Nigeria: Voter roles subject to public scrutiny

Voter verification begins Feb. 14 (The Punch, Nigeria)

“In fact, with most (not all) of the data now reported by the states, we have by this morning registered 63,981,460 Nigerians for the coming elections.

“I wish to appeal to all Nigerians to also come out in their numbers for the verification that will take place from February 14 to 18.

“The list will be displayed in all polling units during the period for the public to register their claims and objections.

“This exercise did not take place in the immediate past and that partly explained the problems of the old voter register.

“This is therefore an opportunity for people to deal with irregular entries in the register.

Nigeria, Africa's most populous country, is going to great lengths to insure a transparent election process despite significant challenges.

But this part is odd.

“In fact, the commission became a biometric equipment experimental laboratory. On software, we also found many shortcomings.

“Millions of Naira was spent on licenses for software manufacturers who were able to hold the commission to ransom by encrypting data and asking for even more money to decrypt data.

“Consequently, we decided to avoid this type of software peonage by developing our own in-house registration software based on the open source principle.”

I'd be interested to hear more about this. There are some open source algorithms out there but an algorithm is not a system. Most countries prefer to buy the service rather than create one for themselves.

Countries with high corruption levels and at a high risk of electoral violence could be courting disaster if the technology is seen to be in the hands of one party.

The rise of biometrics

Why isn't IT in South Africa leveraging the proven security benefits of biometrics? (ITWeb.co.za)

Make the investment, cut the losses. Simple as that.

Here's a straightforward case for corporate adoption of biometric identity management systems.

UK biometric ID cards go up in flames

First step to tackle 'database state'? (The Independent)

Five hundred hard-disk drives and 100 back-up tapes, containing the personal details of early ID card applicants, have already been electronicaly wiped. They will be taken to an Essex industrial estate to be shredded and the remains burned in a factory furnace in Birmingham.

The ashes will then be collected and transported in a diplomatic pouch to the Baikonur Cosmodrome in Kazakhstan where they will be loaded onto a Soyuz rocket and launched into the sun.

Man Hubert of ID?NO! will accompany the ashes on their three month trip to the sun just to make sure that no one gets to them before they complete their journey. He has kept his plans for the ashes once he arrives there secret.

Mr. Hubert, said: "I have no doubt that there are those in Whitehall who will not rest until these ashes are reassembled."

OK, I made up all of that italicized text after the block quote.

It is possible, even relatively straightforward and inexpensive to destroy the data completely using only software. Or, you can go straight to the burning. The number, the complexity, and the geographic dispersion of the steps outlined in the linked article constitutes security theater. And as long as we're in the theater business, nothing makes for better spectacle than rockets and solar explosions.

As for the ID system itself, most British observers thought the government was going about the project all wrong. We, of course, followed the saga with interest as the list of posts below indicates.

The most important of these is Goodbye ID cards - is it time to say hello to identity banks? because it links to a 2008 report by Sir James Crosby, then at HM Treasury, entitled Challenges and Opportunities in Identity Assurance (.pdf). The report is worth considerable attention.

Other posts on this subject:
May 14, 2010: UK to Kill Off National ID Card Program
May 21, 2010: Goodbye ID cards - is it time to say hello to identity banks?
Sept. 21, 2010: Citizen or subject: The politics of personal identity
Dec. 21, 2010: UK: ID Cards Scrapped by Coalition Government
Jan. 20, 2011: UK: Destruction of ID card data to cost £400,000

Failure rate for biometric pokies?

Use of biometrics to reduce problem gambling would suffer a 20 to 30 per cent failure rate, says smart card salesman (ZDNet.com.au)

"About 12 per cent of the population do not have a fingerprint. They are too old or they have been engaged in manual work and it may have worn off. There is no wall on the end of their thumb. Biometrics are going to be a much more expensive solution," he told the committee.

"This is mainly because, if you have to maintain 197,000 biometric readers ... it is going to be extraordinarily expensive. You are looking at something like five times the cost for biometrics."

Donald said there would have to be many exceptions made to the system if biometrics were used.

This article invites a question we often ask: Compared to what? We'll be charitable and take the percentages in the article as given. How many problem gamblers are being detected in the absence of a system? If the answer is less than 70%, what is the improvement from current levels of detection to a 70% detection rate worth? What does the proposed system cost? In short, does the proposed system offer a positive return on investment (ROI)?

Secondly, because of their accuracy, ease of use, low cost and strong history of delivering positive ROI, fingerprint biometrics are all the rage. But they are not the only game in town. Facial recognition may be the preferred modality in this application. One facial recognition system at the front door of the facility can eliminate the need to have a biometric reader at every machine. The same can be said for a fingerprint system, but face-rec systems are less intrusive and they address the problem, raised in the article (we're still being charitable), of the 12% of the population who can't use all fingerprint readers.

Third, why does anyone assume that vandalizing property in order to circumvent security measures is an indictment of the security measure? Someone who finds a way to break a slot machine to get the money out of it doesn't have a gambling problem, they have a stealing problem. Someone who damages property (breaks a fingerprint reader) in the misguided hope that the machine will enable an enrolled problem gambler to use the machine, has a vandalism problem. Granted, a gambling addiction could serve as one impetus for both behaviors, but preventing this type of behavior isn't what the problem gambler program is built to address. These systems are meant to allow problem gamblers to put themselves on a "do not serve" list while reducing the abuse of the program by non-problem gamblers who simply wish to indemnify themselves against gambling losses.

The amusement and biometric sensor manufacturers both take the durability and physical security of the devices they manufacture seriously but they aren't, and never will be, invincible.

India Begins Census Count

India has begun the mammoth task of conducting a count of its billion plus population (Voice of America)

More than two and a half million census workers branched out throughout the vast nation on Wednesday to document details of all Indians.

The three-week phase of the census is the most challenging as it involves a physical count of the country’s citizens. The mammoth exercise will be completed by the end of the month.

Security Industry Association says E-Verify needs Biometrics

Federal Government Report on E-Verify Shows Need for Biometrics, SIA Says (Yahoo News & PRWeb)

E-Verify is used by employers to determine if individuals are legal residents of the United States and, thus, eligible to work in this country. The program, however, suffers from significant error rates, and SIA in November released a set of recommendations for adding a biometric component to the program that could “reduce these error rates, increase privacy and enhance identity assurance.”

Cogent founder makes list of top tech philanthropists

Which tech billionaires donated the most to charities in 2010? (NetworkWorld.com)

Also representing the tech industry is Ming Hsieh, who donated $50 million to the University of Southern California to help fund a new institute for nanomedicine research. Hsieh (No. 19) founded AMAX Information Technologies, a high performance computing and storage vendor in Fremont, Calif., and Cogent Systems, a biometric security vendor in Pasadena.

Mr. Hsieh has also donated generously to West Virginia University.

Biometrics employed to crack down on proxy test takers

Students impressed (Hindu.com)

Sharmitha Sreshta, a doctor from Tamil Nadu, said everybody was excited to see the technology being employed. “While this means that fraudsters cannot trivialise this examination for us, it also means that the authorities are moving towards tightening the process. The existing system allows for a lot of fraud.”

Fingerprint biometrics are becoming ubiquitous in testing for graduate school admissions.

Stockholders of L-1 approve Safran SA merger

Stockholders OK sale of L-1 units to French group (Washington Monthly)

Following approval by the Committee on Foreign Investment in the United States, completion of the BAE sale and other customary conditions, Safran will purchase L-1’s Secure Credentialing Solutions, Biometric, and Enterprise Access Solutions and Enrollment Services units.

Iris Biometrics in the news

Iris recognition may move from movies into the real world (Pittsbutgh Post-Gazette)

Biometric technology such as iris recognition uses physical characteristics -- including facial shape, fingerprints, retinal photos and iris patterns -- to confirm identities. The technology works by photographing the iris, the colored membrane that controls how much light reaches the retina, and converting the picture into a computer code. The code is compared with one in a database.

