overview
mechanisms
public
private
services
issues

related
Guides:
Privacy
Security
Consumers

related
Profiles:
Identity
crime
Credit
reporting
Offender
Registers
Job Search
Services
Diploma
Mills
Australian
privacy
regimes
Forgery
& fraud
|
mechanisms
This
page considers the basis of vetting and identity referencing,
including mechanisms and data sources.
It covers -
It
is complemented by more detailed notes elsewhere on this
site regarding the shape of 'resume massaging', the 'degree
mill industry', passports and the Australia card.
introduction
The preceding page of this note suggested that personal
referencing and vetting is essentially concerned with
two questions - who are you and what you are.
Answers to those questions a provided by a range of mechanisms
that include -
-
provision of official documentation (the bearer is accredited
through possession of what appears to be a legitimate
identity card or passport)
-
biometrics (the individual's fingerprint or other unique,
innate characteristics match a record of those characteristics)
- testing
of blood, hair and urine to determine whether the individual
has ingested narcotics or other prohibited substances
- verifying
'life history' claims by searches of databases concerned
with criminal convictions, educational attainment, international
travel and consumer credit
- use
of tools such as polygraphs that purport to determine
the truth of responses to questionnaires.
In
some instances it is sufficient to determine that an individual
is who she claims to be, a process that can be as simple
as matching a face to the photo on an identity card or
confirming that the photo, the face and a register are
'as one'.
In other instances the individual's identity is not in
doubt. The aim instead is to determine whether that individual
has attributes that provide a basis for admission or exclusion
from particular locations, relationships or responsibilities.
A key attribute may be simply whether the individual has
been truthful, for example has omitted a criminal conviction
or invented an academic qualification in providing a CV.
documents
Identification through possession of official documentation
(or more broadly through a key or even password) assumes
that such documents will only be issued to authorised
recipients and that the documents will not pass into the
hands of unauthorised persons and be illicitly used by
them.
Public and private sector issuers of documentation have
traditionally recognised that those assumptions are problematic.
Identity papers can be mislaid or stolen: mere possession
does not necessarily establish a person's identity. Papers
can be illicitly altered or completely forged.
In ordinary use few people scrutinising documents have
forensic skills; in many contexts something that 'looks
right' will be sufficient to get the bearer through the
door or to gain another document. Authentic papers can
be improperly issued to an unauthorised person, eg because
an official takes a bribe. Papers may inadequately describe
the bearer, with identification resting simply on possession.
Organisations have responded to those challenges in four
ways.
Firstly, they have increasingly incorporate photographic
or other identifiers into documents in an effort to match
the document to the bearer. A photograph, for example,
is a key element of a contemporary passport.
Secondly, they have adopted anti-forgery technologies,
including copy-resistant paper or inks and inclusion of
holographic seals, in an effort to preserve the integrity
of documents.
Thirdly they have addressed imposture through administrative
mechanisms, such as 100 Points
regimes, which aim to determine identity by requiring
the individual to supply multiple proof of identity documents
and that weight documents on the basis of whether they
are likely to be corrupt.
Finally, some have emphasised online verification, with
for example datamatching of identity numbers, signatures,
photographs and other identifiers during the course of
a transaction or on a retrospective basis.
biometrics
Biometrics, explored
in more detail elsewhere on this site, leverage unique
physical characteristics such as fingerprints, palmprints
and retina patterns to describe an individual and thereafter
identify the individual through reference to a record
of that description.
Biometric technologies have proliferated over the past
two decades. Some are highly contentious because of disagreement
about the stability of supposedly unchanging characteristics
such as gait or even smell and about pretensions to measure
'truth' rather than merely match an individual to an identity.
histories
Much identity referencing is mechanistic. It is centred
on questionnaires about life histories and on CVs, one
reason why resume fraud
is of concern. It is also centred on -
- verifying
documentation - contacting the issuer to confirm that
x document was indeed issued to person y
- searching
for exclusionary information - eg that the individual
is not on an offender register, is not listed on a bankruptcy
or professional discipline database, has not professed
membership of a terrorist organisation
- recognising
inconsistencies, errors and omissions in information
provided by the individual - eg that the person claims
a qualification from a non-existent academic institution,
was employed by a fictitious organisation, was employed
in a lower ranking position than that claimed, or "isn't
on the radar" for a particular period (potentially
indicating that the individual has "something to
hide")
- evaluating
some claims - eg recognising that an individual has
indeed received an academic qualification but dismissing
that because the degree came from a diploma
mill.
