And now, Heeeere's Digimarc!

I've been reading Real ID posts about DigiMarc for awhile now, and here's another sample. A number of states are apparently contracting with them, NOW, to build Real ID-compatible systems in the (near and appropriate) future. Digimarc has some specific reasons to win these contracts, but that's not important (to me) now. I'm fascinated by the possible scenarios that may unfold specifically because one company has a number of the state contracts.

The various states that choose Digimarc might be particularly compatible. They may wind up paying less, if Digimarc is willing to share with them the rewards of developing the same programs for multiple states. But if, heaven forbid, Digimarc suffers any delays or security problems, all of their states could fall into trouble together.

Mind you, I have no reason to assume that Digimarc will have any trouble. I'm inclined to hope for the best. But many eggs WILL be in the same basket.

As they used to say, if you put all your eggs in one basket, WATCH THAT BASKET!

States Rights versus Federal Hacks:

William T. Pound has published an interesting column in the Kansas City infoZine. In it, he raises many of the customary and sensible criticisms of Real ID, but from a slightly different perspective: States have mined their own vast experience to design the licenses that are appropriate for each of them, and now here come some feds to throw out all of that and substitute some quicky "one fits all" rules. Please bear in mind that this is a federal administration with an amazing abiliity to get things wrong. Some quotes:

Since the inception of the driver's license, states have exercised a great deal of flexibility and autonomy in determining the standards and criteria for issuing them. That freedom is coming to a screeching halt in the face of the federal REAL ID Act. ...

The federal act requires states to issue REAL ID-compliant driver's licenses and identification cards to more than 242 million people. In so doing, each individual's Social Security number, vital records (birth certificates, etc.) and legal resident status must be verified through government databases that either do not exist or do not have the capacity to handle such volume. Additionally, documents that verify that applicants are who they say they are must be scanned and stored electronically while the information on each driver's license must be made accessible to other states through a system that has yet to be determined.

REAL ID is likely to increase visits to state departments of motor vehicles by more than 75 percent each year. ...

Now, federal legislators and rule makers are negating state driver's license security efforts, imposing difficult-to-comply-with mandates and limiting their flexibility to address new concerns as they arise. In other words, decades of state experience is being substituted for a "command and control regime" from a level of government that has no driver's license regulatory experience.

Making matters worse, Congress and the Bush administration have not given states the money they need to put REAL ID in place. In fact, they haven't even provided funding to carry out the mission of improving federal record-keeping necessary for identity verification. Yet they have set an ambitious goal for states to meet all the requirements of the law by May 11, 2008.

I'm really sorry it's not proper to quote the entire article.

Convergence (Passport, Real ID Drivers license):

The Fort Frances Times Online has a gushing story about how wonderful Real ID is, and the desire of one businessman to make Vermont the model state that implements real ID first - never mind the cost - to show how wonderful it is.

For me the interesting part is a request this guy made to the author of Real ID (Rep, Sensenbrenner) that was well-received: Driver's licenses ought to show the place of birth of the holder. That would allow a Real ID license to be used in place of a passport, to re-enter the USA. (The background here is that yet another percolating initiative from DHS, the "Western Hemisphere travel Initiative" proposes to require passports to return to the US. Forget your passport, rot in the Ocean, I guess.)

I see this idea as a little step in the right direction. Add a few more lines, make the passport and the Real ID license carry all the same info, and get rid of one of them.

Bad news from California, for Real ID:

A story at latimes.com has some of the harshest words for Real ID that I've seen:

Officials in California say that meeting federal requirements could cost the state hundreds of millions of dollars, and that it could also increase identity theft and lead to invasions of privacy. The act is "a man-made disaster," said state Senate leader Don Perata (D-Oakland).

The state Senate will hold hearings starting Tuesday to examine, among other things, how much implementing the act will cost the state. Congress appropriated $100 million to put the system in place nationwide. But the National Conference of State Legislatures has put the total price tag for states between $9 billion and $13 billion.

"This thing is such a big mess it is difficult to quantify at this point," said Sen. Michael Machado (D-Linden), who will oversee the hearings.

Should Part of Real ID take effect NOW?

A lawsuit in Maryland may have the effect of causing part of Real ID to take effect now, or at least, to override - immediately - any state law that it intends to override in 2008.

What's at stake is the question of drivers licenses for illegal aliens. I'm referring to a short and somewhat confusing story that seems to suggest this: That since Real ID will replace state law regarding whether aliens may have drivers licenses, they are now allowed to have such licenses until Real ID takes effect.

More on this story as it becomes a little clearer. Click on this Hometown Annapolis Story and search down the page for "LICENSES FOR ILLEGALS".

Ohio: Pretty Calm about Real ID

You can read, in this Mount Vernon News story, that Ohio feels ready to make relatively minor changes to comply with Real ID. And they are aware of the potential privacy intrusion and fraudulent document issues. Sounds reasonable. Let's see what they say when the DHS adds their requirements...

Long Lines, Long Waits in Alabama

Alabama made a heroic effort to replace their old way of handling driver's licenses with something that meets the known requirements for Real ID. Quoting from an AP story in the Times Daily: the result, currently, is

" ... long lines and long waits for driver licenses. State officials blame a combination of computer problems for the delays.

Computer slowdowns have shown up both in the statewide switch to the new federally mandated system that states must adopt by 2008 and in the state's new driver licenses system.

"We are trying to do in six months what other states have until 2008 to complete," Limestone County License Commissioner Greg Tucker told The Decatur Daily for a story Friday."

Unfortunately, when the DHS publishes the rest of the Real ID requirements (and they can do pretty much anything), Alabama will have to do a lot over.

"Not only is the state not ready, Homeland Security is not ready," Tucker said. The federal agency hasn't completed its rules for the new system.

Alabama Department of Public Safety Director Mike Coppage said he went ahead with Real ID because the state had its own new driver license system being installed. He said state officials did not anticipate the computer problems.

The state changed to a new Alabama driver licenses system last fall and installed computer equipment through the end of 2005. As more work stations came on line, delays occurred, DPS spokeswoman Martha Earnhardt said Friday.

The computer outages have lasted on average 1-3 hours, sometimes twice a day, she said. The contractor, Digimarc, is working with its contractors to correct the problem.

The Real ID changeover caused additional delays, she said.

NIST Defines Standards for Biometric Federal ID Cards

The National Institute for Whatever has defined standards for Federal ID cards, "Personal Identity Verification cards" for all federal employees and contractors. These cards will have biometric ID in the form of two fingerprints. The standard also defines how to add face prints. I don't suppose real ID cards will be required to follow this standard. Why have ANY of the passport, federal ID and Real ID cards be the same to cut costs?

On the other hand, maybe the DHS will require Real ID cards to follow this same standard. Interestingly, the letters RFID do not appear in the NIST document.