ID card costs rise amid security concerns

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

Topics

ID cards

NEWS

Opponents of ID cards have renewed their attacks on the scheme, claiming security is being watered down even as the cost of the cards rises.

Cards will only be checked against biometric details on the National Identity Register (NIR) in a "minority of cases" according to Home Office documents, prompting accusations it has been relegated to a "flash and go" card.

The Home Office consultation documents said: "Most transactions involving the identity cards are likely to be visual checks of the card, or a local check of the information held on the card (eg using a scanner).

"In only a minority of cases — requiring the highest standard of identity assurance — will it be necessary to check identity against information on the NIR."

Ian Angell, a professor at the London School of Economics (LSE) and one of the authors of a report into the scheme, said this undermines the government's claim the ID card system will offer a rock-solid way of verifying a person's identity by locking an ID to biometric details on a secure database.

And Phil Booth, national co-ordinator for ID cards pressure group NO2ID, said: "It makes the whole system a nonsense; the government is saying that ultimately the whole national identity scheme will come down to a 'flash and go' system.

"A system that is presumed secure which is in fact insecure... is worse than having no system at all."

LSE's Angell said: "If they do not check the database then fraud will go up as criminals will quickly figure this out and be able to make a copy of the card and change the photo.

"These shortcuts are going to turn it into a hugely expensive failure."

But an Identity and Passport Service spokesman denied the system would be vulnerable to fraud: "The majority of instances where people use their identity cards will be day-to-day situations where the cards offer a convenient method of proving identity such as a young person proving their age to buy alcohol," he said.

"Whenever the highest level of identity assurance is vital to prevent fraudulent and criminal activity — such as high-end financial transactions or at our borders — checks will always be made against the national identity register.

"The card itself will be protected against forgery by a number of security features. The Identity and Passport Service has issued more than 12 million e-passports to date and nobody has successfully cloned the chip," the spokesman said.

It has also been revealed the National Identity Register Number (Nirno) will now not appear on the card or its embedded chip. Director of Privacy International Simon Davies welcomed the removal of the Nirno, following concerns it could be cross referenced across multiple transactions — such as proof-of-age purchases or opening a bank account — to track a person's everyday activities.

"For five years we expressed concern about publishing the Nirno, it is amazing that it has taken all this time and £150m for the government to decide to take this initiative," Davies said.

On 6 November the government began touting for high-street businesses and other companies to install the equipment to take the 10 fingerprints, facial and signature scan that will be stored in the NIR. It named the Post Office as an example of possible contenders and said local authorities are also being considered as enrolment centres.

Critics say it will inflate the £30 it will cost for a card as the public also have to pay to have their fingerprints taken, with the Home Office estimating the scanners will generate between £120m and £280m per year for business.

Shadow home secretary Dominic Grieve said: "We already know that ID cards will do nothing to improve our security but may make it worse. Now we see that the already substantial cost to the tax payer is going to increase. This is particularly outrageous given the current economic crisis."

A cost projection for the scheme for British nationals also showed the cost over the next 10 years has increased by £45m to £4.78bn from estimates in May 2008, with a warning that the costs were likely to change as contract negotiations were finalised.

In consultation, businesses expressed fears about the risks of leaving the enrolment to companies, saying they want to see it "delivered by accountable public servants, and particularly not by companies owned and controlled outside the UK".

These worries about whether government and the private sector could be trusted to handle and transfer scans of people's fingerprints, faces and signatures were echoed by the public, particularly in light of the recent spate of data breaches.

Home Office consultation documents revealed: "One of the key concerns raised regarding the market delivering biometric enrolment services is the security and integrity of the application process.

"This is also our key concern and we will not deliver these services through the market unless we think security and integrity principles can be upheld.

"Where application and enrolment services are provided by an open market, we will set integrity and security standards which will be enforced consistently across the network of market providers."

Small businesses were also anxious about the cost of introducing the scheme and equipment to check identity on the cards, stressing the "need for particular support" from the government and citing difficulties with the introduction of chip and PIN equipment.

A national identity scheme commissioner will also be appointed to work alongside the information commissioner to ensure data for the scheme is being properly stored, secured and collected by government and the private sector.

The government says it will continue talking to business about the commercial benefits of taking part in the enrolment and "improved identity assurance".

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Ben Woods

@Marcus A fair question. Just talked with Archos which said it was working on an announcement for next week....

