Slashdot Mirror
France May Require Biometric ID Cards
Will Affleck-Asch writes "According to an article on Infoworld today, France may require her citizens pay for new identity cards that hold their biometric information in electronic format. The French government outlined its plan last month to replace the identity cards and passports offered to French citizens with new ones that carry a microchip containing digitized photographs and fingerprints. The plan is to introduce the passports in 2006, and the identity cards a year later. Citizens haven't been forced to carry ID cards since 1955."
This is misleading. While there is no "National ID Card", You're required by law to carry ID at all times in France, and the police may ask to see it at their discretion.
A less confusing way of putting it would have been, "While a national ID card hasn't existed in France since 1955, French people are required carry some form of valid ID with them."
Obliteracy: Words with explosions
I'm hoping (and frankly, expecting) some pretty strong negative reaction from the French citizenry. They have a bad history with ID cards (for reasons I shall respectfully not mention) and I dare say that the French are more alarmed by ID cards than citizens in anglo countries. They have a more intense concept of anonymity vis a vis the state.
Even here in North America, New Brunswick and Quebec have some of the most lenient driver's licensing laws. Unless things have changed, neither province requires the photo on the license, and Quebec is the only jurisdiction in, possibly the world, which issues a driver's license with a digital photograph and the photograph is not archived. That's a level of freedom that's been lost to most of the world's citizens in just 10-15 years.
In the UK, it appears that, having had the government's draconian ID card plans rejected (for the time being), they're planning to start the biometric-isation process early, by adding compulsory fingerprints to our passports. However, it also appears that this doesn't need democratic consent - they can just do it whenever they feel like. Oh, and bury it halfway through a busy election campaign too.
These fingerprints will, you guessed it, be stored on a gigantic database that the police can consult whenever they feel like.
May I suggest that anyone in the UK who finds these plans... disturbing... lets someone know about it.
Forgive me if I am missing the point, but is not the purpouse of biometrics to REMOVE potentially compromised security keys, like ID cards? Biometrics, as I understand the science, allows an individual to use their body as a form of ID.
No! No security expert worth their salt proposes that biometrics be used to ID...it's too easy to fake and you leave biometric trails everywhere. Biometrics may have some use as a second form of a password. Biometrics may also be used as ID in non-security applications (such as at my local grocery store, where employees use their fingerprint to sign in and out of the timeclock.)
Only vendors are pushing biometrics as both a form of ID and a password.
I don't know if you've noticed but the US is now requiring biometric passports to allow entry on the Visa Waiver Program.
m s/telegr ams_1393.html
e.g.
http://travel.state.gov/visa/laws/telegra
So, next time the bombers will have to get visas to enter the country... Just like last time.
Deleted
To be decided in the Senate and the House/Senate Conference Committee is the Real ID Act of 2005 sponsored by F. James Sensenbrenner. This will be a backdoor defacto National ID through your driver's license. Included is a linked database known as the Driver License Agreement as sponsored by the American Association of Motor Vehicle Administrators. States will be required to sign it in order for given state driver's license to accepted when dealing with the Federal Gov't such as boarding an airplane or train.
Included in the Driver License Agreement is sharing information not only within the US but with Canada and Mexico (pg 4, item 11 in PDF Document). Required in the database is identity theft type of information such as your Social Security number. Also the Driver License Agreement as a side "benefit" requires your state to punish you with points for a traffic offense anywhere within North America. So a speeding ticket from a vacation in Cancun, Mexico or Montreal, Quebec, Canada will tarnish your home state driving record and as an insult to injury, your insurance goes up !
There is not much time left to defeat this legislation. It is attached to HR1268 - Emergency Appropriations for Iraq, Tsunami Relief. The Senate has removed it but the House will insist on the Real ID Act of 2005 in conference committee and we need to let our Senator's know that we are against this. Information to Contact Congress web link.
The ID card would probably contain fingerprint data and a digital signature saying that the government recognizes the fingerprint as that of one of its citizens. The fingerprint doesn't even need to be connected to the person's identity.
Without that, how could scanners at airports and other public locations decide to accept or reject a person based on her fingerprint ? Send it to a big-brother-esque central database, uh ? OK, the scanner still needs to download a list of revocated IDs from time to time.
ID + fingerprint = something you have + something you are.
http://scholar.google.com/scholar?q=biometric+hash
First result:
Biometric hash based on statistical features of online signatures
Vielhauer, C. Steinmetz, R. Mayerhofer, A.
Abstract: Presents an approach to generating biometric hash values based on statistical features in online signature signals. Whilst the output of typical online signature verification systems are threshold-based true-false decisions, based on a comparison between test sample signals and sets of reference signals, our system responds to a signature input with a biometric hash vector, which is calculated based on an individual interval matrix. Especially for applications, which require key management strategies, hash values are of great interest, as keys can be derived directly from the hash value, whereas a verification decision can only grant or refuse access to a stored key. Further, our approach does not require storage of templates for reference signatures, thus increases the security of the system. In our prototype implementation, the generated biometric hash values are calculated on a pen-based PDA and used for key generation for a future secure data communication between a PDA and a server by encryption. First tests show that the system is actuality able to generate stable biometric hash values of the users and although the system was exposed to skilled forgeries, no test person was able to reproduce another subject's hash vector.
It is my understanding that all of the 9/11 terrorists had valid U.S. IDs (drivers licenses, mostly) and/or valid passports which had been scrutinized at the border. These IDs were all in their own names (though perhaps not in the name under which they were wanted). So far as I know, no one has suggested that they had obtained these IDs fraudulently: they all could have gotten the new biometric IDs that so many seem to want.
We knew who they were, and some of them were on ``wanted'' or ``watch'' lists under the names on their legitimate IDs, the IDs which they used to board their planes. Identity was never a factor in the 9/11 hijackings. Therefore, obviously, what we need to make sure it never happens again is a new, improved National ID system which will further tighten the government's control over us. Yes, indeed. It kept the Jews safe in the 1930s, after all. We'll try not to think about what happened to them in the 1940s.
All this isn't to quibble with what the parent post said, but to reinforce it.
See what I've been reading.
Getting someone's fingerprint or photo, as proposed for passports is not that difficult anyway.
I should also note that in many systems no server copy of the prints or templates is kept. All the information is on the card. However, I would guess that governments would tend to keep such information if given the chance.
Lasers Controlled Games!
The UK government isn't going to bother with parliament anymore - they're going to bypass it: http://www.theregister.co.uk/2005/04/12/uk_passpor t_fingerprints/
God said, "div D = rho, div B = 0, curl E = -@B/@t, curl H = J + @D/@t," and there was light.
If you're a minor your parents must be informed.
They can't hold you for more than 4 hours.
Ok, so it can be rather annoying, but in practice they just ask you to come to the commisariat the next day. Unless you're a young north african man of course.
Watch this Heartland Institute video