Friday, February 4, 2011

Iris Biometrics in the news

Iris recognition may move from movies into the real world (Pittsbutgh Post-Gazette)
Biometric technology such as iris recognition uses physical characteristics -- including facial shape, fingerprints, retinal photos and iris patterns -- to confirm identities. The technology works by photographing the iris, the colored membrane that controls how much light reaches the retina, and converting the picture into a computer code. The code is compared with one in a database.

In 1936, a St. Paul, Minn., ophthalmologist named Frank Burch proposed identifying people using the furrows, ridges, rings and freckling that make every iris unique. But it wasn't until 1987 that eye doctors Leonard Flom and Aran Safir were granted a patent for the concept of the identification technology.

A Company Seeks Ubiquitous Iris Scans On PCs, ATMs and Cell Phones
(PopSci.com)
Like fingerprints, every person’s irises are different; not even both irises of the same person are the same. Fingerprints can take a while to verify through state and national databases, but an iris scan, which uses more data points for biometric identification, can come up with a match within a few seconds. Those are the pros, if you’re a security expert. But they’re minuses if your concern is privacy. Fingerprints, by their very nature, are an active identification metric; you have to touch something to imprint them. But iris scans are passive — you just walk past a security camera (or, as in “Minority Report,” billboards in the mall) and the person controlling the scanner can spot your identity within seconds.
The Pittsburgh Post Gazette article is straightforward and informative.

The PopSci article reads like a press release masquerading as news.

The facts the PopSci article presents seem a bit off, too.

It has always been the case that iris matching is slower than fingerprint matching. That's why it's popular in jails, where the customers aren't in much of a hurry. In places where throughput is a primary concern, such as school lunch counters, fingerprint biometrics have been more popular.

The author says that the iris match is faster because it uses more data points. That's not really the way computers work. Other things being equal, processing more data points takes more time.

Iris matching technology is highly accurate. More accurate, even, than fingerprints. In a side by side comparison between iris and finger with participating individuals where speed is not a factor, iris wins hands down.

There are many applications where iris is the preferred modality for an identity management application. But like we said yesterday, there is no magic bullet in identity management.

Iris at a distance, as discussed in the article, moves the goalposts and offers intriguing possibilities. But, especially in this industry, it is important to avoid over-promising and under-delivering.

For some background on how the company referenced in the article sees the future and their current capabilities, see the Fast Company article from last August: Iris Scanners Create the Most Secure City in the World.

Thursday, February 3, 2011

Australian Pub biometrics, Part II. Why not Face-Rec?

No ad hoc biometrics sharing: privacy chief (ZDNet.com.au)

Earlier post here.
Australian Privacy Commissioner Timothy Pilgrim has warned pubs and clubs collecting biometric information from their patrons not to "automatically" share that information with other clubs unless they have notified their patrons.
This Makes sense. The terms of service between bar owners and their customers should be transparent and understood by all parties, just as they are when users input personal information into web sites.

If the owner can reduce costs and better serve customers by making the environment safer by identifying and discouraging the few patrons that spoil the experience for everyone else, the owner should be free to take measures in furtherance of that goal. If biometrics are the method of accomplishing this goal with the greatest efficacy (ROI), then so be it.

It is reasonable to infer that the bar owners who have adopted biometric systems believe that a hard-drinking, trouble-making bully drives away customers, raises expenses and leaves the owner liable for damages to innocent people and their property while the biometric check simply drives away some customers and leads others to feel safer.

I might, however, suggest that there is a solution that could accomplish the goal while reducing many of the privacy concerns raised by concerned stakeholders: Facial Recognition.

Fingerprints are cheap and effective (huge ROI) which is why they are being adopted at such a high rate. But for reasons more cultural than scientific, they are sometimes perceived as invasive of privacy.

In an era where everyone has a video camera in their pocket and business establishments have had cameras (and signs alerting the customers as to their presence) installed for twenty-five years or more, installing a video camera at the front door is simply not that controversial. There is also no well established expectation of privacy from being photographed in a public place. The terms of use for video and photos are already implicitly understood.

The systems are a bit more expensive and they are a bit less accurate than the near-perfect results offered by fingerprint systems but their deployment is less controversial and there is nothing preventing the sharing of a photograph among private parties.

There is no magic bullet in biometric identity management. Different modalities are suited to different applications depending upon the physical and social environment in which they are deployed. A good cost-benefit analysis incorporating financial and social considerations helps determine the preferred identity management system.

SecurLinx offers a product, FaceTrac, developed for the specific concern the pub owners are attempting to address.

For additional information about FaceTrac: mail@securlinx.com
For blog comments: blog@securlinx.com

Madison County Alabama Commission finds way to cut spending

Looking in to wasteful spending by Madison County employees (WAFF Huntsville, AL)
Every few weeks department heads and county commissioners receive a payroll log. All they have to do is scan through and see where all the overtime money is going.

"We've got people at some point shows they are working 14 hours a day for 14 days straight. Again I question that," said Madison County Commissioner Dale Strong.

Commissioner Strong has strong feelings about what he calls wasteful spending, but he isn't just complaining about it. He has a solution to the county's overtime problem.
Biometric identity management systems can help with state, county and local budgets constrained by current economic circumstances.

Because biometrics yield a positive return on investment, they provide a way for dedicated public servants like those mentioned in the article to do more with less.

Indian PM calls for improving rural employment program

Improving the delivery system so that its benefits reach the deserving (NewKerala.com)
He said the government was preparing a biometric database for MGNREGA labourers which would be helpful in making payments to them and removing any delays. He hoped it would reduce any delays in payments, discrimination and fake master-rolls.
Fraud is perhaps the greatest challenge to governmental efforts to help the world's poor. If the broader society perceives that a program designed to lift the vulnerable serves primarily as an opportunity for graft and corruption, it will not support the program.

Biometric identity management systems can help build confidence that resources devoted to a worthy cause are not contributing to the problems they are meant to address.

Nigerian state Identifies 2,000 Ghost Workers

Nigerian state, Niger, Identifies 2,000 Ghost Workers (AllAfrica.com)
The Niger State Head of Service, Alhaji Ibrahim Matene, has said that investigation has revealed that the state has over 2,000 ghost workers, adding that an additional 4,700 civil servants were being screened over e-payment irregularities.
The implementation of biometric identity management systems are a cost effective first step towards reducing corruption and increasing trust in vital national institutions.

Other posts dealing with ghost workers

Wednesday, February 2, 2011

Jails record biometric data of inmates and visitors

Jails now record biometric data of inmates and visitors (Times of India)
CHENNAI: Prison officials have started collecting and storing the fingerprints and photographs of inmates as well as visitors to Puzhal and Tiruchi prisons.
This is increasingly common around the world.

Having data on prisoners makes complete sense. Too frequently, prisons release the wrong inmate.

Gathering and analyzing data on prisoner visits can aid investigation into organized crime networks.

Tuesday, February 1, 2011

Face-Rec, Standards & ROI

Biometrics on the cusp (ThirdFactor.com)
Richard Lazarick, chief scientist at CSC’s Global Security Solutions Identity Labs: “The barrier now is, ‘Can I convince myself that I’m going to get a return on investment?’.”

Video from the 2010 Biometrics Consortium conference at the link.

Australian pubs and clubs are using biometrics databases in efforts to curb violence

National biometric pub list use 'explodes' (ZDNet.com.au)
While patrons remain divided on the need to surrender biometric data to buy a beer, the system appears to have led to a halt in violence in pubs and clubs.

The Woodport Inn on the NSW Central Coast has obliterated the incidents of violence which had once troubled its night club.

"[The] violent people here are gone, just gone," said one bar manager. "They are scared of it. They know they will be caught".

The venue is one of several in the area that use NightKey fingerprint scanners, including the Central Coast Hotel and Woy Woy Leagues Club, but it does not share ban lists.

A manager from a Sydney CBD bar who requested anonymity said that the ban database had cut violence, adding that the venue may soon be able to reduce its security headcount. The machines are not classified by NSW Police as security equipment and can be operated by a staff member.

Alcohol-related incidences have dropped by up to 80 per cent in some venues that use the scanners, according to Perrett. He said the data is a smoking gun that police can use to convict violent offenders.
This article touches upon many of the issues we regularly address here: ROI, public safety & Privacy vs. Anonymity to name a few.