In 1936, a St. Paul, Minn., ophthalmologist named Frank Burch proposed identifying people using the furrows, ridges, rings and freckling that make every iris unique. But it wasn't until 1987 that eye doctors Leonard Flom and Aran Safir were granted a patent for the concept of the identification technology.

A Company Seeks Ubiquitous Iris Scans On PCs, ATMs and Cell Phones (PopSci.com)

Like fingerprints, every person’s irises are different; not even both irises of the same person are the same. Fingerprints can take a while to verify through state and national databases, but an iris scan, which uses more data points for biometric identification, can come up with a match within a few seconds. Those are the pros, if you’re a security expert. But they’re minuses if your concern is privacy. Fingerprints, by their very nature, are an active identification metric; you have to touch something to imprint them. But iris scans are passive — you just walk past a security camera (or, as in “Minority Report,” billboards in the mall) and the person controlling the scanner can spot your identity within seconds.

The Pittsburgh Post Gazette article is straightforward and informative.

The PopSci article reads like a press release masquerading as news.

The facts the PopSci article presents seem a bit off, too.

It has always been the case that iris matching is slower than fingerprint matching. That's why it's popular in jails, where the customers aren't in much of a hurry. In places where throughput is a primary concern, such as school lunch counters, fingerprint biometrics have been more popular.

The author says that the iris match is faster because it uses more data points. That's not really the way computers work. Other things being equal, processing more data points takes more time.

Iris matching technology is highly accurate. More accurate, even, than fingerprints. In a side by side comparison between iris and finger with participating individuals where speed is not a factor, iris wins hands down.

There are many applications where iris is the preferred modality for an identity management application. But like we said yesterday, there is no magic bullet in identity management.

Iris at a distance, as discussed in the article, moves the goalposts and offers intriguing possibilities. But, especially in this industry, it is important to avoid over-promising and under-delivering.

For some background on how the company referenced in the article sees the future and their current capabilities, see the Fast Company article from last August: Iris Scanners Create the Most Secure City in the World.

Australian Pub biometrics, Part II. Why not Face-Rec?

No ad hoc biometrics sharing: privacy chief (ZDNet.com.au)

Earlier post here.

Australian Privacy Commissioner Timothy Pilgrim has warned pubs and clubs collecting biometric information from their patrons not to "automatically" share that information with other clubs unless they have notified their patrons.

This Makes sense. The terms of service between bar owners and their customers should be transparent and understood by all parties, just as they are when users input personal information into web sites.

If the owner can reduce costs and better serve customers by making the environment safer by identifying and discouraging the few patrons that spoil the experience for everyone else, the owner should be free to take measures in furtherance of that goal. If biometrics are the method of accomplishing this goal with the greatest efficacy (ROI), then so be it.

It is reasonable to infer that the bar owners who have adopted biometric systems believe that a hard-drinking, trouble-making bully drives away customers, raises expenses and leaves the owner liable for damages to innocent people and their property while the biometric check simply drives away some customers and leads others to feel safer.

I might, however, suggest that there is a solution that could accomplish the goal while reducing many of the privacy concerns raised by concerned stakeholders: Facial Recognition.

Fingerprints are cheap and effective (huge ROI) which is why they are being adopted at such a high rate. But for reasons more cultural than scientific, they are sometimes perceived as invasive of privacy.

In an era where everyone has a video camera in their pocket and business establishments have had cameras (and signs alerting the customers as to their presence) installed for twenty-five years or more, installing a video camera at the front door is simply not that controversial. There is also no well established expectation of privacy from being photographed in a public place. The terms of use for video and photos are already implicitly understood.

The systems are a bit more expensive and they are a bit less accurate than the near-perfect results offered by fingerprint systems but their deployment is less controversial and there is nothing preventing the sharing of a photograph among private parties.

There is no magic bullet in biometric identity management. Different modalities are suited to different applications depending upon the physical and social environment in which they are deployed. A good cost-benefit analysis incorporating financial and social considerations helps determine the preferred identity management system.

SecurLinx offers a product, FaceTrac, developed for the specific concern the pub owners are attempting to address.

For additional information about FaceTrac: mail@securlinx.com
For blog comments: blog@securlinx.com

Madison County Alabama Commission finds way to cut spending

Looking in to wasteful spending by Madison County employees (WAFF Huntsville, AL)

Every few weeks department heads and county commissioners receive a payroll log. All they have to do is scan through and see where all the overtime money is going.

"We've got people at some point shows they are working 14 hours a day for 14 days straight. Again I question that," said Madison County Commissioner Dale Strong.

Commissioner Strong has strong feelings about what he calls wasteful spending, but he isn't just complaining about it. He has a solution to the county's overtime problem.

Biometric identity management systems can help with state, county and local budgets constrained by current economic circumstances.

Because biometrics yield a positive return on investment, they provide a way for dedicated public servants like those mentioned in the article to do more with less.

Indian PM calls for improving rural employment program

Improving the delivery system so that its benefits reach the deserving (NewKerala.com)

He said the government was preparing a biometric database for MGNREGA labourers which would be helpful in making payments to them and removing any delays. He hoped it would reduce any delays in payments, discrimination and fake master-rolls.

Fraud is perhaps the greatest challenge to governmental efforts to help the world's poor. If the broader society perceives that a program designed to lift the vulnerable serves primarily as an opportunity for graft and corruption, it will not support the program.

Biometric identity management systems can help build confidence that resources devoted to a worthy cause are not contributing to the problems they are meant to address.

Nigerian state Identifies 2,000 Ghost Workers

Nigerian state, Niger, Identifies 2,000 Ghost Workers (AllAfrica.com)

The Niger State Head of Service, Alhaji Ibrahim Matene, has said that investigation has revealed that the state has over 2,000 ghost workers, adding that an additional 4,700 civil servants were being screened over e-payment irregularities.

The implementation of biometric identity management systems are a cost effective first step towards reducing corruption and increasing trust in vital national institutions.

Other posts dealing with ghost workers

Jails record biometric data of inmates and visitors

Jails now record biometric data of inmates and visitors (Times of India)

CHENNAI: Prison officials have started collecting and storing the fingerprints and photographs of inmates as well as visitors to Puzhal and Tiruchi prisons.

This is increasingly common around the world.

Having data on prisoners makes complete sense. Too frequently, prisons release the wrong inmate.

Gathering and analyzing data on prisoner visits can aid investigation into organized crime networks.

Face-Rec, Standards & ROI

Biometrics on the cusp (ThirdFactor.com)
Richard Lazarick, chief scientist at CSC’s Global Security Solutions Identity Labs: “The barrier now is, ‘Can I convince myself that I’m going to get a return on investment?’.”

Video from the 2010 Biometrics Consortium conference at the link.

Australian pubs and clubs are using biometrics databases in efforts to curb violence

National biometric pub list use 'explodes' (ZDNet.com.au)

While patrons remain divided on the need to surrender biometric data to buy a beer, the system appears to have led to a halt in violence in pubs and clubs.

The Woodport Inn on the NSW Central Coast has obliterated the incidents of violence which had once troubled its night club.

"[The] violent people here are gone, just gone," said one bar manager. "They are scared of it. They know they will be caught".

The venue is one of several in the area that use NightKey fingerprint scanners, including the Central Coast Hotel and Woy Woy Leagues Club, but it does not share ban lists.

A manager from a Sydney CBD bar who requested anonymity said that the ban database had cut violence, adding that the venue may soon be able to reduce its security headcount. The machines are not classified by NSW Police as security equipment and can be operated by a staff member.

Alcohol-related incidences have dropped by up to 80 per cent in some venues that use the scanners, according to Perrett. He said the data is a smoking gun that police can use to convict violent offenders.

This article touches upon many of the issues we regularly address here: ROI, public safety & Privacy vs. Anonymity to name a few.

