Showing posts with label identity. Show all posts
Showing posts with label identity. Show all posts

Tuesday, November 13, 2012

Kantara floats voluntary-compulsory authentication for social saftey nets

NSTIC policy experiment applied to government dependents

BTC --  The Kantara Initiative paved a name and a place for themselves by bringing bank card infrastructure to US food stamp programs and general relief banking options.  Kantara's work centers on social safety nets and frameworks of anyone completely dependent on the US government for food, shelter or money.  The user population for their services has dramatically increased due to Iraq and Afghanistan war homecomings and the 2008 economic crash.  Slow job growth and unemployment has pushed many Americans into US social service systems in larger numbers.

NSTIC, the National Strategy for Trusted Identities in Cyberspace, is working with Kantara to bring an authentication credential system online for US social service recipients.  Kantara's involvement would make transactional monitoring between recipients and guarantors more convenient.  FICAM, the Federal Identity, Credential and Access Management, moved ahead in 2009 is a model for Kantara going forward, cites a recent report at Secure ID News.

"In the case of credentials, that accreditation comes from the Kantara Initiative. Kantara’s Identity Assurance Accreditation and Approval Program aims to grow identity credential services based on the four levels of assurance that are measured and validated in the U.S. Federal Identity Credential and Access Management (ICAM) trust framework." 

Tuesday, October 9, 2012

REDUX: Computerized National Identity Cards closes border, allowing only tech adopters

c/o Geo Pakistan

ISLAMABAD: Minister for Interior, Rehman Malik on Tuesday directed that Red Zone area be extended till Embassy Road immediately and its entry be allowed only to authorize persons having valid Computerized National Identity Card (CNIC) which will be verified on the spot.



Here is second life for news that matters:  














DIY GOVERNMENT

Friday, October 5, 2012

NIST grantmaking evades privacy, steering accountability for online ID initiative



WASHINGTON - Government and business interests amid an NIST steering committee nearly uprooted public interest group representations the week NSTIC grants were awarded to contractors to retrofit government issue ID for smartphones and other privacy troubled devices.

According to reports, pilot programs would use national identity articles, like passports, and US drivers licenses online and in smartphones. Grants were awarded to companies like AAMVA, Microsoft, ATT and Daon. The Daon project would port an electronic version of passports, using biometrics, for use on smartphones to cross international borders around the world. While Privacy and Civil Liberty councils remained intact after the struggle, it became apparent privacy and most public interest considerations were marginalised.

 “The IDESG [had] nothing to do with the appropriations. That comes 100% from the NSTIC NPO. I, nor anybody else involved in the IDESG had any say in who got money. We haven’t seen anything other than what’s online. They’re government grants, and they report exclusively to the NSTIC NPO,” said Aaron Titus, Privacy Management Council on NSTIC’s Identity Ecosystem Steering Group [IDESG].

While privacy interests remained intact, the steering group appeared to be uninformed and ineffectual towards grant initiatives to port national identity articles online and onto mobile devices.

“NIST failing to inform a public interest steering committee of plans to fund and implement pilots using bonafide identity articles live online is a complete breakdown in an accountability process considering privacy impacts. This steering committee was almost eviscerated come time to award grants to a national ID program online. This is a heavy indicator that NSTIC is going to run counter to the public interest of privacy and civil liberty and should not be ignored,” says Sheila Dean, spokesperson for the 5-11 Campaign, a national identity watchdog group.

Titus was later asked about grantmaking for privacy and public awareness campaigning of the NSTIC initiative. He cited privacy standards tend to be an “ivory tower” as businesses and governments fail to measure up.

“Because [NSTIC] is voluntary, nobody would implement it. Instead, they’d all run away and do their own thing,” said Titus who indicated a “waste of time” on the part of the government to better inform the public of the program and its impacts to privacy for its intent.

The NSTIC program is a voluntary White House online initiative for online technology users and the private sector modeled closely to FICAM, a standardized identity credentialling program using Smart Cards and biometric credentials for access to federal facilities. It is administered by NIST, DHS and The US Department of Commerce.

RELATED: 

Wednesday, October 3, 2012

ON NOTICE: Medical consent forms include device tracking, reports to FDA

BTC -  The great thing about the Internet is that one can publish pertinent information with little to no analysis and others may draw conclusions, make assessments and determine the meaning of events on their own.  Use of personal judgement and critical thinking skills are encouraged by readers finding content of interest on this blog.

