Copyright © 1998 Simon Rogerson
Originally published as ETHIcol in the IMIS Journal Volume 8 No 1 (February 1998)
Document Also Available in PDF (54 kbytes), PS (48 kbytes), Printer-friendly HTML (8 kbytes) Rich Text Format (10 kbytes) DocBook source (8 kbytes)
The smart card is one of the digital icons of the Information Age. Smart card technology is being applied in various ways to facilitate trade, gain access to services and products, verify identity, and establish and influence relationships. In the UK there have been many applications, for example, the electronic purse - Mondex, the Shell loyalty card and the Social Security Benefits Card. Similar examples can be found in different parts of the world. In Spain a smart card has been introduced for benefit payments and access to government databases. A smart patient data card is being tested in a region of the Czech Republic to replace the paper-based system that had limited capacity, was inaccurate, labour intensive to maintain and open to widespread abuse. Two million smart cards have been issued to the poor in Mexico for distributing food and cash benefits.
A recent study found that 27% of smart card applications were within banking, 18% within health and welfare and 15% within transport. Other applications included; telecommunications, identification, phonecards, retail loyalty schemes, metering, radio security, physical access and gambling. The use of multifunctional smart cards was commonplace.
Smart cards have three broad functions; authentication, storing value and storing personalised information. Authentication is concerned with ensuring only authorised individuals gain access to systems and buildings. A smart card can be used as an electronic purse to store units of value in different currency denominations as well as credit and other units of value such as bonus points or air miles. Values can be replenished on a smart card. The smart card can also be used as a portable storage device independent of some fixed location and with the capability of holding a large amount of data of different forms and for different purposes but usually of a personal nature.
Clearly there are beneficial outcomes from the application of smart cards. Realising these benefits both for individuals and organisations may well profoundly change the relationship between clients or consumers and suppliers or government bodies. A smart card that is your passport, driving licence, credit and debit card, access to your place of work and your car ignition key will undoubtedly alter relationships due to potential uneasiness about what data is held, accessed and modified. Such cards are already being piloted. For example, in South Korea a national citizen card is being introduced which is used as a driving licence, identity card, pension card and medical insurance card.
Some of the potential benefits of smart cards are:
Using smart cards is safer than carrying cash for an individual
Smart cards can improve access to services for the disabled and elderly
It is a secure means of authenticating the identity of reader device
It is a portable and secure store of information available to all
Access can be made available in geographical locations where on-line communication is not possible
The opportunity of fraud is reduced using smart cards
Social disadvantaged groups can gain access to facilities and resources without feeling stigmatised
Objective selection criteria can be upheld and the risk of bias or favouritism reduced
Consider just one example. Smart card technology has the capability of addressing access, independence and equality of opportunity issues for the disabled through facilitating adaptive interfaces. Individual requirements could be stored on the smart card so that the interface at the point of use would automatically adapt to the preferred customer verification method (for example hand geometry), input (for example voice activation and speech recognition), operation (for example reduced functionality) and output (for example large colour specific characters). Contactless smart cards could be used to remove the necessity of card insertion into readers, to unlock and open doors, to activate location signals, to increase road crossing times and to adjust access heights of facilities.
There are potential pitfalls for individuals and society in general regarding smart card applications and these include:
Smart cards lead to a loss of anonymity
Pseudonimity can be mistaken for anonymity as card schemes indirectly hold cardholder identity
Smart card schemes could lead to a reduction in the provision of non-smart card facilities and so affect freedom of choice
Smart cards can reduce access to services and resources for the technology illiterate or technology wary
There are difficulties in viewing personal data by card holders
Smart cards can result in significant invasions of privacy
Profiling and tracking of individuals can occur
Increases in smart card use could lead to a de facto national and subsequently global identity card that has not been subjected to citizen consultation
Smart card functionality can be increased without proper consideration of the overall impact
It has been suggested that a number of principles should be adhered to when considering if and how a smart card scheme should be implemented. Of these the key principles are:
Smart cards must properly respect the legal and ethical rules pertaining to the rights of the card holder
Individuals should have the right to refuse a cards
The card holder's prior consent is required for all uses of the card and disclosure of information it contains
Cards should not be used as tools for overt or covert surveillance
Having decided to implement a smart card scheme certain design features seem appropriate and are summarised as:
identified transaction trails should only be used where no acceptable alternative exists
identity should be safeguarded using pseudonimity
ensure integrity across applications on multi-purpose cards
the design of smart card schemes must be transparent to the individual
biometric and encryption key data should be held on the card
two way device authentication must be used
Smart cards offer great potential benefits to society. Given its pervasive nature careful policy, design and implementation strategies must be in place. With these one can envisage a time when the lack of ownership of a multi-functional smart card will result in a dramatic loss of opportunity and of help in times of need for the "non-citizen". The aim must be to achieve sensitive usage and ensure ordinary people are involved in the technological decision making process which precedes application of smart card technology.
Please send your views on ethical and social responsibility issues and cases of ethical dilemmas to:
Professor Simon Rogerson
Director
Centre for Computing and Social Responsibility
Faculty of Computing Sciences and Engineering
De Montfort University
The Gateway
Leicester
LE1 9BH
Tel:(+44) 116 257 7475
Fax:(+44) 116 207 8159
Email:<srog@dmu.ac.uk>
Home Page:http://www.ccsr.cse.dmu.ac.uk