Fingerprint biometric wallets back in the news

Dunhill's Biometric Wallet Only Opens for You (Tom'sGuide.com)

This is Dunhill’s Biometric wallet. Featuring a biometric card that detects the owner’s fingerprint, this carbon fiber wallet will only open for the person who payed the roughly $800 to buy it in the first place. Sure, a thief could probably get it open if they really, really wanted to, but this might at least give you some extra time to call the bank and cancel your cards before the robber has a chance to hit Amazon.

Buy one here for $825. (dunhill.com)

Mike00, in the Tom's Guide comments, makes a good point. If it has a fingerprint reader and blue tooth, what happens when it runs out of batteries?

The Miami Herald deemed a similar product its worst performing gadget of 2010. Perhaps Dunhill has addressed some of the problems with the TungstenW model. Close examination of the images from Dunhill's site and the TungstenW model, however, lead one to believe that the Dunhill model is the TungstenW.

US eyeing a global 'trusted shipper' program

The program would create a list of pre-vetted cargo companies (MSNBC.com)

The "trusted shipper" program is part of a wider effort to boost the safety of air cargo, whose vulnerability was exposed when militants in Yemen hid two powerful bombs inside printers and shipped them aboard cargo planes to addresses in Chicago late last year.

Access control critical for security

Access control critical for security, and other things (ITWeb S. Africa)

Experts in the field of biometric-based security systems believe that knowing the movements of people within the company or business is, especially from a security perspective, of paramount importance to decision makers.

Understanding how employees act within and move about an organizations has value beyond the security function.

Nigeria having a rough go at biometric voter system

Nigerian Voter Registration Off to Bumpy Start (AllAfrica.com)
The above link leads to a page at AllAfrica.com that aggregates eighteen articles chronicling the problems Nigeria is having in implementing a fingerprint based voter ID system.

Headlines include:
Election Commission Chief in Eye of Storm (Jan. 23)
Voter Registration Hitches Are National Embarrassment (Jan. 24)
Fake DDC Machines Slow Voter Registration Exercise in Edo (Jan. 21)
Voter Registration - False Start? (Jan. 20)

To this list may be added an article from yesterday:
Voter Registration - DDC Machines Too Fake And Cheap

Biometric ID management systems can help liberate the electoral process from corruption. If, however, the implementation process itself is plagued with corruption many of the benefits of the implementation will be sacrificed and the costs will inevitably go up.

See also:
Big-Time fraud in NYC time-and-attendance initiative

Taiwan to begin automated border control system trial

Airports to follow (ChinaPost.com.tw)

Taiwan will be launching a trial of an automated border control system at offshore Kinmen island after the Chinese New Year holidays in order to simplify and speed up border controls, local officials announced yesterday.

The Ministry of Foreign Affairs (MOFA) and the National Immigration Agency (NIA) yesterday jointly announced that a total of seven sets of the newly-introduced system will be first tested at the Shuitou Port (水頭港) in Kinmen, one of the entry-points for passengers making use of the Mini Three links.

With trade volume between Fujian and Taiwan surging by 48.7% in 2010, the ROI on a system like this could be significant. (WhatsOnXiamen.com)

Calls for Zimbabwe to adopt Biometric voters’ registration

Political commentators and Civil Society Organizations back MDC-T’s call for Zimbabwe to adopt a new voters’ roll for forthcoming elections (The Zimbabwean via SW Radio Africa)

Tobaiwa Mudede is the Registrar-General in the inclusive government and has been in that position since the early 1980’s. He has been criticized by international human rights organizations for falsifying and manipulating the voters roll to ensure Robert Mugabe’s ‘electoral victories’ against the MDC.

It’s been reported that a South African based company has provided quotation of $20 million for biometric voter registration for the whole of Zimbabwe.

The latest MDC demands come in the wake of revelations by independent election watchdog, the Zimbabwe Election Support Network, that the voters’ roll is full of dead people and includes names of children, some as young as four years.

In developing countries, biometric identity management systems are frequently seen as a means to reign in corrupt and abusive governments.

TechConnectWV announces commercialization awards program

Encourages biometric and identity management job creation in WV (HuntingtonNews.net)

“However, there is little native biometric manufacturing activity and even less identity related intellectual property in the state,” she said. “TechConnectWV’s commercialization awards program will attempt to identify and fund promising ideas that can stimulate industry development and job growth in West Virginia.”
...
TechConnectWV leaders expect to publish and disseminate the rules of submission for the commercialization awards by the end of January. The TechConnectWV program is funded by grants from the Claude Worthington Benedum Foundation.

Access control - technology, people on the move

Access control and regulation of resources are cornerstones of modern commercial security strategies (PRLog.org)

Part of the reason for this is because of the practical value that biometric technology offers and the strength it has in comparison with alternatives such as cards, PINs and/or passwords, says Coetzee.

“The monitoring of people's movements and their access to areas has become increasingly sophisticated in the past few years through the use of fingerprint biometric identification systems. Unfortunately, the traditional alternatives are just not secure enough methods of access control as they can be lost, stolen or forgotten. With a competent, robust biometric system based on fingerprints, you simply can't cheat the system.”

They're better solutions at lower cost.

Casino face scanners make a lot of sense

Steven Gallagher: The Daily Observer (Pembroke, Ontario)

At first glance, it seems like a less-than-appealing idea: Walk into a government-run facility and have your face digitally scanned by a camera.

It smacks of "Big Brother is watching you."

However, a plan by the Ontario Lottery and Gaming Corp. to install facial recognition scanners at the province's 27 gaming facilities, including the two casinos in Niagara Falls and the slots at the Fort Erie Race Track, makes sense.

Switzerland New biometric residence permits ready

Switzerland: New biometric residence permits ready January 24 (GenevaLunch.com)

Switzerland Monday 24 January begins issuing biometric residence permits to foreigners who are from outside the European Union or Efta (European Free Trade Association). Note for holders of residence permits: existing permits remain valid until the expiry date listed on them.

From the Swiss Federal Office for Migration:

Link to brochure pdf

It contains two digital fingerprints and a facial image. The data are stored for five years and may only be used for issuing a new identity document. The biometric identity document for foreign nationals fulfils strict international requirements. The data are protected by a secure access control and an electronic key. The fingerprints are especially protected. The chip does not allow a person to be located or monitored.

Air Travel: Biometric information to focus scrutiny on a small number of people

Technology will eliminate intrusive airport security searches, says IATA boss (Prince Edward Island Guardian)

Airline passengers are a couple of years away from passing through security without intrusive scans and searches that cause delays and take the joy out of flying, the head of the International Air Transport Association said Thursday.

IATA chief executive Giovanni Bisignani, a former head of Italy’s Alitalia airline, said that his vision is for “hassle-free tunnels of technology” that all passengers would pass through.

Finger prints and other biometric information from the travellers, combined with intelligence from government and airline sources, would be used to focus scrutiny on a small number of people considered to be a risk.

findBIOMETRICS Year in Review 2010

findBIOMETRICS Publishes Biometric Industry Year in Review with Interviews from 63 International Experts on 2010 Performance and 2011 Potential (findBIOMETRICS.com)

Peter O'Neill does great work at findBIOMETRICS.
The report contains answers to the most pressing questions in the biometrics industry from the people closest to the action.

Gloucestershire nursery leader shows how it's done

Vikkie's finger is on the security pulse (ThisIsGloucestershire.co.uk)

The managing director of Mary P's Nursery in Ashchurch has installed a fingerprint recognition system at its entrance.

It is a move aimed at making sure members of the public using the railway station next door can't wander in to the nursery.

Vikkie said that in the past she had found that some commuters had entered her premises to use the toilets.

This short-but-sweet article has it all: increased safety at lower cost delivering additional value to customers.

Around there, that's spelled R-O-I.

UK: Destruction of ID card data to cost £400,000

Last May the ill-fated project was shelved (ComputerWeekly.com)

The destruction of the National Identity Register (NIR) and the personal data held on the controversial ID card system will cost about £400,000.

Previous post on the topic here.

Could Khalid Shaikh Mohammed's arm veins implicate him in the murder of Daniel Pearl?