Fingerprint biometric wallets back in the news

Dunhill's Biometric Wallet Only Opens for You (Tom'sGuide.com)
This is Dunhill’s Biometric wallet. Featuring a biometric card that detects the owner’s fingerprint, this carbon fiber wallet will only open for the person who payed the roughly $800 to buy it in the first place. Sure, a thief could probably get it open if they really, really wanted to, but this might at least give you some extra time to call the bank and cancel your cards before the robber has a chance to hit Amazon.
Buy one here for $825. (dunhill.com)

Mike00, in the Tom's Guide comments, makes a good point. If it has a fingerprint reader and blue tooth, what happens when it runs out of batteries?

The Miami Herald deemed a similar product its worst performing gadget of 2010. Perhaps Dunhill has addressed some of the problems with the TungstenW model. Close examination of the images from Dunhill's site and the TungstenW model, however, lead one to believe that the Dunhill model is the TungstenW.

Monday, January 31, 2011

US eyeing a global 'trusted shipper' program

The program would create a list of pre-vetted cargo companies (MSNBC.com)
The "trusted shipper" program is part of a wider effort to boost the safety of air cargo, whose vulnerability was exposed when militants in Yemen hid two powerful bombs inside printers and shipped them aboard cargo planes to addresses in Chicago late last year.

Access control critical for security

Access control critical for security, and other things (ITWeb S. Africa)
Experts in the field of biometric-based security systems believe that knowing the movements of people within the company or business is, especially from a security perspective, of paramount importance to decision makers.
Understanding how employees act within and move about an organizations has value beyond the security function.

Friday, January 28, 2011

Nigeria having a rough go at biometric voter system

Nigerian Voter Registration Off to Bumpy Start (AllAfrica.com)
The above link leads to a page at AllAfrica.com that aggregates eighteen articles chronicling the problems Nigeria is having in implementing a fingerprint based voter ID system.

Headlines include:
Election Commission Chief in Eye of Storm (Jan. 23)
Voter Registration Hitches Are National Embarrassment (Jan. 24)
Fake DDC Machines Slow Voter Registration Exercise in Edo (Jan. 21)
Voter Registration - False Start? (Jan. 20)

To this list may be added an article from yesterday:
Voter Registration - DDC Machines Too Fake And Cheap

Biometric ID management systems can help liberate the electoral process from corruption. If, however, the implementation process itself is plagued with corruption many of the benefits of the implementation will be sacrificed and the costs will inevitably go up.

See also:
Big-Time fraud in NYC time-and-attendance initiative

Thursday, January 27, 2011

Taiwan to begin automated border control system trial

Airports to follow (ChinaPost.com.tw)
Taiwan will be launching a trial of an automated border control system at offshore Kinmen island after the Chinese New Year holidays in order to simplify and speed up border controls, local officials announced yesterday.

The Ministry of Foreign Affairs (MOFA) and the National Immigration Agency (NIA) yesterday jointly announced that a total of seven sets of the newly-introduced system will be first tested at the Shuitou Port (水頭港) in Kinmen, one of the entry-points for passengers making use of the Mini Three links.
With trade volume between Fujian and Taiwan surging by 48.7% in 2010, the ROI on a system like this could be significant. (WhatsOnXiamen.com)

Calls for Zimbabwe to adopt Biometric voters’ registration

Political commentators and Civil Society Organizations back MDC-T’s call for Zimbabwe to adopt a new voters’ roll for forthcoming elections (The Zimbabwean via SW Radio Africa)
Tobaiwa Mudede is the Registrar-General in the inclusive government and has been in that position since the early 1980’s. He has been criticized by international human rights organizations for falsifying and manipulating the voters roll to ensure Robert Mugabe’s ‘electoral victories’ against the MDC.

It’s been reported that a South African based company has provided quotation of $20 million for biometric voter registration for the whole of Zimbabwe.

The latest MDC demands come in the wake of revelations by independent election watchdog, the Zimbabwe Election Support Network, that the voters’ roll is full of dead people and includes names of children, some as young as four years.
In developing countries, biometric identity management systems are frequently seen as a means to reign in corrupt and abusive governments.

Wednesday, January 26, 2011

TechConnectWV announces commercialization awards program

Encourages biometric and identity management job creation in WV (HuntingtonNews.net)
“However, there is little native biometric manufacturing activity and even less identity related intellectual property in the state,” she said. “TechConnectWV’s commercialization awards program will attempt to identify and fund promising ideas that can stimulate industry development and job growth in West Virginia.”
...
TechConnectWV leaders expect to publish and disseminate the rules of submission for the commercialization awards by the end of January. The TechConnectWV program is funded by grants from the Claude Worthington Benedum Foundation.

Access control - technology, people on the move

Access control and regulation of resources are cornerstones of modern commercial security strategies (PRLog.org)
Part of the reason for this is because of the practical value that biometric technology offers and the strength it has in comparison with alternatives such as cards, PINs and/or passwords, says Coetzee.

“The monitoring of people's movements and their access to areas has become increasingly sophisticated in the past few years through the use of fingerprint biometric identification systems. Unfortunately, the traditional alternatives are just not secure enough methods of access control as they can be lost, stolen or forgotten. With a competent, robust biometric system based on fingerprints, you simply can't cheat the system.”
They're better solutions at lower cost.

Tuesday, January 25, 2011

Casino face scanners make a lot of sense

Steven Gallagher: The Daily Observer (Pembroke, Ontario)
At first glance, it seems like a less-than-appealing idea: Walk into a government-run facility and have your face digitally scanned by a camera.

It smacks of "Big Brother is watching you."

However, a plan by the Ontario Lottery and Gaming Corp. to install facial recognition scanners at the province's 27 gaming facilities, including the two casinos in Niagara Falls and the slots at the Fort Erie Race Track, makes sense.

Monday, January 24, 2011

Switzerland New biometric residence permits ready

Switzerland: New biometric residence permits ready January 24 (GenevaLunch.com)
Switzerland Monday 24 January begins issuing biometric residence permits to foreigners who are from outside the European Union or Efta (European Free Trade Association). Note for holders of residence permits: existing permits remain valid until the expiry date listed on them.

From the Swiss Federal Office for Migration:
Link to brochure pdf
It contains two digital fingerprints and a facial image. The data are stored for five years and may only be used for issuing a new identity document. The biometric identity document for foreign nationals fulfils strict international requirements. The data are protected by a secure access control and an electronic key. The fingerprints are especially protected. The chip does not allow a person to be located or monitored.

Friday, January 21, 2011

Air Travel: Biometric information to focus scrutiny on a small number of people

Technology will eliminate intrusive airport security searches, says IATA boss (Prince Edward Island Guardian)
Airline passengers are a couple of years away from passing through security without intrusive scans and searches that cause delays and take the joy out of flying, the head of the International Air Transport Association said Thursday.

IATA chief executive Giovanni Bisignani, a former head of Italy’s Alitalia airline, said that his vision is for “hassle-free tunnels of technology” that all passengers would pass through.

Finger prints and other biometric information from the travellers, combined with intelligence from government and airline sources, would be used to focus scrutiny on a small number of people considered to be a risk.

findBIOMETRICS Year in Review 2010

findBIOMETRICS Publishes Biometric Industry Year in Review with Interviews from 63 International Experts on 2010 Performance and 2011 Potential (findBIOMETRICS.com)

Peter O'Neill does great work at findBIOMETRICS.
The report contains answers to the most pressing questions in the biometrics industry from the people closest to the action.

Thursday, January 20, 2011

Gloucestershire nursery leader shows how it's done

Vikkie's finger is on the security pulse (ThisIsGloucestershire.co.uk)
The managing director of Mary P's Nursery in Ashchurch has installed a fingerprint recognition system at its entrance.

It is a move aimed at making sure members of the public using the railway station next door can't wander in to the nursery.

Vikkie said that in the past she had found that some commuters had entered her premises to use the toilets.
This short-but-sweet article has it all: increased safety at lower cost delivering additional value to customers.

Around there, that's spelled R-O-I.

UK: Destruction of ID card data to cost £400,000

Last May the ill-fated project was shelved (ComputerWeekly.com)
The destruction of the National Identity Register (NIR) and the personal data held on the controversial ID card system will cost about £400,000.
Previous post on the topic here.