Today on a routine visit to a dermatology office I was asked to sign a boilerplate Consent for Treatment  form.

The technical title of this form is as follows: CONSENT TO OPERATION, ADMINISTRATION OF ANESTHETICS AND RENDERING OF OTHER MEDICAL SERVICES.

One important item of note on this boilerplate was an opt-out item in the consent for treatment:

"The following information has been explained to me to the degree that I wish to have it discussed:...
*Possible recognized alternative methods of treatment, including non-treatment;" 

The most relevant information to make this a blogworthy item is the item number 3.

3.  Federal Regulations ( 21 CFR Part 821) require manufacturers to track certain medical devices, and assist the U.S. Food & Drug Administration (FDA) with notification to individuals in the event that a certain medical device presents serious health risks.  I authorize and agree to the release of my contact information to the manufacturer:___________________________________________ for the this tracking purpose only.  I understand that the manufacturer may notify me, if necessary, of important safety information about my medical device, and may release my information to the FDA if ordered to do so.  I understand that this consent is valid for the life of the medical device. 
THE CONCLUSIONS

I had no need of this clause at the time of my personal treatment and did not consent to medical device tracking. Since there is no device for the FDA to track inside my person for medical treatment or any other purpose, I signed the form. It was non-applicable.

This is a live medical consent form being signed by hundreds of people every day seeking treatment for any number of ailments. It cites Federal Regulatory requirements for tracking medical devices. It did pique my curiosities about subcutaneous device implants during my visit to this Dermatology office. RFID tags have been approved for internal and subcutaneous use, and in this regulatory case, medical tracking of human beings and animals by the FDA. 

As this regulation exists live on this form, I see concerns about this may have been massaged away prematurely by advocates who might believe overt threat of internal RFID tracking is "over". Fights were won to ensure medical device tracking was not baked into US national healthcare laws passed in 2010. It was a victory indeed.

However, the public often forgets or misses information about how Administrative fiat in federal agencies is a strong second option for those lobbying for widely administered rules or regulations in public and private sectors. A strong bureaucratic incentive is what lobbys may lead with to create a regulation they could not get passed by way of US Congress. A good example of this would be the Executive branch using Executive Orders to compell public agencies to administer regulations, or even policy, executing items exactly as they would a law.

A consent form like this serves as a flag or a marker to those of us who know governments and corporations live by rules and consequently die, or suffer consequence, of breaking those rules.  The rule will apply today to those who have pacemakers, diabetics with unique conditions, epileptics and other critical health problems solved by the graces of modern technology.  Unfortunately, we also live in a society today which rewards surveillance and data mining contractors handsomely for watching the public in predatory ways counter to human rights, the US Constitution, State Constitutions and the natural will of the public.

I am far more concerned about manufacturers monitoring patients or given a de-facto surveillance license by the FDA for non-health purposes, because they can. Consent forms like this give them the power to do so.  Regulatory compliance holds threat of litigation against device manufacturers for NOT monitoring patients.

Meanwhile, patients maintain hold of the ultimate power: consent. Unless, of course, they sign that away.

Thankfully, there is a way to opt out.  Medical implants are voluntary. They may seem involuntary for those who may need them to survive.  However, most moderately healthy people have no medical need for an RFID implant.  They would never give consent to an arbitrary medical manufacturer to track them.

THE RFID EXCEPTION IN SOCIETY

Subcutaneous RFID adoption is still a novelty item for screwball hackers resistent to living in the woods without being wired in.  By rule of thumb, the .03% of 1% of RFID implant volunteers aren't going to lobby government to do what they do on their own, even by Andy Greenberg's standards.  It's okay to tell the RFID Toys author, who proseletyzes RFID chip adoption, "Go ahead.  It's still America. Do what you want.  It's your body."

Voluntary internalized RFID is not going to catch on with parents or responsible parties in the 1st, 2nd, 3rd or any world unless there is a nefarious and ubiquitous economic or government mandate. They won't be volunteering up for it. Even if Texas and Florida education systems may compulsively encourage dressing kids with an RFID tag. Parents generally don't want Institutions to have more power to watch their children than they do.  They will challenge this or put their kids in another education system.

The rule of consent is the way the public Beats The Chip.


