after the war. On looking at the card in my hand, I discovered it was valid until 1960.

In happy fact, identity cards were seen off as a result of a court case soon after the war. But the fact that the government saw fit to plan for them to expire so many years after issue shows how purported “emergency measures” have a way of becoming permanent. The letter was written in December 1944 and the war was quite clearly nearing its end; the government could not have seriously believed it would go on until 1960.

This second extract comes from a letter from (Baron) Quickswood:

…Such cards may seem only a small inconvenience, but they are seriously dangerous to liberty in two ways: -First, they facilitate all sorts of further regimentation of citizens, and that is, of course, why it is desired to retain them; secondly, they have a most mischievous moral effect in treating the individual as a numbered item in the aggregate that makes up the State. There lie before us two alternative conceptions of the State: it may be thought an organization useful to individuals and essentially their servant, or it may be thought a pagan demigod for whom the individual exists, whose service is his greatest glory and whose supremacy is without limit.

…We have to fear an Anglicized totalitarianism, humane and benevolent but esentially destructive of personal liberty and initiative; and there will be a strong coalition of philanphropists and bureaucrats eager to regulate their fellow-citizens. We must be jealous for our liberties, and to begin with must resist being numbered by convicts in order to facilitate our servitude.

I have nothing to add to that.

The Register on false certainty

John Lettice writes for The Register on the difficulties associated with relying on biometrics.

It will all be very costly, he says, and the pseudo-certainty that it supplies may actually cause mistakes to be made, when the ID checks out but the surrounding facts look dodgy.

If you do not check for duplicates, for example, then the system is not going to tell you that Fred Bloggs of Sollihul is in fact Osama bin Laden. A silly example? Yes and no – obviously, it is not very likely that our current entry systems are going to let someone called Fred Bloggs walk through when they look strangely like Osama bin Laden. However, if he checks out as Fred Bloggs, UK citizen, with no record under our future automated systems, then general appearance is rather less likely to be challenged, or even noticed. So the assumed reliability of the systems could actually increase the security of fugitives in the event of their having successfully obtained clean, genuine ID.

There is much more.

Compulsory ID Cards “By 2008”

The Independent reports that ID Cards could be compulsory within less than five years. This is much sooner than the ten year cooling off period originally agreed by Cabinet. Blunkett’s scheme apparently has Tony Blair’s personal support.

A draft Bill will be introduced next month with legislation proper in the November 2005 session (assuming Labour are still in power). The “fast track” Bill will allow compulsion to be introduced without further legislation being necessary, probably by 2008.

The Independent also reports an unnamed Minister repeating Blair’s line that “The argument has moved on from concern about civil liberties”.

It hasn’t.

The civil liberties issues with ID cards are just as strong today as they were fifty years ago. If the Government doesn’t want to talk about them then we must do so, loudly and publicly. We need to make this an election issue.

If we give up our civil liberties then the terrorists will have won.

Cross-posted from The Chestnut Tree Cafe

A flowing river of lies

Blair is a liar. But of course the notion any politician does not utter more than the occasional porkie pie is a very uncontroversial one. But as I said in the wellspring of lies yesterday, one can but marvel at the bare faced effrontery of it when our political masters stand up and state something is true when any person not wilfully blind (or David Blunkett) can see it is patently untrue just by reading a few newspapers or one of several thousand blogs and websites.

Mr Blair said political objections had been removed and the only obstacle now was technical. He made clear he wanted the project to “move forward” as soon as it was feasible.

He risked antagonising civil rights campaigners by claiming they no longer objected to the idea, which would see each citizen required to buy a computer-readable card that would record personal details.

Risks antagonising? Civil rights campaigners no longer object to the idea? Excuse the French, but, what the fuck? Blair is a bare faced liar. The only other alternative to that is that he is so ignorant of goings on outside the cloistered world of 10 Downing Street as to be completely deluded.

I will try my damnedest to refuse to get an ID card and I will openly declare that I do not have one when the sun rises on that evil day. I urge as many people as possible to not just resist but to do so openly when the time comes. They will try to make it very difficult to live without one so we must make the system unworkable by using whatever civil disobedience and intelligent resistance is needed. Do not cooperate with your own repression. Time to get creative, people. Time to get angry.

Cross-posted from Samizdata.net