Could Khalid Shaikh Mohammed's arm veins implicate him in the murder of Daniel Pearl?

Qaeda Killer’s Veins Implicate Him In Journo’s Murder (Wired.com)
“By extracting the information of the vascular structure of a hand or finger and converting it into a mathematical quantity,” according to Nomani’s report, “this technology creates a template for each structure and then compares the template of a known individual to a suspect.” After sending the data to KSM’s CIA captors, Dick heard back: “The photo you sent me and the hand of our friend inside the cage seem identical to me.”
Any durable fact regarding an individual's body can be used as a biometric identifier, provided that fact can be measured in sufficient detail.

What determines which body facts are used as biometric identifiers are used in large scale deployments is a combination of convenience (elbows are out), variance across the population (the more the better), variance over time in the same individual (the less the better).

After that, it's ROI (return on investment). Now, there probably won't be significant ROI for developing automated arm vein matching algorithms for large scale identity management deployments in the foreseeable future, but the challenge isn't so much technical as it is economic. If the identification transaction is "worth it" and you have the two data points (unknown arm vein and known arm vein) and the criteria above are met, the answer is out there. The question becomes: What is the answer worth? In this case, the answer: Quite a lot.

Tuesday, January 18, 2011

Fingerprints Go the Distance

Scanning prints at two meters could mean safer security checks (TechnologyReview.com)
Over the years, fingerprinting has evolved from an inky mess to pressing fingers on sensor screens to even a few touch-free systems that work at a short distance. Now a company has developed a prototype of a device that can scan fingerprints from up to two meters away, an approach that could prove especially useful at security checkpoints in places like Iraq and Afghanistan.

Monday, January 17, 2011

Scotland: Making a meal of biometric 'threat'

I missed this when it was published on January 3.
Making a meal of biometric 'threat' (LesleyRiddoch.com)
The entire article is available at (News.Scorsman.com -- reg. req.)
Brechin High School is about to celebrate a decade of fingerprint recognition. The kit was introduced to the school’s library in 2001 as part of a new digital administration system. Borrowing by boys increased and lost cards were no longer a time-consuming problem for staff. So in 2007 the fingerprint kit was installed in canteens across the council’s eight secondary schools. Brechin High has had no problems, pupils seem to like it and last week’s publicity prompted only one local opponent into print.
People & ROI.

UPDATE:
Earlier post with thoughts on biometrics in Scottish schools here.

Friday, January 14, 2011

Secure Communities helps remove 461 previously convicted aliens from a single county in one year

Thursday marks the first year of Sacramento’s participation in the U.S. Immigration and Customs Enforcement’s (ICE) Secure Communities program (PRWeb via Yahoo)
Of the 461 convicted criminal aliens removed from Sacramento County in the last year, 192 are considered Level 1 offenders, which includes those convicted of serious or violent crimes, such as murder, sexual assault and robbery. Another 126 are Level 2 offenders, which includes individuals with convictions for offenses such as arson, burglary and property crimes. As part of the Secure Communities strategy, ICE is prioritizing its enforcement efforts to ensure that individuals who pose the greatest threat to public safety are removed first.

Regardless of the offenses for which individuals are initially booked, the Secure Communities screening may reveal more serious criminal histories. For example, the fingerprint check of a man who used an alias following his arrest in September by Sacramento police for carrying an open container of alcohol in public, revealed he had multiple prior convictions for drug trafficking as well as a conviction for assault with a firearm and had been previously deported. ICE presented the individual, Jorge Vega-Reyes, to the U.S. Attorney's Office for prosecution for felony re-entry after deportation. Vega was convicted in November and is currently serving a 27-month prison sentence, following which he will be deported to Mexico.

Thursday, January 13, 2011

Today is National Amber Alert Awareness Day

Jan. 13 marks National Amber Alert Awareness Day (Lake County News)
California joins other states nationwide in recognizing Jan. 13 as National AMBER Alert Awareness Day, a day to acknowledge the collaborative efforts and successes of the AMBER Alert program to assist in the recovery of abducted children.

This year marks the 15th anniversary of the abduction of Amber Hagerman and the program that was named in her memory.

Massachusetts joins Secure Communities

Gov. Patrick signs on to Biometric data sharing program (SomervilleNews.com)
“[The Department of Homeland Security] is implementing Secure Communities with or without the commonwealth,” said Harris. “So we elected to sign the memorandum of agreement with Immigration and Customs Enforcement so we can participate in how when and where it’s rolled out in the commonwealth.”

The Secure Communities program, created by the Federal Department of Homeland Security, would use biometric data taken from fingerprints of those arrested and cross-reference them with Immigrant and Customs Enforcement databases in an effort to identify and deport illegal immigrants.
Other posts on the topic here.

Wednesday, January 12, 2011

Canada-US security perimeter a step towards more border efficiency

Canadian and American governments are expected to jointly announce a new deal on border security (TheChronicleHerald.ca)
Increased security procedures implemented since 9-11 have served only to thicken the Canada-U.S. border, increase the costs of imports and exports, and generally make life more difficult for anyone whose business relies on the flow of goods or people between our two countries.

In 2010, 75 per cent of all Canadian merchandise exports were expected to go to the United States with more than 70 per cent of these shipments being made by truck crossings. An even larger share of merchandise imports were expected to arrive by truck. Delays at the border due to congestion have been a problem for many years. But despite new trusted-traveller programs, the added security checks after 9-11 have created a de facto barrier to trade.
Democratic governments have certain obligations that they simply cannot shirk. Among these is border security. Given that governments have a duty to secure their mutual borders, it is to be desired that they do this in an efficient and cost effective way while recognizing and promoting the interests of their citizens.

It seems clear that the emerging agreement between the US and Canada attempts to create this balance. Time will tell if it actually succeeds.

Biometric Stocks in the news

Three Small-Cap Tech Stocks Poised to Benefit From Mobile Commerce (SeekingAlpha.com)
Steven Bulwa (who discloses that he owns shares in Authentec: AUTH), draws attention the biometrics in the context of mobile transaction identity assurance.

If you're only interested in the part of the article dealing with biometrics, scroll down to the last section. It's headed Securing the Transaction.

Another publicly trading biometrics pure play that has been in the news is BIO-key (OTCBB:BKYI)
See: BIO-key Takes Steps to Improve Its Balance Sheet (Finance.Yahoo.com)



Disclosure: the author holds no positions in either of the securities linked in this post.

Nothing in this post should be construed as financial advice or a recommendation either to own or to avoid owning either linked security.

Face-Rec helps gambling addicts, reduces fraud

Facial recognition a system problem gamblers can’t beat? (Toronto Star)

An unfortunate fact of life is that every time we institute a new program designed to help the truly afflicted, fraudsters come out of the woodwork to exploit the program.

Problem gamblers' registries are humane tools designed to minimize the social cost of gambling by allowing problem gamblers to exclude themselves from facilities where gambling takes place.

If a self-excluded gambler is served by a casino, any losses are unenforceable and the money must be returned to the person who should not have been served.

This created an irresistible opportunity for some to commit fraud. Simply enroll in the problem gambler database and if you can sneak into a casino, you can't lose. If you win, you leave; if you lose, you get your money back.

Enter Face-Rec.
Problem gamblers beware. The Ontario Lottery and Gaming Corp. — which critics say hasn't done enough to keep you out — plans to be up to the challenge this spring.

OLG is set to unveil a new facial recognition program at all 27 of its gambling facilities in Ontario. It's being praised as a high roller in the privacy protection game.

“It's the most privacy-protected system using biometric encryption in the world,” said Ann Cavoukian, Ontario's privacy commissioner, who approved the new system.

Those who think society should take a more active role in creating the structures to help the vulnerable should be open-minded about reducing the opportunities for fraud that social programs invite. High-tech identity management techniques are a piece of the puzzle and they can be implemented in ways that are consistent with individual privacy.


Earlier post on the subject here.

Tuesday, January 11, 2011

Maxwell-Gunter Air Force base rolls out new identification system

Text and Video at the link (Alabama Live)
The new system to identify the 50,000 patrons requiring base access was rolled out on Jan. 4, and in just three days, more than 1,180 people have gone to get new identification cards made at one of the six registering stations on base.

