Slashdot Mirror


In Iowa, a Phone App Could Serve As Driver's License

New submitter dubner writes Simply hand the law enforcement officer your mobile phone. That's what you can do in Iowa rather than "digging through clutter in your glove compartment for an insurance card." And soon your driver's license will be available on your phone too, according to a story in the (Des Moines Register). Iowans will soon be able to use a mobile app on their smartphones as their official driver's license issued by the Iowa Department of Transportation. Some marvelous quotes in TFA: "The new app should be highly secure ... People will use a pin number for verification." And "Branstad (Iowa governor)... noted that even Iowa children are now working on digital development projects." A raft of excuses ("battery's dead") and security problems come to mind; how would you implement such a system?

42 of 207 comments (clear)

  1. Uh huh by Anonymous Coward · · Score: 5, Insightful

    Well, that's one way for the police to get easy access to your phone without a warrant.

    1. Re:Uh huh by Archangel+Michael · · Score: 5, Insightful

      First of all, I would suggest that handing your phone to an officer would be the stupidest idea ever. However, there is a way to transfer the ID information to the police without handing the phone over, simply employ the NFC available on many (most??) smart phones. The officer would simply BUMP the phone and the record would be retrieved from DMV.

      There is no need to hand your phone over. Period.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    2. Re:Uh huh by TheGratefulNet · · Score: 5, Insightful

      and.... we're done here.

      (yes, this is obviously the motive; get people used to handing over their phones to cops, already unlocked.)

      they must think we are all stupid.

      (and I guess, with over half of us, they are probably right) ;(

      --

      --
      "It is now safe to switch off your computer."
    3. Re:Uh huh by Anonymous Coward · · Score: 2, Insightful

      in the first place, i'm sure the app itself will collect a nice amount of information to phone home with.

    4. Re:Uh huh by Hadlock · · Score: 4, Interesting

      If you can access the data with a PIN wirelessly, why does the "owner" of the license even need direct access to it? At that point it's the issuing authority's responsibility to be able to access it using the owner's given PIN.
       
      To condense the argument down, "why do you even need a phone app? why can't you just give your last name and PIN to the officer?" All the phone app is doing here is validating that you know the PIN.

      --
      moox. for a new generation.
    5. Re:Uh huh by DaHat · · Score: 3, Informative

      Or a Windows Phone fan... both of which have had them for years.

      Only now with the iPhone 6 is Apple finally getting on board the NFC party train.

    6. Re:Uh huh by xclr8r · · Score: 4, Insightful

      2 items. A driver's license is state property. How does it affect the ability of LEO to interact with your phone. There are laws in certain states that say if you have your phone on your person and are being searched that the phone contents are fair game to be 'rifled' through. If on the other-hand your phone is packed in a bag or in the glove box the phone is not on your person and can not be searched without a warrant. The act of NFCing your phone means it is on your person and you leave yourself open. No thanks, I like to compartmentalize my information as much as possible.

      --
      Beware of those who profit off the docile and persecute the unbelievers.
    7. Re:Uh huh by gstoddart · · Score: 2, Insightful

      Because that sounds like an awesome idea ... have your phone set to provide any other device with your ID upon request. What could possibly go wrong?

      You think the police officer is going to give you time to go in, enable NFC, and then bump?

      No, sorry. Your idea sounds silly, because it means everyone walks around with their phone in a moronic mode which says anybody can access the stuff a police officer can just by proximity.

      Or are you suggesting the cell phones natively have a "law enforcement" mode? Like that won't get hacked or abused.

      I have a better idea ... stick with ID cards, and tell the cop that without a warrant he can stay the hell away from your phone, no, you can't search my car, and I would like to talk to my lawyer before I answer any more questions.

      Assume the police are going to violate your rights, and make them prove otherwise. Don't be rude to them, but don't offer them anything either.

      Make the police understand that if they're going to systematically violate our rights, we're going to assume they're crooked and not trustworthy.

