Chip-Based Driver's Licenses Pose Enormous Problems

By Thomas A. Schatz

Thu, February 02, 2006CIO

The Department of Homeland Security (DHS) could soon issue a regulation with serious ramifications for taxpayers, drivers and government officials. The agency is considering requiring all driver’s licenses to be embedded with computer chips, which will be more costly and less secure than upgrading the existing technology for licenses.

Passed in May 2005, the Real ID Act for the first time set federal standards for authenticating and securing state-issued driver’s licenses. DHS, which has no previous experience in making ID cards on a massive scale, is charged with setting forth the regulations to implement the new requirements. While states technically are not forced to accept the federal standards, any refusal to comply could hinder their residents’ ability to get a job, receive Social Security or travel by plane. Real ID was tucked into a massive spending bill and passed without any congressional debate; however, it is clear that Congress intended DHS to base its regulations on the states’ existing best practices.

DHS has two options for licenses:magnetic stripes or two-dimensional bar codes; or contactless integrated circuits such as radio frequency identification (RFID) chips. Whichever alternative is used, the new system will place a heavy burden on state and local governments, especially departments of motor vehicles. States will now have to verify birth certificates, federal immigration documents and Social Security numbers with the appropriate federal departments, build a database to store and secure identification documents and train personnel to use the new system. Fees and taxes will have to be increased to cover whatever costs are not paid for by the federal government.

But computer chip technology would be the far more expensive of the two options. Citizens Against Government Waste examined the issue in its October 2005 report, Real ID: Big Brother Could Cost Big Money. The total cost of issuing new licenses with embedded computer chips to 196 million drivers could reach $17.4 billion, or $348 million per state. The average cost of a license would shoot from between $10 to $25 to more than $93. Computer chips could be even more expensive than estimated because the chips are brittle and licenses containing them would likely need to be replaced more frequently than non-chip licenses. In addition, the life expectancy of the rapidly-changing technology could require frequent and expensive infrastructure upgrades.

DHS must be mindful of lessons from past government attempts to build complex information systems that ended in complete failure. The most costly example in terms of dollars and security was the FBI’s Virtual Case File (VCF). The system was supposed to replace an antiquated file system that relied on hard copies with an electronic system instantly accessible to every field agent and office. In June 2001, the FBI budgeted $170 million for the building and implementing of VCF. Doubts were raised about the project as early as 2003, yet the FBI pressed on and authorized a $17 million testing program in 2004, even though it was clear by then that the system would never work. When VCF was scrapped in March 2005, the FBI had wasted $104 million.

CIO

Loading...
Security MarketSpace
Practical Approaches for Securing Web Applications
Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle. Learn more »
An Executive's Guide to Web Application Security
Since so many Web sites contain vulnerabilities, hackers can leverage a relatively simple exploit to gain access to a wealth of sensitive information, such as credit card data, social security numbers and health records. It's more important than ever to examine your Web application security, assess your vulnerability and take action to protect your business. Learn more »
Web Application Vulnerabilities
Security managers may work for midsize or large organizations; they may operate from anywhere on the globe. But inevitably, they share a common goal: to better manage the risks associated with their business infrastructure. Increasingly, Web application security plays a significant role in achieving that goal. Learn more »
Retooling IT for a Mobile Workforce
Check out this research note from IDC for guidance. Learn more »
Today's Risky Data Environment
This paper explains how an IT and security service provider can provide a practical, manageable and reliable solution. Learn more »
Business Continuity - Are You Always Open for Business?
This Oracle business brief explains how mid-sized can improve performance by creating an IT infrastructure that makes working faster, easier and more effective. Learn more »
 
SPONSORED LINKS
 

Making Consumer Two-Factor Authentication Simple and Cost-Effective

Mining the Cloud to Ease the Enterprise Compliance Burden

Solve Five Key IT Security Challenges with Cloud-Based Authentication

White Paper: Managed Security for a Not-So-Secure World

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

White Paper: A Security Blueprint Delivered From within the Network

Return on Information: Google Enterprise Search pays you back

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

White Paper: Legacy Tools: Not Built for the Helpdesk

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Seven Design Requirements for Web 2.0 Threat Protection

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

White Paper: Visibility and the New Normal of Mobile Work

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

Top Five CIO Challenges

Authentication as a Service by Forrester Research

Cloud-Based Authentication for Next-Generation Extranets

Mobile Security: The Essential Ingredient for Today's Enterprise

IDC White Paper: CCM for IT Compliance and Risk Management

Keeping Your Members Safe from Online Scams and Predators

Learn about the growing threat of insider data theft.

Upgrading to VMware vSphere with vWire

Maximizing website Return on Information with high-quality search

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: 5 Best Practices for Smartphone Support

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

The Total Economic Impact of Network Security Intrusion Prevention

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Streamline IT Costs. Boost Performance with WAN Optimization.

 
 
RESOURCE CENTER