- Related Stories
-
Senators skeptical of Real ID Act rules
March 26, 2007 -
Homeland Security dismisses Real ID privacy worries
March 21, 2007 -
Homeland Security offers details on Real ID
March 1, 2007 -
State officials oppose repealing Real ID Act
February 8, 2007 -
Maine rejects Real ID Act
January 25, 2007 -
FAQ: How Real ID will affect you
May 6, 2005 -
National ID cards on the way?
February 14, 2005
Rep. Tom Davis (R-Va.), the ranking member of a U.S. House of Representatives government oversight panel, said he has asked committee chairman Henry Waxman (D-Calif.) to hold hearings to explore questions related to the requirements, which were
"States don't have to participate," Davis told attendees at a meeting here organized by the Information Technology Association of America. "They can issue driver's licenses to whoever they want under whatever standards."
But he acknowledged that only a Real ID-compliant license will allow Americans to do things like board airplanes or enter federal buildings. (A U.S. passport issued by the State Department--new ones have RFID tracking chips embedded--could be a substitute.) He emphasized the importance of pushing ahead with the new standards, which supporters say are necessary to keep terrorists and other dangerous people out of spaces where they could do harm.
Davis said he was confident that after thorough hearings, which he hopes will occur in the "not-too-distant future," "naysayers will have fewer specious arguments to hide behind."
The congressman's remarks come as
They have balked at the idea, for instance, that the information on the licenses' mandatory bar codes, which could be scanned by banks, bars and other businesses, is not currently required to be encrypted.
Two-dimensional bar codes can be easily photocopied and redistributed, so they are likely to become the "weakest link" in the system, said Kelly Emerick, executive director of the Secure ID Coalition, a group that pushes for greater adoption of secure "smart card" chips.
And even if bar code data is encrypted, it could be hacked by a brute force attack, subsequently allowing break-ins on every other card that's in the system, she said.
Toby Levin, a senior adviser to the Homeland Security Privacy Office, said she shared concerns about the use of that technique.
"The fact of the matter is that the 2D bar code does not protect privacy," she said.
But the department believes it cannot prohibit third parties from scanning information off the cards because Congress did not give it "express authorization" to do so in the law governing Real ID, Levin said.
She said the department's privacy advisers are nonetheless very concerned about protecting the information on the bar code and are exploring ways to limit the data stored there or encrypt it in a way that would not be objectionable to law enforcement authorities. If encryption isn't rejected, she suggested that a "huge educational campaign" will be needed to make sure Americans are aware of what information can be swiped from their cards by anyone with the proper reader.
Homeland Security's assistant secretary for policy development, Richard Barth, continued to defend the program at Thursday's event, saying he has grown to become "very passionate" about the cause. "A good ID, a driver's license, is virtually a weapon in the hands of a terrorist," he said.
Barth said he did not believe the new cards would diminish privacy at all. He also bristled at what he called a "misperception problem" that the Real ID-compatible cards would be required to contain any sort of radio-frequency identification chip that can be read without contact with a machine.
"RFID chip has nothing, nothing, nothing to do with the proposed rule, nor, I believe, the final rule for Real ID," he said. "Real ID and the word chip do not appear in the same sentence in anything I intend to implement."
The department believes data shared among states through their individual driver's license databases should be encrypted in transit, but it's still wary of encrypting the data on the bar codes, Barth said. That's because law enforcement officers want to be able to read the data at traffic stops, he said, and it would be too costly for them to carry special readers that had to be "rekeyed" frequently.
Department officials urged the public to submit comments about
After reviewing those comments, the department plans to release a final rule sometime during the summer, which Barth admitted could mean as soon as July or as late as September 21.
See more CNET content tagged:
Real ID Act,
bar code,
hearing,
law,
homeland security




When the airlines lose half their customers, do they expect us who don't support it to bail them out? Fat chance!
When the airlines lose half their customers, do they expect us who don't support it to bail them out? Fat chance!
What? The 911 terrorists apparently had valid credentials, and any 'sleepers' would be able to obtain this new documentation without issue.
Think people! Anything you create will be copied, down to the smallest detail, and it will be used against us. So, if you are working on IDs for US Citizens, it would do us good if you worked on something else; like airport security that is smart, instead of obvious.
We do need a national ID, however that could be done with laminated, encrypted Social Security card that you show at places to get through security.
The best national ID program would be one where your national ID is given to you at BIRTH and as you grow up you go somewhere and they bump up the privileges on your card. Say you turn 16 and can be a student driver..... you just go somewhere, they scan and re-encode the chip in your card.... BOOM! Licensed to drive as a student driver!
Of course, there are going to be worries about people cracking the cards..... but that's a problem with driver's licenses in Maryland right now, they have gone to holographic **** and it STILL isn't keeping people from making illegal copies of driver's licenses.
Terrorists are also REALLY patient, they'll go through all the neccessary paperwork to get where they need to go.
People say "freedom isn't free" are stating a simple truth, but for the wrong reasons. It's not just our service men and women that are the price we pay for freedom, it's also the risk from enemies that we as civilians assume.
From where I sit, I'd rather have a short life as a free man than a long healthy life under a police state. But maybe that's just me.
As Bruce Schneier has been saying for years, this sort of brittle system that attempts to build a wall around the good guys to keep the bad guys out is fundementally misconceived. The sooner we get rid of gimmicks like Real ID and think about real security, the better.
Really, what we need is a national passport, that is verified by people in offices WITHOUT people having to come into those offices.
We also have to loosen our immigration restrictions and ONLY go after people who we know have a connection with terrorist organizations. That would necessitate talking with other countries and having them monitor their own people and ESPECIALLY have Saudi Arabia monitor and shut down the radical mosques that are teaching hatred of America.
Starting this month in a port neighborhood and then spreading across Shenzhen, a city of 12.4 million people, residency cards fitted with powerful computer chips programmed by the same company will be issued to most citizens.
See more: http://www.rfidglobal.org/news/2007_8/200708131747094867.html
http://www.rfidglobal.org
RFIDGlobal.org is an internationally oriented online platform for RFID companies and end users.