Posts Tagged ‘ breach laws ’

No Identification Without Representation: Constraints on the Use of Biometric Identification Systems

May 9th, 2012 | By | Category: Articles

The tourist hoping to use her credit card in any part of the globe, the asylum seeker hoping to access social benefits in her host country, the banker hoping to move money from one stock market to another in real time—all have the same need. They must prove their identities and be certain of others’. Traditional means of proving identities are not dependable enough in most parts of the world and hence unfit for global digital networks. In this context, biometrics appears to offer a viable technological solution. However, the technology itself is subject to popular critique, warning of dystopian futures of overwhelming surveillance and loss of privacy.

 

By: Emilio Mordini, Andrew P. Rebera

Article first published online: 19 JAN 2012 DOI: 10.1111/j.1541-1338.2011.00535.x

Abstract

The human species is again becoming nomadic. Each year, about two billion persons move across large geographic distances (not to mention people in “virtual mobility” through information and communication technology). Many of these people have weak or unreliable identification documents—and many poorer people in developing countries do not even have these documents. In 2000, the United Nations Children’s Fund (UNICEF) calculated that 50 million babies (41% of births worldwide) were not registered at birth. In this scenario, a personal identification scheme based on birth registration and state-issued passports is less and less tenable. Biometrics appears to offer a viable technological solution. However, the technology itself is subject to popular critique, warning of dystopian futures of overwhelming surveillance and loss of privacy. The best answer to those who fear an Orwellian future is to engage with the technology and seek to ensure that biometric identification systems are developed in positive ways. We suggest that identification schemes become problematic when the reciprocity of identification goes unnoticed, forgotten, or (what is worse) is intentionally bypassed. The dynamics of identification should be reciprocal, dialogical, and involving mutual recognition. In the traditional political domain, this is the recognition by the state of a citizen and by the citizen of the state. In the digital age, identification systems must increasingly transcend geopolitical borders. A globally recognized identification scheme is therefore a necessity. However, it is merely the nature of the borders that has changed here—not the nature of identification. Our call will be: no identification without representation.

1. Introduction

The development of methods for establishing, communicating, and authenticating the identity of individuals has been driven by a number of factors, not least the desire of governments to efficiently exercise power over their subjects. No doubt this was spurred by the development of concepts of the state, the individual, the citizen (and so forth). The modern state presupposes, in addition to technologies of identification, the “creation of a [. . .] people open to the scrutiny of officialdom” (Caplan & Torpey, 2001, p. 1).

That the need for reliable methods of identification arose at all is presumably connected with the birth of the first urban societies during the so-called “Neolithic Revolution” (Childe, 1950). At this point, the human species, hitherto nomadic, began to settle down (so to speak). Societies developed robust geographical roots, population densities increased, and social hierarchies developed. Growing societal complexity, alongside developments in artisanship and intrasocietal and intersocietal trade, would have made the identification of the trustworthy—as well as the detection of the untrustworthy—increasingly vital to the normal functioning of these early societies.

Of course it remains true that the major interventions of the state into the lives of its subjects—e.g., taxation, conscription, and the administration of authority/justice—need not proceed at the level of the individual. The necessity for individual identification is less severe when taxes, conscription, and so on are imposed collectively (Caplan & Torpey, 2001, p. 1). Specific individual identification has been more closely tied up with mass literacy and increased state bureaucracy (Goody, 1986). The Roman Empire, which was the first cosmopolitan society in the West, provided the first example of a universal identification system through a tripartite codified name scheme. In Europe during the Middle Ages, individuals were chiefly identified through passes and safe conducts issued by religious and civil authorities. Seals and handwriting mainly enforced the authenticity of these documents. The Modern era, which saw increased mobility associated with urbanization and industrialization, required more effective recognition schemes. These were administered by nation states. Indeed, the development of more robust identification schemes has to some extent progressed in parallel with the development of post-Westphalian polities, marking the passage from feudal to industrial society. Thus, as Valentin Groebner (2001, p. 16) notes: “by the beginning of the eighteenth century, the failure to carry [documents of origin and identity] while travelling was already an offense that could attract considerable penalties.”