43 minutes ago by Ben Woods on Archos confirms G9 Ice Cream Sandwich update schedule
Marcus Karlsson

Any update on this, considering the claimed "first week of February"?

2 hours ago by Marcus Karlsson via Facebook on Archos confirms G9 Ice Cream Sandwich update schedule
apexwm

Bill Goodrich : Just as al_langevin pointed out, with Windows Server 2008 there is no Services for Macintosh anymore. It's gone, not available....

10 hours ago by apexwm on Windows Server 2008 drops the ball for Mac compatibility
txtrainguy

Replying to an old topic that I'm currently facing with my CEO (who is on a Mac). Our servers are primarily Windows Servers, office is about...

17 hours ago by txtrainguy on Windows Server 2008 drops the ball for Mac compatibility
k0tcs3

Sure, that makes perfect sense. Pay wrong-doers money and thank them for breaching your security and pointing out your flaws, that would surely...

17 hours ago by k0tcs3 on US indicts Romanian over NASA climate change hack
Random_Error

I think he's referring specifically to Android apps, as Apple do regulate their App Store, but Google seem to let any old crap onto the Android store!

17 hours ago by Random_Error on RIM: BlackBerry will keep 'garbage' apps out of store
Paul Fezziwig

Keep the crap apps out?! How will they compete with Android and Apple's claim to fame of having so many life changing apps? I wonder if the media...

23 hours ago by Paul Fezziwig via Facebook on RIM: BlackBerry will keep 'garbage' apps out of store
Aigars Mahinovs

It has been shown time after time that if there is an author store that sells the songs at even 1$ per song and gives you a high-quality digital...

23 hours ago by Aigars Mahinovs via Facebook on Copyright isn't working, says European Commission
awbMaven

""As a result of Butyka's alleged conduct, researchers were unable to use the computers for more than two months while NASA removed the malicious...

1 day ago by awbMaven on US indicts Romanian over NASA climate change hack
subhorup

It simultaneously worries me and uplifts me that a self-proclaimed group of internet activists name themselves after Indian mythical figures....

1 day ago by subhorup on Anonymous activists release PCAnywhere source code
naviathan

It's actually far easier to work anonymously on the internet than you think. With tools like Tor bouncing your traffic around the world before...

2 days ago by naviathan on Anonymous activists release PCAnywhere source code
Agnostic_OS

1000272134 and bluedalmatian with you both there but then I'm still in 10.04 land (and happy with it)

2 days ago by Agnostic_OS on Ten factors that make Ubuntu 11.10 a hit
apexwm

Interesting article and definitely see your points on the products mentioned. One of the top products for our Help Desk (approximately 20% of all...

2 days ago by apexwm on Ten flawed products that derail productivity
Paul Hutchinson

Absolutely - this should obviously not be handled my isp - but handled by their hosting operator. What's been suggested here is that my isp police...

2 days ago by Paul Hutchinson via Facebook on MPs urge ISPs to take down terrorist material
Techs UK

Looks like a great phone. I don't notice any deficiencies in WP7. used IOS before, that's pretty good. I don't spend much time in Apps, all i need...

2 days ago by Techs UK on Nokia pins US 're-entry' hopes on Lumia 900
Larry Bloggy

Now with the help of these apps you are always synced with MS outlook while on the move. Just download apps like xobni or outlookreflex and get...

2 days ago by Larry Bloggy via Facebook on Outlook Social Connector beta 2 and the LinkedIn connector
mike40g123

Your details are wrong. The version currently being made is the one with 2 USB ports, 256MB RAM and a network port. This is the Model B. The...

2 days ago by mike40g123 on Raspberry Pi boards set to go on sale
Moley

The thing that has been puzzling me for quite a while is how Anonymous can remain anonymous whilst not only being active on the Internet but also...

3 days ago by Moley on Anonymous activists release PCAnywhere source code
Don Dilly

If what Semantec is saying is rue, that is even worse and shows a complete disregard for thier users. If what Anonymous claims is true and the...

3 days ago by Don Dilly via Facebook on Anonymous activists release PCAnywhere source code
MattChurchy

Didn't seem particularly biased to me either. Oh though you might have mentioned some other competitors with free search and email services...

3 days ago by MattChurchy on Time for an evil umpire: Google, Microsoft & privacy