Social Security numbers ineffective at authenticating ID

In response to "Poor data hygiene is common," it is long past the time when Social Security numbers can be protected as private. Social Security numbers are not an effective authenticator for proving an identity. The numbers have been so widely used for such a long time that any realistic expectation of being private is gone. (Besides, it is my understanding the numbers were instituted as an identifier, not as an authenticator.)

So, the use of Social Security numbers as an identifier such as the index into a database is not a problem that needs to be solved. The problem today is the use of Social Security numbers as any part of an authentication of a claimed identity. Knowing an individual's Social Security number is simply not an acceptable part of the authentication process. Desiring otherwise is, I suggest, a fantasy because this is not unlike trying to close the proverbial barn door after the animals have all escaped.

Gary Stoneburner

Featured

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.