Staff Sgt. Joshua Allen, 42nd Security Forces Squadron NCO in charge of pass and registration, said that the registration process has been well received among those who access the base.

There are a lot of benefits to a system like this. The first and most obvious is increased security. Then, increased efficiency of security personnel can bring positive ROI. We talk about these things here all the time.

These types of identity management systems can also play a very important, even life-saving, role in an emergency. They accomplish this through better data capture and management. In a deployment like this, Security Forces Squadron Officers will have a much better idea of who is on base and where they are at any given moment.

If, for example, there's an explosion and fire in a given structure, and the information exists to determine exactly who was in the building, emergency workers can more quickly determine whether all people known to have been in the building are accounted for. This makes it both less likely that emergency workers will give up on possible survivors too early and less likely that they will spend too much time in extreme danger looking for people who aren't there.

This "better safety through better data" application of identity management technology applies in a lot of places but to military bases the application is obvious.

Friday, January 7, 2011

Most Security Measures Easy to Breach

Vulnerability Assessment Team at Argonne National Laboratory break into "foolproof" systems (NBCChicago.com)
"Yes, we almost never need a high-tech attack against a high-tech system. We actually defeated a biometric access control device with parts from a BIC pen."

That's because the "bad guys", as he likes to call them, aren't necessarily going to even try to outsmart gee-whiz gizmos. After all, why go after a retinal scanner when you can simply use a credit card to open the virtually unsecured door?

I'm curious about the BIC pen hack. It was mentioned at the Argonne National Laboratories site back in November. It seems like they're keeping mum for now. Given that they're a government agency and the linked story states the device in question was intended to protect nuclear material, that's probably a good thing.

Dr. Roger Johnson makes excellent points about the nature of security in both linked sources.

His main thesis seems to be: While there is no such thing as perfect security, most people aren't really even trying that hard.

It's hard to argue with that, and Dr. Johnson seems to appreciate the difference between rational security measures and "security theater".

There is a cost-benefit analysis that goes into security purchasing decisions. The closest thing to perfect security is what the Secret Service does for the President. That type of security is afforded to only a handful of people and few of us would choose that type of security for ourselves even if we could afford it.

The more efficient security solution for the vast majority of us is investment in reasonably efficient law enforcement, reasonably effective alarm systems, and the creation of a reasonable amount of uncertainty in the mind of the bad guy.

Security systems don't have to be perfect to be rational. This is why we spend so much time here discussing Return On Investment (ROI). If a given solution improves security and implies lower costs, it should be adopted.

Security theater is different. Giving the illusion of security in an insecure environment is worse than not having any security at all.

Thursday, January 6, 2011

Drivers for change in the physical access control space

Cost, security and convenience (SecurityPark.co.uk)
...[T]the three core elements of the customer value equation - cost, security and convenience – continue to fuel drivers for change in the physical access control space as increased convenience, lower total cost of ownership and achieving higher levels of security continue to dictate market development.
Lower cost + better performance = Increased ROI

Wednesday, January 5, 2011

Sydney Airport expands biometrics use

SmartGates expanded, passengers through Customs in 38 seconds, Home Affairs minister claims (ComputerWorl.com.au)
“There’s strong demand for SmartGate from passengers and these new kiosks and gate help meet the increasing desire for non-invasive, efficient and tech savvy ways to travel," O'Connor claimed. “The system is easy to use and it is a safe and convenient alternative for clearing through passport control.”
It's about people, after all. Far from being a scary technology, customers demand smarter, more convenient identity management solutions.

Biometrics Industry in the Middle East

Changes in security legislation under the spotlight at Intersec Conference (AMEinfo.com)
There is a marked increase in demand for biometric access and egress control systems, video surveillance systems and perimeter control machinery in countries around the region, which is expected to impact the market for these products quite significantly.
The Intersec security conference has been going on since 1998.

Tuesday, January 4, 2011

Airports toy with the idea of tossing the TSA

The interaction between airport managers and the TSA (part rule-setting government agency and part airport service provider) makes for interesting reading. This morning's MSNBC.com article, "Airports toy with the idea of tossing the TSA" makes it clear that while the TSA doesn't quite have a security services monopoly, they do set the rules of the industry in which they compete.
"TSA issues the RFP [request for proposal] and selects and manages the contractor" that steps in, said Michael McCarron, director of community affairs at San Francisco International...

"TSA sets the security standards that must be followed and that includes the use of enhanced pat-downs and imaging technology, if installed at the airport," said TSA spokesperson Greg Soule...

"We aim to ensure that the highest level of security is balanced by the most passenger-friendly service possible," said Nancy Suey Castle, a spokesperson for Los Angeles World Airports. "Contracting private screeners could be a method to achieve this goal."
The linked article is well-sourced, accounting for many of those who have a hand in making the airport security sausage.

Biometrics help with Nigerian military pensions

Ex-Servicemen Assured of Prompt Pension Payment (AllAfrica.com)
Kwaji said that retired defence personnel receive their financial benefits without delay each month, adding that as soon the details of retired personnel are made available to the board by the branch of the military where he served, all the payment processes will be completed and the beneficiary gets paid from that month. He said the use of biometrics in pension's payment has eliminated fraud in the system and made payment faster.
A recent post on Nigeria's efforts to combat corruption and government waste through better identity management may be read here:
Nigerian police force discovers 20,000 ghost workers in its ranks

Monday, January 3, 2011

U.S. Trusted Traveler Program should be re-launched as a serious risk-based security program

Business Travel Coalition (BTC) reiterated its support for positive-profiling of airline passengers transiting the U.S. aviation system (TravelDailyNews.com)
The article suggests three changes that would allow the Trusted Traveler program to live up to its potential:
  • Member Background Checks
  • RT Vendor Technology Ownership
  • Member Enrollment Model
The author makes several very interesting points in the first and third sections.

Friday, December 31, 2010

Nigerian police force discovers 20,000 ghost workers in its ranks

Bloated Police Wage Bill (AllAfrica.com)
To think that all of 20,000 non-existent workers have been receiving salaries amounting to N6 billion in just three months is dumbfounding. But it shows the extent of financial hemorrhage that the country is subjected to by criminals operating clandestinely in various government ministries.
Six billion Nigerian Naira = US$39,530,000 in three months.
Multiply by four for an annual estimate of US$158,120,000.
Total U.S. government foreign aid to Nigeria in 2008 = US$200,000,000 (pdf Census.gov).

By tightening up identity management measures in a single government bureaucracy, Nigeria was able to save itself money equivalent to 79% of the sum that the U.S. delivered to Nigeria in aid in 2008.

Besides the financial windfall, there is an increase in citizen confidence in institutions. It's difficult to ascertain which is more valuable.

The great Indian journey to unique identity

Aadhar has the potential to change the life of every Indian (CIOL.com)
After a person is allotted a UID number, his/her identity linked to biometrics would be established to uniquely identify the person. The UID number would authenticate the identity claim of a person and would have wide-ranging applications during the person's lifetime. And it would benefit everyone from students to farmers to corporate executives.

The UID will not just help the government track down individuals but will make life far easier for citizens as they will not have to submit so many documents each time they want to avail a new service – private or government.

Since India is a country where food distribution is a major concern, UID can be helpful in bringing transparency in public distribution system, too, and make sure the benefits of government schemes are reaching the people who deserve it.
If it is too difficult to do things the "right" way, rational people will do things a different way.

In many developing countries, this means taking electricity straight from the grid, neglecting to register a business and paying bribes rather than obtaining permits. These actions lead to a reduction in a society's ability to invest in the physical and social infrastructure that delivers first-world living standards.

According to the World Bank, among world economies, India ranks:
134th in "Ease of doing business"
165th in "Ease of starting a business"

Other measures at the link are equally distressing.

In order legitimately to start a business in India, one must negotiate 12 bureaucratic hurdles including the payment of 9 different fees. Many of these steps include the verification of the applicant's identity.

Better identity management techniques, are not by themselves sufficient to improve the daily lives of Indians at all levels of society, but they are necessary for legitimizing citizens and streamlining government.

Beyond the bureaucracy of starting a business, the UID project can bring efficiency and deliver real value to Indian society in the areas of Taxation, Banking, Voting, Welfare transfers, Education and Health care.