Wednesday, April 25, 2012

“OBAMA: Stop Attacking Elderly U.S. Citizen Latinos in Texas”

"According to immigration attorney Jaime Diez, along the Rio Grande River in Texas, there are cases where Elderly Latinos have to relinquish their U.S. Citizenship because they cannot provide enough evidence to substantiate their birth on U.S. soil by either a hospital or a credible midwife."

Tuesday, April 24, 2012

New Ohio driver’s licenses will take more time, proof

c/o  [OH] Middletown Journal

"New Ohio driver’s licenses and identification cards debuting in January 2013 likely will cost more, require additional documentation and take longer to get. 
Federal and state officials have no current cost estimates to implement the programs in Ohio or nationally, but a 2008 Department of Homeland Security document detailed an 11-year national rollout cost at $9.9 billion under mandates that since have been relaxed. 
Foes of the controversial Real ID Act of 2005 say the federally mandated measure has serious security questions and will never be fully implemented because 15 states have passed bipartisan legislation to bar its enactment and 10 more have passed resolutions denouncing it."

Friday, January 6, 2012

She Was An American Girl Raised On Promises (Of Due Process)

BTC- The following tale falls into the "when biometrics doesn't solve all your immigration actor problems" category.

c/o The League of Ordinary Gentlemen
So, in April of 2011, ICE proceeded to deport a 14-year-old American citizen, who spoke no Spanish but apparently spoke excellent colloquial English, to Colombia. It took her grandmother and the Dallas Police nearly a year of searching to find her. Jakadrian was issued a work card by the Colombian government, and has been working as a house cleaner ever since her arrival in (I assume) Bogota. There is some issue in Colombia, which is holding on to the now 16-year-old American citizen; perhaps she has been accused of a crime there. But she’s not home yet, more than a year after she ran away and not quite a year since she was deported out of her own nation.
:::MORE HERE::: 
http://ordinary-gentlemen.com/burtlikko/2012/01/05/she-was-an-american-girl-raised-on-promises-of-due-process/

RELATED: Congress pushes Biometrics

Thursday, July 7, 2011

COUNTING DOWN TO THE ERA OF THE QUANTIFIED SELF

BTC- There are those who want to be tracked and surveilled.  It's a fact.

The following article is about a Silicon Valley biotech corporate collective who wants to see if they can even technically achieve the ends, regardless of the means, to trace every iota of biometric information you might emit.

:::MORE HERE:::

Tuesday, June 7, 2011

Commerce Dept. to discuss Cybersecurity, NSTIC reports

UPDATE: 8:30 AM EDT - PRESS CONFERENCE CANCELLED 


WASHINGTON – Tomorrow, Administration officials will host a press conference call at 11:45 AM EDT to discuss a green paper report released by the Commerce Department’s Internet Policy Task Force that proposes a new policy framework to strengthen cybersecurity protections for businesses online that fall outside of the critical infrastructure sector.  


U.S. Commerce Secretary Gary Locke, along with White House Cybersecurity Coordinator Howard Schmidt, Internet Policy Task Force Chair Cameron Kerry and Internet Policy Advisor of the National Institute of Standards and Technology Ari Schwartz, will join the call to outline the strategy and key components of the report, as well as answer reporters’ questions. 

Thursday, May 19, 2011

Northeastern states submit to Real ID certification processes

Citizens opting out now may eventually possess national IDs for federal purposes

BTC - Several northeastern States are currently on the path of "self certification" or a State's certification process of compliance with the Real ID benchmark process. Maryland, New York, New Jersey, Delaware, Vermont, and Connecticut have all expressed intent to comply with Real ID regulations.

State certification is an interrim process for States to begin compliance with Real ID regulations.  12 states responded to an initial call for compliance certification in 2008.  The process involves several letters of approval, issued by a combination of State officials, the State Attorney General's office and consent of a State's Governor.

Federal funding to support State costs for Real ID certification initiatives was recently reinstated.  The National Conference of State Legislatures [NCSL] received a grant notice today for $45 million in Real ID appropriations.   State governments and licensing divisions who accept grants may buy into more biometric technology upgrades for licenses and to build database infrastructure.  DHS had previously omitted federal appropriations for Real ID in March, 2011.