Qaeda Killer’s Veins Implicate Him In Journo’s Murder (Wired.com)

“By extracting the information of the vascular structure of a hand or finger and converting it into a mathematical quantity,” according to Nomani’s report, “this technology creates a template for each structure and then compares the template of a known individual to a suspect.” After sending the data to KSM’s CIA captors, Dick heard back: “The photo you sent me and the hand of our friend inside the cage seem identical to me.”

Any durable fact regarding an individual's body can be used as a biometric identifier, provided that fact can be measured in sufficient detail.

What determines which body facts are used as biometric identifiers are used in large scale deployments is a combination of convenience (elbows are out), variance across the population (the more the better), variance over time in the same individual (the less the better).

After that, it's ROI (return on investment). Now, there probably won't be significant ROI for developing automated arm vein matching algorithms for large scale identity management deployments in the foreseeable future, but the challenge isn't so much technical as it is economic. If the identification transaction is "worth it" and you have the two data points (unknown arm vein and known arm vein) and the criteria above are met, the answer is out there. The question becomes: What is the answer worth? In this case, the answer: Quite a lot.

Biometrics News Roundup - January 19, 2011

Gambia: More Than 169,000 Acquire Biometric ID Card (AllAfrica.com)

India: ID to serve as proof for telecom connections (TMCNet.com)

Maryland: Finger vein scanner pilot program launches at Montgomery Co. rec centers (Gazette.net)

Voice Recognition Market to Grow 8.8% Annually Through 2015 (MSNBC.com)

Fingerprints Go the Distance

Scanning prints at two meters could mean safer security checks (TechnologyReview.com)

Over the years, fingerprinting has evolved from an inky mess to pressing fingers on sensor screens to even a few touch-free systems that work at a short distance. Now a company has developed a prototype of a device that can scan fingerprints from up to two meters away, an approach that could prove especially useful at security checkpoints in places like Iraq and Afghanistan.

Scotland: Making a meal of biometric 'threat'

I missed this when it was published on January 3.
Making a meal of biometric 'threat' (LesleyRiddoch.com)
The entire article is available at (News.Scorsman.com -- reg. req.)

Brechin High School is about to celebrate a decade of fingerprint recognition. The kit was introduced to the school’s library in 2001 as part of a new digital administration system. Borrowing by boys increased and lost cards were no longer a time-consuming problem for staff. So in 2007 the fingerprint kit was installed in canteens across the council’s eight secondary schools. Brechin High has had no problems, pupils seem to like it and last week’s publicity prompted only one local opponent into print.

People & ROI.

UPDATE:
Earlier post with thoughts on biometrics in Scottish schools here.

Secure Communities helps remove 461 previously convicted aliens from a single county in one year

Thursday marks the first year of Sacramento’s participation in the U.S. Immigration and Customs Enforcement’s (ICE) Secure Communities program (PRWeb via Yahoo)

Of the 461 convicted criminal aliens removed from Sacramento County in the last year, 192 are considered Level 1 offenders, which includes those convicted of serious or violent crimes, such as murder, sexual assault and robbery. Another 126 are Level 2 offenders, which includes individuals with convictions for offenses such as arson, burglary and property crimes. As part of the Secure Communities strategy, ICE is prioritizing its enforcement efforts to ensure that individuals who pose the greatest threat to public safety are removed first.

Regardless of the offenses for which individuals are initially booked, the Secure Communities screening may reveal more serious criminal histories. For example, the fingerprint check of a man who used an alias following his arrest in September by Sacramento police for carrying an open container of alcohol in public, revealed he had multiple prior convictions for drug trafficking as well as a conviction for assault with a firearm and had been previously deported. ICE presented the individual, Jorge Vega-Reyes, to the U.S. Attorney's Office for prosecution for felony re-entry after deportation. Vega was convicted in November and is currently serving a 27-month prison sentence, following which he will be deported to Mexico.

Today is National Amber Alert Awareness Day

Jan. 13 marks National Amber Alert Awareness Day (Lake County News)

California joins other states nationwide in recognizing Jan. 13 as National AMBER Alert Awareness Day, a day to acknowledge the collaborative efforts and successes of the AMBER Alert program to assist in the recovery of abducted children.

This year marks the 15th anniversary of the abduction of Amber Hagerman and the program that was named in her memory.

Massachusetts joins Secure Communities

Gov. Patrick signs on to Biometric data sharing program (SomervilleNews.com)

“[The Department of Homeland Security] is implementing Secure Communities with or without the commonwealth,” said Harris. “So we elected to sign the memorandum of agreement with Immigration and Customs Enforcement so we can participate in how when and where it’s rolled out in the commonwealth.”

The Secure Communities program, created by the Federal Department of Homeland Security, would use biometric data taken from fingerprints of those arrested and cross-reference them with Immigrant and Customs Enforcement databases in an effort to identify and deport illegal immigrants.

Other posts on the topic here.

Canada-US security perimeter a step towards more border efficiency

Canadian and American governments are expected to jointly announce a new deal on border security (TheChronicleHerald.ca)

Increased security procedures implemented since 9-11 have served only to thicken the Canada-U.S. border, increase the costs of imports and exports, and generally make life more difficult for anyone whose business relies on the flow of goods or people between our two countries.

In 2010, 75 per cent of all Canadian merchandise exports were expected to go to the United States with more than 70 per cent of these shipments being made by truck crossings. An even larger share of merchandise imports were expected to arrive by truck. Delays at the border due to congestion have been a problem for many years. But despite new trusted-traveller programs, the added security checks after 9-11 have created a de facto barrier to trade.

Democratic governments have certain obligations that they simply cannot shirk. Among these is border security. Given that governments have a duty to secure their mutual borders, it is to be desired that they do this in an efficient and cost effective way while recognizing and promoting the interests of their citizens.

It seems clear that the emerging agreement between the US and Canada attempts to create this balance. Time will tell if it actually succeeds.

Biometric Stocks in the news

Three Small-Cap Tech Stocks Poised to Benefit From Mobile Commerce (SeekingAlpha.com)
Steven Bulwa (who discloses that he owns shares in Authentec: AUTH), draws attention the biometrics in the context of mobile transaction identity assurance.

If you're only interested in the part of the article dealing with biometrics, scroll down to the last section. It's headed Securing the Transaction.

Another publicly trading biometrics pure play that has been in the news is BIO-key (OTCBB:BKYI)
See: BIO-key Takes Steps to Improve Its Balance Sheet (Finance.Yahoo.com)



Disclosure: the author holds no positions in either of the securities linked in this post.

Nothing in this post should be construed as financial advice or a recommendation either to own or to avoid owning either linked security.

Face-Rec helps gambling addicts, reduces fraud

Facial recognition a system problem gamblers can’t beat? (Toronto Star)

An unfortunate fact of life is that every time we institute a new program designed to help the truly afflicted, fraudsters come out of the woodwork to exploit the program.

Problem gamblers' registries are humane tools designed to minimize the social cost of gambling by allowing problem gamblers to exclude themselves from facilities where gambling takes place.

If a self-excluded gambler is served by a casino, any losses are unenforceable and the money must be returned to the person who should not have been served.

This created an irresistible opportunity for some to commit fraud. Simply enroll in the problem gambler database and if you can sneak into a casino, you can't lose. If you win, you leave; if you lose, you get your money back.

Enter Face-Rec.

Problem gamblers beware. The Ontario Lottery and Gaming Corp. — which critics say hasn't done enough to keep you out — plans to be up to the challenge this spring.

OLG is set to unveil a new facial recognition program at all 27 of its gambling facilities in Ontario. It's being praised as a high roller in the privacy protection game.

“It's the most privacy-protected system using biometric encryption in the world,” said Ann Cavoukian, Ontario's privacy commissioner, who approved the new system.

Those who think society should take a more active role in creating the structures to help the vulnerable should be open-minded about reducing the opportunities for fraud that social programs invite. High-tech identity management techniques are a piece of the puzzle and they can be implemented in ways that are consistent with individual privacy.


Earlier post on the subject here.

