Difference between revisions of "MDL Considered Harmful"

From MgmtWiki
Jump to: navigation, search
(Solution)
(Solution)
Line 28: Line 28:
 
# deliberate theft of phone by others who want to claim the benefits of the insurance plan
 
# deliberate theft of phone by others who want to claim the benefits of the insurance plan
 
# limited ability to read or speak English
 
# limited ability to read or speak English
# Many nationalities and many languages.
+
# many nationalities and many languages
 +
# many different political subdivision with different rules on eligibility.
  
 
==References==
 
==References==

Revision as of 16:06, 2 March 2023

Full Title

The Current Mobil Driver's License Design is Considered to be Harmful to the population at large.

Context

This is a paper about Ethics. That is a topic in which the computer practitioners have recently become interested as they try to make the case that they should be considered to be professionals, even though they are unwilling to accept the responsibility for their actions that any professional must assume.

In February 2023 there where 5,823,500 driver's licenses issued in Washington State[1] out of a population of 7.79 million which means that there were almost 2 million residents without a driver's license, over 1/4 of the residents. An official ID card is available for these people at a cost of $54, not a good investment for most of that population. Unlike many states, the Washington State Department of Licensing (DOL) will offer a state ID card at no cost for those who are homeless. For people who may not be homeless but are receiving public assistance, the DOL is offering cards at a reduced price of $5, if they have a letter from the Department of Social and Health Services. A letter is not required for those under 25.

The State DL or ID is now the de facto ID card required for nearly all restricted access sites and resources in most of the United States.

Problem

Problem one

The Pareto Principle devised by Vilfredo Pareto, specifies that 80% of consequences come from 20% of the causes, asserting an unequal relationship between inputs and outputs. This principle serves as a general reminder that the relationship between inputs and outputs is not balanced.

Nearly all computer applications for public consumption would be very happy to reach 80% of the population and some would consider an identification method that excluded 20% of the population that does not have a state-issued ID to be any impediment to the success of their application in the marketplace. Since 80% penetration of the marketplace can be achieved at 20% of the cost of universal availability, the results should not be a surprise. Most identification systems are not inclusive. Notably this includes the identification systems defined by NIST SP 800-63-3. When NIST went to issue a new version of the standard, this discrepancy was brought to their attention and the rush to release version 4 of the standard was held back until this discrepancy was addressed.

The Mobile Driver's License standard ISO 18013-5 took the Pareto approach. It is strictly limited to driver's licenses in direct contact with the verifier and so is specifically targeting only 75% of the North American population. This is ethically unacceptable. But it is completely in line with other current efforts to monetize digital wallets and their accompanying distributed ids; they can only be used by rich Technorati with the most current technology.

Problem 2

By far the biggest challenge is getting secure wallet code into the user's hands. The top contenders in 2023 are the Smartphone titans, Apple and Google, at least in the Western World. But that doesn't sit well with regulators who want to see competition. Some how governments, who have failed their citizens for years now, think that they can create a marketplace and let "Survival of the fittest" give us a product that is better for their citizens.[2] Our experience with existing privacy regulation should put the lie to that. See the wiki page describing how GDPR is a scam designed to penalize the winners of the competition rather than encourage competition.

Solution

  • NIST is leading an NCCoE effort to expand inclusion for NIST identification standards SP800-63-4 and held a session on 2023-03-02 that addressed the problems there.
  • Jorge Flores described a solution to the Open Wallet Foundation Architecture team in support of migrant farm-workers that needs to be understood to be believed. They have been able to get digital wallets in the hands of migrant farm workers affiliated with the United Farm works Union in spite of issues like:
  1. multiple workers sharing the same phone
  2. very old phones with very old versions of the operating systems
  3. loss of network connectivity because of expired telco plans or remote location (the phone may still hold a functioning wallet)
  4. deliberate theft of phone by others who want to claim the benefits of the insurance plan
  5. limited ability to read or speak English
  6. many nationalities and many languages
  7. many different political subdivision with different rules on eligibility.

References

  1. Total number of licensed drivers in the U.S. in 2020, by state Statista (2023-02-28) https://www.statista.com/statistics/198029/total-number-of-us-licensed-drivers-by-state/
  2. Susan Morrow, https://cybernews.com/tech/who-will-win-the-war-of-wallets/