Vetting
on the basis of histories can be problematical because
it involves value judgements and because eliciting some
information is necessarily intrusive.
psychometrics
Some organizations have turned to what have variously
been badged as psychometrics or psychographics, either
to supplement other mechanisms, to supposedly confirm
assessments based on those mechanisms or even as a replacement
for those mechanisms.
Psychometric tools include polygraphs, devices that measure
eye blink rates and other mechanisms that purport to accurately
identify whether a person is telling the truth by measuring
involuntary physiological responses to questions. Some,
such as the penile plesmograph, purport to accurately
measure other states. They are contentious given disagreement
about the accuracy of measurements - false positives and
false negatives are common - and because use may be coercive.
Figures on the use in Australia and elsewhere of those
technologies are unavailable.
For a point of entry to the literature on the
polygraph see Kerry Segrave's Lie Detectors: A Social
History (Jefferson: McFarland 2004) and the US National
Research Council's sobering The Polygraph and Lie
Detection (Washington: National Academies Press 2003)
substances
The past thirty years have seen uptake by employers (and
by agents such as recruitment services and commercial
vetting services) of 'substance abuse testing' mechanisms.
Those mechanisms include chemical analysis of an individual’s
blood, breath, hair or urine to detect consumption of
stimulants, narcotics, alcohol or other prohibited substances.
Uptake reflects systematisation of a precautionary approach
(recurrently test all staff, designated staff or potential
employees to minimise legal liability and confirm the
truth of statements made in questionnaires), fashions
in management styles (testing by some US employers for
example underpins a coercive approach to bluecollar workers),
and the increasing cheapness of such testing (particularly
if conducted in bulk).
Community expectations about such testing vary. There
have been no large scale detailed surveys but it appears
that consumers are comfortable with testing of people
in 'sensitive' positions (eg airline pilots, surgeons,
nuclear plant operators) but unsupportive of testing of
themselves or their peers. Some are supportive of mandatory
testing of students.
hidden in plain sight?
In discussing blogs, dating
and equaintance
services we have noted potential consequences of people
placing parts of their life online rather than keeping
intimate thoughts, tears and avocations in a locked desk
drawer. Some organisations have sacked
employees for criticising peers in a public blog, divulging
the workings of that organisation (candour for example
conflicts with expectations of confidentiality and comportment
in law firms and medical service providers) or making
inappropriate comments in chatrooms and bulletin boards.
Much engagement online is anonymous or pseudonymous and
evanescent. Use of online statements for vetting is accordingly
inhibited by uncertainties about whether there has been
an 'exact match' and the effort required to filter large
amounts of information ("having everything
online" does not mean that data is easy identifiable),
problems understated by some online vetting 'experts'.
Contrary to claims, noted on the preceding page, of systematic
searching we thus doubt the efficacy and comprehensiveness
of most online searches. (That is consistent with some
of the more egregious cases of executive identity fraud,
where leading recruitment agents failed to detect that
candidates for million dollar positions had fabricated
key parts of their CVs, awarded themselves military honours
and invented academic qualifications - all of which could
be readily identified through a few phone calls).
Potential sources of information include -
- personal
and corporate blogs
- homepages
and blogs of family and associates
- statements
in newsgroups
- statements
in archived chatrooms
- personal
profiles on dating and equaintance services
- reviews
and recommendations in retail sites such as Amazon.com
- employee
biographies and contact details on corporate sites
- online
academic yearbooks and alumni lists
In
practice the web search engines can be a mechanism for
revealing what is "hidden in plain sight". Potentially
valuable sources of information include newspaper reports:
career progression, inconsistent statements about career,
political or other affiliations, tangles with police or
corporate regulators. If is difficult, for example, to
shed an inconvenient past merely by moving to another
jurisdiction when an assiduous research can follow the
online breadcrumbs.
Bibliographic databases can also be useful. One Australian
executive's tiresome boasting about his supposed academic
prowess was crimped when unhappy employees competed to
find a trace, any trace, of supposed journal articles
and monographs by the new supremo.
next page
(public sector vetting)
|
|