Maxwell-Gunter Air Force base rolls out new identification system

Text and Video at the link (Alabama Live)

The new system to identify the 50,000 patrons requiring base access was rolled out on Jan. 4, and in just three days, more than 1,180 people have gone to get new identification cards made at one of the six registering stations on base.

Staff Sgt. Joshua Allen, 42nd Security Forces Squadron NCO in charge of pass and registration, said that the registration process has been well received among those who access the base.

There are a lot of benefits to a system like this. The first and most obvious is increased security. Then, increased efficiency of security personnel can bring positive ROI. We talk about these things here all the time.

These types of identity management systems can also play a very important, even life-saving, role in an emergency. They accomplish this through better data capture and management. In a deployment like this, Security Forces Squadron Officers will have a much better idea of who is on base and where they are at any given moment.

If, for example, there's an explosion and fire in a given structure, and the information exists to determine exactly who was in the building, emergency workers can more quickly determine whether all people known to have been in the building are accounted for. This makes it both less likely that emergency workers will give up on possible survivors too early and less likely that they will spend too much time in extreme danger looking for people who aren't there.

This "better safety through better data" application of identity management technology applies in a lot of places but to military bases the application is obvious.

Most Security Measures Easy to Breach

Vulnerability Assessment Team at Argonne National Laboratory break into "foolproof" systems (NBCChicago.com)

"Yes, we almost never need a high-tech attack against a high-tech system. We actually defeated a biometric access control device with parts from a BIC pen."

That's because the "bad guys", as he likes to call them, aren't necessarily going to even try to outsmart gee-whiz gizmos. After all, why go after a retinal scanner when you can simply use a credit card to open the virtually unsecured door?

I'm curious about the BIC pen hack. It was mentioned at the Argonne National Laboratories site back in November. It seems like they're keeping mum for now. Given that they're a government agency and the linked story states the device in question was intended to protect nuclear material, that's probably a good thing.

Dr. Roger Johnson makes excellent points about the nature of security in both linked sources.

His main thesis seems to be: While there is no such thing as perfect security, most people aren't really even trying that hard.

It's hard to argue with that, and Dr. Johnson seems to appreciate the difference between rational security measures and "security theater".

There is a cost-benefit analysis that goes into security purchasing decisions. The closest thing to perfect security is what the Secret Service does for the President. That type of security is afforded to only a handful of people and few of us would choose that type of security for ourselves even if we could afford it.

The more efficient security solution for the vast majority of us is investment in reasonably efficient law enforcement, reasonably effective alarm systems, and the creation of a reasonable amount of uncertainty in the mind of the bad guy.

Security systems don't have to be perfect to be rational. This is why we spend so much time here discussing Return On Investment (ROI). If a given solution improves security and implies lower costs, it should be adopted.

Security theater is different. Giving the illusion of security in an insecure environment is worse than not having any security at all.

Drivers for change in the physical access control space

Cost, security and convenience (SecurityPark.co.uk)

...[T]the three core elements of the customer value equation - cost, security and convenience – continue to fuel drivers for change in the physical access control space as increased convenience, lower total cost of ownership and achieving higher levels of security continue to dictate market development.

Lower cost + better performance = Increased ROI

Sydney Airport expands biometrics use

SmartGates expanded, passengers through Customs in 38 seconds, Home Affairs minister claims (ComputerWorl.com.au)

“There’s strong demand for SmartGate from passengers and these new kiosks and gate help meet the increasing desire for non-invasive, efficient and tech savvy ways to travel," O'Connor claimed. “The system is easy to use and it is a safe and convenient alternative for clearing through passport control.”

It's about people, after all. Far from being a scary technology, customers demand smarter, more convenient identity management solutions.

Biometrics Industry in the Middle East

Changes in security legislation under the spotlight at Intersec Conference (AMEinfo.com)

There is a marked increase in demand for biometric access and egress control systems, video surveillance systems and perimeter control machinery in countries around the region, which is expected to impact the market for these products quite significantly.

The Intersec security conference has been going on since 1998.

Airports toy with the idea of tossing the TSA

The interaction between airport managers and the TSA (part rule-setting government agency and part airport service provider) makes for interesting reading. This morning's MSNBC.com article, "Airports toy with the idea of tossing the TSA" makes it clear that while the TSA doesn't quite have a security services monopoly, they do set the rules of the industry in which they compete.

"TSA issues the RFP [request for proposal] and selects and manages the contractor" that steps in, said Michael McCarron, director of community affairs at San Francisco International...

"TSA sets the security standards that must be followed and that includes the use of enhanced pat-downs and imaging technology, if installed at the airport," said TSA spokesperson Greg Soule...

"We aim to ensure that the highest level of security is balanced by the most passenger-friendly service possible," said Nancy Suey Castle, a spokesperson for Los Angeles World Airports. "Contracting private screeners could be a method to achieve this goal."

The linked article is well-sourced, accounting for many of those who have a hand in making the airport security sausage.

Biometrics help with Nigerian military pensions

Ex-Servicemen Assured of Prompt Pension Payment (AllAfrica.com)

Kwaji said that retired defence personnel receive their financial benefits without delay each month, adding that as soon the details of retired personnel are made available to the board by the branch of the military where he served, all the payment processes will be completed and the beneficiary gets paid from that month. He said the use of biometrics in pension's payment has eliminated fraud in the system and made payment faster.

A recent post on Nigeria's efforts to combat corruption and government waste through better identity management may be read here:
Nigerian police force discovers 20,000 ghost workers in its ranks

U.S. Trusted Traveler Program should be re-launched as a serious risk-based security program

Business Travel Coalition (BTC) reiterated its support for positive-profiling of airline passengers transiting the U.S. aviation system (TravelDailyNews.com)
The article suggests three changes that would allow the Trusted Traveler program to live up to its potential:

• Member Background Checks
• RT Vendor Technology Ownership
• Member Enrollment Model

The author makes several very interesting points in the first and third sections.

Nigerian police force discovers 20,000 ghost workers in its ranks

Bloated Police Wage Bill (AllAfrica.com)

To think that all of 20,000 non-existent workers have been receiving salaries amounting to N6 billion in just three months is dumbfounding. But it shows the extent of financial hemorrhage that the country is subjected to by criminals operating clandestinely in various government ministries.

Six billion Nigerian Naira = US$39,530,000 in three months.
Multiply by four for an annual estimate of US$158,120,000.
Total U.S. government foreign aid to Nigeria in 2008 = US$200,000,000 (pdf Census.gov).

By tightening up identity management measures in a single government bureaucracy, Nigeria was able to save itself money equivalent to 79% of the sum that the U.S. delivered to Nigeria in aid in 2008.

Besides the financial windfall, there is an increase in citizen confidence in institutions. It's difficult to ascertain which is more valuable.

The great Indian journey to unique identity

Aadhar has the potential to change the life of every Indian (CIOL.com)

After a person is allotted a UID number, his/her identity linked to biometrics would be established to uniquely identify the person. The UID number would authenticate the identity claim of a person and would have wide-ranging applications during the person's lifetime. And it would benefit everyone from students to farmers to corporate executives.

The UID will not just help the government track down individuals but will make life far easier for citizens as they will not have to submit so many documents each time they want to avail a new service – private or government.

Since India is a country where food distribution is a major concern, UID can be helpful in bringing transparency in public distribution system, too, and make sure the benefits of government schemes are reaching the people who deserve it.

If it is too difficult to do things the "right" way, rational people will do things a different way.

In many developing countries, this means taking electricity straight from the grid, neglecting to register a business and paying bribes rather than obtaining permits. These actions lead to a reduction in a society's ability to invest in the physical and social infrastructure that delivers first-world living standards.

According to the World Bank, among world economies, India ranks:
134th in "Ease of doing business"
165th in "Ease of starting a business"

Other measures at the link are equally distressing.

In order legitimately to start a business in India, one must negotiate 12 bureaucratic hurdles including the payment of 9 different fees. Many of these steps include the verification of the applicant's identity.

