Social Security numbers ineffective at authenticating ID

In response to "Poor data hygiene is common," it is long past the time when Social Security numbers can be protected as private. Social Security numbers are not an effective authenticator for proving an identity. The numbers have been so widely used for such a long time that any realistic expectation of being private is gone. (Besides, it is my understanding the numbers were instituted as an identifier, not as an authenticator.)

So, the use of Social Security numbers as an identifier such as the index into a database is not a problem that needs to be solved. The problem today is the use of Social Security numbers as any part of an authentication of a claimed identity. Knowing an individual's Social Security number is simply not an acceptable part of the authentication process. Desiring otherwise is, I suggest, a fantasy because this is not unlike trying to close the proverbial barn door after the animals have all escaped.

Gary Stoneburner

Featured

  • Government Innovation Awards
    Government Innovation Awards - https://governmentinnovationawards.com

    Congratulations to the 2020 Rising Stars

    These early-career leaders already are having an outsized impact on government IT.

  • Cybersecurity
    cybersecurity (Rawpixel/Shutterstock.com)

    CMMC clears key regulatory hurdle

    The White House approved an interim rule to mandate defense contractors prove they adhere to existing cybersecurity standards from the National Institute of Standards and Technology.

Stay Connected