Slashdot Mirror


Iowa Wants To Let You Carry Your Driver's License On Your Phone

An anonymous reader writes: The Iowa Department of Motor Vehicles is busily developing software that will allow users to store the information from their driver's license on their smartphone. It would also add features like a simple barcode to scan for information transfer, and two-factor authentication to access it. "At first thought, the idea seems rife with potential security and privacy issues. It is well known at this point that nothing is unhackable; and if a project is made on a government contracting schedule, the likelihood of a breach is only greater. ... Questions of security, however, must take into account context – and there, it can be argued that our current regimes of physical documents have been an enormous failure. Having every state choose their own approach for issuing IDs has led to patchwork regulations and glaring weak points in the system that criminals have repeatedly taken advantage of. Driver's licenses today are regularly forged, stolen, and compromised – it’s far from a secure situation."

15 of 232 comments (clear)

  1. Inherent 4th amendment problem... by Bugler412 · · Score: 5, Insightful

    Handing you phone to a cop grants them implicit rights to search the phone. Therefore, having your license on the phone is a backdoor way to grant them access to search your device.

    1. Re:Inherent 4th amendment problem... by duranaki · · Score: 3, Insightful

      Yeah, that's pretty much the routine because your license and registration have no inherent value. Your phone on the other hand, is a VERY personal and rather expensive device. It would be pretty insane to devise a policy where you *wanted* all your police officers to take temporary possession and responsibility for expensive fragile devices to accidentally drop on the asphalt and what not. If such a policy was created, no one would use it because no one would hand their phone to the cops. How would they occupy their time while waiting for the cop to write the ticket? I appreciate paranoia for paranoia sake, but no implementation that has you surrendering possession of your phone just to show ID will ever fly.

    2. Re:Inherent 4th amendment problem... by quantaman · · Score: 3, Insightful

      Right? So don't hand them the phone. Hold it up so they can scan the QR code on the display. I don't hand my phone to the TSA Security guard validating my boarding pass, I just hold my phone over the scanner.

      Fine in theory until the officer opens with "can you please hand me your phone so I can check your license information".

      People have trouble saying no to completely unreasonable and unnecessary requests from cops, how many people do you think will start a police interaction by rejecting what sounds like a reasonable request for a standard procedure?

      --
      I stole this Sig
  2. Re:This has been going on for a while by AmiMoJo · · Score: 4, Insightful

    It's a trap. If your driving licence is on your phone and you get pulled over, you have to hand over your phone. The cop takes it back to the car, data rapes it and hands it back. Later at the station they can analyse the contents offline, adding your contacts to the database of known associations and your selfies to their facial recognition database.

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  3. I'm sorry officer.. by Kadagan+AU · · Score: 4, Insightful

    .. I can't show you my license because my battery died..

    --
    This space for rent, inquire within.
  4. Enormous failure? by fahrbot-bot · · Score: 5, Insightful

    ... it can be argued that our current regimes of physical documents have been an enormous failure.

    Unless, by enormous failure, you mean, has been working for hundreds of years, then citation please. No one's stolen my driver's license or any other physical documents - ever - and they're pretty simple to use - no batteries or cell signal required. In addition, I don't have a smartphone.

    --
    It must have been something you assimilated. . . .
  5. 2-factor national ID by goodmanj · · Score: 4, Insightful

    This is as good a place as any for me to jump on my favorite hobby horse: the US government should be issuing a standardized national ID; there should be a federal administration that handles identity of US persons.

    Specifically, the government should issue 2-factor authenticators to all citizens which do absolutely nothing but verify identity to businesses, people, and other government agencies. The service should return no name, address, or other identifying data: just a hash ID code which is unique for every person, and unique for every agency or business which requests your ID. Thus, a bank can verify that you're the same person who set up your bank account, the state police can verify that you're the same person who applied for a driver's license, but that's all they can learn about you. This would makes it very difficult for anyone but the federal government to steal your identity, and tough for anyone but the feds to correlate your credit card data with your medical data with your Facebook profile.