      --
      Lost at C:>. Found at C.
    8. Re:Uh huh by Em+Adespoton · · Score: 2

      Ah; but the trick is that your phone can validate the PIN, but the officer can't. That way, the officer can't pretend to be you by knowing your name and PIN, because they don't know the PIN. That's the entire idea behind public key infrastructure -- you can provide trusted credentials to untrusted parties by not revealing the private info to them, but having it vetted by a mutually trusted third party.

      Personally, I think the government should issue key-pairs to people, not identity numbers that don't expire. A single key-pair could be used to validate the person and be used to sign their driver's license token, their insurance token, their employment token (co-signed by the employer), etc. Easy way to ensure identifiers don't get re-used for multiple services, but they can all be validated off of a central authority.

      The other bonus is that you can have your key-pair validated in multiple places, and can expire it (or have them on rolling expiry) but have it chained to a fresh key-pair, making identity theft that much more difficult.

      The only problem with this is that it requires a computational device to be present, and for full validation, needs a network connection back to the key authority(s).

    9. Re:Uh huh by ArmoredDragon · · Score: 2

      I heard something to the effect of Apple not wanting to allow third party apps to use it...ever.

    10. Re:Uh huh by lgw · · Score: 3, Insightful

      Or, what I do, don't do anything important with your phone!

      My phone has always been just "swipe to unlock" - no protection, no encryption, no anything. The only thing on it that anyone might find interesting is my call history, and a few texts from people who didn't realize that I don't text, and the contents of my Kindle/Audible library (which I expect the government can get at anyhow).

      I like having a phone, GPS, and a few games all on the same device, but I've always expected phones to be so insecure that trying to lock one was just silly. Instead I keep important stuff off of any mobile device.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    11. Re:Uh huh by JohnFen · · Score: 2

      That would matter a lot more if the Supreme Court hadn't just ruled that unconstitutional.

      As if the cops care.

    12. Re:Uh huh by ArcadeMan · · Score: 2

      Can you "bump" information via NFC from an Android phone to a Windows or a Blackberry phone?

    13. Re:Uh huh by rsborg · · Score: 2

      First of all, I would suggest that handing your phone to an officer would be the stupidest idea ever. However, there is a way to transfer the ID information to the police without handing the phone over, simply employ the NFC available on many (most??) smart phones. The officer would simply BUMP the phone and the record would be retrieved from DMV.

      There is no need to hand your phone over. Period.

      If you're rich enough to have a smartphone, you can likely buy a older phone just as your ID display unit.

      Personally, it's a good idea to simply shut down your phone if you ever have to deal with law enforcement in an official capacity (i.e., pulled over or border checkpoint). On iOS it forces password to unlock the first time (no TouchID), and assuming your password is not "simple" it can't be brute-forced easily. Even if it's part of a forfeiture at the very least they can't rife through your personal data.

      --
      Make sure everyone's vote counts: Verified Voting
    14. Re:Uh huh by bkaul01 · · Score: 2

      Yes. NFC directly supports contact info and URLs, and can be used to initiate a Bluetooth connection for file transfers. The former will definitely work; I don't know if the implementation of the latter is fully cross-platform or not. "Tap to Share (NFC)" shows up as an option for sharing photos on my Windows Phone, but I've never tested with an Android user to see if the file transfer goes through.

      NFC, however, just transfers encoded text; I don't know if it could be sufficiently secured to use directly for transferring DL info, though perhaps it could be used to initiate a connection via an app using Bluetooth.

    15. Re:Uh huh by RingDev · · Score: 2

      "Looking at your phone here it appears that you had a 5 minute call with the deceased on the night of the murder. Also, looking at your GPS log, it appears that you were in the vicinity of their apartment and then drove down some country roads near where we found the body."

      Never mind the fact that you are a friend of the deceased, live a mile away from them, and take the country roads to avoid the congestion of the main drag at rush hour. You are now suspect #1.

      Your phone's existence in today's digital age is in itself "important" when it comes to criminal investigations.

      -Rick

      --
      "Most people in the U.S. wouldn't know they live in a tyrannical state if it walked up and grabbed their junk." - MyFirs
    16. Re:Uh huh by richlv · · Score: 2

      good point about the fingerprints... but at least there are ways to avoid that.

      and i guess the idea is that people are less likely to forget their phone these days.

      overall, seems like a silly idea with so many drawbacks that are being ignored...