Better identity management techniques, are not by themselves sufficient to improve the daily lives of Indians at all levels of society, but they are necessary for legitimizing citizens and streamlining government.

Beyond the bureaucracy of starting a business, the UID project can bring efficiency and deliver real value to Indian society in the areas of Taxation, Banking, Voting, Welfare transfers, Education and Health care.

Not only does the UID project give government an increased ability to identify citizens, it gives citizens an increased ability to hold their government accountable. Implementation of biometric time and attendance systems within government bureaucracies can reduce or eliminate ghost workers and stem corruption.

These are the opportunities India seeks for itself.

There is much work to do and there will be resistance. Privacy advocates that don't know what it's like to wait in line for hours or be forced to pay a bribe for every mundane interaction with the government or public utility will take to the newspapers. Corrupt officials with armies of ghost workers that are diverting resources meant for the poor into offshore bank accounts will drag their feet. Welfare fraudsters collecting multiple payments under multiple identities will prove remarkably ingenious at milking the system. But India must, at least, try.

Many of the world's poor, not just in India, are depending upon them to get this right.

Secure Communities in the News

The U.S. Immigration and Customs Enforcement (ICE), has been implementing the Secure Communities strategy throughout the country for several years now.

The initiative seeks to prioritize the use of resources in order to place the highest priority on removing individuals who are both in the United States illegally and have committed violent crimes.

The system uses fingerprint biometric identity management technology to integrate local law enforcement officials with a central database of individuals who fit the criteria above. The search against the central database is only performed if the individual is arrested again.

As the system is being implemented across the U.S., local reaction varies dramatically as a survey of headlines shows.

UPDATE: These links are no longer useful
Bing News Searches:
"Secure Communities" Kansas
"Secure Communities" Maryland
"Secure Communities" Massachusetts

Top Ten Threats to Your Privacy

Privacy Alert: 10 Biggest Threats of 2010 (PCWorld.com)
It won't surprise regular readers that biometric technologies are absent from the list.

Other familiar names aren't so fortunate.

Biometrics and Development

Fingerprint Haiti Now: Biometrics in Haiti, One Year Later (Center for Global Development)

Cash transfer programs have become commonplace in post-disaster recovery for rebuilding and re-capitalizing households and firms. Such programs provide direct aid without the bureaucratic delays and transparency concerns of other methods. They also create demand to jump-start the economy and put the power of recovery in the hands of the people– giving them the resources to pull themselves out of poverty and towards reconstruction and recovery. Leakage is always a major concern; donors need to ensure individuals only collect once and that funds are distributed as intended. A secure identity system could be used to prevent multiple payments, “ghost” recipients, and other forms of leakage.

It is extremely heartening to see an organization as respected as the Center for Global Development recognize the contributions identity management technology can make toward building a more just, prosperous and equitable society.

Other posts dealing with biometrics, fraud and social safety nets can be read here.

Scotland: Angus education chief claims unanimous support for pupil fingerprint system

Angus Council's education convener has defended a biometric identity system used for school meals, claiming the local authority has never received a complaint about it (TheCourier.co.uk)

"Angus is the only authority in Scotland which is increasing uptake of school meals and, while not all of it is down to the biometric system, we do know that there is a stigma attached to receiving free school meals. But the possibility of bullying is removed here because no one knows who receives free school meals apart from the office staff who credit their accounts.

Fingerprint systems that store only an algorithm-generated template rather than an image of a fingerprint pose little-or-no threat to a person's biometric privacy.

On the positive side: for the student, fingerprint biometrics offer increased privacy and safety; the school achieves higher data integrity and increased operational efficiency. These benefits are not simply confined to the schools themselves. All taxpayers have a stake in the efficient use of educational resources.

If recent press is taken as an accurate reflection of the concerns of so-called privacy advocates, they fixate on the security of students' biometric data while unconcerned with the security of the academic, behavioral and medical records kept by schools that present a much more acute privacy risk.

It is incumbent upon adults to be mindful of the privacy implications of all the decisions they make for children. Implementation of template-only fingerprint identification systems can indicate fulfillment, rather than neglect of that duty.

Scotland: Use of fingerprint ID in schools triggers row

Scottish Politics, Biometrics & Schools (News.Scotsman.com)

Anti:

"Public bodies have shown in the past that they are not always to be trusted with sensitive personal data. If the finger - or palm prints - of children as young as four years old got into the wrong hands, it could have significant consequences. Do we really want this sort of intrusive information taken from young children?"

Pro:

"Of course, if we can use new technology to improve public services and reduce costs then we should be looking to do so. However, as with keeping any personal, information appropriate safeguards must be in place."

Other posts on biometrics and schools may be read here.

International Air Transport Association insists on updated security measures

Under an IATA plan, passengers would be categorised into one of three risk groups, and then screened accordingly. (AustralianNews.net)

NYC payroll chief resigns after fraud probe

The Associated Press

NEW YORK - (AP) — The director of New York City's payroll department has resigned a week after prosecutors charged four consultants in a $80 million fraud scheme.

Earlier post on the topic here.

Nine Technologies That Will Change Your Future

What will be the tech breakthroughs of the next decade? (Kiplinger via Yahoo Finaince)

Banks are increasingly turning to biometric authentication for mobile and online clients. Fingerprint, voice and face recognition systems will soon become commonplace as banks seek to heighten security for the rising tide of on-the-go transactions.

Imagine a front desk without people

For hotels, it cuts costs (Chicago Tribune)

Consider this: You go to the front desk to check in, your image is captured on computer, you're given your room number but no key card. You get to your room and a facial-recognition reader opens the door for you. Or maybe you just check in at a lobby kiosk and bypass the front desk altogether. Or you use your credit card to enter your room.

Biometrics figure to be the linchpin in a host of revolutionary and cost saving technologies and processes.

The return on investment (ROI) is significant.

UK: ID Cards Scrapped by Coalition Government

ID cards consigned to history by Coalition Government's first Home Office Bill (FreshBusinessThinking.com)

All ID cards will be cancelled within one month of Royal Assent and the National Identity Register, the database which contains the biographic information and biometric fingerprint data of card holders, will be physically destroyed within two months.

This isn't a surprise, we drew attention to the decision back in May.

The U.K.'s new coalition government plans to cancel the national ID card program, calling it part of a "substantial erosion of civil liberties" that took place under the former Labour government.

But what would a national ID system that didn't present a "substantial erosion of civil liberties" look like?

From this post of May 21:
Bryan Glick at ComputerWeekly.com understands that the rejection of a statist, top-down approach does not mean that identity management systems are unnecessary or that all proposed systems will be rejected by a free public.

Glick then draws attention to a 2008 report by Sir James Crosby, then at HM Treasury, entitled Challenges and Opportunities in Identity Assurance (.pdf). The 47-page report contains a breadth of information that makes it a great introduction for how to begin thinking about the challenges associated with large-scale biometric identity management deployments. It is very accessible and deserves to be read widely.

Biometric time clocks gaining popularity

Chattanooga Times Free Press

Biometric time clocks aren't always popular with workers, some employees say, but the devices are winning approval from Chattanooga-area companies, according to a business that sells the fingerprint-activated devices.

High-profile customers include Rock City, the Tennessee Aquarium, Chattanooga Convention Center and Creative Discovery Museum, which all have bought into International Equipment Co.'s biometric vision as the Chattanooga-based company marks its 50th anniversary.

High-tech move to stamp out food card fraud

Trinidad Express

In an effort to stamp out fraud and corruption in the delivery of social services grants, Government will be moving next year to implement biometric technology starting with the food card programme and disability grants.

People are willing to support higher social spending when they are confident that the money isn't being stolen.

Ingenico shares hit after Safran blocks foreign bid

French industry minister Eric Besson said the state was talking with Safran, adding Ingenico was a "strategic" business (Reuters)

Safran (SAF.PA), 30 percent owned by France and which holds 22.5 percent of Ingenico, likely blocked the 1.44 billion euro ($1.9 billion) offer as a result of government pressure to prevent the company passing into foreign hands, analysts said.

