Chip-Based Driver's Licenses Pose Enormous Problems

By Thomas A. Schatz

Thu, February 02, 2006CIO

The Department of Homeland Security (DHS) could soon issue a regulation with serious ramifications for taxpayers, drivers and government officials. The agency is considering requiring all driver’s licenses to be embedded with computer chips, which will be more costly and less secure than upgrading the existing technology for licenses.

Passed in May 2005, the Real ID Act for the first time set federal standards for authenticating and securing state-issued driver’s licenses. DHS, which has no previous experience in making ID cards on a massive scale, is charged with setting forth the regulations to implement the new requirements. While states technically are not forced to accept the federal standards, any refusal to comply could hinder their residents’ ability to get a job, receive Social Security or travel by plane. Real ID was tucked into a massive spending bill and passed without any congressional debate; however, it is clear that Congress intended DHS to base its regulations on the states’ existing best practices.

DHS has two options for licenses:magnetic stripes or two-dimensional bar codes; or contactless integrated circuits such as radio frequency identification (RFID) chips. Whichever alternative is used, the new system will place a heavy burden on state and local governments, especially departments of motor vehicles. States will now have to verify birth certificates, federal immigration documents and Social Security numbers with the appropriate federal departments, build a database to store and secure identification documents and train personnel to use the new system. Fees and taxes will have to be increased to cover whatever costs are not paid for by the federal government.

But computer chip technology would be the far more expensive of the two options. Citizens Against Government Waste examined the issue in its October 2005 report, Real ID: Big Brother Could Cost Big Money. The total cost of issuing new licenses with embedded computer chips to 196 million drivers could reach $17.4 billion, or $348 million per state. The average cost of a license would shoot from between $10 to $25 to more than $93. Computer chips could be even more expensive than estimated because the chips are brittle and licenses containing them would likely need to be replaced more frequently than non-chip licenses. In addition, the life expectancy of the rapidly-changing technology could require frequent and expensive infrastructure upgrades.

DHS must be mindful of lessons from past government attempts to build complex information systems that ended in complete failure. The most costly example in terms of dollars and security was the FBI’s Virtual Case File (VCF). The system was supposed to replace an antiquated file system that relied on hard copies with an electronic system instantly accessible to every field agent and office. In June 2001, the FBI budgeted $170 million for the building and implementing of VCF. Doubts were raised about the project as early as 2003, yet the FBI pressed on and authorized a $17 million testing program in 2004, even though it was clear by then that the system would never work. When VCF was scrapped in March 2005, the FBI had wasted $104 million.

CIO

Loading...
Security MarketSpace
8 Tactics to Combat Vulnerabilities
This white paper reviews 8 key elements of vulnerability management and provides advice on combating known vs. unknown vulnerabilities. Learn more »
Email and Web Threats Require a Layered Defense
Learn how web threats are changing and how using a layered defense strategy can give you the security you need. Learn more »
Take Fraudsters Out of the Game
Easily identify account-device relationships and get data for in-depth forensic analysis. Learn more »
Mobile Security Landscape
This paper examines the current mobile security landscape, including myths surrounding the risks and threats, and how organizations can establish a solid mobile security strategy. Learn more »
Reducing Energy Costs in Your Data Center
This white paper examines the most common roadblocks to improving data center efficiency. Learn more »
Security convergence equals network security cost savings
Security convergence equals network security cost savings Learn more »
IBM ISS X-Force Threat and Risk Report
Read this Trend and Risk report from IBM® ISS X-Force® to learn statistical information about all aspects of threats that affect Internet security, including software vulnerabilities and public exploitation, malware, spam, phishing, web-based threats, and general cyber criminal activity. Learn more »
 
SPONSORED LINKS
 

Mobile Security: The Essential Ingredient for Today's Enterprise

IDC White Paper: CCM for IT Compliance and Risk Management

Keeping Your Members Safe from Online Scams and Predators

Learn about the growing threat of insider data theft.

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: 5 Best Practices for Smartphone Support

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

The Total Economic Impact of Network Security Intrusion Prevention

Join us at the US-Brazil IT-BPO Summit, on November 10th in New York.

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

White Paper: Visibility and the New Normal of Mobile Work

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Top Five CIO Challenges

Streamline IT Costs. Boost Performance with WAN Optimization.

Want to know how you can maximize employee productivity?

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

A new fleet of PCs with a total ROI in 10 months. Find your ROI.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

White Paper: Managed Security for a Not-So-Secure World

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

White Paper: A Security Blueprint Delivered From within the Network

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

White Paper: Legacy Tools: Not Built for the Helpdesk

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Seven Design Requirements for Web 2.0 Threat Protection

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

Unified Communications: Thoughts, Strategies and Predictions. Join the discussion

Read the RSA report: Security for Business Innovation

Webcast: Looking to the Cloud for Email and Collaboration Services

64-page prescriptive guide to security, compliance, and IT operations.

Keep your IT expertise up to date. Join the Intel Premier IT Professionals.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

 
 
RESOURCE CENTER