      --
      Rich
    17. Re: Uh huh by jd2112 · · Score: 2

      They said the same thing about the iOS programming API. (HTML and JavaScript should be good enough for anyone. Except us of course. ) That lasted about a week.

      --
      Any insufficiently advanced magic is indistinguishable from technology.
    18. Re:Uh huh by lgw · · Score: 2

      "With a warrant"

      Thanks for the good laugh to start my evening off!

      --
      Socialism: a lie told by totalitarians and believed by fools.
  2. Not to sound too paranoid by thunderdanp · · Score: 5, Insightful

    Does this sound like a convenient way for Police to have unfettered access to your phone, in light of Riley v. California?

  3. Papers please by OrangeTide · · Score: 2

    Big brother has made it more convenient for you to always carry the necessary documentation. It's every citizen's duty to make sure they have the necessary papers before they travel.

    --
    “Common sense is not so common.” — Voltaire
    1. Re:Papers please by aztracker1 · · Score: 2

      Funny... Police cruisers can look up your driver's license based off of your Social Security number or Driver's License number (if you know it)... I've been pulled over when I'd forgotten mine, and there was no problem. Not sure what problem this really solves except maybe more invasive government.

      --
      Michael J. Ryan - tracker1.info
  4. Yes, freely hand it over... by fahrbot-bot · · Score: 4, Funny

    Simply hand the law enforcement officer your mobile phone.

    ... and let him search through it.

    --
    It must have been something you assimilated. . . .
  5. Have we reached peak app yet? by gstoddart · · Score: 5, Insightful

    Seriously, I'm getting tired of the endless stream of apps.

    The world is an app, I have an app, everybody has an app ... it's lots of hype, and very little long-term proven benefit.

    I really hope we reach peak app soon, and people STFU about apps.

    Yes, fine, you have software. We've had software for decades. But now it's on a phone or a tablet. So it's an app, and it's super awesome, and we need to dedicate countless hours of coverage to it.

    And every drooling idiot is racing to ensure they're stuff is available on an app, and telling us how our lives will be improved and perfected by apps, and how if we're not writing an app we'll fall behind and become fossilized.

    You know what? Millions of people don't use smart phones, don't use an app for everything, and can conclude our normal bodily functions without relying on an app.

    I bet 99.9% of all apps are crap, or won't be around in 5 years. But, like the .com era, you can become a billionaire by saying you have an idea for an app.

    Blah blah blah .. take your damned app and get off my lawn.

    --
    Lost at C:>. Found at C.
    1. Re:Have we reached peak app yet? by 6Yankee · · Score: 5, Funny

      Seriously, I'm getting tired of the endless stream of apps.

      There's a nap for that.

    2. Re:Have we reached peak app yet? by gstoddart · · Score: 4, Interesting

      You sound old.

      What part of get off my lawn was ambiguous? It says "I'm old, now fuck off".

      Except as you get older you stop fetishizing technology, and decide that "no, I really don't care about this shiny bauble, because Matlock is going to be on soon, and I need to find my sweater".

      I still own and use a lot of technology, some of which was invented after the steam-powered interwebs became unfashionable.

      I've seen and used technology long enough to know that today's really shiny new toy is tomorrow's discarded detritus which didn't really improve my life any. Which means I've got the perspective to go straight to "I fail to see how this actually benefits me".

      I'd say around 85-90% of all apps I've installed on my tablet become something I don't use fairly quickly and get uninstalled. (Yes, I know what they are and how to use one.)

      I make my living working with technology, but I'm not completely beholden to it, and don't use it just simply because it exists. It needs to add value to my life, or it's just a nuisance and a gimmick.

      And, quite frankly, having my drivers license as an app on a phone? Not so much with the adding of value, and really high on the "annoying and eroding my privacy" front.

      If you think technology peaked in 2006 why do you even read new Slashdot articles?

      Because, when you get old enough, terrorizing the youngsters becomes a hobby unto itself ... and because half of the wet behind the ears punks around here don't remember enough technology to know a damned thing about it, and are clueless enough to believe there's always been a fucking app for that.

