Biometric IDs For Every Indian Citizen
wiedzmin writes "This month, officials from the Unique Identification Authority of India (UIDAI), armed with fingerprinting machines, iris scanners and cameras hooked to laptops, will fan out across the towns and villages of southern Andhra Pradesh state in the first phase of the project whose aim is to give every Indian a lifelong Unique ID (UID) number for 'anytime, anywhere' biometric authentication. While enrolling with the UIDAI may be voluntary, other agencies and service providers might require a UID number in order to transact business. Usha Ramanathan, a prominent legal expert who is attached to the Center for the Study of Developing Societies in the national capital, said that, 'taken to its logical limit, the UID project will make it impossible, in a couple of years, for an ordinary citizen to undertake a simple task such as traveling within the country without a UID number.' Next step, tying that UID number and biometric information to to their RIM BlackBerry PIN number."
That's what it basically is in other countries. What is the news here? That India only started the practice now?
Or would that be redundant?
Teller: Hmm. We don't seem to have your retina scan, your fingerprint or your colonic map on file. Fry: What about my ATM card?
thats really special they want to Biometric id a billion people Im sure that won't be used in anyway to reflect the cast system in india.... you know like those people with pay as you go instead of iPhones. Im so glad America doesn't do any business in India can you imagine what would happen if they had access to all of our personal information?
Eerily reminds me of Shadowrun's SIN.
It's interesting that people automatically seem to think of numbers when thinking of unique IDs, like phone numbers or government IDs.
Why?
It would make more sense to just use email addresses. In the same way that it makes sense to use sentences for passwords, it makes more sense for unique IDs to be based on something significantly more diverse and difficult to guess than a meaningless string of numbers.
IDs should be determinable by the person who's going to be affected by them, and in the rare case of duplicates, they should be asked to choose another. There's no reason why everyone needs a "number".
The original intent of this ID is create something akin to the social security number in the US.
I'll tell you two important reasons for this
1. Make resource allocation more efficient.
For example, there is a concept of basic items like rice, wheat etc... being sold subsidized to poor people.
That mechanism is very inefficient and red tape laden presently.The ID is supposed to streamline it .
2. Currently there is no concept credit history in India other than a credit card.
There is no way a dealer would sell you a TV on credit unless you bring somebody known the dealer along with you.
Imagine US without SSN. That is what it is now in India. very inefficient.
What exactly is wrong with having a Unique ID number? The main purpose is to streamline things. Instead of having one 'PAN Card', one 'Voter ID Card' and a dozen other cards like we do now, this will substitute all of them. And what's this nonsense about privacy? People should not write articles without first researching the safeguards built into the system, and believe me - there are a LOT of them. Maybe you ought to think a bit harder about the positive implications of this such as crime prevention, speedy resolution of land disputes, etc. etc. etc.
And people thought Revelations was silly.
I want to delete my account but Slashdot doesn't allow it.
Biometrics are all fun and good until somebody loses a hand or an eye...(or they are stolen)
Getting people biometrics is sure cheaper than teaching people how to read! Way to go, Indian government! Keep the people ignorant to save a few bucks.
A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
Suspicious timing? I'm not saying it legitimises the action, but perhaps this is the government being proactive towards counter-terrorism in the lead-up to the Commonwealth Games?
Take what ye can. Give nothing back!
India has a much less uniform naming system, with a lot more duplicate birthdays + names, and much less variance in traits. How many Amrish Patels exist with the same name, color hair, color eyes, and same birthday in India?
My name is not too common, but still I have a duplicate in my home US state - same name and same birthday for two people. That's fine most of the time, but the other guy is a felon, and the state does not require SSN when you are arrested. Therefore, they cannot distinguish me from the felon. My insurance was cancelled retroactively for 1 month while I was out of town. (thanks to Choicepoint for incorrectly associated his name and criminal record with my insurance - you should opt out). My voter registration was cancelled since they do not use a common primary key for voters.
Therefore I prefer a real unique identifier that the state government would respect and correctly associate with me. Since the state uses drivers licenses as their primary key, and the feds use SSN as their primary key, I can have different identities in different states, and the cops may accuse me of being the escaped felon one day when I am innocent.
