Belgium Rolls Out Java ID Cards 299
An anonymous submitter points us to this page describing Belgium's rollout of Java-based smart cards as a national ID card.
If you think nobody cares if you're alive, try missing a couple of car payments. -- Earl Wilson
I'm in conflict... (Score:3, Funny)
Java : good
Re:I'm in conflict... (Score:2, Insightful)
Why is that bad? How is it any different from a damn driver's license in the states? It's not. You think a cop in one state can't get your info just as fast as one in another? And do you realize how much easier it would be to write software if the whole country used the same damn format? And how much easier it would be for you to have one number to remember?
Java : good Java sucks. Slow junk. Ugly. You can always tell a Java app from another. Pathetic.
Re:I'm in conflict... (Score:2)
Why is that bad?
dude. you're posting as an ac and you're asking why mandatory id is bad?
How is it any different from a damn driver's license in the states?
becasue a driver's license is for driving which is entirely optional. an id card is just for every day existing which is not. i don't know about in the us (you guys have gone a little "security" crazy recently) but in canada, if you're not driving you are not required to carry a driver's licence.
And how much easier it wo
Re:I'm in conflict... (Score:5, Insightful)
photograph
name
date and location of birth
nationality
date of expiry
signature
address
height
eye-color
the authority which validated it
and the date when it was printed
So, which thing exactly is so much worse about that than about your driver's license?
Re:I'm in conflict... (Score:2)
Re:I'm in conflict... (Score:3, Informative)
It means that although the id card doesn't carry religion, it is relatively easy to determine this from the files and possible for a possible future government to o
Re:I'm in conflict... (Score:2)
Re:I'm in conflict... (Score:2)
Re:I'm in conflict... (Score:2, Interesting)
"Today is the deadline for males from the second round of Arab and Muslim countries and North Korea to register with the United States immigration authorities under new security rules. Amnesty International is calling on the US authorities to ensure respect for the human rights of non citizens and to review the special registration process to ensure that it is administered fairly and complies with the principle of non-discrimination under international law."
Re:Right (Score:2)
So therefore all Java is bad, even embedded java?
If jaa is so bloated and chunky and slow, how come it's used on so many mobile phones these days?
What does java actuall add to an id card? (Score:5, Insightful)
The important part of an id card is the interface and how you access and change the information. Such an interface is first and foremost a hardware interface. Trying to say that the card belongs to computer language x doesn't make any sense.
As for functionality, would you as a business really want to record important information on a card that is easily lost, physically compromisable, and carried by a person? What businesses want is simply a verifiable id for customers. The simpler the id the better.
What's all this noise about antiquities? Try pumping an antiquity in your Surburban and see where it gets you.
Re:What does java actuall add to an id card? (Score:5, Informative)
If they only gave this private key to the device that asked for it, they would be easy to duplicate.
Of course, you don't need Java for this, but you need a smart card with a CPU inside, and you need to develop the application that runs on that CPU.
The choice of a chipcard determines the SDK to be used for it. One of them is JavaCard...
Re:What does java actuall add to an id card? (Score:3, Interesting)
The functionality is still more important that the language. You pass a bunch of blips into the card and get a bunch of blips out.
Sounds like the big advantage of the technology is that the id the store gets isn't your actual private key...but a derivative produced from the key.
The cards can't actually prove identity of course. But it sounds like it would be a little bit more difficult to steal someone else's identit
Re:I'm in conflict... (Score:4, Interesting)
Checking licences is quick, but is not as convienient as you may think. Since many students are out of state, I see at least 7 different states' licences (and thier many variations) at each shift. Every state has a different layout, orientation, and material (for instance, New Jersey licences seem to be nothing more than laminated paper, while PA licences are thick plastic cards). Worse yet, no state ever puts the date of birth in the same spot. While this may not seem like a problem at first, it is quite time consuming to constantly scan cards for DOB, picture, and expiration (as you cannot sell cigarettes to someone with an expired license).
If everything was standardized, things would be much less time consuming. I know people become mighty frustrated when they have to hurry off to get drunk with their friends but need thier smokes right now. What would be so hard about having a standard layout? States could still embellish and add thier own features for security or other reasons, but to anyone who works with IDs all day, this would surely make life easier. The whole vertical layout for people under 21 is also a good idea, as it is really easy to tell if someone is of age by the orientation of the license, but it seems as this may be too easy to fake. Any ideas?
Re:I'm in conflict... (Score:3, Insightful)
Frankly, I don't really see what's so wrong with national ID cards. Perhaps it's just because I'm so used to it (I am from Belgium), but could someone explain why they are such a bad thing?