The complicated process of national Real ID compliance is now encumbered by 25 States, who issued bans to the costs, policies and regulations.  Efforts to mitigate federal standards in states like California, who recently upgraded local licenses for federal acceptance by the TSA, allow license applicants to opt-out of a national or federal ID card. According to Molly Ramsdell at NCSL, states expecting to be certified by the next DHS deadline, will bring license holders into federal compliance, even if they opted out of the process originally.

Gold Starred Real ID "self certified" license
Northeastern residents in New York and New Jersey who may have opted out of the enhanced drivers license, containing an insecure RFID tag, and the federal ID program would be required to provide proof of citizenship to renew their licenses by 2013. Their ID cards may be used in the future for crossing continental borders, boarding airplanes or other purposes deemed by DHS, like logging into an online terminal with a universal digital identifier.

States engaged in the certification process may issue ID cards featuring a gold star, indicating the license is headed for DHS approval by the next deadline.   To date, no State has been officially certified or deemed materially compliant with Real ID regulations due DHS extension of the deadlines until January 15, 2013.

Wednesday, April 27, 2011

And the Birthers may doubt your citizenship

By Sheila Dean 


What would life be like in America if a political group could simply doubt you out of your citizenship and subsequently, your rights? What would happen if they didn’t like: your race, your parents, your State of origin or who you were married to? If the Birthers were a smashing success, you could share President Obama’s fate.


Currently, anyone born in the United States is a citizen by right of the 14th Amendment. 
The Birther movement has exhibited relentless challenge to President Obama’s U.S. citizenship. The strategy of the Birther movement has been to displace the current United States President by annulling his birth records. A successful PR campaign has driven doubt about Obama's birth certificate into many Americans. The Birthers reject Obama’s current electronic birth record held by the State of Hawaii.   In a worst case scenario, if Obama’s citizenship was disproven, the Birther movement might call for an ex-officiated President to be expediently deported for being an "illegal alien immigrant".  We can not speculate where he would be sent, since he is an American. 
According to CNN, Obama’s birth documents pre-date the electronic records system in Hawaii.  Obama’s mother is also a US citizen, born in the Continental United States. This is still not good enough for Donald Trump and the Birthers he serves. 
Obama’s birth record contest mimics a nightmare trip to and from a Florida DMV window; where it seems no amount of identity proof will ever be enough.
The Florida DMV has become notorious for turning away women and the elderly from attaining drivers licenses or ID cards because they can’t substantiate “adequate” documentation. The State of Florida is adherent to Real ID requirements for very specific citizenship articles and identity documentation, as well as mountains of supplemental information as proof of residency.  Often proof of citizenship and marriage records pre-date acknowledgement by “updated” systems, if you have been around long enough.  Residency? Birth Certificate? Marriage Certificate? Soldier? At times this is not nearly enough for the State of Florida to give you a license to drive.

An American birth certificate is also a private identity document. Posting a copy online is not something most of us would do; yet the President has indulged the Birther community by doing so.  If the US President’s identity is compromised, stolen or misappropriated by common criminal identity thieves, the matter becomes an issue of national security.  The common risk remains.  If you repeatedly flash certain documentation enough, it will inevitably tempt identity thieves. There is risk to you through over-exposure or repeated sharing through insecure DMV databases in Real ID compliant states. 
In a best case scenario, you hope having a birth certificate and a social security card are enough to procure the gold standard for national-to-international passage, the US Passport. Surely, this would ensure your ability to sail through all inquiry into your legal identity.  However, right now, a birth certificate alone will not relieve you from the run on proof of private information to gain a passport.  The TSA and the US State Department have teamed up on an exhaustively intrusive questionnaire for passport applicants.  This may require you to prove the last 7 years of employment and status of circumcision if you are male.   
Not everyone who wants identity information deserves an answer.  It’s bizarrely disenchanting see the POTUS cave in to an incessant demand for birth certificate verification by a politically motivated group bent on his displacement.  Why would Obama go along with this type of juvenile ultimatum?  Birthers are the same type of  people who can’t be satisfied with enough evidence of ANY US citizenship- no matter how much or how often you prove it to them.
Americans aren’t required to agree, or even like, Obama’s policies or his politics. In fact, he is responsible for backing over his own civil liberties by signing the reauthorization of the USA Patriot Act and continued warrantless data gathering efforts.  His Administration has a lot in common with the Birthers nipping at his heels afterall.
However, if the Birther movement were allowed to displace a US President for “inadequate documentation”, wouldn’t it force a weird new standard of subjectivity into the handling of United States citizenship?  What if a group of US residents decided you shouldn’t have rights?  Could they could simply launch a private campaign effort to dispell your citizenship as if it were a myth and then expect the State’s highest offices play along with it? 
Don’t be a fool.  American citizenship should not be reduced to some blithe Statist game of,“I’ll show you mine, if you show me yours”.
Just because Obama put his birth certificate online, does not mean we should give the Administration unlimited access to our private identity articles.  The President waiving his rights, doesn't require you to waive yours.