Not only does the UID project give government an increased ability to identify citizens, it gives citizens an increased ability to hold their government accountable. Implementation of biometric time and attendance systems within government bureaucracies can reduce or eliminate ghost workers and stem corruption.

These are the opportunities India seeks for itself.

There is much work to do and there will be resistance. Privacy advocates that don't know what it's like to wait in line for hours or be forced to pay a bribe for every mundane interaction with the government or public utility will take to the newspapers. Corrupt officials with armies of ghost workers that are diverting resources meant for the poor into offshore bank accounts will drag their feet. Welfare fraudsters collecting multiple payments under multiple identities will prove remarkably ingenious at milking the system. But India must, at least, try.

Many of the world's poor, not just in India, are depending upon them to get this right.

Thursday, December 30, 2010

Secure Communities in the News

The U.S. Immigration and Customs Enforcement (ICE), has been implementing the Secure Communities strategy throughout the country for several years now.

The initiative seeks to prioritize the use of resources in order to place the highest priority on removing individuals who are both in the United States illegally and have committed violent crimes.

The system uses fingerprint biometric identity management technology to integrate local law enforcement officials with a central database of individuals who fit the criteria above. The search against the central database is only performed if the individual is arrested again.

As the system is being implemented across the U.S., local reaction varies dramatically as a survey of headlines shows.

UPDATE: These links are no longer useful
Bing News Searches:
"Secure Communities" Kansas

"Secure Communities" Maryland
"Secure Communities" Massachusetts

Wednesday, December 29, 2010

Top Ten Threats to Your Privacy

Privacy Alert: 10 Biggest Threats of 2010 (PCWorld.com)
It won't surprise regular readers that biometric technologies are absent from the list.

Other familiar names aren't so fortunate.

Biometrics and Development

Fingerprint Haiti Now: Biometrics in Haiti, One Year Later (Center for Global Development)
Cash transfer programs have become commonplace in post-disaster recovery for rebuilding and re-capitalizing households and firms. Such programs provide direct aid without the bureaucratic delays and transparency concerns of other methods. They also create demand to jump-start the economy and put the power of recovery in the hands of the people– giving them the resources to pull themselves out of poverty and towards reconstruction and recovery. Leakage is always a major concern; donors need to ensure individuals only collect once and that funds are distributed as intended. A secure identity system could be used to prevent multiple payments, “ghost” recipients, and other forms of leakage.
It is extremely heartening to see an organization as respected as the Center for Global Development recognize the contributions identity management technology can make toward building a more just, prosperous and equitable society.

Other posts dealing with biometrics, fraud and social safety nets can be read here.

Scotland: Angus education chief claims unanimous support for pupil fingerprint system

Angus Council's education convener has defended a biometric identity system used for school meals, claiming the local authority has never received a complaint about it (TheCourier.co.uk)
"Angus is the only authority in Scotland which is increasing uptake of school meals and, while not all of it is down to the biometric system, we do know that there is a stigma attached to receiving free school meals. But the possibility of bullying is removed here because no one knows who receives free school meals apart from the office staff who credit their accounts.
Fingerprint systems that store only an algorithm-generated template rather than an image of a fingerprint pose little-or-no threat to a person's biometric privacy.

On the positive side: for the student, fingerprint biometrics offer increased privacy and safety; the school achieves higher data integrity and increased operational efficiency. These benefits are not simply confined to the schools themselves. All taxpayers have a stake in the efficient use of educational resources.

If recent press is taken as an accurate reflection of the concerns of so-called privacy advocates, they fixate on the security of students' biometric data while unconcerned with the security of the academic, behavioral and medical records kept by schools that present a much more acute privacy risk.

It is incumbent upon adults to be mindful of the privacy implications of all the decisions they make for children. Implementation of template-only fingerprint identification systems can indicate fulfillment, rather than neglect of that duty.

Tuesday, December 28, 2010

Scotland: Use of fingerprint ID in schools triggers row

Scottish Politics, Biometrics & Schools (News.Scotsman.com)

Anti:
"Public bodies have shown in the past that they are not always to be trusted with sensitive personal data. If the finger - or palm prints - of children as young as four years old got into the wrong hands, it could have significant consequences. Do we really want this sort of intrusive information taken from young children?"
Pro:
"Of course, if we can use new technology to improve public services and reduce costs then we should be looking to do so. However, as with keeping any personal, information appropriate safeguards must be in place."
Other posts on biometrics and schools may be read here.

International Air Transport Association insists on updated security measures

Under an IATA plan, passengers would be categorised into one of three risk groups, and then screened accordingly. (AustralianNews.net)

Friday, December 24, 2010

NYC payroll chief resigns after fraud probe

The Associated Press
NEW YORK - (AP) — The director of New York City's payroll department has resigned a week after prosecutors charged four consultants in a $80 million fraud scheme.
Earlier post on the topic here.

Thursday, December 23, 2010

Nine Technologies That Will Change Your Future

What will be the tech breakthroughs of the next decade? (Kiplinger via Yahoo Finaince)
Banks are increasingly turning to biometric authentication for mobile and online clients. Fingerprint, voice and face recognition systems will soon become commonplace as banks seek to heighten security for the rising tide of on-the-go transactions.

Imagine a front desk without people

For hotels, it cuts costs (Chicago Tribune)
Consider this: You go to the front desk to check in, your image is captured on computer, you're given your room number but no key card. You get to your room and a facial-recognition reader opens the door for you. Or maybe you just check in at a lobby kiosk and bypass the front desk altogether. Or you use your credit card to enter your room.
Biometrics figure to be the linchpin in a host of revolutionary and cost saving technologies and processes.

The return on investment (ROI) is significant.

Tuesday, December 21, 2010

UK: ID Cards Scrapped by Coalition Government

ID cards consigned to history by Coalition Government's first Home Office Bill (FreshBusinessThinking.com)
All ID cards will be cancelled within one month of Royal Assent and the National Identity Register, the database which contains the biographic information and biometric fingerprint data of card holders, will be physically destroyed within two months.
This isn't a surprise, we drew attention to the decision back in May.
The U.K.'s new coalition government plans to cancel the national ID card program, calling it part of a "substantial erosion of civil liberties" that took place under the former Labour government.
But what would a national ID system that didn't present a "substantial erosion of civil liberties" look like?

From this post of May 21:
Bryan Glick at ComputerWeekly.com understands that the rejection of a statist, top-down approach does not mean that identity management systems are unnecessary or that all proposed systems will be rejected by a free public.

Glick then draws attention to a 2008 report by Sir James Crosby, then at HM Treasury, entitled Challenges and Opportunities in Identity Assurance (.pdf). The 47-page report contains a breadth of information that makes it a great introduction for how to begin thinking about the challenges associated with large-scale biometric identity management deployments. It is very accessible and deserves to be read widely.

Biometric time clocks gaining popularity

Chattanooga Times Free Press
Biometric time clocks aren't always popular with workers, some employees say, but the devices are winning approval from Chattanooga-area companies, according to a business that sells the fingerprint-activated devices.

High-profile customers include Rock City, the Tennessee Aquarium, Chattanooga Convention Center and Creative Discovery Museum, which all have bought into International Equipment Co.'s biometric vision as the Chattanooga-based company marks its 50th anniversary.

Monday, December 20, 2010

High-tech move to stamp out food card fraud

Trinidad Express
In an effort to stamp out fraud and corruption in the delivery of social services grants, Government will be moving next year to implement biometric technology starting with the food card programme and disability grants.
People are willing to support higher social spending when they are confident that the money isn't being stolen.

Ingenico shares hit after Safran blocks foreign bid

French industry minister Eric Besson said the state was talking with Safran, adding Ingenico was a "strategic" business (Reuters)
Safran (SAF.PA), 30 percent owned by France and which holds 22.5 percent of Ingenico, likely blocked the 1.44 billion euro ($1.9 billion) offer as a result of government pressure to prevent the company passing into foreign hands, analysts said.
Ingenico makes some fingerprint enabled point of sale hardware.

Safran is in the process of finalizing its purchase of much of L-1.