    Obviously, this means the federal government would be able to use your identity records to track you. But they can do that anyway, with a quick call to a credit card company and your internet service provider. This at least keeps everyone *else* from being able to do so.

  6. Bad idea with current laws by sjbe · · Score: 4, Insightful

    It'll probably involve a minimal contactless reader and token-transfer like Apple Pay.

    I assure you it will not. That is not how police play that game. Furthermore that requires your phone to be on and then the officer can search the phone because you just gave him access and probable cause. If they want to come up with a system whereby the officer has no physical way to search the phone (not just legal protections) then I might think this is a good idea. As the law stands right now there is no way in hell I would do this.

    Some idiot judge apparently recently ruled that while you don't have to give your password you do have to give your fingerprint. How that doesn't violate the 5th amendment involves some mental gymnastics that I'm not really capable of.

    Don't need to transfer all phone data. (really? you think cops are going to sit around to transfer 16-128GB? lol)

    Don't know why you are laughing. It's not funny at all. Yes I absolutely think cops are going to sit around and transfer the entire contents. You'd be a fool to presume otherwise. He gets paid to be there no matter how long it takes.

    1. Re:Bad idea with current laws by ShanghaiBill · · Score: 3, Insightful

      The cops have no right to demand you produce your passphrase.

      That is not settled law. Under some circumstances they can demand that you produce your passphrase. If they don't know that you know the passphrase, and the fact that you know the passphrase is, in itself, incriminating evidence, then they cannot demand it. If they already know that you know the password, then they may be able to compel you to disclose it. So it is best to not only refuse to tell them the password, but also refuse to acknowledge that you even know what it is.

      Dumb: I refuse to tell you the passphrase
      Better: I don't remember the passphrase.
      Best: I want a lawyer

  7. What could possibly go wrong? by grimmjeeper · · Score: 4, Insightful

    So the government wants you to accept an application built by them, including giving it permissions to operate on your phone. You don't even need to hand your unlocked phone to a cop to have them looking around in your personal business. The app can do that all by itself any time it wants. Thanks but no thanks.

  8. Re:This has been going on for a while by JeffAtl · · Score: 3, Insightful

    That's terribly naive. The SCOTUS has ruled that the public can video record police officers, yet the police will still stop you from doing it.

    The ruling only has teeth if the cops search your phone and then try to use it directly as evidence. There is nothing stopping them from using the information for parallel construction or just keeping the private photos that you took of your girlfriend/wife.

  9. Re:This has been going on for a while by Albanach · · Score: 3, Insightful

    No, he wouldn't. SCOTUS held that even if ARRESTED, police still need a warrant to search your phone. The law is pretty clear.

  10. Re:This has been going on for a while by ShanghaiBill · · Score: 4, Insightful

    Yup, I will *not* be handing my phone to a cop. Period.

    Me neither. But this is still a useful feature. Now I can just leave my license permanently in my car, and use the phone for routine ID checks, like buying beer, or when using a credit card for a big purchase.

  11. Re:Don't be naive by sjbe · · Score: 4, Insightful

    The case has been litigated and SCOTUS held the police need a warrant to conduct a search.

    And of course the police always do what they are told... [/sarcasm]

    Letting the police look at what is displayed on your phone screen is not a voluntary consent to a search of the phone.

    And yet I assure you it will be interpreted as such.

    As for the cost of fighting them, if it's litigated again it will be as a civil rights violation under 42 U.S. Code section 1983 which includes a fee shifting provision.

    Which only matters if you have enough money in the first place to see the litigation through and happen to win which is by no means guaranteed.

  12. Re:This has been going on for a while by Stormy+Dragon · · Score: 4, Insightful

    They need a warrant to search your phone WITHOUT CONSENT. When you unlocked it and handed it to the cop specifically to look at, you just consented.