After World War I, most European countries introduced systems of identity cards, incorporating facial photography (and, in some cases, also fingerprinting), as a tool for identifying people within their state borders. Yet even in countries where identity cards did not become mandatory, a new powerful driver for personal identification emerged: the need to identify and authenticate people entitled to receive social benefits. The welfare state, which first emerged in Northern Europe after World War II, is based on the provision of services via redistributionist taxation. Taxation and welfare provision both rely on robust and reliable systems of personal identification.

Following the agricultural, industrial, and welfare revolutions, we are now on the verge of a new epochal transition. The human species is again becoming nomadic. Each year, about two billion persons move across large geographic distances (not to mention people in “virtual mobility” through information and communication technology); approximately half cross international boundaries. The International Air Transport Association reported that their members carried 1.6 billion passengers in 2007, among which 699 million flew internationally (International Air Transportation Association, 2010). The United Nations World Tourism Organization (2009) estimated 924 million international tourist arrivals in 2008. International movements for permanent resettlement by immigrants, refugees, or asylum seekers, and temporary movement by migrant workers and others augment the total international movements each year. The International Labour Organization stated that in 2004, an estimated 175 million persons (3% of the world’s population) lived permanently outside their country of birth and that there were 81 million migrant workers (excluding refugees) globally (International Labour Organization, 2004).

Globalization has been characterized by the development of technologies dramatically transcending national control and regulation. This is not without consequence for traditional identification schemes. The globalized world is confronted with a huge mass of people with weak or absent identities. Most developing countries have weak or and unreliable documents—and many poorer people in these countries do not even have these documents. In 2000, UNICEF calculated that 50 million babies (41% of births worldwide) were not registered at birth. In Pakistan, Bangladesh, and Nepal, child registration at birth is not even mandatory. In this scenario, a personal identification scheme based on birth registration and state-issued passports is less and less tenable.

The tourist hoping to use her credit card in any part of the globe, the asylum seeker hoping to access social benefits in her host country, the banker hoping to move money from one stock market to another in real time—all have the same need. They must prove their identities and be certain of others’. Traditional means of proving identities are not dependable enough in most parts of the world and hence unfit for global digital networks. In this context, biometrics appears to offer a viable technological solution. However, the technology itself is subject to popular critique, warning of dystopian futures of overwhelming surveillance and loss of privacy.

For better or worse, biometric technologies are, it would seem, here to stay. The best answer to those who fear an Orwellian future is not merely to provide optimistic reassurances (which rarely reassure anyone) but rather to engage with the technology and seek to ensure that biometric identification systems are developed in positive ways. Our aim in this article is to articulate the positive potential of biometric identification schemes.

Orwellian fears are not unjustified, as we shall discuss. However, we will suggest that identification schemes become problematic when the reciprocity of identification goes unnoticed, forgotten, or (what is worse) is intentionally bypassed. The dynamics of identification should be reciprocal, dialogical, and involving mutual recognition. In the traditional political domain, this is the recognition by the state of a citizen and by the citizen of the state. In the digital age, identification systems must increasingly transcend geopolitical borders. A globally recognized identification scheme is therefore a necessity. However, it is merely the nature of the borders that has changed here, not the nature of identification. In this article, we will set out a framework for a system of identification. We begin in the following section by considering some objections to biometric identification systems. We will argue that where the objections are reasonable, this is not specifically attributable to the use of biometrics. We then (section 3) offer a partial defense of biometrics as a desirable candidate for a global identification system in the digital age. We do so by diagnosing the cause of the undesirable consequences associated with biometrics, discussed in section 2. Having identified the root problem, we conclude by proposing a guiding principle for the implementation of a global biometric identification system: no identification without representation.

