4 ms·

Cryptography, I guess. Verification method must include authentication and authorization by means other than human eye reading some text off a card (digital or

• yaur 12y ago
  The problem seems closer to DRM than code signing though. Since I'm handing you the device I am in complete control of the output and can clone the output of another card or any signing cert/key embedded in the app. The incentive to do this is to: a) Get into a bar or b) Avoid being arrested on an open warrant. Either of which I can see someone paying and risk breaking the law to accomplish.
  • andrewla 12y ago
    I don't see any details, but it would be straightforward to have a token (available as a bar code or a qr code) that represents a digital signature of the photo/identity information, with the signer being the state of Iowa. Or a TOTP to make it harder to use a screenshot for this purpose. Or for police specifically, it could look up the token in the state's database to access a photo and have a human verify that the photos match (and match the person presenting the id). The structured information is easy to sign; the photo is more difficult. I'd be curious if they had anything intended for this.