Re:I'm in conflict... (Score:2)
I've never understood this. The point of checking ID is to verify that you're above the legal smoking age, right? The point of the ID expiring is to make sure the info stays current, but your DOB isn't gonna change. So, if the only reason to check ID is to verify DOB, then why isn't an expired ID sufficient verification of your DOB?
Another reason... (Score:2)
As IDs get older, they become easier to forge. So if you force everyone to replace their IDs every 10 years, you make it harder to forge them overall.
Of course, I doubt anyone would notice that they were presented with an "old style" ID card with a future expiratio
Re:I'm in conflict... (Score:2)
Electric Flow though Smart Card:Not Smart Card
Re:I'm in conflict... (Score:5, Funny)
National ID cards (Score:4, Funny)
Re:National ID cards (Score:5, Funny)
Re:National ID cards (Score:4, Funny)
They tried it. It's called Microsoft Passport.
Re:National ID cards (Score:2)
Re:National ID cards (Score:2)
how hard can it be to break? (Score:2)
I'm not saying that it's absolutely useless; time and computing power are still issues. How long would it take to break this if you "borrowed" your universities labs for processing
Who do you want to be today? (Score:3, Insightful)
Unfortunately, the concept of giving people a stack of uncorrelatable tax ID nu
Well, (Score:5, Insightful)
Re:Well, (Score:2, Informative)
Well, there's ways to fool retina scans IIRC. Bruce Schneider talked about one method a while back...
neurostarRe:Well, (Score:3, Interesting)
Re:Well, (Score:2)
Re:Well, (Score:4, Interesting)
Re:Well, (Score:2, Informative)
There are all sorts of ways to secure identity. Most good smartcard rollouts specify an interaction protocol, and the data required, and let the individual implementors come up with something to please people.
Most people don't know just how much damage you can do with just someone's phone bill, and that's usually much easier to steal than their birth certificate.
The point is that there are many, many areas of poor security. Expecting a smartcard (which can be de-activated under many systems, unlike a ph
Re:Well, (Score:3, Insightful)
Interesting use of the word "almost" there. So, what happens if/when a method to fake arbitrary retinal patterns is developed?
The great thing about usernames and passwords, PINs, etc, is that if you have reason to think that someone else knows it, you can change it. You can't change your retinal pattern, or any other biometric data.
If someone manages to fake your thumb print or retinal pattern, you're stuffed - you can't change them, and if that
Hmm (Score:2)
Direct TV (Score:2, Informative)
Java based??? (Score:4, Interesting)
From what I understand (Score:3, Informative)
That being said, the Java card isn't running a Java VM. I thought it was technology acquired and put under the same Java brand, but it isn't exactly Java though.
Re:From what I understand (Score:3, Informative)
http://java.sun.com/products/javacard/ [sun.com]
Lots of good info there, toolkit, spec, etc. The Java Card book from Sun Press is also pretty good.
Re:Java based??? (Score:2, Informative)
Re:Java based??? (Score:5, Informative)
Some are the memory only type, where the card just has some sort of (normally secured) memory on it.
Then there are also the microcontroller cards. These cards have memory and a microcontroller built into them. You can write a program on it to do something, however you don't exactly have a lot of I/O lines or anything (just a communications link actually).
Most of the microcontroller smartcards have built-in encryption and decryption as well.
Java is pretty popular for programming smartcards, but they even have BASIC for smartcards.
The microcontroller only needs an external clock and power source, and will execute whatever program is on it.
Re:Java based??? (Score:2)
Re:Java based??? (Score:5, Informative)
Re:Java based??? (Score:5, Informative)
Smart cards also contain a CPU, sometimes highly optimized for e.g. RSA encryption, and their data is available through a file system abstraction. Smart card suppliers call this an operating system...
Multiple applications can run on these smart cards, which means you could theoretically have only one card for your ID card, your electronic purse and various loyalty cards (if your are not too worried about security/privacy issues in case of breaking into such a chip).
Memory cards are also called synchronous cards and smart cards asynchronous cards. That's because of the nature of the serial protocol they use to communicate with the device that reads them.
Smart cards have a real UART embedded, and implement one of two protocols (T0 and T1) defined in ISO 7816, the second of which is fairly complex and allows to multiplex communication between multiple applications running in the card reader and their peer inside the smart card.
JavaCards embed a "JVM", but a very limited one: you can't just open a network connection or dynamically load a class. Sun specifies the precise subset of Java that corresponds to a JavaCard profile. But, yes, they run Java "cardplets"...
Re:Java based??? (Score:2)
OK, here is the difference. In North America you use magnetic cards for everything. Magnetic card only keeps data, while software works on a card reader device.