      But, after 30+ years of playing with, or working with technology ... I don't always think "hot damn, I need one of those". I think "yeah, we had something kinda like that 20+ years ago, and it was pointless then, too".

      --
      Lost at C:>. Found at C.
    3. Re:Have we reached peak app yet? by BarbaraHudson · · Score: 2

      ^^^ Nice.

      On a side note, related to your original post, I think we're very close to "peak app." Everyone and their dog who is getting downsized, right-sized, fired, is chasing the "I'll make an app" mirage. Just look at recent "ask slashdot" questions ...

      When there are too many apps in a category, instead of taking the time to explore, you're just going to try the ones with the most users, so the more apps there are, the less effectively new ones can compete. The first mover advantage is SO gone.

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
  6. Re:I'm not handing a cop my phone for any reason by stephanruby · · Score: 2

    Among other things it's basically giving them permission to search through my phone if they feel like it. Nope, I'll stick to a physical card.

    Even with a physical drivers license, they always try to grab your entire wallet before you can pull out the driver license from it.

    In California, it's not like they even need my drivers license (motorcycle police officers excluded). Most of the times, the cops in cop cars can already pull any Californian's drivers license from their onboard laptop.

    The only thing I'm not sure about is their cell phone coverage. I assume they may not be able to download your data if they're outside of a 4G/3G cell phone coverage area.

  7. In Canada, they already have it covered by ihtoit · · Score: 2

    The Supreme Court over there recently ruled that warrantless searches on mobiles belonging to arrestees are legal. If you refuse to hand over your phone/licence in CA because of whatever's on your phone or because you fear the privacy boogeyman, they'll just arrest you and use the precedent to search your phone anyway.

    I said this shit was coming. I said it fucking years ago, even before contactless payments with iOS and RFID chips embedded in handsets.

    So fucking glad I don't have a working phone.

    --
    Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
  8. Re:Does anyone remember Amadou Dialo? by helsinki92 · · Score: 2

    Sept 26 a South Carolina man was shot by police for re-entering his truck to retrieve his drivers license as requested by the police officer. It happens all the time.

  9. It's all archaic. by MarkvW · · Score: 2

    A "license" isn't a thing--it's a right or privilege to do or not do something. The State keeps a complete record of you and the scope of your driving license at the Department of Licensing. All they need is a fingerprint, or maybe even optical recognition of your face, and they can access that data from their patrol car.

    An "app" as a "license" is just as archaic as a paper license today.

  10. Re:transfer the ID information to the police by DocSavage64109 · · Score: 4, Insightful

    Don't the police have computers? Can't they just query the DMV themselves? Maybe I need to sell an app that displays a fake ID on your phone if this is what they depend on.

  11. App Permissions and In-App Purchases by xyz321 · · Score: 2

    Like many apps, the Driver's License app will probably require access to your SMSes, phone call record, contacts, calendar, location, and photos for no good reason at all. You'll also need to wait in a queue for a few minutes to view your driver's license, but you can use an in-app purchase to skip the line.

  12. Re:Does anyone remember Amadou Dialo? by Overzeetop · · Score: 2

    How can you safely produce your wallet, which usually resides in your pocket? If you're all fired up worried about getting shot, put your hands on the hood of the car and tell them which pocket your phone is in. Having had my share of traffic violations requiring identification, it's never been an issue. Then again, I'm not black, so I get a lot more leeway in what constitutes a threatening move and what doesn't.

    --
    Is it just my observation, or are there way too many stupid people in the world?
  13. Warrant? by weiserfireman · · Score: 4, Insightful

    This seems to be a way to get your cell phone out of your hand and into the hands of the police, without a warrant, and your permission.

    SCOTUS recently ruled that the police can't search your phone without your permission, absent a warrant. Now you get pulled over, and you have to hand your unlocked cell phone to the nice police officer, while he leaves your site and goes to his car for 5 minutes or so.

    Now he has the opportunity to see what else you might have on your phone.

    As a bonus, since he has your phone, you can't use it to record your interaction with him.

    What is wrong with the piece of plastic in my wallet? It has worked well for a long time. If my State offered it, I might add it to my phone for fun, but I would still have the wallet card to give to a police officer.

