Lord Erroll - Merlin Member of the HOUSE of LORDS - an Independent Peer PITCOM EURIM ap. Comms Parliamentary Information Technology Committee European Information Society Group (Director) All-Party Communications Group (Secretary) LASSe. O Local Authority Smartcard Standards e-Organisation E-RA ISSA UK Nominet UK E-business Regulatory Alliance (President) Information Systems Security Association Advisory Board Policy Advisory Body All-Party Group for Entrepreneurship (Chairp'n) Select Committee on Science & Technology – Personal Internet Security www. era-int. com PGP International Advisory Board 30/09/09 www. secretsommelier. com GTC International Council Copyright - The Earl of Erroll CRC Procurement 1
DATA SECURITY I’ll speak for just under half a microcentury on ID and Citizen Cards 09/01/09 Copyright - The Earl of Erroll 2
Merlin 01/27/09 Copyright - The Earl of Erroll 3
A LORD 01/27/09 Copyright - The Earl of Erroll 4
A Territorial Soldier 01/27/09 Copyright - The Earl of Erroll 5
HOUSE o f LORDS ©Parliamentary copyright 01/07
Me at my desk in the Lords 01/27/09 Copyright - The Earl of Erroll 7
The Home Office 01/27/09 Copyright - The Earl of Erroll 8
Trying a backflip 25/02/09 Copyright - The Earl of Erroll 9
PRIVACY & PROTECTION PRIVACY IDENTIFICATION Once it’s stored, it's no longer private it WILL leak 90% don't care!? 09/01/09 Copyright - The Earl of Erroll 10
BALANCE OF POWER Individualism Paternalism Capitalism Democratic Socialism 09/01/09 Copyright - The Earl of Erroll 11
IDENTITY CARDS ACT - PURPOSES (a) in the interests of national security; (b) for the purposes of the prevention or detection of crime; (c) for the purposes of the enforcement of immigration controls; (d) for the purposes of the enforcement of prohibitions on unauthorised working or employment; or (e) for the purpose of securing the efficient and effective provision of public services. 01/27/09 Copyright - The Earl of Erroll 12
DEFINITELY NEEDED Strong authentication when transacting business Local biometric verification for ICAO standard travel documents
ACCEPTABILITY Why would you want one? What is it useful for? What is the downside?
USES - IPS protect your identity from theft protect vulnerable people from those who have lied offer a convenient way to prove your age speed up many everyday transactions make it easier for you to travel in Europe make it simpler to prove your ID make the internet easier to use make it easier to replace lost and stolen documents protect your privacy
BENEFITS OF THE SCHEME Identity fraud has cost the UK over £ 1. 7 billion CIFAS, the UK’s Fraud Prevention Service: 67, 406 victims of identity fraud in 2006, up from 56, 200 in 2005. Since 2000 almost 282, 300 victims of identity fraud have been registered Over 10, 000 fraudulent passport applications each year 430, 000 illegal migrants could be living in the UK Between £ 20 & £ 50 million of ID-related benefit fraud committed each year
POLITICS Policy differentiation Authoritarianism Trust & Security Tamper Detection – Black Hats Cost Passport £ 375 m - ID Card £ 125 m – Foreign £ 326 m
LOCAL AUTHORITIES Will still run their own schemes Different Purposes Administrative Efficiencies
ISSUES Trust Liability Repudiation
ID issuing issues ID is issued for different purposes Some need more security than others Can each function trust the ID issued for another purpose Are you reliable in each of your personae Agree function and uses for electronic IDs 01/27/09 Copyright - The Earl of Erroll 20
Identity Recovery I’m not talking about Credit Card theft When you are impersonated How do you prove you are not the crook? How do you repudiate their transactions? How do you travel when your I. D. is on a “wanted” list? How do you restore your reputation? What is the true cost to you? Both Financial and Time 01/27/09 Copyright - The Earl of Erroll 21
Generic Uses of I. D. Application Why Need Passport Criminal Record Name & Body Authorisation Security, Benefits Body Health Allergy or Disease Body only Financial Creditworthiness Reputation Electronic I. D. P. K. I. / Certificates Reputation Purse Cash & Tokens Anonymous 30/9/2009 Copyright - The Earl of Erroll 22
-COMMUNICATION- we use language differently ENABLEMENT CONTROL VRM I own my data “Identity Assurance” Advisers Flexibility & Discretion Consent Common Law CRM We own citizens’ data “Identity Management” Inspectors Process & Procedure Demand Statute Law 01/27/09 Copyright - The Earl of Erroll 23
FINAL THOUGHTS Government Efficiency v. Privacy for the Entity Intrusion & Control must be targeted tightly Impact of data misuse – Data Integrity Mis-interpretation vs. Non-interpretation How does the SME or Citizen check the ID Card? If they can't, where is the benefit? CEN/TS 15480 -1 & 2 (2007) 09/01/09 LASSe. O Copyright - The Earl of Erroll 24
Lord Erroll (Merlin) errollm@parliament. uk 01767 650 251 www. Lord. Erroll. com www. Secret. Sommelier. com 25/02/09 Copyright - The Earl of Erroll 25
Скачать презентацию Lord Erroll — Merlin Member of the HOUSE
1bbe58e93f93b395207e026cb9acd8a1.ppt