All Europe use smart cards which are sort of micro-computers, the main task of which is encryption handling, doing it together with software on a card reader and thus doing it smarter. So, in Europe, card stealing doesn't help - it's too e
Please upgrade (Score:4, Funny)
Thank you. Please come back soon.
Re:Please upgrade (Score:2)
Big Brother or Good Sense? (Score:3, Interesting)
It's Big Brother (Score:2)
During the mid
Good or bad? (Score:3, Interesting)
Go calculate [webcalc.net] something!
Re:Good or bad? (Score:4, Insightful)
My national ID card has this on it:
a picture
Name
Given Names
Sex
Date of Birth
Place of Birth
Signing authority
My signature
Address
ID Card Number (2 of them)
Spouse
Children names
It bears several things on it that make its counterfeiting difficult (like a nice color changing hologram-like shape of the country)
All these concerns are very legit in the USA, but from the people I have talked to, this is the "only" country where people are so afraid of being bigbrothered. I have a national ID card and I use it very seldom, and I really don't have the feeling that it is being used as a way to track my habbits down. On the other hand, my bank uses that ID number in their files, so does my social security company (social security is built in into the belgian system, but you have to have a "company" paying your stuff), and if I could, I'd actually encourage all these government bodies who require identification at one point or another to create that database, and give access to information about me on a need basis.The problem does not come from the traceability, these problem are a minor concern compared to the advantages.
The real problem comes from trusting your government. The belgian political landscape (if I may speak of it thus) consists in dozens of parties, with 5 or 6 big players. This ensures that the same person don't stay in power very long if they don't do a good job, and there ARE alternatives to what is in place at the moment, and it's always a coalition of several parties that is running the country. This is one of the reasons I trust my government (to a large extent).
Trust is the real problem...
Re:Good or bad? (Score:3, Interesting)
Archaic (Score:4, Funny)
I guess I don't get it.
Re:Archaic (Score:2)
Re:Archaic (Score:4, Insightful)
There simply won't be any more guarantee that any of us are really who we claim to be, just because we hold a "smartcard" that identifies us as being a certain person.
In fact, most banks/lenders currently require 3 forms of I.D. to do such things as open a new checking account. That's because the closest thing to a guarantee of identity they have is forcing you to provide multiple proofs. Putting all the proverbial eggs in one basket, as a smartcard does, doesn't make much sense to me.
Blah (Score:5, Funny)
Hmm.. maybe I shouldn't have said that.
FYI (Score:5, Informative)
belgium allready has non-digital ID cards, which are obligatory to every citizen. You are even obligated to carry them around at any time and CAN be asked to show them to police if they have "reason" to suspect you of something.
You could have a look at mine, for example...
http://studwww.rug.ac.be/~bdejong/id.jpg [rug.ac.be]
Re:FYI (Score:2)
Re:FYI (Score:2)
Actually it IS a big deal. (Score:2, Troll)
Having to produce ID on demand with no cause of provocation other then you are breathing is just one example of this.
This free-fall needs to be stopped..
Re:FYI (Score:3, Informative)
It is a big deal here (in Belgium).
If you don't have your card, you can be arrested and held in a cell until you are able to prove your identity.
This is anywhere, anytime - not just walking out of a bar, or driving a car. Stand too long on a street corner, or if the police think you're looking at them in a funny way, or be the wrong skin colour in thewrong area - with no official id, you can be held for a long time.
If you're from north Africa,
Re:FYI (Score:2)
> evolution's inability to keep up with societal standards.
And the fact that there's no socially imposed evolutionary pressure against racism. If we could all collectively agree not to have sex with racists, eventuall, several hundred generations or more down the road, they'd die off.
Re:FYI (Score:2, Insightful)
How odd...these are the exact same people the police never seem to bother in any country...I wonder why?
Now imagine if you weren't...would you see compulsory ID cards in the same way?
-Nano.
Re:FYI (Score:2)
Your Rights and the Police [drizzle.com] says more, though it's not updated for these days of diminishing rights. And this pa
Re:FYI (Score:2)
Then again, I also live in a city with public transportation that works (NYC.)
Seriously, that makes a driver's license different from a National ID. However, it also causes problems, because prior to getting a passport I had to use my birth certificate, university ID and social security card to prove my identity. Now I just use my passport.
Nice Hair! (Score:3, Insightful)
Manually copying down information from the front of the card is far too time consuming and obvious. Plus, you can only fit so much information on it.
There are of course technical ways to design digital ID systems and laws you can put in place to prevent this from happening on any kind of scale, but I fear these cards were not designed with privacy in mind.