I don't like the idea of biometrics, but I also don't trust an inaccurate primary key as my identification. A name + birthday != unique.
The enforcement of privacy should be in the way they allow usage of the identity. Credit and Taxes perhaps are tier 2 concerns compared with entering and leaving the country.
Just a thought...
Being realistic, you already can't get around and be anonymous unless you make a point of it and inconvenience yourself. The license plate is the most glaring example, as it is prominently displayed on your vehicle wherever you go.
I'm not saying that the Indian ID is a good idea, and I'm not saying that our society is a failure for having such things. I just always find it interesting how soon people take the status quo for granted, when it is far from clear that it is the way it should be, let alone at all in tune with our supposed values.
the mythbusters pointed out how easy finger prints are easy to fake.
i can't see why they ask for a person's caste in the application forms. seems to be throwing new concepts after archaic ones.
the potential for abuse is huge. probably too huge. consider the corruption problems India already has.
the system could be made a bit nicer and still be just as useful.
... someone forgets to use unsigned instead of signed and you end up wrapping around to being a negative person?
-- Stu
/. ID under 2,000. I feel old now.
I propose we call it the Caste'r-Card.
That way every checkpoint can require Caste'r-Card and Visa to get in.
Will a four or three-digit Indian UID have as much prestige as it does on Slashdot?
Was the fingerprint faked to a dumb machine, or to a machine supervised by a person? Of course India may just use the dumb machine variant, but if not I expect it would be far more difficult to keep your antics from being noticed. Keep in mind the article also mentions an iris scanner, although I don't know how the security of that compares to a fingerprint.
Yes, there is always bribery, but this system may be more secure than others on that aspect, as you may still need that faked fingerprint (as opposed to the corrupt worker just looking up the victim's SSN).
My webcomic
Not to mention, names can change through a person's life, say by marriage, or by religious conversion. Or maybe simply because someone doesn't like their current name. Or because they're the-artist-formerly-and-now-currently-known-as-Prince.
In India, it becomes even more difficult - I see newspaper reports every day with people named as "A" alias "B"; not necessarily for illicit purposes, but just because they may be called differently by different people. Besides, I (for example) don't really have a "family name" - I have a given name and a couple of other identifiers. Even for those who do have "family" names, it's more of a "community" name. For example, the name "Singh" would indicate a North Indian, either a Sikh, or one of the many Hindu clans that use the name. It's not just likely that someone bearing the same first + last name would be pretty similar in physical characteristics, it would be almost a given.
Quite frankly, I'm glad we're finally getting this.
India has a much less uniform naming system, with a lot more duplicate birthdays + names, and much less variance in traits. How many Amrish Patels exist with the same name, color hair, color eyes, and same birthday in India?
How many Amrish Patels exist with the same name, fathers name, mother name and birthdate? I am assuming not many.
PS: if you still believe many, add pincode (Indian equivalent of zipcode) to the list.
In database terms, perhaps a lot of places are being lazy enough to not set up a better primary key?
I listen to both RIAA and non-RIAA stuff if I like the music, tangential business/politics nonwithstanding.
666-66-6666
What will this do for Lal Bihari and the many other people declared legally dead (while still possessing for all intents and purposes all characteristics of a living person if not legal identification)? If the answer is "nothing," then I don't see that this is much of an improvement or advancement in the task of maintaining records on your population.
/* Yes, corruption can override anything. I know. */
http://timesofindia.indiatimes.com/india/In-Gunnalli-village-all-men-are-Gyanappa-all-women-are-Gyanavva/articleshow/6494036.cms>/a>
There are many benefits to having a national ID system that go well beyond the SSN in the US. For example, authorities may finally have a pretty good idea how many folk live in a particular area, which helps for voting, disaster-relief, and other efforts traditionally spearheaded by the authorities. Similarly, the use of one unified system that does not rely on the presence of a physical card could hopefully make law enforcement a bit better at avoiding false positives and negatives.