2. Biometric Identification

Let us suppose that there is a group—relatively small in number—who would prefer that biometric systems of identification were not employed—that the technology had not been developed, or that other less intrusive forms of identification were more robustly suited to the digital age. For the sake of having a name, call this group “the anti-biometrics camp.” (We are speaking hypothetically here but it is not unreasonable to suppose that such a group exists.1) The anti-biometrics camp calls for the outlawing of biometric identification systems, or at least for such severe restrictions as to amount to a de facto outlawing of the technology. We will consider two arguments in the anti-biometrics camp’s arsenal: (i) that the technology is inherently demeaning and (ii) that the technology is a tool of the “surveillance society.”2

(i) Biometrics is Inherently Demeaning

“To identify” is a transitive verb. Correspondingly, the activity of identifying is relational: A identifies B, or, in the present case, Abiometrically identifies B. The question then, is what in this particular relational structure demeans B?

Standard means of gathering biometric data include: fingerprinting, facial scans, iris scans, voice recognition, hand vein recognition, gait analysis, keystroke pattern, and so on. Some of these means, it should be noted, are—if not inherently demeaning—at least conventionally associated with negative connotations. Fingerprinting is a clear example, being primarily associated with criminality (at least in some cultural areas). Furthermore, it is not unreasonable to suppose that most other biometrics—indeed the domain in general—are largely bound up in the popular imagination with criminality and crime detection. This is witnessed by the popularity of television shows centering on forensic pathology and criminology (e.g., CSI in the United States, or Silent Witness in the United Kingdom); while historically speaking, the associations trace back to the pioneers of anthropometrics such as Francis Galton (1822–1911) in the United Kingdom and Alphonse Bertillon (1853–1914) in France.3

In this respect, biometrics has something of an image problem. The problem is only deepened by high-profile examples in which biometrics plays a role—though it should be noted, for this is indicative of the extent of the image problem, that in many of these cases biometrics is incidental to the story.4 In a well-known case, Italian philosopher Georgio Agamben refused to enter the United States in protest at the United States Visitor and Immigrant Status Indicator (US-VISIT) program’s requirement for visitors to be fingerprinted and photographed (Agamben, 2008). In other cases too, U.S. immigration officials have been accused of heavy-handedness. In May 2011, 2000 elderly cruise passengers were fingerprinted and had retina scans during a 7-hour security check (Bloxham & Bingham, 2011); while Amir Khan, boxing’s IBF and WBA World Light Welterweight Champion, has complained of profiling and extensive security checks upon entering and re-entering the United States (Davies, 2011). Similarly, the use of biometrics was reported in connection with the recent controversy concerning the French government and the Roma community (Fraser, 2010). The biometrics connection was that the French authorities recorded biometric details of Roma migrants prior to repatriation. However, the primary newsworthy issue was not the use of biometrics but the alleged profiling of Roma communities, in apparent contravention of the European Union Charter of Fundamental Rights (BBC News, 2010a).

In only one of these cases (Agamben’s) is there any real suggestion that biometric technologies are themselves inherently demeaning. What is demeaning in the other cases is the way in which individuals are treated by the authorities. In the Agamben case, it is claimed that the gathering of biometric data is a form of bio-political tattooing, akin to the tattooing of Jews during the Holocaust. The implications of that association, if sound, are of course horrific. However, it is not entirely clear what Agamben’s argument really is. We will be brief as this is not the place (and even if it were, we have not the space) for detailed discussion. The difficulty is this. Agamben writes:

The problem [. . .] concerns the juridical-political status (it would be simpler, perhaps, to say bio-political) of citizens of the so-called democratic states where we live. [. . .] There has been an attempt the last few years to convince us to accept as the humane and normal dimensions of our existence, practices of control that had always been properly considered inhumane and exceptional. (2008, p. 201)