  14. Re:transfer the ID information to the police by gnasher719 · · Score: 2

    Facial recognition could be used to make the look-ups faster and more accurate. And most drivers are associated with one or two vehicles, so the police could have someone's picture up before they even approach the driver in most cases.

    With a driver license, it's really _you_ who will be trying to convince the police officer that you have a valid license. So facial recognition isn't really needed. You're right, most of the time a police officer taking a photo of your license plate could automatically be shown photos of one or sometimes two people who are most likely driving the car and are in the system as having a license or as having no license.

    If nothing comes up or the driver doesn't meet the pictures, the driver would need to give the police officer information that leads to the license. Typically name and birthday, or address, or even license number if you learned it by heart and don't want to give your name. Then same thing, the information is looked up and a picture shown to the police officer.

    Problem would be if you lost your license and gave your twin brother's information. Knowing that information is probably much easier than stealing his driving license.

  15. This is brilliant by Sir_Eptishous · · Score: 2

    What is really amazing, and just freeking audacious to say the least, is how the IDOT is even considering doing this.

    With all the recent focus on digital privacy, etc, especially since the "outing" of the NSA via Snowden, with the protests against police brutality a la Ferguson, etc, it just amazes me that something like this would even be considered. Amazing.

    Who in their right mind would hand their unlocked cell phone to law enforcement?
    The reality is, they are always looking for something, anything, any scrap of information, or anything misconstrued or misinterpreted, to be USED AGAINST YOU.

    People keep forgetting, it doesn't matter if you haven't done anything wrong or not. That doesn't matter and never did. There are loads of Americans out there who have been "put through the ringer"(putting it mildly) by LE who were honest people who never did anything wrong.

    --
    We play the game with the bravery of being out of range
  16. Low-tech solutions or limited access by Hotawa+Hawk-eye · · Score: 2

    Offer drivers low-cost or free phone cases with space to hold their driver's license on the back. Driver pulls their phone out of their pocket (it's likely more accessible than their wallet) and shows/hands the back of the phone to the officer.

    Offer drivers a holder that attaches via suction cups or similar mechanism to their dashboard. Find some way (driver's license doubles as an EZPass? Cops have a scanner that lets them bring up the driver's information more quickly when they stop a motorist, rather than having to take it back to their vehicle?) to encourage drivers to put their licenses in that holder while they're driving.

    The privacy and security considerations are strong arguments against turning the driver's license into an app or something similar. But if they really want a high-tech solution, working with phone manufacturers to create a lock screen app (open source, to reduce the chances of a back door) that allows a police officer to enter a code (which gets logged on the phone manufacturer's servers and should be able to be associated with the individual officer) into the lock screen to display JUST the license info, not actually unlock the phone. This would also be useful if a phone is lost, stolen, or used as part of a crime; it would allow the police to identify the owner.

  17. Re:transfer the ID information to the police by pkinetics · · Score: 2
    Wait, how many states associates a driver's license with the vehicle registration?

    Granted, it could be loosely inferred / deduced based on other relateable elements.

    Additionally, as states are not required to share DMV records, or at least I don't think they are, lost my train of thought... Something relational data missing content, etc.

  18. Re:transfer the ID information to the police by thogard · · Score: 2

    The FAA has been trying to point out this fact for decades. The paper pilots carry around isn't a pilots license, it is a certificate of license. The license is held in a computer somewhere and when that is revoked, the paper saying you have a license is meaningless.

  19. Re:transfer the ID information to the police by richlv · · Score: 2

    around here, police verifies all data you give them (licence, vehicle registration, insurance) with the hq. if they can't communicate, they are not allowed to perform any of those checks (and i think the internal guidelines say that they must "return to base" or something like that)

    --
    Rich
  20. Re:transfer the ID information to the police by bondsbw · · Score: 2

    Yes, police will verify through dispatch even if they do not have data service available. Depending on your jurisdiction they probably have different rules as to whether the officer must release the suspect. Where I live, a traffic stop is legally equivalent to an arrest and I wouldn't be surprised if the officer would make an educated decision on bringing the suspect in until at least the officer can contact dispatch.

    --
    All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.