Government // Cybersecurity
Commentary
5/29/2014
09:55 AM
Wyatt Kash
Wyatt Kash
Commentary
Connect Directly
LinkedIn
Twitter
RSS
E-Mail

UAE National ID Program: Model Worth Watching

United Arab Emirates officials are laying the foundation for a national identity verification system that could change how people are ID'd for everything from passports to employment documents.
1 of 3

Ali M. Al-Khouri, managing director of the Emirates Identity Authority. (Image: EIDA)
Ali M. Al-Khouri, managing director of the Emirates Identity Authority.
(Image: EIDA)

1 of 3
Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
asksqn
50%
50%
asksqn,
User Rank: Ninja
6/6/2014 | 6:18:00 PM
Just what the US needs
Oh good, the US is considering yet **another** national ID card (in addtn to soc. sec.) to further put its citizens lives and data in peril.  I was afraid that data security was actually being taken seriously.   
batye
50%
50%
batye,
User Rank: Ninja
6/2/2014 | 2:22:56 AM
interesting info
interesting info, as problem of the  Nation ID facing by many gov. uncliding Canada... but at least UEA trying and they have money to spend... and after other countries could follow... proven solution...
RamgopalNC
0%
100%
RamgopalNC,
User Rank: Apprentice
5/30/2014 | 11:53:03 PM
Re: Alternative solutions for EID
Smart Phones, Tablets etc are all devices and cannot be directly used to serve the purpose of primary identity instruments.

A National ID Program is meant to provide certified credentials for an individual to be able to assert his/ her identity on demand. The key here is that such credentials are provided by the Government and thus serve as highly trusted identification tools, especially when the authenticity is verifiable online. The UAE National ID Program is also one such program which identifies a person with biometric and biographic details provided during the national enrollment. The credentials then are packaged as a pair of Digital Certificates, biometric data along with biographic data into a Secure Smart Chip.

This serves as the primary Digital ID for an individual and can then be used to acquire multiple derived identities in the form of lets say SIM Cards, credentials for use on tablets, browsers etc. This linkage to the primary digital ID (National ID Card) exponentially increases the security in the identification systems used for Smart Phones.

The Fast ID Online (FIDO) initiative is also based on the same concepts used in the UAE National ID Card in terms of the multi factor authentication. Ultimately, it is standardization and interoperability that serve as the key for Diigtal Identity and Authentication in the scheme of a multitude of personal identification schemes. It is here that Government backed and provided Identification programs are expected to make a difference.

We would be happy to provide any further details.
ArshadNoor
0%
100%
ArshadNoor,
User Rank: Apprentice
5/29/2014 | 2:07:39 PM
Alternative solutions for EID
While smartcards are very useful in many contexts, for the average consumer - and potentially, EID - this technology is likely to be eclipsed by two technological shifts:

1) Smartphones/Tablets; and
2) FIDO Authenticators (www.fidoalliance.org). 

What makes the FIDO technology interesting is that it encompasses all functions of the smartcard for strong-authentication, does not require a smartcard reader, works with desktops, laptops, smartphones, tablets, etc., AND preserves privacy for consumers when authenticating to any FIDO enabled site.

Since the UAE government has already sunk money into smartcards, I would encourage its use as a basis for registering end-user FIDO credentials for sites and use the FIDO credentials for strong-authentication  The smartcards can eventually be replaced in their life-cycle with just photo-IDs to save money.

Arshad Noor
StrongAuth, Inc.

 
Cyber Security Standards for Major Infrastructure
Cyber Security Standards for Major Infrastructure
The Presidential Executive Order from February established a framework and clear set of security standards to be applied across critical infrastructure. Now the real work begins.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest - September 10, 2014
A high-scale relational database? NoSQL database? Hadoop? Event-processing technology? When it comes to big data, one size doesn't fit all. Here's how to decide.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.