In a country with over a billion inhabitants, having a system that assigns a ID number which is anchored by multiple biometric identifiers seems like a pretty good start, assuming the back end is secure, hard to tamper with, etc. This is what worries me though - similar previous Indian Government efforts, such as "untamperable" electronic voting machines designed for the Indian elections, have been proven to be quite vulnerable to tampering. Similarly, given how easy it can be to bribe corrupt officials, I wonder what the quality of the data will be once it has been entered / maintained / etc. for a while.
The bottom line is that systems which rely on aggregating a lot of data have to be pretty resistant to being fed garbage in the first place and/or manipulated in the future. This is where Indian institutions have to do better in the future and one good reason why India lags other nations as badly as it does. And yet, I imagine the system that is being presented will still be light-years ahead of what India has now.
why is it the rest of the animal world has gotten by just fine without incessantly tracking each other? it seems monkeys, zebras, lions, etc. have gotten by for ages without know whats going on 2 neighborhoods down, but humans can't handle it?
I know it's old but... India Sleepwalks Into a Surveillance Society
"ZeroPaid has a fascinating roundup of news stories surrounding the latest surveillance laws passed in India, including a first-hand account of someone writing from inside India. The legislation in question is the Information Technology Act's amendment bill 2006, which was recently passed in the Indian parliament. Things you can't do with the new legislation include surfing for news in Bollywood and looking up porn on the internet. The legislation also allows all transmissions over the internet to be monitored for any form of lawbreaking and permits a sub-inspector to break into your house to make sure you aren't browsing porn on your computer."
Democracy is null and void for the moment.
Regrettably this is the way the world is going and the stupid sheeple don't know how to fight back. Also, isn't India the country that cut off the balls of thousands during forced sterilization in the '70s?
Pain is merely failure leaving the body
As soon as the zebra's get together and hire machine gunners to defend their watering holes from lions, they're going to need some sort of way to determine that all the zebra's chipped in to pay for it.
Then again, they'll probably just use some sort of barcode scanner.
People replying to my sig annoy me. That's why I change it all the time.
Because you will now see UUIDs in newspapers ?
There are some good reasons to change name. (think witness protection program). Some are traceable, some are not. Depends on the intent.
But saying you want an ID isn't necessarily the same as saying you agree with biometrics. In France and in Norway, we have a unique social security number, but we don't use biometrics to define it.
Sneak teach kids Algebra using a game
I can't understand how anyone who dislikes unique numbers assigned by government would even consider involving your mother's/father's name, your birthdate and place of living.
"name, fathers name, mother name and birthdate" = much, much bigger invasion of privacy than a unique ID number. If a document being processed by some official lists your name+birthdate, then it opens up issues for possible discrimination by age/sex/nationality - think officials processing permits looking if the guy has a muslim or hindu name, or age-screening of CVs by the birth-dates listed for identification.
Why should anyone care who your father is and even if you know his name? Why should your ID change when you move to a different state, a paternity suit decides that there is a different father, you change your name and recolor your hair?
Given an average Indian level of corruption, any objective systems of identification are far superior to subjective ones, where some random official can decide if you are or aren't person X based on some criteria. Your comment "I am assuming not many" is ridiculous - the only acceptable answer would be "I can personally guarantee that only 1 such person exists", otherwise it means that it's ok for one person to be held accountable for another persons debts or misdeeds simply because their names/birthdays might happen to randomly match, or one person has deliberately claimed to have a different name/birthdate in a identity theft attempt.
Insofar that you cannot go back to the iris scan, finger print or facial photograph from the number, it is about as relevant as social sec number. Roughly said, a MD5 of a photograph of you to uniquely identify you, is not a privacy scarifying act , more than having *ANY* personally unique identifier. It would be scary only if the amount of info in that number is enough to reverse engineer any of the associated biometrics. It does not seem to be the case.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
While reading this, I keep thinking of the Story of Your Enslavement video: http://www.youtube.com/watch?v=Xbp6umQT58A
I wonder when will most people realize this.
A biometric like iris scan or a fingerprint would be an image. Whereas, DNA could be broken into sets of 'codons' and hence probably a text string. (See item 6 at http://www.accessexcellence.org/RC/AB/BA/DNA_Fingerprinting_Basics.php) So, from a database point of view a biometric like iris scan would be an image whereas DNA would be VARCHAR ? Therefore, wouldn't it be easier to save/search/match/etc. DNA information ?
