Social Security numbers ineffective at authenticating ID

In response to "Poor data hygiene is common," it is long past the time when Social Security numbers can be protected as private. Social Security numbers are not an effective authenticator for proving an identity. The numbers have been so widely used for such a long time that any realistic expectation of being private is gone. (Besides, it is my understanding the numbers were instituted as an identifier, not as an authenticator.)

So, the use of Social Security numbers as an identifier such as the index into a database is not a problem that needs to be solved. The problem today is the use of Social Security numbers as any part of an authentication of a claimed identity. Knowing an individual's Social Security number is simply not an acceptable part of the authentication process. Desiring otherwise is, I suggest, a fantasy because this is not unlike trying to close the proverbial barn door after the animals have all escaped.

Gary Stoneburner

Featured

  • Cybersecurity
    Shutterstock photo id 669226093 By Gorodenkoff

    The disinformation game

    The federal government is poised to bring new tools and strategies to bear in the fight against foreign-backed online disinformation campaigns, but how and when they choose to act could have ramifications on the U.S. political ecosystem.

  • FCW PERSPECTIVES
    sensor network (agsandrew/Shutterstock.com)

    Are agencies really ready for EIS?

    The telecom contract has the potential to reinvent IT infrastructure, but finding the bandwidth to take full advantage could prove difficult.

  • People
    Dave Powner, GAO

    Dave Powner audits the state of federal IT

    The GAO director of information technology issues is leaving government after 16 years. On his way out the door, Dave Powner details how far govtech has come in the past two decades and flags the most critical issues he sees facing federal IT leaders.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.