Friday, April 8, 2011

SF Entertainment Commission New Surveillance Rules to Impact Privacy, Venues

MEDIA ADVISORY 

For Immediate Release

SF Entertainment Commission New Surveillance Rules to Impact Privacy, Venues



WHO:  Anyone with professional and recreational pursuits concerning entertainment in the City of San Francisco, Calif. 
WHAT:   Public input and review of rules containing increased police and surveillance forces at entertainment venues in San Francisco 
WHEN: Tuesday, April 12th  6:00 PM 
WHERE: San Francisco -City Hall: RM 400, 1 Dr.  Carlton B. Goodlett Place 
WHY:  It impacts business, tourism and San Francisco’s culture. 
HOW:  Show up to City Hall, sign up and be prepared to give input  about the how your information would be handled by local venues and the police.
For comments and information: 
Deborah Pierce for Privacy Activism 

###


TECH LIBERATION FRONT 

San Francisco’s Entertainment Commission will soon be considering a jaw-dropping attack on privacy and free assembly. Here are some of the rules the Commission may adopt for any gathering of people expected to reach 100 or more:
“3. All occupants of the premises shall be ID Scanned (including patrons, promoters, and performers, etc.). ID scanning data shall be maintained on a data storage system for no less than 15 days and shall be made available to local law enforcement upon request. 

4. High visibility cameras shall be located at each entrance and exit point of the premises. Said cameras shall maintain a recorded data base for no less than fifteen (15 days) and made available to local law enforcement upon request.”

Friday, April 1, 2011

Spanish speaking US citizen detained on claims of false ID in Denver

Lawsuit claims DPD officers committed racial profiling 
c/o Denver Daily News

[Jose] Sanchez was visiting his girlfriend in July 2010 when he stepped outside to smoke a cigarette and talked in Spanish with an acquaintance. Police officers approached Sanchez and “demanded that Mr. Sanchez identify himself” and provide an ID, according to the ACLU. When Sanchez said the ID was in the apartment and he could go get it, police officers instead went inside without getting the consent of Sanchez’ girlfriend, who was in the shower, says the ACLU.

Police located Sanchez’ photo ID in a backpack and declared it was a fake, accused Sanchez of having multiple pieces of fake ID, arrested him and took him to jail, according to the ACLU. However, the ACLU claims that the officers could have quickly checked the validity of the card with Homeland Security. [BTC - I'm flagging down this sentence. DHS, a federal agency, should not be the authoritative fallback position in local police affairs. Nor should any citizen bear instant burden of proof of identity in an aggravated police situation without probable cause of wrongdoing.  I don't know if this author is putting words in the mouth of the ACLU or if the local chapter mistakenly believes DHS is somehow a higher authority than dealing with their local PD for routine police work. This sentence lends airs of guilty-until-proven innocent.  We do not have to answer to federal powers when we walk outside our doors for non-criminal mundane reasons. It doesn't resonate "typical" of the ACLU.  Regardless, the Denver PD clearly invoked police might-is-right towards the spanish speaker or someone simply in the wrong place at the wrong time.]

“The Denver Police Department has authorized its officers to enforce an ordinance that prohibits the carrying of false identification. But the department has failed to train its officers to recognize valid government-issued photo ID cards,” Silverstein said in a statement. “That’s a set-up for more false arrests and illegal detentions like this one and a recipe for the continuing deterioration of police-community relations.”

DPD Spokesman Sonny Jackson said police received a complaint about the Sanchez incident last summer. An investigation was started, but the person complaining did not cooperate with the investigation so both internal affairs and the Office of the Independent Monitor declined the case, according to Jackson.  :::MORE HERE:::