Connect with us

Business

Security concerns over system at heart of digital ID

Published

on

Security concerns over system at heart of digital ID


The government is facing questions over whether the system at the heart of its plans for digital ID can be trusted to keep people’s personal data secure.

Digital ID will be made available to all UK citizens and legal residents but will only be mandatory for employment, under the government’s proposals.

Full details of how the system will work have yet to be announced but Prime Minister Sir Keir Starmer has insisted it “will have security at its core”.

It will be based on two government-built systems – Gov.uk One Login and Gov.uk Wallet.

One Login is a single account for accessing public services online, which the government says more than 12 million people have already signed up to.

By this time next year that might be as many as 20 million, as people registering as company directors will have to verify their identity through One Login from 18 November.

Gov.UK Wallet has not yet been launched but it could eventually allow citizens to store their digital ID – including name, date of birth, nationality and residence status, and a photo – on their smartphones.

Users will need a Gov.UK One Login to access the wallet.

Last month, the government launched a digital identity card for military veterans to test the concept.

The government hopes to avoid security issues by keeping the personal details to be accessed through One Login in individual government departments rather than in a single, centralised database.

But veteran civil liberties campaigner and Conservative MP David Davis has raised concerns about potential flaws in the design and implementation of One Login that he says could leave it – and the new digital ID scheme – vulnerable to hackers.

Speaking in a Westminster Hall debate earlier this month, he said: “What will happen when this system comes into effect is that the entire population’s entire data will be open to malevolent actors – foreign nations, ransomware criminals, malevolent hackers and even their own personal or political enemies.

“As a result, this will be worse than the Horizon [Post Office] scandal.”

Davis has written to spending watchdog the National Audit Office calling for an “urgent” investigation into the cost of One Login, which he says is certain to rise above the £305m already earmarked for it.

In his letter, the MP highlights a 2022 incident, in which it was found that the One Login system was being developed on unsecured workstations by contractors without the required security clearance in Romania.

Davis also points out that One Login does not meet the government’s own requirements to be classified as a safe and trusted identity supplier.

The government has blamed a supplier for allowing its Digital Identity and Attributes Trust Framework certification to lapse earlier this year and says it is working towards it being restored, which will happen “imminently”.

Separately, Liberal Democrat technology spokesman Lord Clement-Jones has questioned whether One Login meets National Cyber Security Centre standards.

The peer says he has been speaking to a whistleblower, who claims that the government has missed the 2025 deadline set out in its national cyber security strategy for hardening “critical” systems against cyber attacks.

Ministers deny this but the Lib Dem peer said he had been told by an official that One Login would not pass the required security tests until March 2026.

The whistleblower also highlighted an incident from March this year, when a so-called “red team” tasked with simulating a real life cyber attack was reportedly able to gain privileged access to One Login systems.

The Department for Science, Innovation and Technology (DSIT) says it is unable to give details of the red team exercise for security reasons but says claims that its systems were penetrated without detection are false.

DSIT officials also assured Lord Clement-Jones that the subcontractors in Romania were “a handful of people” none of whom had access to production “and all code was checked”.

The department says all members of the team working on One Login use “corporately managed” devices which are monitored by a security team to detect any malicious activity.

But Lord Clement-Jones told the BBC he was not convinced by the department’s assurances.

He said the track record of successive governments of running One Login and other systems “should give us all no confidence at all that the new compulsory digital ID, which will be based on them, will ensure that our personal data is safe and will meet the highest cybersecurity standards”.

Last week, the prime minister handed overall control of the digital ID scheme to the Cabinet Office, which is headed by one of his most trusted and senior ministers Darren Jones, reflecting its importance to the government.

But the Government Digital Service, which is part of DSIT, will retain responsibility for design of the project.

A DSIT spokesperson said: “Gov.UK One Login continues to deliver for citizens across the UK.

“One Login is now home to more than 100 services and has been used by more than 12 million people – representing almost a sixth of the UK population.

“One Login follows the highest security standards used across government and the private sector and is fully compliant with UK data protection and privacy laws.

“The system undergoes regular security reviews and testing, including by independent third-parties, to ensure security remains strong and up to date.”



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business

Middle East crisis: Jubilant FoodWorks reports some Domino’s outlets affected by LPG shortage – The Times of India

Published

on

Middle East crisis: Jubilant FoodWorks reports some Domino’s outlets affected by LPG shortage – The Times of India


Jubilant FoodWorks Ltd (JFL), which operates Domino’s Pizza and Dunkin Donuts in India, has reported constraints in LPG cylinder supplies across parts of its store network due to the ongoing West Asia war, according to ET.In a filing to the BSE, the company said, “Operational impact at this stage is limited and being actively managed. The company is taking several steps to conserve LPG and working overtime to move to alternate energy sources like electricity and piped natural gas (PNG).”It added that it is in continuous touch with oil marketing companies to track developments and respond to the evolving situation. “The company is in constant engagement with oil marketing companies (OMCs) to remain apprised of the latest developments and plan operational responses accordingly, given the rapidly evolving nature of the situation,” the filing said.The company noted that it is closely monitoring the situation as supply disruptions persist.The impact is being felt across the restaurant industry, with several chains facing similar challenges due to LPG shortages.On March 10, the National Restaurant Association of India (NRAI) had advised its five lakh members to consider shorter operating hours, reduce items requiring long cooking times or deep frying, and adopt fuel-saving measures such as using lids while cooking, in view of supply constraints linked to the Gulf war.



