This article was reprinted with permission from .听
In some states, smartphones can do more than help you pay for services, capture memorable moments, or instantly access your choice of media.
In approximately half of the country, people can also store and share personal credentials on their devices, including state identification cards or driver鈥檚 licenses. to develop technology to make the same thing possible here.
According to Jillian Cowherd, a spokeswoman with Virginia DMV, the agency has partnered with CBN Secure Technologies on its Virginia program. While the agency continues to work with businesses and organizations to accept the mID, Cowherd said the agency is working to 鈥渕ake it easier鈥� and 鈥渕ore secure for customers to manage their credentials鈥� while addressing privacy concerns about the potential for personal data to be released without approval. State lawmakers are also closely monitoring the process.
鈥淲e always want to make things easier for folks (and) we can do that with the use of technology 鈥� but that鈥檚 always tempered with making sure that the privacy of individuals is paramount,鈥� said House Technology Committee Chair Cliff Hayes, D-Chesapeake.
Currently the app is available for download and is being used by a portion of Virginia鈥檚 nearly 126,000 state employees. mID can be used at select TSA checkpoints including Richmond International Airport and Ronald Reagan Washington National Airport, and state workers are providing feedback to the agency.
Cowherd said the team is working to make mID available to the public in Google, Apple, and Samsung wallets and is in discussions with public and private entities to ensure it will be accepted at businesses and by organizations when launched. She said that once its fully rolled out,, Virginians should be able to use their mobile ID to board planes, show proof of identity at DMV offices, engage with law enforcement and emergency services, and eventually show proof of age at retail establishments and restaurants.
鈥淒MV has continued to work with CBN Secure Technologies, our secure credential vendor partner, to develop an app, conduct extensive testing, gather customer feedback and ensure it has seamless functionality and robust security,鈥� said Cowherd in a statement. 鈥淗owever, building a program that is widely accepted and highly secure takes time.鈥�
The pilot program, legislation
In 2017, the General Assembly passed creating the standards for issuing, reviewing, and displaying electronic credentials after the agency conducted a year-long pilot research program to assess 鈥渃ustomer value, market demand and the ability to meet stakeholder needs,鈥� Cowherd said.
According to the program鈥檚 of frequently asked questions, there is no cost associated for Virginians to add the mID to their device or to use it.
In 2017, lawmakers discussed charging for each individual-issued electronic credential. State law allows the agency to charge users up to $10 per year.
According to an earlier fiscal statement from the Department of Planning and Budget, at the fixed rate of $10, Virginia would have collected $1.7 million in revenue per year if 3% of the state鈥檚 approximately 5.6 million licensed drivers signed up. If 5% of licensed drivers were to buy an electronic credential, Virginia could receive approximately $2.8 million per year.
Privacy Concerns
Del. Karrie Delaney, D-Fairfax, chair of the House Transportation committee, said having technology to store your identification card on your smartphone is convenient for a lot of people, but privacy is paramount to many Virginians.
鈥淗aving the security factors is an essential part of making sure that this program is trustworthy for the public,鈥� Delaney said. 鈥淲e are responsible for making sure that those guardrails are in place. But, at the end of the day, it is also going to be a choice for people.鈥�
Sen. Dave Marsden, D-Fairfax, said he believes the 2017 bill that created the mobile ID standards didn鈥檛 鈥渞aise any alarm bells鈥� for the legislature, but believes lawmakers would be open to making any necessary changes if needed to address privacy or security worries.
State governments and authorities known as 鈥渋ssuing authorities鈥� seeking to use mobile ID technology have partnered with the American Association of Motor Vehicle Administrators, a nonprofit organization dedicated to developing model programs for motor vehicle administration, law enforcement and highway safety, for guidance.
According to provided by the AAMVA, the issuing authorities, in this case Virginia, should take care to ensure mobile ID data stored on peoples鈥� phones is 鈥渁dequately protected.鈥�
鈥淎s standards in this respect are still under development, each Issuing Authority should take great care to ensure that the design of its solution supports this requirement,鈥� the guidelines read.
AAMVA鈥檚 guidelines also advise authorities to encrypt mobile ID information and protect key material in a security module.
The organization also provides guidance on access.
While law enforcement and emergency services have legal access to a person鈥檚 physical credentials in Virginia, the association has suggested that mobile driver鈥檚 license apps allow similar access in case of justifiable need.
However, the association said that because such an option could be misused, the app must not allow anyone other than the mobile ID holder to access the mobile ID information.Virginia鈥檚 mobile ID app follows suit.
鈥淵our information is not accessible without your consent. You control what information from your mID you鈥檇 like to share,鈥� the DMV鈥檚 mobile ID FAQ page states. 鈥淲hen you enroll, your information is stored on your personal device. Only those with access to your personal device and the ability to unlock and access the app would have access to view it.鈥�
Cowherd confirmed that user security is at the forefront of the project. She said the customer will control the information shared on the app, which presents the information needed for the interaction. The customer can also review and authorize the requested information before it is shared.
鈥淰irginia DMV provides the highest level of security in credential storage, data transmission and verification,鈥� she said.
Additionally, she said mobile IDs are presented digitally through encrypted communication directly between a user鈥檚 device and a verifying business or organization.
鈥淭he device never needs to be handed to anyone or leave the customer鈥檚 possession.,鈥� she said.
Cowherd said the agency hopes to fully release the app early next year, but this depends on final testing and proven use cases.
