Perceptions of Government Technology, Surveillance and Privacy: The UK Identity Cards Scheme Dr Edgar A. Whitley Reader in Information Systems London School of Economics and Political Science

Perceptions of Government Technology, Surveillance and Privacy: The UK National Identity Service Dr Edgar A. Whitley Reader in Information Systems London School of Economics and Political Science

(Updated) Indicates slides updated after presentation to include reflection on comments from James Hall

Demand drops

Passports and identity cards Cost report Products issued over 10 years Oct million8%-9% decrease in projected number of products issued over 10 years May million

Cost report Products issued over 10 years Oct millionBritish/Irish citizens and EEA/Swiss nationals resident in the UK May millionBritish and Irish citizens resident in the UK

Support slumps Research carried out by ICM research on behalf of NO2ID shows –60 per cent of the UK population think that ID cards are a "bad idea" –38 per cent say they are a “good idea”. –The National Identity Register is opposed by a two to one majority.

Support for the service has decreased... This continues the general downtrend in levels of support over time.

Main reasons for disagreement It infringed personal freedom It would not work There was no need for it It would be too costly

How identity cards might work

Proving age Sita’s gone out with a group of friends after college. They’re all celebrating and Sita offers to buy a round. When she gets to the bar the barman asks for proof that she’s over 18. Sita laughs and says she’s 19, but the barman is new and demands proof of age. Sita digs in her bag and pulls out her identity card. She hands it over which confirms that she is in fact 19. As she puts the card back in her purse she is relieved that she no longer has to hand over documents with her address on them to prove her age.

(Updated) James Hall: Different levels of assurance offered: –Physical inspection “flash and go” –Phone call centre to confirm card is valid –Online verification of card: “not as of day 1”, “a medium term intent”

Does this functionality have to be provided by a State issued credential?

Press images Home Secretary Alan Johnson and his identity card Details his full name, date of birth, place of birth

Mother’s maiden name

(Updated) James Hall: Birth certificates of celebrities and politicians are frequently requested Identity card design means that they can be requested from anyone who presents a card for visual inspection

Should this risk be introduced by a State issued credential?

A way forward?

Breaking the link with passports

Passports Intended for travel purposes Design specified by International Civil Aviation Organization

What is required A ‘relying party’ needs to know that the other party is who they say they are (or has the attributes that they claim to possess) Needs to know the basis of this assertion (i.e. who is the ‘identity service provider’?) Ability to operate securely in online environments

What isn’t required A one size fits all solution –Different levels of assurance and risk Excessive data collection and disclosure –Data minimisation –Yes / No rather than full name, date and place of birth

Towards a marketplace of identity service providers Offering different levels of assurance Providing interoperable functionality Fingerprint biometrics not required for all service levels

Contact details Dr Edgar A. Whitley Department of Management London School of Economics and Political Science