Friday, December 17, 2010

Big-Time fraud in NYC time-and-attendance initiative

CityTime Consultants Charged With Stealing $80 Million (Gothamist)
Four consultants hired to run quality assurance have been accused of taking $80 million in "an elaborate fraud and kickback scheme" that involved faked time sheets (ha!) and a series of shell companies. According to the suit the suspected ringleader even got his mom and his wife in on the scheme!
Fraud is fraud and it could occur with any government contract entrusted to corrupt individuals. As noted by the quoted section above, the fact that faked time sheets were used to steal from a biometric time and attendance system contract is at the least ironic.

UPDATE:
NYC payroll chief resigns after fraud probe

Jobs at 3M threatened as UK passport contract switches to De La Rue

More than 100 production staff are facing redundancy (PrintWeek.com)
All of the staff have been subject to TUPE negotiations as a result of the Identity and Passport Services’ decision to award the 10-year contract to print the next generation of biometric passports to De La Rue rather than incumbent 3M.
Countries often don't produce their own currency and passports -- they hire private firms to do it -- and for obvious reasons, countries don't like to talk about it.

The UK has decided to award its passport manufacturing contract to the home grown, though troubled, De La Rue rather than American firm 3M.

It's worth noting that the British passport is biometrically enabled (face recognition) and 3M recently completed its acquisition of biometrics firm Cogent, which had an application for face recognition for border control.

Facial recognition biometrics will come of age in 2011

Facial recognition technology promises easy access for employees and a fast return on investment for employers (SecurityPark.co.uk)
Facial imaging biometrics has refined the technology in recent years with 3D imaging and infra-red cameras overcoming early flaws such as strong sunlight or darkness making a comparison difficult. It is now possible to make a positive identification under any lighting conditions and while the subject is moving towards the camera.

Thursday, December 16, 2010

L-1 sale update

Stockholders to vote on merger on February 3, 2011 (ConsumerElectronicsNet.com)
Under the terms of the agreement entered into on September 19, 2010, Safran has agreed to acquire L-1 Identity Solutions, Inc. following the sale of L-1's intelligence services businesses to BAE Systems Information Solutions Inc.
It looks like there are still three moving parts. The sale the intelligence services to BAE is expected in the next few days. The vote to sell the rest to Safran is scheduled for February.

Wednesday, December 15, 2010

What a mess: UK, EU, Children and Biometrics

UK gets thumbs down over school fingerprinting (Sydney Morning Herald - Australia)
BRUSSELS: The European Commission has demanded that Britain justify the widespread and routine fingerprinting of children in schools.

It said it had "significant concerns" that the policy breaks European Union privacy laws.
Here's an article that perfectly illustrates what happens when competing bureaucracies, biased or power-maximizing bureaucrats, identity management and (possibly) poor public communication collide. In fact, one seldom encounters such a archetypal example of what is an increasingly infrequent, though once common, treatment of biometrics in the news.

-The competing bureaucracies: The European Union vs. UK Schools
-The biased or power-maximizing bureaucrat: Hank Roberts "A member of the executive of the Association of Teachers and Lecturers"
-Identity Management: Fingerprint biometrics in schools
-Potentially poor public communicator: UK Schools

First, some background.

As outlined here, there are many reasons schools would like to and in fact should be encouraged to tighten up their identity management functions and biometrics can help while increasing privacy and lowering costs.
Schools spend a lot of resources in their Identity Management function: calling roll, assigning grades, managing a medical services office (school nurse), collecting health information on student athletes (physical exams), etc.

We all have an interest in how efficiently an industry that is overwhelmingly funded by tax revenues manages its resources. Schools should therefore be encouraged to adopt more effective means to accomplish the demands society places upon them and they should be commended for innovation within their industry.
To the list above should be added the library's and school lunch functions.

Secondly, not all fingerprint identity management systems are the same.

Some implementations store an image of the fingerprint and some store only the template created by the biometric algorithm. All fingerprint access control systems use a template generated from a person's fingerprint. It is not possible to "reverse engineer" a template into a complete image of the fingerprint that created it. In this limited use case it cannot fairly be said that people are fingerprinted.

Other fingerprint access control systems do store an image of the fingerprint as well as the template generated from it. In this use case, it is accurate to say that fingerprints are on file.

Thankfully, most decision makers that examine the implementation of fingerprint ID management systems in their schools become informed of the difference and since they are, for the most part, normal human beings that care about the welfare of the children under their supervision, they opt for the type of system that does not store fingerprints.

Back to the linked article.

The tension between the EU bureaucracy and institutions confined within member states is obvious and has nothing to do with biometrics, per se.

Biased and uninformed bureaucrats are occasionally addressed here and Mr. Roberts confirms his bias and willingness to paint with an overly broad brush with the following quote:
"I believe the fingerprinting of children is a totally unnecessary infringement of civil liberties," he said. "The legal situation must be looked at. This is being done surreptitiously without parents being told."
Anyone who terms the implementation of a fingerprint biometric system that stores only the template created by the biometric algorithm "fingerprinting" is either confused or or lacks respect for their audience.

"Fingerprinting" conjures up images of prison movies, the "rolled ten" and the loss of personal freedom. The fingerprinting process in the usage above is not undertaken in order to further the interests of the person providing the fingerprints. It is typically undertaken to help protect society from the person behind the fingers and carries with it a social stigma. Biometric alarmists intentionally and wrongly bring all of "fingerprinting's" social baggage and dump it onto fingerprint identity management systems. This approach is wrong-headed and emotionally charged.

One of our mottoes is relevant here: Biometrics, it's about people. Most biometric identity management deployments don't founder on technical challenges, but on social challenges. Foremost among the social challenges is communication. Biometric identity management techniques can save money and enhance privacy in schools (by, for instance, obscuring who receives a need-based subsidized meal) but they can't build consensus among public service providers and stake holders. People have to do that. Adopters of biometric identity management solutions have gotten much better at educating themselves about the technology and explaining the reasons behind their decisions.

It is exceedingly rare that these systems are implemented "surreptitiously without parents being told."

The number of Mr. Roberts's in the world seems either to be declining or they are finding fewer reporters seeking their comment. Reasoned communication is winning the day. This is good for schools, students, taxpayers and the biometrics industry. I'll leave it to others to judge whether or not it's good for unelected bureaucrats or self-appointed advocates.

Library, Pornography, Law Enforcement & Identity Management

The Naperville Public Library: Privacy (Examiner.com - Chicago)
Naperville Police Captain Ray McGury said he felt the law was intended to prevent authorities from spying on citizens [the practice of a police state], not to prevent library staff from assisting police fight crimes committed in libraries. “I asked them, ‘If a child is snatched from this library do I have to get a search warrant to get information on who was here?’ and they said, ‘Based on the state law, yes.’ God forbid that happens.”
This article, exhibiting excellent reporting by Sean O'Connor, presents a great case study of the interactions of citizens, and two types of public servant (police and librarians) within the context of identity management.

The main point of tension is between the library's policy and the police officer's duty. In this case, the identity management process is in some sense a witness to a crime.

Biometrics were never adopted in the Naperville libraries but a healthy debate seems to have taken place surrounding their proposed use.

Those interested in topics such as Society and the Individual, Privacy vs. Anonymity, and Identity Management should find the linked article highly worth reading in its entirety.

Tuesday, December 14, 2010

Miami Herald: Worst performing gadget of the year is Biometric Wallet

The year’s most memorable gadgets (Miami Herald)
The TungstenW biometric wallet. Made of carbon fiber, this hard case wallet only opens with the owner’s fingerprint scan ... unless you drop it, in which case it easily pops right open and breaks. For $600, this theft-prevention wallet is a dud. All the thief needs to do is give it a whack against a table or floor.
I think they're talking about this one. (Tiger Direct)

Mozambique: Biometric Personal Record Card Now in Use

Over thirty Mozambicans now possess a Biometric Personal Record Card (AllAfrica.com)
Maputo — Over thirty Mozambicans now possess a Biometric Personal Record Card, issued at birth with an identification number that they will keep for their entire lives.

The authorities regard this as an important step in implementing the "electronic government" strategy.
As we said yesterday, it's dificult to help citizens in developing countries if no one knows who they are.