As offensive as I find the idea of compulsory "biometric ID", especially "voluntarily enrollment but required everywhere anyway", it's worth noting that governments, apparently intent on antagonising their citizens as much as possible by treating them a priori as criminals, in the name of "for your own good", swear by it. Of course this is for a large part driven by that shining example of freedom and bravery and globalised patronising and xenophobia in a thick patriottic sauce. But I digress. The fact that governments are dead set on putting too much faith in the technology means this fact can be used against them. And where better to do that than in big scale roll-outs like these? Pretty soon india will be the place to go to get your high quality, accepted everywhere, ultra cheap, fake ID. Heck, why not get yourself a dozen UIDs and cards to go with it? How many indian states are there anyway? Now is the time.
Anonymous, for I am large, and contain multitudes of UIDs.
Was the fingerprint faked to a dumb machine, or to a machine supervised by a person?
You should watch the episode, it was pretty good. It was one of the ones where they are trying to defeat security systems, I think they also tested heat and motion sensors IIRC, but they did (at least) two of those types of episodes so I'm not 100%.
The general breakdown was-
They tested on two different readers- a cheap one on a laptop, and an expensive, door-mounted one for 'high security' areas.
The mechanism essentially was to make a latex replica of the print (from a photograph, then cleaned up digitally) which can then simply be glued to your actual finger, so unless someone was actively checking your hands for fake prints you'd be able to get it past a supervised machine in most cases.
The hardest part for them was getting a copy of the print without the 'victim' being aware of it. And an interesting side note- the cheap scanner was actually much harder to fool... the pricey door-mounted scanner took the fake print with no complaints.
Although they didn't test Iris scanners, I would suspect that custom contact lenses would do the trick, again the hardest part getting a copy of the person you're "impersonating".
Not really. IDs should be like bank / account numbers. They should include a parity-part which ensures the number itself is correct, and not changed in some random way.
Using email address is not really that different from a number either. Remember: A=65, B=66, C=67.. etc. Spammers have proven that even an unused email-address can be guessed, if not too complicated. So text will not solve much, just be another representation of the same kind of information.
Parity-bits would make sense for an ID number. If one number gets wrong, it shouldn't be POSSIBLE to mistake the identity for another.
People doesn't seem to get it. The SSN number is not an ID.
It should only be useful for the Social Security. However, due to lack of alternatives, it's been bastardized as a general ID.
Also, you are a bunch of crybabies. In Brazil, we have:
0- Birth certificate
1- ID (requires 1 to get) (has photo)
2- CPF ('physical' person registry) (arguably redundant with No.1, but required for historical reasons). It has a status, which is tied to your income tax papers. If you do not pay the damn taxes, or if you fail to present proof that you are not required to annually (too low income, for instance), it gets 'dirty' and will not be accepted anywhere until you clear it up. (requires 1 to get, no photo so 1 is required almost everywhere you have to present this). This is what is commonly used as a natural key in databases.
3- Voting card, also with an unique ID (requires 1 and 2)
4- Military enrollment card (requires 1, 2, physical examination etc)
5- If you want to be employed (not a business owner, not in the military), you require something that looks very like a passport and records all your employment history. Rough translation would be 'Worker's wallet'. (requires 1, 2, 3, 4 if memory serves right)
6- Driver's license, if you drive. As it has a photo ID and has (1 and 2) written in it, it can serve as your ID for most purposes
I might be forgetting something, but the above are expected for all citizens. God help you if you are mugged with those in your wallet. It can take weeks to get new copies. And the birth certificate is the greatest pain of all, so almost everyone presents copies when required.
Which fuckwit moderator modded this 'informative'?
The summary states they're taking fingerprints, iris scans, and photographs. That's quite a lot to fake all at once.
Well, the Governemnt is going to have a tough time in this village where everyone has the same name :-)
http://timesofindia.indiatimes.com/india/In-Gunnalli-village-all-men-are-Gyanappa-all-women-are-Gyanavva/articleshow/6494036.cms