Abstract
We have developed techniques to automatically infer mother’s maiden names from public records. We demonstrate our techniques using publicly available records from the state of Texas, and reduce the entropy of a mother’s maiden name from an average of close to 13 bits down to below 6.9 bits for more than a quarter of the people targeted, and down to a zero entropy (i.e., certainty of their mothers maiden name) for a large number of targeted individuals. This poses a significant risk not only to individuals whose mothers maiden name can easily be guessed, but highlights the vulnerability of the system as such, given the traditional reliance of authentication by mother maiden names for financial services. While our techniques and approach are novel, it is important to note that these techniques – once understood – do not require any insider information or particular skills to implement. This emphasizes the need to move away from mothers maiden names as an authenticator. Using the techniques described, during testing we were able to deduce the mother’s maiden name for approximately 4,105,111 Texans.
Chapter PDF
Similar content being viewed by others
Keywords
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
References
Archive.org 21-June-2001: Bureau of Vital Statistics General and Summary Birth Indexes, http://web.archive.org/web/20000621143352/http://www.tdh.state.tx.us/bvs/registra/birthidx/birthidx.htm
Archive.org 20-November-2001: Bureau of Vital Statistics, General and Summary Birth Indexes, http://web.archive.org/web/20001120125700/http://www.tdh.state.tx.us/bvs/registra/birthidx/birthidx.htm
Archive.org Birth/Death Index mainpages for 19-November-2001 and 05-June-2002 Comparing, http://web.archive.org/web/20011119121739/ , http://www.tdh.state.tx.us/bvs/registra/bdindx.htm to http://web.archive.org/web/20020605235939/ http://www.tdh.state.tx.us/bvs/registra/bdindx.htm
Census (2000), Briefs, http://www.census.gov/population/www/cen2000/briefs.html
Florida State Constitution, Section 24, http://www.flsenate.gov/Statutes/index.cfm?Mode=Constitution&Submenu=3&Tab=statutes#A01S24
Google Phonebook Search, http://www.google.com/search?hl=en&q=phonebook%3A&btnG=Google+Search
Google Phonebook Search for “Smith” in zipcode 75201 (Dallas,TX), http://www.google.com/search?sa=X&oi=rwp&pb=r&q=Smith+75201
Sweeney, L., Malin, B.: How (not) to protect genomic data privacy in a distributed network: using trail re-identification to evaluate and design anonymity protection systems. Journal of Biomedical Informatics 37(3), 179–192 (2004)
National Voter Act of (1993), http://www.fvap.gov/laws/nvralaw.html
Texas State Property Records, http://www.txcountydata.com
Rootsweb.com FTP server with complete copies of both the marriage and death indexes, ftp://rootsweb.com/pub/usgenweb/tx/
RootsWeb.com Home Page, http://www.rootsweb.com
SearchSystems.net listing of Texas Counties’ online public record offerings, http://searchsystems.net/list.php?nid=197 , http://searchsystems.net/list.php?nid=344
Social Security Death Index, http://ssdi.genealogy.rootsweb.com/
Texas State Property Records, http://www.txcountydata.com
Texas Department of Health, Bureau of Vital Statistics, Marriage Indexes, http://www.tdh.state.tx.us/bvs/registra/marridx/marridx.htm
Texas Department of Health, Divorce Trends in Texas, 1970 to 1999, www.tdh.state.tx.us/bvs/reports/divorce/divorce.htm
Texas Department of Health, Bureau of Vital Statistics, Divorce Indexes, http://www.tdh.state.tx.us/bvs/registra/dividx/dividx.htm
Texas Department of Health, Bureau of Vital Statistics, General and Summary Death Indexes, http://www.tdh.state.tx.us/bvs/registra/deathidx/deathidx.htm
TX Secretary of State Voter Information, http://www.sos.state.tx.us/elections/voter/index.shtml
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Griffith, V., Jakobsson, M. (2005). Messin’ with Texas Deriving Mother’s Maiden Names Using Public Records. In: Ioannidis, J., Keromytis, A., Yung, M. (eds) Applied Cryptography and Network Security. ACNS 2005. Lecture Notes in Computer Science, vol 3531. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11496137_7
Download citation
DOI: https://doi.org/10.1007/11496137_7
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-26223-7
Online ISBN: 978-3-540-31542-1
eBook Packages: Computer ScienceComputer Science (R0)