Ingenico makes some fingerprint enabled point of sale hardware.

Safran is in the process of finalizing its purchase of much of L-1.

Big-Time fraud in NYC time-and-attendance initiative

CityTime Consultants Charged With Stealing $80 Million (Gothamist)

Four consultants hired to run quality assurance have been accused of taking $80 million in "an elaborate fraud and kickback scheme" that involved faked time sheets (ha!) and a series of shell companies. According to the suit the suspected ringleader even got his mom and his wife in on the scheme!

Fraud is fraud and it could occur with any government contract entrusted to corrupt individuals. As noted by the quoted section above, the fact that faked time sheets were used to steal from a biometric time and attendance system contract is at the least ironic.

UPDATE:
NYC payroll chief resigns after fraud probe

Jobs at 3M threatened as UK passport contract switches to De La Rue

More than 100 production staff are facing redundancy (PrintWeek.com)

All of the staff have been subject to TUPE negotiations as a result of the Identity and Passport Services’ decision to award the 10-year contract to print the next generation of biometric passports to De La Rue rather than incumbent 3M.

Countries often don't produce their own currency and passports -- they hire private firms to do it -- and for obvious reasons, countries don't like to talk about it.

The UK has decided to award its passport manufacturing contract to the home grown, though troubled, De La Rue rather than American firm 3M.

It's worth noting that the British passport is biometrically enabled (face recognition) and 3M recently completed its acquisition of biometrics firm Cogent, which had an application for face recognition for border control.

Facial recognition biometrics will come of age in 2011

Facial recognition technology promises easy access for employees and a fast return on investment for employers (SecurityPark.co.uk)

Facial imaging biometrics has refined the technology in recent years with 3D imaging and infra-red cameras overcoming early flaws such as strong sunlight or darkness making a comparison difficult. It is now possible to make a positive identification under any lighting conditions and while the subject is moving towards the camera.

L-1 sale update

Stockholders to vote on merger on February 3, 2011 (ConsumerElectronicsNet.com)

Under the terms of the agreement entered into on September 19, 2010, Safran has agreed to acquire L-1 Identity Solutions, Inc. following the sale of L-1's intelligence services businesses to BAE Systems Information Solutions Inc.

It looks like there are still three moving parts. The sale the intelligence services to BAE is expected in the next few days. The vote to sell the rest to Safran is scheduled for February.

What a mess: UK, EU, Children and Biometrics

UK gets thumbs down over school fingerprinting (Sydney Morning Herald - Australia)

BRUSSELS: The European Commission has demanded that Britain justify the widespread and routine fingerprinting of children in schools.

It said it had "significant concerns" that the policy breaks European Union privacy laws.

Here's an article that perfectly illustrates what happens when competing bureaucracies, biased or power-maximizing bureaucrats, identity management and (possibly) poor public communication collide. In fact, one seldom encounters such a archetypal example of what is an increasingly infrequent, though once common, treatment of biometrics in the news.

-The competing bureaucracies: The European Union vs. UK Schools
-The biased or power-maximizing bureaucrat: Hank Roberts "A member of the executive of the Association of Teachers and Lecturers"
-Identity Management: Fingerprint biometrics in schools
-Potentially poor public communicator: UK Schools

First, some background.

As outlined here, there are many reasons schools would like to and in fact should be encouraged to tighten up their identity management functions and biometrics can help while increasing privacy and lowering costs.

Schools spend a lot of resources in their Identity Management function: calling roll, assigning grades, managing a medical services office (school nurse), collecting health information on student athletes (physical exams), etc.

We all have an interest in how efficiently an industry that is overwhelmingly funded by tax revenues manages its resources. Schools should therefore be encouraged to adopt more effective means to accomplish the demands society places upon them and they should be commended for innovation within their industry.

To the list above should be added the library's and school lunch functions.

Secondly, not all fingerprint identity management systems are the same.

Some implementations store an image of the fingerprint and some store only the template created by the biometric algorithm. All fingerprint access control systems use a template generated from a person's fingerprint. It is not possible to "reverse engineer" a template into a complete image of the fingerprint that created it. In this limited use case it cannot fairly be said that people are fingerprinted.

Other fingerprint access control systems do store an image of the fingerprint as well as the template generated from it. In this use case, it is accurate to say that fingerprints are on file.

Thankfully, most decision makers that examine the implementation of fingerprint ID management systems in their schools become informed of the difference and since they are, for the most part, normal human beings that care about the welfare of the children under their supervision, they opt for the type of system that does not store fingerprints.

Back to the linked article.

The tension between the EU bureaucracy and institutions confined within member states is obvious and has nothing to do with biometrics, per se.

Biased and uninformed bureaucrats are occasionally addressed here and Mr. Roberts confirms his bias and willingness to paint with an overly broad brush with the following quote:

"I believe the fingerprinting of children is a totally unnecessary infringement of civil liberties," he said. "The legal situation must be looked at. This is being done surreptitiously without parents being told."

Anyone who terms the implementation of a fingerprint biometric system that stores only the template created by the biometric algorithm "fingerprinting" is either confused or or lacks respect for their audience.

"Fingerprinting" conjures up images of prison movies, the "rolled ten" and the loss of personal freedom. The fingerprinting process in the usage above is not undertaken in order to further the interests of the person providing the fingerprints. It is typically undertaken to help protect society from the person behind the fingers and carries with it a social stigma. Biometric alarmists intentionally and wrongly bring all of "fingerprinting's" social baggage and dump it onto fingerprint identity management systems. This approach is wrong-headed and emotionally charged.

One of our mottoes is relevant here: Biometrics, it's about people. Most biometric identity management deployments don't founder on technical challenges, but on social challenges. Foremost among the social challenges is communication. Biometric identity management techniques can save money and enhance privacy in schools (by, for instance, obscuring who receives a need-based subsidized meal) but they can't build consensus among public service providers and stake holders. People have to do that. Adopters of biometric identity management solutions have gotten much better at educating themselves about the technology and explaining the reasons behind their decisions.

It is exceedingly rare that these systems are implemented "surreptitiously without parents being told."

The number of Mr. Roberts's in the world seems either to be declining or they are finding fewer reporters seeking their comment. Reasoned communication is winning the day. This is good for schools, students, taxpayers and the biometrics industry. I'll leave it to others to judge whether or not it's good for unelected bureaucrats or self-appointed advocates.

Library, Pornography, Law Enforcement & Identity Management

The Naperville Public Library: Privacy (Examiner.com - Chicago)

Naperville Police Captain Ray McGury said he felt the law was intended to prevent authorities from spying on citizens [the practice of a police state], not to prevent library staff from assisting police fight crimes committed in libraries. “I asked them, ‘If a child is snatched from this library do I have to get a search warrant to get information on who was here?’ and they said, ‘Based on the state law, yes.’ God forbid that happens.”

This article, exhibiting excellent reporting by Sean O'Connor, presents a great case study of the interactions of citizens, and two types of public servant (police and librarians) within the context of identity management.

The main point of tension is between the library's policy and the police officer's duty. In this case, the identity management process is in some sense a witness to a crime.

Biometrics were never adopted in the Naperville libraries but a healthy debate seems to have taken place surrounding their proposed use.

Those interested in topics such as Society and the Individual, Privacy vs. Anonymity, and Identity Management should find the linked article highly worth reading in its entirety.

Miami Herald: Worst performing gadget of the year is Biometric Wallet

The year’s most memorable gadgets (Miami Herald)

The TungstenW biometric wallet. Made of carbon fiber, this hard case wallet only opens with the owner’s fingerprint scan ... unless you drop it, in which case it easily pops right open and breaks. For $600, this theft-prevention wallet is a dud. All the thief needs to do is give it a whack against a table or floor.

I think they're talking about this one. (Tiger Direct)

Mozambique: Biometric Personal Record Card Now in Use

Over thirty Mozambicans now possess a Biometric Personal Record Card (AllAfrica.com)

Maputo — Over thirty Mozambicans now possess a Biometric Personal Record Card, issued at birth with an identification number that they will keep for their entire lives.