Monday, December 13, 2010

UID effects: India sees a surge in bank accounts

Some 80% of people enrolling for biometric IDs want bank accounts (Economic Times, India)
“If we are able to provide every such person with a bank account, financial access will explode in India,” Mr Nilekani said. Considering the pace of enrolments for Aadhaar, there was a very real possibility that the number of bank accounts issued in the next four years will exceed the number of accounts banks have issued since India's independence, he felt.
It's been a while since we checked in with India's UID project. Providing the world's poor with a verifiable identity is key to helping them through both government and market based initiatives.

Prison Using Eye Scanning On Inmates

Technology Given To R.I. Jail At No Cost (WCVB TV Boston)
The Department of Corrections said plans were under way last summer for the technology. The process was sped up after an inmate escaped by posing as another inmate who was up for parole. He was later captured in New York.
This really happens.

Iris biometrics are highly suited to this particular application because even though each transaction is slower, they are more difficult to fake than fingerprint biometrics.

The trade-off in speed isn't really a deal-breaker in a prison environment.

Friday, December 10, 2010

Canada-U. S. security perimeter has been years in the making

The two countries reportedly will establish a Beyond the Border Working Group (Vancouver Sun)
Reports have estimated the extra security has added costs for Canadian manufacturers equivalent to two to three per cent of total trade. It also resulted in an eight-per-cent negative impact on the export of services and an almost 13-per-cent negative impact on the import of travel services.
This seems to be getting a lot more attention in Canada than in the U.S.

Facial Recognition: A Valuable Tool For Law Enforcement

Facial recognition can be a valuable identification tool when fingerprint identification is unavailable or impracticable (ForensicMag.com)
Just like automated fingerprint identification, facial recognition can provide law enforcement agencies with a valuable tool for multiple public safety applications. Whie fingerprints assure higher rates of accuracy than face recognition can, facial recognition provides benefits when fingerprint data does not exist, is not easily shared between agencies, or when multiple independent verification methods are desired. Additional applications include identity verification in the field and intelligence gathering, as well as crime prevention and investigation.
The linked article, written by Eric Hess of MorphoTrak, provides an overview of facial recognition for a law enforcement audience.

New Face-Rec audit for New York Driver's Licenses

Transit Sam (Downtown Express, NYC)
Dear Transit Sam,
My daughter’s driver’s license is coming up for renewal soon. I understand that a new face photo recognition system is now in place. My concern, in addition to privacy and identity theft issues, is where is this information going to be sent or stored or how will the information be used? Do you have any idea who is doing this for DMV?
Contained in the answer to the reader's question is a description of a really cool auditing and verification process that should be adopted everywhere.

Please, read the whole thing; it's short but sweet.

Thursday, December 9, 2010

Oasis Systems sold, taps Colatosti (Viisage) for top roles

Oasis Systems sold, taps Colatosti for top roles (MassHighTech.com)
Colatosti is currently founder, president and CEO of biometric and physical security management firm American Security Ventures, he is perhaps best known as the former president and CEO of Viisage Technology Inc.

3M Completes Acquisition of Cogent Inc.

ST. PAUL, Minn., Dec 01, 2010 (MarketWatch.com)
3M announced today that it has completed its acquisition of Cogent Inc., pursuant to a merger agreement that was approved and adopted by Cogent's stockholders at a special meeting held on Dec. 1, 2010. Under the terms of the merger agreement, Cogent's stockholders are entitled to receive $10.50 per share in cash.
I must have missed this while traveling. Those searching for a stock quote for COGT won't find one.

Australian Visa applications to include biometric data

Australia will attempt to stamp out fraudulent visa applications through the use of biometric data for onshore application (SmartCompany.com.au)
"Around the world identity fraud and fraudulent visa applications are on the rise," he said yesterday. "We need to make sure that Australia's toolbox is world's best practice for dealing with this."

Wednesday, December 8, 2010

Physical access control more popular than logical access control

Majority of organisations using biometrics are leaving logical IT access protection at the door (SecurityPark.co.uk)
According to new research from Siemens IT Solutions and Services, only 18% of organisations with biometric measures currently in place are using them for logical access control – vital to securing IT equipment and data files.

Despite acknowledging the need for greater IT security in a climate of cyber crime and terrorism, biometrics professionals are opting for physical access control to safeguard rooms or buildings. This presents IT security threats to sensitive data within organisations and potential mobile IT security weaknesses.
The huge uptick in the popularity of time-and-attendance access control systems, with their clean and easy calculations of ROI (return on investment) may account for some of this discrepancy.

Biometric ID management techniques do yield significant ROI for logical access control -- passwords don't reset themselves and the people you call get paid -- but it's more difficult to compute and is likely to make itself apparent over the longer term.

Nevada DMV looks at ears, eyes, mouths as well as faces

It's no easy feat to identify a specific Bimbo amid the bevy of bimbos in Las Vegas (Las Vegas Review Journal)
Actually, authorities are unsure whether they have in custody Frank Anthony Bimbo, the name listed on the expired identification card, or whether his documents were fraudulent and he actually is one of 10 other people he claimed to be during DMV visits over the past 13 years.

"Sometimes we can't tell which are the real records, and that's the case this time," DMV spokesman Tom Jacobs said. "At this point, he's muddied the waters with so many IDs, we don't know who he is."
This article combines insight into the nuts and bolts of the identity management challenges of local law enforcement, a discussion of new biometric ID management modalities and a fair dose of humor deriving from the subject's real or assumed name.

You won't regret checking this one out.

Monday, December 6, 2010

Process for Mexicans applying for US Visas to become easier

Because the collection of biometric information will take place at the ASC, applicants who are required to visit both the ASC and the consular section should spend less time at the consular section than they have had to in the past.
It is my understanding that the biometric enrollment part of the application process was simply bolted onto the older process and required a separate fee.

Many on both sides of the border hope the attempt to streamline the process is successful.

Worldwide biometric revenue expected to treble to $14bn by 2015

Governments and institutions alike are increasingly turning to technology (Zawya.com [UAE])
"The growth in the biometric security market is remarkable," said Ahmed Pauwels, Chief Executive Officer of Epoc Messe Frankfurt GmbH, organisers of the Middle East's premier safety and security trade fair and conference, Intersec. "Industry figures estimate that worldwide revenues from the biometric market will treble to $14bn (Dhs51.4bn) by 2015," he added.

Friday, December 3, 2010

Biometrics hits the workplace

Access control at enterprise level has changed dramatically (ITWeb.co.za)
Coetzee also points out that for most companies, payroll is the single largest expense, so this is where the greatest protection is required against threats of fraud, corruption and theft.
As far as biometrics are concerned, 2010 has been the year of access control for time-and-attendance. This thoughtful article provides a glimpse into how enterprising firms can harness the tools at hand to capture information about their business that can provide a bottom-line competitive advantage.

This article also recalls some of the issues discussed in this post.

Thursday, December 2, 2010

Kiosks let travelers skip long passport control lines

Program allows skipping long passport control lines (Houston Chronicle)
Approved members can bypass long immigration and customs lines, scan their own passports at airport kiosks and continue on their way in less than a minute.
We did an unscientific test of this system yesterday.

Returning from a foreign country using the Atlanta airport, Barry, having previously enrolled in the Global Entry system used the kiosk while I used the standard human based passport check.

Lines for both systems were very short.

As it was his first live interaction with the system, it took Barry more than a minute to get through the process. Even with very short lines (perhaps 5 people in front of me), it took me several minutes longer to present my passport and gain entry into the United States.

There were perhaps ten humans checking U.S. passports. There were approximately 5 machines serving Global Entry members.


Thoughts:
Lines for the human passport check are usually much longer. There were a limited number of kiosks.

Scaling up the number of kiosks is easier than scaling up the number of human agents in terms of both implementation time (training vs. installation) and infrastructure adjustments (constructing a cubicle vs. installing an ATM-like machine).

Tuesday, November 30, 2010

Ontario Lottery and Gaming Corporation To Use Facial Scans to Aid Problem Gamblers

OnlineCasinosPro.com
Across Ontario, racetracks and casinos will soon be implementing new facial recognition technology to help problem gamblers stay out of gambling venues. By the end of 2011, all 27 of Ontario’s casinos will be fitted with this new technology.
More biometrics ROI.

Many jurisdictions where gambling has been legalized have required casinos to maintain a list of problem gamblers. People may opt to place themselves on that list. Casinos are required to refuse service to those on the list.

