Schneier: ID cards will worsen ID theft

Infosecurity 2006: The government's controversial ID card scheme attracted more criticism this week, this time from security expert Bruce Schneier and Lord Erroll

Security expert Bruce Schneier has slated the UK's ID card scheme, saying that not only will it not solve e-crime, it will also make ID theft worse.

The security guru told ZDNet UK on Wednesday that the risks of implementing a centralised ID card scheme were "severe", with little return on the investment required.

"Having a single ID is much more dangerous [than multiple IDs]," said Schneier. "ID theft is fraud due to impersonation. If you have a centralised ID card, you are making that ID that much more valuable to criminals," Schneier added.

Last month, the House of Lords finally passed the government's ID cards bill. This means that from 2010 UK citizens will be issued with a biometric identification card when they renew a passport. An opt-out will be available until 2010, although citizens will still have their biometric and other personal details entered into the National Identity Register.

Schneier believes that criminals would be willing to pay a premium for stolen IDs because of the perception that single ID provides stronger authentication, and because the cards could be used to authenticate financial transactions in the future. He also rubbished the UK government's claim that ID cards will help in the fight against terrorism, saying the cards can easily be stolen or counterfeited, effectively hiding terrorists' identities.

"ID can be hijacked, and cards can be faked. All of the 9/11 terrorists had fake IDs, yet they still got on the planes. If the British national ID card can't be faked, it will be the first on the planet," Schneier said.

Schneier's comments echo criticism by Professor Ian Angell of the London School of Economics, who labelled the scheme "a diabolical shambles" in February.

Merlin, Lord Erroll, speaking at the Infosecurity conference on Tuesday, also criticised the scheme for the amount it would cost, saying the money could be better spent on security schemes that focused on e-crime and criminals, rather than a blanket ID card that also logged the details of innocent people.

"You consider the millions [of pounds] to sort out ID cards. It will cost £584m a year towards an ID card that has not been proven. I could solve a lot of security problems with £584m," said Erroll in a keynote speech.

Erroll questioned the Home Office motives for the scheme, saying that central government ultimately wanted to use the cards to control the public.

Erroll also said that the proposed national identity register would be a prime target for criminals wishing to buy ID, and said it is a certainty that criminals would succeed in this as they would be willing to pay huge amounts to the unscrupulous, or could target the beliefs of the idealistic.

"At the end of the day, people can be seduced too easily. Most people have their price, or they have their ideals," said Erroll.