The authorities regard this as an important step in implementing the "electronic government" strategy.

As we said yesterday, it's dificult to help citizens in developing countries if no one knows who they are.

UID effects: India sees a surge in bank accounts

Some 80% of people enrolling for biometric IDs want bank accounts (Economic Times, India)

“If we are able to provide every such person with a bank account, financial access will explode in India,” Mr Nilekani said. Considering the pace of enrolments for Aadhaar, there was a very real possibility that the number of bank accounts issued in the next four years will exceed the number of accounts banks have issued since India's independence, he felt.

It's been a while since we checked in with India's UID project. Providing the world's poor with a verifiable identity is key to helping them through both government and market based initiatives.

Prison Using Eye Scanning On Inmates

Technology Given To R.I. Jail At No Cost (WCVB TV Boston)

The Department of Corrections said plans were under way last summer for the technology. The process was sped up after an inmate escaped by posing as another inmate who was up for parole. He was later captured in New York.

This really happens.

Iris biometrics are highly suited to this particular application because even though each transaction is slower, they are more difficult to fake than fingerprint biometrics.

The trade-off in speed isn't really a deal-breaker in a prison environment.

Canada-U. S. security perimeter has been years in the making

The two countries reportedly will establish a Beyond the Border Working Group (Vancouver Sun)

Reports have estimated the extra security has added costs for Canadian manufacturers equivalent to two to three per cent of total trade. It also resulted in an eight-per-cent negative impact on the export of services and an almost 13-per-cent negative impact on the import of travel services.

This seems to be getting a lot more attention in Canada than in the U.S.

Facial Recognition: A Valuable Tool For Law Enforcement

Facial recognition can be a valuable identification tool when fingerprint identification is unavailable or impracticable (ForensicMag.com)

Just like automated fingerprint identification, facial recognition can provide law enforcement agencies with a valuable tool for multiple public safety applications. Whie fingerprints assure higher rates of accuracy than face recognition can, facial recognition provides benefits when fingerprint data does not exist, is not easily shared between agencies, or when multiple independent verification methods are desired. Additional applications include identity verification in the field and intelligence gathering, as well as crime prevention and investigation.

The linked article, written by Eric Hess of MorphoTrak, provides an overview of facial recognition for a law enforcement audience.

New Face-Rec audit for New York Driver's Licenses

Transit Sam (Downtown Express, NYC)

Dear Transit Sam,
My daughter’s driver’s license is coming up for renewal soon. I understand that a new face photo recognition system is now in place. My concern, in addition to privacy and identity theft issues, is where is this information going to be sent or stored or how will the information be used? Do you have any idea who is doing this for DMV?

Contained in the answer to the reader's question is a description of a really cool auditing and verification process that should be adopted everywhere.

Please, read the whole thing; it's short but sweet.

Oasis Systems sold, taps Colatosti (Viisage) for top roles

Oasis Systems sold, taps Colatosti for top roles (MassHighTech.com)

Colatosti is currently founder, president and CEO of biometric and physical security management firm American Security Ventures, he is perhaps best known as the former president and CEO of Viisage Technology Inc.

3M Completes Acquisition of Cogent Inc.

ST. PAUL, Minn., Dec 01, 2010 (MarketWatch.com)

3M announced today that it has completed its acquisition of Cogent Inc., pursuant to a merger agreement that was approved and adopted by Cogent's stockholders at a special meeting held on Dec. 1, 2010. Under the terms of the merger agreement, Cogent's stockholders are entitled to receive $10.50 per share in cash.

I must have missed this while traveling. Those searching for a stock quote for COGT won't find one.

Australian Visa applications to include biometric data

Australia will attempt to stamp out fraudulent visa applications through the use of biometric data for onshore application (SmartCompany.com.au)

"Around the world identity fraud and fraudulent visa applications are on the rise," he said yesterday. "We need to make sure that Australia's toolbox is world's best practice for dealing with this."

Physical access control more popular than logical access control

Majority of organisations using biometrics are leaving logical IT access protection at the door (SecurityPark.co.uk)

According to new research from Siemens IT Solutions and Services, only 18% of organisations with biometric measures currently in place are using them for logical access control – vital to securing IT equipment and data files.

Despite acknowledging the need for greater IT security in a climate of cyber crime and terrorism, biometrics professionals are opting for physical access control to safeguard rooms or buildings. This presents IT security threats to sensitive data within organisations and potential mobile IT security weaknesses.

The huge uptick in the popularity of time-and-attendance access control systems, with their clean and easy calculations of ROI (return on investment) may account for some of this discrepancy.

Biometric ID management techniques do yield significant ROI for logical access control -- passwords don't reset themselves and the people you call get paid -- but it's more difficult to compute and is likely to make itself apparent over the longer term.

Nevada DMV looks at ears, eyes, mouths as well as faces

It's no easy feat to identify a specific Bimbo amid the bevy of bimbos in Las Vegas (Las Vegas Review Journal)

Actually, authorities are unsure whether they have in custody Frank Anthony Bimbo, the name listed on the expired identification card, or whether his documents were fraudulent and he actually is one of 10 other people he claimed to be during DMV visits over the past 13 years.

"Sometimes we can't tell which are the real records, and that's the case this time," DMV spokesman Tom Jacobs said. "At this point, he's muddied the waters with so many IDs, we don't know who he is."

This article combines insight into the nuts and bolts of the identity management challenges of local law enforcement, a discussion of new biometric ID management modalities and a fair dose of humor deriving from the subject's real or assumed name.

You won't regret checking this one out.

Process for Mexicans applying for US Visas to become easier

US Announces New Visa Procedures in Mexico as of January (MexiData.info)

Because the collection of biometric information will take place at the ASC, applicants who are required to visit both the ASC and the consular section should spend less time at the consular section than they have had to in the past.

It is my understanding that the biometric enrollment part of the application process was simply bolted onto the older process and required a separate fee.

Many on both sides of the border hope the attempt to streamline the process is successful.

Worldwide biometric revenue expected to treble to $14bn by 2015

Governments and institutions alike are increasingly turning to technology (Zawya.com [UAE])

"The growth in the biometric security market is remarkable," said Ahmed Pauwels, Chief Executive Officer of Epoc Messe Frankfurt GmbH, organisers of the Middle East's premier safety and security trade fair and conference, Intersec. "Industry figures estimate that worldwide revenues from the biometric market will treble to $14bn (Dhs51.4bn) by 2015," he added.

Biometrics hits the workplace

Access control at enterprise level has changed dramatically (ITWeb.co.za)

Coetzee also points out that for most companies, payroll is the single largest expense, so this is where the greatest protection is required against threats of fraud, corruption and theft.

As far as biometrics are concerned, 2010 has been the year of access control for time-and-attendance. This thoughtful article provides a glimpse into how enterprising firms can harness the tools at hand to capture information about their business that can provide a bottom-line competitive advantage.

This article also recalls some of the issues discussed in this post.

Kiosks let travelers skip long passport control lines

Program allows skipping long passport control lines (Houston Chronicle)

Approved members can bypass long immigration and customs lines, scan their own passports at airport kiosks and continue on their way in less than a minute.

We did an unscientific test of this system yesterday.

Returning from a foreign country using the Atlanta airport, Barry, having previously enrolled in the Global Entry system used the kiosk while I used the standard human based passport check.

Lines for both systems were very short.

As it was his first live interaction with the system, it took Barry more than a minute to get through the process. Even with very short lines (perhaps 5 people in front of me), it took me several minutes longer to present my passport and gain entry into the United States.

There were perhaps ten humans checking U.S. passports. There were approximately 5 machines serving Global Entry members.


Thoughts:
Lines for the human passport check are usually much longer. There were a limited number of kiosks.

Scaling up the number of kiosks is easier than scaling up the number of human agents in terms of both implementation time (training vs. installation) and infrastructure adjustments (constructing a cubicle vs. installing an ATM-like machine).