Unfortunately, there is a high potential for abuse within this system. Needless to say, taking a casino's money is never termed a gambling problem by the winner. A registered problem gambler may enter a casino to play the odds. If she wins, she leaves with her winnings. If she loses, the casino shouldn't have served her.

While imperfect, facial recognition technology can detect people enrolled in the problem gambler registry and prevent some of the losses due to the abuse of the problem gambler rolls.

[Ohio] Middle school to get finger scanners

Modern technology utilized at the high school will soon be installed at the middle school as well (TallmadgeExpress.com)
"So far, parents and students have embraced it," Wood said. "It's gone very, very well."
...
DeCapua said the scanners are helpful to faculty and students because the lunch lines move much quicker without tangible dollars and cents exchanging hands, which also promotes sanitation.
It's about people and ROI.

I've read in other places that cafeteria staff and other school officials can spend up to three hours per day addressing the needs of students who have forgotten their paper lunch coupons.

Friday, November 26, 2010

College lecturers say no to thumb rule

They complain that biometrics system of attendance does not allow flexible timings (BangaloreMirror.com)
When BU officials insisted, a senior lecturer said, “Why is BU insisting on thumb impressions? Don’t you people have any faith in us? We are not slaves and, hence, we are not ready for this.”
This has far more to do with organizational policy than biometrics per se, but it's a slow news day in the biometrics world.

Thursday, November 25, 2010

Ports, Security and Biometrics

U.S. maritime port security being neglected (PressOfAtlanticCity.com)
Aaron Ellis, spokesman for the American Association of Port Authorities, said TWIC cards are “far superior” to what was used in the past and are issued after significant background checks and are “very difficult” to duplicate and forge.

However, TWIC cards are little more than “flash cards” without the electronic readers, he said. Some port authorities are taking the financial risk of developing their own electronic card-reading system to improve security, he said.
With all the attention being paid to airline security, it's easy to overlook seaport infrastructure.

This article broaches two issues that are of particular interest to suppliers and consumers of biometric identity management systems: regulatory risk and interoperability.

Ports are fortunate that they haven't had a one-size-fits-all solution forced upon them, because the political process has a poor track record at devising systems that appropriately balance security and commercial interests (see the TSA's airport security regulations). The TWIC (Transportation Worker Identification Credential) system regulates the ID card to be used at ports and the process for obtaining one but it does not mandate how the individual ports use it. This offers ports the opportunity to adopt the security protocols that best match their individual circumstances.

This, however, puts the onus on ports to adopt the security protocols that best match their individual circumstances which presents challenges of its own.

As with many organizations, Ports can recognize a significant ROI (Return on Investment) by integrating biometric identity management techniques into their business processes, but calculating ROI involves weighing the cost and benefits of a decision over time.

If a port does everything perfectly, implementing a biometric identity management system that accomplishes the task of getting people into the facilities with dramatically reduced time and labor costs, risks remain that will alter the ROI calculation. Regulations might be enacted that impose other costs (regulatory risk), or other ports may adopt a different system that is incompatible with the system they use (interoperability risk).

Regulatory risk and interoperability risk are real, but technologies do exist that can help firms ameliorate these risks. SecurLinx has developed technology (middleware) that address both of these risks. Our middleware enables scalable and modular biometric deployments that facilitate integration with all major biometric service providers.

With SecurLinx technology, a firm that invests in a biometric identity management system and then opts to integrate that system with another system can do so cheaply and effectively. Moreover an organization that finds success with one type of biometric system (ex. fingerprint time-and-attendance) can integrate another type of system (ex. face-recognition) without starting from scratch or being forced to run two parallel and incompatible IT systems.

Biometrics should deliver maximum ROI. We can help.

Wednesday, November 24, 2010

Report finds biometrics ‘fallible’, but SIA disagrees

In the security world, biometrics are accepted as a viable solution for authorization and identification (SecuritySystemsNews.com)
This is not new information, said Mark Visbal, director of research and technology for Security Industry Association. “There’s nothing that’s definite in security. There are always going to be problems and loopholes with any security system you use,” he said. That’s why it’s so critical for security professionals to maintain a layered approach to securing assets.
Related thoughts:
National Research Council: Biometrics 'Inherently Fallible'
Pushback on the National Research Council (NRC) Report

Tuesday, November 23, 2010

Thank You, DHS & TSA

Around here, we frequently ask the question: Compared to what?

Usually, we use this question to address the fact that many people expect biometric identification systems to be perfect when they don't hold anything else in the security realm to that standard.

Judging by the recent news surrounding the TSA's enhanced interrogation techniques, it makes sense to apply the same question to the degree to which biometrics invade privacy.

The Dept. of Homeland Security and the Transportation Safety Admin. have probably done more in the last two weeks to increase public acceptance of biometrics than anything we've seen before. A search of today's Bing News site using the terms "biometric airport" is extremely revealing.

Monday, November 22, 2010

More on Pilot ID's

FAA to require photos on pilot's licenses but not biometric identifiers (NextGov.com)
The Federal Aviation Administration has proposed that all pilot certificates include a photo of the licensee, but one lawmaker wants to know why the passport-size cards will not include biometric identification five years after Congress passed a law requiring such unique identifiers.
Rep. John Mica, (R-Fla) isn't the only one who will be curious as to why the FAA has so far refused to adopt biometric ID management techniques even though the Congress has mandated them and the pilots' unions are lobbying for them.

To be as fair as possible, the photo on an ID is a biometric even if a human rather than a computer is used to process it.

For additional information on the subject, please see this post.

Thursday, November 18, 2010

UPDATE: Pilot's Licenses don't have photos?

UPDATE: TSA, Pilots Weigh Biometric System for Airport Screening (NationalJournal.com)
Pilots who fly passenger and cargo planes want the U.S. government to implement a program under which their identities will be confirmed using biometrics so they can pass quickly through airport security checkpoints and avoid -- for the most part -- controversial screening procedures involving body scanners or pat-downs.
The recent controversy over airport screenings has had at least one positive effect. All of a sudden, pilots are embracing biometrics as an identity management technique that is far less intrusive into privacy and conducive to security than many alternatives.

--Original October 21, 2010 post follows--
Today, the only pilots pictured on FAA licenses are flight pioneers Wilbur and Orville Wright (MSNBC.com)
In an attempt to improve security, Congress told the Federal Aviation Administration in 2004 to come up with a pilot's license that included the pilot's photo and could contain biometric information like fingerprints or iris scans. Today, the only pilots pictured on FAA licenses are flight pioneers Wilbur and Orville Wright, and the licenses lack biometric data.

This is astounding, especially when read together with this, via Drudge: Pilot Refuses Full-Body Scan, Says TSA Doesn’t Make Travel Safer (NewYork.CBSLocal.com)

Then there's this from two days after 9/11: Police investigating theft of American Airlines uniforms, key card (CNN.com)

There's always a risk that changes in security measures will be resisted or skirted by those falling under the new rules. That's why it's always a good idea to consult with the people the new measures will affect when implementing or changing a security plan. These are the people that can make or break your efforts to achieve your security goals.

A common refrain around here is that security, biometrics and ID management are all about people.

The civilian air travel bureaucracy really has people problems everywhere they turn. Their customers/stakeholders don't like them and their employees don't like them, either. Skipping obvious, low tech solutions like photo ID's for pilots while instituting intrusive, annoying, expensive and time consuming solutions falling on everyone seems calculated to communicate the appearance of security over substantially increasing the safety and, hence, value proposition that government agencies offer their stakeholders and airlines offer their customers.

Wednesday, November 17, 2010

Montgomery recreation department moves ahead with finger vein scanners

Biometric technology to be piloted in three centers in January (Gazette.net)
The move is expected to save the county $50,000 annually in the materials cost of the plastic cards and printers, Riley said.
More positive return on investment (ROI) for our communities.

Tuesday, November 16, 2010

NYPD Commences Use Of Iris Scans Of Suspects

Department Spending $24,000 Per Unit; Will Have 21 Around City (Reuters.com via Drudge)
The NYPD says the images will be used to help avoid cases of mistaken identity. The process takes about five seconds. Every suspect will be scanned again using a handheld device shortly before they are arraigned to make sure the irises match.
The iris is establishing itself as the biometric of choice for identifying compliant subjects, especially in jails.