Government // Cybersecurity
Commentary
5/29/2014
09:55 AM
Wyatt Kash
Wyatt Kash
Commentary
Connect Directly
LinkedIn
Twitter
RSS
E-Mail
100%
0%

UAE National ID Program: Model Worth Watching

United Arab Emirates officials are laying the foundation for a national identity verification system that could change how people are ID'd for everything from passports to employment documents.

5 Online Tools Uncle Sam Wants You To Use
5 Online Tools Uncle Sam Wants You To Use
(Click image for larger view and slideshow.)

Governments around the globe continue to invest billions of dollars annually trying to deliver on the promises of electronic government and increasingly on the concept of "smart" government. Public leaders now look to a time -- some say by the end of the decade -- when integrated IT systems will automate a significant portion of government services to the public.

The road to smart government, however, is littered with debris from failed efforts, the US government's healthcare exchanges being just the latest example. In many ways the road itself is still being built.

Agencies routinely lack both the financial resources to upgrade their aging IT systems and the political will to share information openly with other government agencies. Even agencies that have mastered online services now face the need to reengineer their processes and deliver services to citizens the way the rest of the world seems to work, via mobile smartphones.

[Want more on how governments are working to share data? Read Open Government Data Gains Global Momentum.]

One challenge, however, continues to undermine the progress of most countries' e-government initiatives: That's the need for a reliable system to manage the digital identities and private information of citizens securely -- and the need for infrastructure to integrate various government databases on the back end so that individuals receive all, and only, the services to which they are entitled.

That's why a national identity card project making headway in the United Arab Emirates, and the project's leader, Ali M. Al-Khouri, director general of the Emirates Identity Authority (EIDA), are both worth watching.

Ali M. Al-Khouri, managing director of the Emirates Identity Authority. (Image: EIDA)
Ali M. Al-Khouri, managing director of the Emirates Identity Authority.
(Image: EIDA)


I met Al-Khouri in late April while attending the Gulf region's first Open Government Data Forum, co-sponsored by the EIDA, the United Nations Public Administration Network, and the UN's Department of Economic and Social Affairs. Al-Khouri has earned an international reputation over the past two decades for pioneering the use of technology in government and for authoring more than 80 technical articles on technology and identity management. He still finds time to serve on the faculty at the British Institute of Technology and E-commerce in London.

The UAE government tapped Al-Khouri in 2009 to take over an ambitious project, begun in 2004, to build a national population register and the underlying systems to process passports and birth and death certificates electronically, along with entry, residence, and employment documents for UAE citizens and the nation's rapidly growing population of expatriates. Officials also envisioned that real-time population data would help the government make better investment decisions. 

The project got off to a bumpy start. A year after Al-Khouri became EIDA's managing director the agency had enrolled only 14% of the population and was realizing its challenge was as much about retailing as it was technology.

Al-Khouri's team soon began rolling out conveniently located, customer-friendly enrollment centers that felt more like Starbucks than recruitment

 

Wyatt Kash is a former Editor of InformationWeek Government, and currently VP for Content Strategy at ScoopMedia. He has covered government IT and technology trends since 2004, as Editor-in-Chief of Government Computer News and Defense Systems (owned by The Washington Post ... View Full Bio
Previous
1 of 3
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
asksqn
50%
50%
asksqn,
User Rank: Ninja
6/6/2014 | 6:18:00 PM
Just what the US needs
Oh good, the US is considering yet **another** national ID card (in addtn to soc. sec.) to further put its citizens lives and data in peril.  I was afraid that data security was actually being taken seriously.   
batye
50%
50%
batye,
User Rank: Ninja
6/2/2014 | 2:22:56 AM
interesting info
interesting info, as problem of the  Nation ID facing by many gov. uncliding Canada... but at least UEA trying and they have money to spend... and after other countries could follow... proven solution...
RamgopalNC
0%
100%
RamgopalNC,
User Rank: Apprentice
5/30/2014 | 11:53:03 PM
Re: Alternative solutions for EID
Smart Phones, Tablets etc are all devices and cannot be directly used to serve the purpose of primary identity instruments.

A National ID Program is meant to provide certified credentials for an individual to be able to assert his/ her identity on demand. The key here is that such credentials are provided by the Government and thus serve as highly trusted identification tools, especially when the authenticity is verifiable online. The UAE National ID Program is also one such program which identifies a person with biometric and biographic details provided during the national enrollment. The credentials then are packaged as a pair of Digital Certificates, biometric data along with biographic data into a Secure Smart Chip.

This serves as the primary Digital ID for an individual and can then be used to acquire multiple derived identities in the form of lets say SIM Cards, credentials for use on tablets, browsers etc. This linkage to the primary digital ID (National ID Card) exponentially increases the security in the identification systems used for Smart Phones.

The Fast ID Online (FIDO) initiative is also based on the same concepts used in the UAE National ID Card in terms of the multi factor authentication. Ultimately, it is standardization and interoperability that serve as the key for Diigtal Identity and Authentication in the scheme of a multitude of personal identification schemes. It is here that Government backed and provided Identification programs are expected to make a difference.

We would be happy to provide any further details.
ArshadNoor
0%
100%
ArshadNoor,
User Rank: Apprentice
5/29/2014 | 2:07:39 PM
Alternative solutions for EID
While smartcards are very useful in many contexts, for the average consumer - and potentially, EID - this technology is likely to be eclipsed by two technological shifts:

1) Smartphones/Tablets; and
2) FIDO Authenticators (www.fidoalliance.org). 

What makes the FIDO technology interesting is that it encompasses all functions of the smartcard for strong-authentication, does not require a smartcard reader, works with desktops, laptops, smartphones, tablets, etc., AND preserves privacy for consumers when authenticating to any FIDO enabled site.

Since the UAE government has already sunk money into smartcards, I would encourage its use as a basis for registering end-user FIDO credentials for sites and use the FIDO credentials for strong-authentication  The smartcards can eventually be replaced in their life-cycle with just photo-IDs to save money.

Arshad Noor
StrongAuth, Inc.

 
Cyber Security Standards for Major Infrastructure
Cyber Security Standards for Major Infrastructure
The Presidential Executive Order from February established a framework and clear set of security standards to be applied across critical infrastructure. Now the real work begins.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest September 24, 2014
Start improving branch office support by tapping public and private cloud resources to boost performance, increase worker productivity, and cut costs.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.