Source link

Continue Reading

Business

Russia sells reserve gold for first time in 25 years to fund Ukraine war deficit: Report – The Times of India

Published

on

Russia sells reserve gold for first time in 25 years to fund Ukraine war deficit: Report – The Times of India


Russia has begun selling physical gold from its central bank reserves for the first time in 25 years, as the government seeks to plug a widening budget deficit driven by sustained military expenditure, according to a report by Berlin-based news outlet bne IntelliNews.Regulatory data show that between 2022 and 2025, Russia sold gold and foreign currency worth over RUB 15 trillion ($150 billion), followed by an additional RUB 3.5 trillion ($35 billion) in just the first two months of 2026, the report noted. In January alone, the Central Bank of Russia sold 300,000 ounces of gold, followed by another 200,000 ounces in February.The move marks a significant shift in reserve management. Earlier, gold transactions were largely notional, involving transfers between the Ministry of Finance and the central bank without physical movement of bullion. In recent months, however, the central bank has started selling actual gold bars into the market.As a result, Russia’s gold holdings have declined to 74.3 million ounces, the lowest level in four years. The disposal of 14 tonnes in January and February is the largest two-month sale since the second quarter of 2002, when 58 tonnes were offloaded in a single tranche.The sales come as Russia’s fiscal position comes under increasing strain. The government ended 2025 with a budget deficit of 2.6 per cent of GDP, compared to an initial projection of 0.5 per cent, Berlin-based bne IntelliNews report noted. Economists estimate the actual deficit could be closer to 3.4 per cent, with some payments deferred to 2026 to limit the reported gap.Pressure on the budget has intensified as oil prices weakened in the second half of the year and US sanctions tightened, reducing the contribution of oil and gas tax revenues to about 20 per cent of total revenues — roughly half of pre-war levels.The decision to sell gold has also been influenced by the sharp rise in bullion prices to above $5,000 per ounce. This surge has pushed Russia’s international reserves to over $809 billion as of February 28, including around $300 billion of assets frozen in the West, according to the Central Bank of Russia. Of this, gold reserves alone are valued at about $384 billion.Russia currently holds more than 2,000 tonnes of gold, making it the world’s fifth-largest sovereign holder, according to World Gold Council data. The country had built up these reserves over the years to reduce dependence on dollar-denominated assets, especially after sanctions imposed following the annexation of Crimea in 2014 and further tightened after the invasion of Ukraine in 2022.Since 2022, the Ministry of Finance has relied on multiple funding channels to manage budget pressures. These include drawing from the National Welfare Fund, which still holds around RUB 4 trillion, increasing issuance of domestic OFZ treasury bonds, and raising value-added tax rates, which account for about 40 per cent of government revenues.The shift to selling physical gold suggests that Russia is now tapping its liquid reserve buffers more directly, underlining the growing fiscal strain as the conflict in Ukraine continues into its fourth year.



Source link

Continue Reading

Business

Pakistan eases export rules for Iran, Central Asia | The Express Tribune

Published

on

Pakistan eases export rules for Iran, Central Asia | The Express Tribune


Three-month waiver on bank guarantees, credit letters covers rice, seafood, pharmaceuticals among other commodities

Increased sourcing from the US reduces reliance on the Strait of Hormuz — a narrow maritime corridor through which a substantial proportion of global oil trade passes and which remains vulnerable to geopolitical tensions. Photo: Reuters


ISLAMABAD:

The Ministry of Commerce has approved a temporary exemption from financial instruments, including bank guarantees and letters of credit, for exports to Iran, the Central Asian Republics and Azerbaijan via Iran’s land route, it emerged on Saturday.

The development arose from a March 24 notification by the Ministry of Commerce received by The Express Tribune.

The exemption, issued under the Import and Export Control Act 1950, waived the requirement under Paragraph 3 of the Export Policy Order 2022, which mandates that all exports from Pakistan be made in compliance with Foreign Exchange Rules, regulations, and procedures notified by the State Bank of Pakistan (SBP).

The concession will remain effective for three months, from March 24 to June 21. The ministry stated that the federal government had taken the step to facilitate exporters and enhance regional trade.

Read: Local exports hit by ‘triple threat’

Under the exemption, rice may be exported to the Central Asian Republics and Azerbaijan through Iran’s land route. Exports of the following commodities to Iran via land route were also permitted: rice (milled), seafood, potatoes, meat, onions, maize, citrus, banana, tomato, frozen chicken, pharmaceuticals and tents.

However, the exemption from financial instruments, according to the notification, would be subject to the submission of an undertaking by the exporter that the export proceeds would be submitted within the stipulated time period.

Commerce Minister Jam Kamal Khan said Pakistan would now be able to export rice to Central Asia and Azerbaijan via Iran, adding that removing barriers to pharmaceutical exports was the government’s top priority.

He added that trade through Iran would significantly reduce exporters’ costs and time, and that increasing exports would steer the country towards economic stability.

Read More: Attack on Iran jolts Pakistan’s economy

The Ministry of Commerce said it was utilising all resources to enhance regional connectivity and increase trade volume, adding that the measure would strengthen trade links in the region.

A week ago, Pakistan’s Ambassador to Iran, Mudassir Tipu, said bilateral and transit trade between the two countries remained operational despite ongoing regional tensions.

The envoy expressed gratitude to the Iranian government for extending “full facilitation” to Pakistan’s trade, including transit trade through Iran during “challenging times”.

He added that land border crossings between Pakistan and Iran were functioning “optimally”, with green channels at multiple routes ensuring swift movement of goods on both sides. Further, Tipu said that Pakistan was extending maximum cooperation to Tehran to ensure trade flows remain unaffected by the evolving situation.



Source link

Continue Reading

Trending