Re:Nice Hair! (Score:2)
You right. That's why whenever I have to hand over my identity card, they take a photocopy of it.
Obvious, eh?
Maybe not, if you don't live in a country with mandatory id cards.
Re:Nice Hair! (Score:2)
But as I said before, they start sticking medical history, family records, etc., on a card like this and you are just asking companies to abuse it.
Re:Nice Hair! (Score:2)
Ever tried to rent an apartment? Or get a job? That's two places that always ask to photocopy my driver's license.
I'm all for having something that can help me prove my identity to random folks like apartment managers, but not something that they can use to get other information about me.
Re:FYI (Score:3, Interesting)
Even that happens very infrequently. I'm 28 know, and I had to show my ID card only once to the police, and that was when I moved and a (very friendly, by the way) police man came to check that I was really living t
Re:HOLY CRAP!!! (Score:2, Informative)
I hope they aren't using ... (Score:2, Funny)
-- Dossy
(Still waiting on the saliva analyzing biometric device. Nothing like spitting to authenticate yourself.)
Snake oil. (Score:4, Interesting)
Sounds like he's (she's?) been listening to a snake oil salesman at Sun. Last time I checked, nothing was completely secure, least of all smart cards...
Fundamental Flaws (Score:5, Informative)
1) The keypairs on the card will be pre-generated when the citizen receives the card. IMHO a private key that has been in someone else's hands/machine is totally useless. This of course allows for involutary escrow..
2) The Belgian Federal Gov representative (Peter Strickx, ex-Sun, by total coincidence) plainly declared they do not want to have the necessary expertise in-house, but wants to outsource the whole thing (to Sun and ZETES, it now seems)
So this will put our identities (and the authentication/non-repudiation/existence of some very important personal documents) at the mercy of a couple of *private companies*, one of them American, no less, at a time when the US is governed by a madman, that gets away with secret military tribunals and illegal warmongering..
Some of the excuses, when I asked about this were that the
I say this is unacceptable and an enormous security blunder. Verisign, a US company, could issue some revocations, and thereby completely stop the flow of information inside the
Do I they want the US gov to be able to screw around with any
Please forgive me for using AC for once, one would get paranoid for a low less...
Re:Fundamental Flaws (Score:2)
This really depends on if the private key is generated on the card itself or on a separate machine and transferred to the card. Given decent tamper resistance, you shouldn't be too afraid of the card generating the private key.
2) The Belgian Federal Gov representative (Peter Strickx, ex-Sun,
Easily defeated? (Score:2, Insightful)
If I get one of these new java IDs forced on me, it might just be "accidentally" directly exposed to 1500 watts of RF. Maybe "accidentally" take a spin on the turntable in the microwave, too.
So what's the point of making this stuff if the people who don't like it can easily def
Obligatory Hitchhikers' reference (Score:3, Funny)
Why do I need a Java card? (Score:3, Funny)
Comment removed (Score:5, Insightful)
Re:Why is national id cards / numbers bad ? (Score:3, Interesting)
Well, I can't speak for anyone else around here, but I think they're bad for two reasons. The first is practical. I just don't think that a national ID card (java or no java) can be made secure enough yet to justify the amount of trust that those who don't understand security will invariably put in it. If you have a number of different cards, then you aren't "putting all of your eggs in one basket."
The second reason is philisophical. Although it may make life easier, or even safer, I don't feel that t
Re:Why is national id cards / numbers bad ? (Score:2)
The pracitcal complaint about national ID cards is that they add very little to security or convenience but have a potential to be abused. It doesn't mat
Re:Why is national id cards / numbers bad ? (Score:2)
I have an ID card (though not digital yet), and it doesn't enable the government to know where I am at any given time. They know where I live, but that's about it. I might be on sunny beach in Spain or in the forrests of Sweden and they wouldn't know.
Re:Why is national id cards / numbers bad ? (Score:2)
Why is national id cards a bad idea? Are people afraid that the government will track them. Who really gives a fuck if it allows the government to track you with it? They could do that anyway if they really cared enough. I simply don't get it.
I deal with this kind of apatahy every day in the states. Let's dissect this:
Who really gives a fuck if it allows the government to track you with it?
I do. Are you willing to make the blanket statement all actions in which your ID card would be entangled can
Re:Why is national id cards / numbers bad ? (Score:2)
In the US, we elect our officials. I *want* to be monitored by officials that are working to protect us. Monitoring is good, if someone does something bad, I want the government to do something about it. I, for one, don't do bad things and have nothing to hide. I'm sure that millions of other Americans feel the same way.
