Chip-Based Driver's Licenses Pose Enormous Problems

By Thomas A. Schatz
Thu, February 02, 2006

CIO

The Department of Homeland Security (DHS) could soon issue a regulation with serious ramifications for taxpayers, drivers and government officials. The agency is considering requiring all driver’s licenses to be embedded with computer chips, which will be more costly and less secure than upgrading the existing technology for licenses.

Passed in May 2005, the Real ID Act for the first time set federal standards for authenticating and securing state-issued driver’s licenses. DHS, which has no previous experience in making ID cards on a massive scale, is charged with setting forth the regulations to implement the new requirements. While states technically are not forced to accept the federal standards, any refusal to comply could hinder their residents’ ability to get a job, receive Social Security or travel by plane. Real ID was tucked into a massive spending bill and passed without any congressional debate; however, it is clear that Congress intended DHS to base its regulations on the states’ existing best practices.

DHS has two options for licenses:magnetic stripes or two-dimensional bar codes; or contactless integrated circuits such as radio frequency identification (RFID) chips. Whichever alternative is used, the new system will place a heavy burden on state and local governments, especially departments of motor vehicles. States will now have to verify birth certificates, federal immigration documents and Social Security numbers with the appropriate federal departments, build a database to store and secure identification documents and train personnel to use the new system. Fees and taxes will have to be increased to cover whatever costs are not paid for by the federal government.

But computer chip technology would be the far more expensive of the two options. Citizens Against Government Waste examined the issue in its October 2005 report, Real ID: Big Brother Could Cost Big Money. The total cost of issuing new licenses with embedded computer chips to 196 million drivers could reach $17.4 billion, or $348 million per state. The average cost of a license would shoot from between $10 to $25 to more than $93. Computer chips could be even more expensive than estimated because the chips are brittle and licenses containing them would likely need to be replaced more frequently than non-chip licenses. In addition, the life expectancy of the rapidly-changing technology could require frequent and expensive infrastructure upgrades.

DHS must be mindful of lessons from past government attempts to build complex information systems that ended in complete failure. The most costly example in terms of dollars and security was the FBI’s Virtual Case File (VCF). The system was supposed to replace an antiquated file system that relied on hard copies with an electronic system instantly accessible to every field agent and office. In June 2001, the FBI budgeted $170 million for the building and implementing of VCF. Doubts were raised about the project as early as 2003, yet the FBI pressed on and authorized a $17 million testing program in 2004, even though it was clear by then that the system would never work. When VCF was scrapped in March 2005, the FBI had wasted $104 million.

Continue Reading

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.
This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.
Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.
This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.
Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.
3 minute Flash video - overview of the need for and value of Configuration Control.
Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center