Government Cybersecurity Team Drafting The National Strategy for Trusted Identities in Cyberspace
Thursday, July 1st, 2010
According to a blog post on the White House website by cybersecurity coordinator Howard Schmidt, the government is working on a plan to create a single online identity to help authenticate users , called The National Strategy for Trusted Identities in Cyberspace. The idea is that it will help protect peoples identities online and help people do everything form sending emails to making banking transactions and even accessing medical records.
The Department of Homeland security has posted a draft of the plan online and is asking for suggestions and comments from the American public through July 19th. The plan is both broad and vague, mostly likely because it will take a lot of input and co-operation from cooperations both in the public and private sector to make it work.
I think having one identity for online use would be really nice, but there are several problems that need to be addressed. First of all if you loose your login credentials you would be locked out of everything, until you got it fixed. Also if your account was ever breached they would have access to all your accounts and not just one of them. Assuming you use different login credentials for different sites a hacker or thief would have to steal all of them to gain access to all your accounts, which would take a lot longer. The security on this single identity account would have to be really strong to prevent people from stealing the credentials and having a free pass to all of someones online accounts.
I am also a little hesitant to see the government control something like this. They would undoubtable track your movements and logins to know what you were up to. If everything on the web required this new account login then the government would pretty much control the internet if they wanted to. They could simply block your account keeping you from logging into anything. The internet and it’s power houses would never allow this, however if the government made it a requirement then people wouldn’t have a choice.
There are already non-government programs like this out there, like Open ID. Their objective is to simply make a global login that can be used for any website that accepts it. They are not designed to be a trust building, security info-structure, but the basic idea is there.
I like this idea as long as it’s a supplemental, and above all optional, security choice. If you used the trusted identity as a second layer of protection to gain access to your online accounts then I would be for it. Identity theft on the web is a big problem, but lets just hope the government doesn’t go crazy and start forcing something like this on the public.