The new UK government has just wasted many millions of pounds by cancelling the ID cards scheme.

 

I never really supported the scheme, not because of the usual civil liberties groups complaining but simply because I do not trust the government to not screw it up and make life worse for people.

 

Here's a simple suggestion to how it could have been done, and in a useful way. I'm going to send a copy of this to my MP, I'll post any response if I get one.

 

 

Firstly, the cards should simply have a photo and your name on the front, along with possibly your date of birth (or even just the year and/or month). This would allow anyone in low security situations to identify the owner - eg. age verification in a shop.

 

Second, the card must have a serial number printed on it and stored electronically somewhere - eg. on a mag-strip or chip or even RFID (finally, a use for that technology, how amazing...).

 

This number will be tied back to a central database accessible online - even publicly. By default, entering the number into the site would simply provide the same details as what's printed on the card - photo, name etc.

 

However, the site should also have the means to store other data, eg. your address, medical details, phone number etc. This information must be stored in such a way that certain parts are tagged with security levels or such. A login for the site should be available to be acquired by applying to a body (maybe the data-protection body - that already exists after all), this login will give that person/company access to certain "categories" (or "tags") of data, eg:

 

name, photo, age PUBLIC

phone number PRIVATE SHOP PASSWORD

address PRIVATE SHOP

general medical conditions PRIVATE GOV DOCTOR PASSWORD

detailed medical records PRIVATE DOCTOR PASSWORD

criminal record PRIVATE POLICE PASSWORD

 

it should be possible to enable or disable these tags to some degree (for example, I might want a SHOP to have access to my address but not my phone number, or to both). I could even decide to block any particular information from POLICE - in which case they will have to find it out themselves as they do now, of course, by not blocking it it would save time if ever needed).

 

It would even be possible to password protect certain data - even to encrypt it on the server with that password. Then, if someone needs access to the data they need you to enter your password to let them get at it. Of course, you'd want to leave public information available without for speed (ie. if using non-contact readers) - but *you* would be able to make that trade-off.

 

The data should be voluntarily added. In the case of medical information or criminal information it should be added simply because it's already on computer elsewhere and simply using one central database makes life easier. It should be possible to add a flag to disable access via the card system to the data though and provide a seperate serial number for just access to that part of the system for those who want it.

 

The information would need to be verified to be of use obviously, but then it is now anyway - it's not going to be hard to simply take some bills or a driving license to the local tax office or whatever and get them to add the data. You should be able to update the permissions on the data yourself easily. This can either be done via a secure method online, or, to make sure it's very secure simply to it at the same government office - present the card so you can be id'd and when they know it's you then they can allow you to change them. There should also be a password required for editing data.

 

By using a serial number on the card it is revocable. I frequently lose my credit cards so the ability to call a number and know that they are useless immediately is good - the same should be true for an ID card. This is also the reason for holding all data off the card - if the card only contains a serial number there's nothing anyone can get from the card that's any use once the serial number has been invalidated. Of course, anyone using a deactivated card is then immediately suspect. A centralised system allows for easy access control to who has access to the data too - kill a user account and it doesn't matter what they do with the card - it's of no use to them. Given the stupid amounts of money the government put into this stuff they could even just build their own private network to run it.

 

The important thing is that a government backed, secure, guaranteed ID card is actually a good idea. There's always going to be those who don't want one and they can simply not get one, or just not add whatever data they don't want known to the system. By allowing the user to choose what's on the card there can be no civil liberties issues.

 

You could even allow interested parties to provide ideas as to other things that could be added - maybe bank details so you can buy things without needing to carry other cards? By ensuring that this number is marked as requiring a password you've got the current chip-and-pin system along with the fact that the card has your photo on it as extra protection.

 

Now, how this is useful:

 

If you buy something which needs to be delivered you need to provide your address. Assuming that shop had access to level 2 info you could just swipe the card, their system would lookup your address online and save you giving it. Of course, if you hadn't given the address or denied access you can just provide it the old way. Same goes for online shopping - just provide your serial number to have your name, address and possibly even card details loaded automatically - again, only if you've added them, and decided to allow them to be used in that way.

 

If you were stopped on the street by a police officer they could easily verify who you are from the details on the card visually, or, for extra security they could use a handheld terminal for access to the system. If you'd chosen not to provide the details they wanted, or not allow the police access to them, or refuse to enter a password if you've protected them they could just use the old fashioned methods of finding out the information. But, for those of use who aren't scare of the police providing the details means a stop of a few seconds instead of the hassle of waiting for them to verify the information by other means.

 

There are many more examples I'm sure you can think of.

 

Such a system wouldn't even be expensive - you could charge for the cards (they are, after all, *useful* in this scenario) and the back-end could simply be run online or using a VPN. It would also allow the consolidation of many other databases into a single system.