The bad thing com
Re:Why is national id cards / numbers bad ? (Score:2)
In the US, we elect our officials. I *want* to be monitored by officials that are working to protect us. Monitoring is good, if someone does something bad, I want the government to do something about it. I, for one, don't do bad things and have nothing to hide. I'm sure that millions of other Americans feel the same way.
No, you probably _DO_ have quite a bit to hide, and this idea of "I have nothing to hide" is a huge bulk of my discontent. Ever downloaded an illicit MP3? Maybe you plan on running a h
Re:Why is national id cards / numbers bad ? (Score:2, Insightful)
Re: (Score:2, Informative)
Why is the gut reaction "bad"? (Score:5, Insightful)
It all comes down in what ways you trust your government of course. In this regard I trust it. For example, the nationality thing was hotly debated, since the reason we don't have nationality is that it would be discriminating for non-swedish citizens to have their nationality on them. Or so it was argued. But the government had to change for public opinion because of this, being part of Schengen is not really good if you still need passport when travelling...
to much paranoia... (Score:2, Insightful)
So, it will only make it easier for law enforcement to access you personal data without passing thrue 15nr. codes and typing out difficult names. I don't think they are going to store criminal records on the card itself so, nothing changes except the
Pros and cons of centralized identity services. (Score:4, Insightful)
~~~~
1> the "single sign-on" life.
2> a single system to secure.
3> a proper unique ID for all activity.
Cons
~~~~
1> complete monitoring by whoever runs the ID system.
2> a single system to crack
3> complete integration of all databases at will
Those are not minor pros. In a perfect surveilance society, a "vending machine" is a refrigerator and a tip jar.
Slipping through the cracks. (Score:5, Insightful)
And that's not a good thing, for two reasons:
1> The evil ones cause problems for everybody.
2> The good ones opt out of the system, rather than fighting to change it.
In the same way that the fastest way to fix a legal system is uniform enforcement of all current laws it's possibly that an iron-clad, centralized identity system would stamp out abuses because it would force participation.
It's very, very hard to predict the eventual effects of technological changes like these.
When the automobile was invented, nobody expected that it would revolutionize the sex lives of Americans, and yet it changed sexual culture more than anything except the pill.
Digital identity is shaping up to be the same way: changes everything, changes nothing, and then BAM you turn around and your world/culture has been turned upside down.
Starbucks (Score:2, Funny)
Id card is not a bad thing (Score:3, Interesting)
If the government wanted to file me, they wouldn't depend on the id. They could have my whole history, photos, whatever. The id card offers nothing to the government, other than a document to identify me. It has the same use as a driver's licence.
By the way, a citizen leaves so many tracks behind him these days...from school, to work, to web accounts, to credit cards, to bank accounts...the id card is almost irrelevant.
In jail in Belgium (Score:3, Interesting)
I never liked Belgium anyway
Re:Belgium?! (Score:2, Informative)
Re: Audrey Hepburn (Score:2)
--jeff++
Re:Belgium?! (Score:2, Funny)
Greets from Belgium.
Re:im not for it (Score:3, Insightful)
Re:Can it be updated with GJC? (Score:4, Insightful)
- - - - - - on a more serious note - - - - -
Having Read The Fine Article and a few earlier posts, I'd have to say:
(a) National ID's are bad (good)
(b) Java is bad (good)
(c) how the bloody hell is anyone going to make 'smart cards' smart enough to prevent [ID] theft?
If, after all these years, Hughes (DirecTV) and others have not been able to prevent signal theft using 'smart card' technology, how safe should we feel entrusting our personal identification to this tech?
"Ohh!," say some, "this is safer yet than the old methods of identifying us to our government. This is much safer than an easily forged picture ID."
But this technology *is* assumed to be 'safer'. It is assumed to be (and marketed as) 'secure'. That also means that our govn'ts may assume that it is *true*. If a transaction, waypoint in your vacation journey, or an arrest is logged in your 'Nat'l ID' account, it will be assumed to be true... because it's safe and secure technology, right? They may be much less likely to doubt any misinformation in you recored, so think again about DTV and how secure their system is. Please think.
Re:Just say NO to ID cards (Score:2)
Well, as the parent (grandparent) is clearly clueless on several issues, why not add geografy to the mix?
Anywho...
A national ID cardf isn't 'evil' per see, allthought it could be used to track people with. But even today most counties around the globe expects you to be able to identify yourself when there is a need - so all this do is to a) standarice the card used (instead of relying on drivers licence, studentcard, military ID, bank card and so on), and b) provide a easy way to carry about information
Re:BB…BB… (Score:2)
Isn't it a crime to fill out your tax returns dishonestly? If so, then it sounds to me like the ID card is a good deal.
Otherwise, you might want to rethink your analogy.
-Brent