However, in and of itself, biometric identification is not obviously inhumane or exceptional. At root, biometric identification is nothing more than the identification of an individual by way of their physical or behavioral traits. This is something that we all do every day in normal interactions with our fellows. Here Agamben would probably argue that the body features that we use in everyday life to identify our fellows are biographical signs, embodied languages, “hot” media, which tell the biography of the subject. This is the case with human faces, body gestures, voices, odors, even wrinkles and scars, which are signatures of time on our skin. Biometrics are instead artificial signatures mechanically extracted from our bodies by impersonal technologies. They are “cool” media, which speak of our biology rather than our biography, so depersonalizing the subject. Biometrics—or so Agamben would argue—turn the persona into a bare body that becomessoma, as per the original meaning of this word in ancient Greek (roughly: corpse). However, Agamben would be wrong in two respects. First, the current trend in biometrics is to use more and more “hot” bodily features like face dynamics, gestures, behavioral traits, and so on. Second, the very notion of “bare body” is misleading. Human bodies are never pure bodies, they are always languages that tell stories: even the more remote physical features, even DNA, tell us much more than biological details, as is well illustrated by the huge amount of personal and medical information that can be elicited by any biometric signature (Mordini & Massari, 2008). Hence, it would seem that biometric identification is only inherently demeaning if normal interpersonal relationships are inherently demeaning—and while interpersonal relations can be demeaning, in the vast majority of cases, they are quite the opposite.

There is certainly some truth in what Agamben says, although we would suggest that he has mislocated it. As he says, this is a problem of juridical-political status—of bio-power relations; however, the core problem is not of biometrics. We can explore this by considering a response one might offer on behalf of the anti-biometrics camp. The analogy between identification in the sphere of interpersonal relationships and biometric identification is, the response goes, fundamentally flawed. True, normal interpersonal relationships are not demeaning, but then again one’s relationship to biometric identification devices—say, fingerprint scanners—is not interpersonal: fingerprint scanners are not persons, and our relations to them are not analogous to our relations to people. This is an important point with which we entirely agree.

Notice however that it does not support Agamben’s position. Agamben evokes Foucault, alluding to “a new bio-political era” (Agamben, 2008, p. 201). Foucault had articulated biopower as a “set of mechanisms through which the basic biological features of the human species became the object of a political strategy, of a general strategy of power” (Foucault, 2009, p. 1). However, he also pointed out that his analysis of the mechanisms of power involved, inter alia, investigating “between whom” (Foucault, 2009, p. 2) power is applied—that is to say (although Foucault may not have put it this way) that the power relations here are, in the final analysis, personal.5 So what is objectionable about U.S. immigration procedure is not, pace Agamben, the use of biometrics per se; rather, it is the way that they are deployed as an arbiter and medium of interpersonal relations.

(ii) Biometrics as a Tool of the “Surveillance Society”

Just as it would be wrong to suppose that biometric identification is in itself demeaning, so it would be wrong to suppose that biometric identification systems are inevitably geared toward surveillance. Or rather, it would be wrong to suppose that they are any more inevitably geared toward surveillance than are other forms of identification (any means of identification—biometrics, passports, proper names—can be used to keep track of an individual). However, the concerns regarding surveillance are perhaps more tangible than those discussed above, for the signs of surveillance are, in a physical sense, all around us.

The iconic technology of the surveillance society is probably the closed-circuit TV camera. Popular statistical folklore has it that there is one CCTV camera for every 14 British citizens and that the average Briton is caught on CCTV 300 times a day.6 In combination with CCTV, biometric identification technologies open the door to an enormous potential for surveillance. Facial recognition technology is the obvious candidate here, although recent work on identification by gait pattern has great potential too. As surveillance—spurred mainly by developments in biometrics—becomes increasingly automated, it inevitably becomes less and less focused. That is to say, we are not now dealing solely with the surveillance of antecedently identified suspects, but with the mass surveillance of society with the aim of identifying the suspicious among us. As an illustration of the dangers here, consider the use of search warrants. If authorities wish to search someone’s property, they need a warrant, which will, if all is working well, be issued only if sufficient evidentiary justification of reasonable suspicion can be produced. However, compare the surveillance of the 2001 Super Bowl. This measure identified, from a crowd of 100,000, just 19 individuals with criminal records. To have a criminal record is not a crime. And in a civilized country, to have a criminal record could not be considered sufficient evidentiary justification of reasonable suspicion that one might commit some (unspecified) crime. There is, it would seem, cause for concern here.

In the West, the United Kingdom and the United States have particularly poor records in this regard. In 2007, Privacy International rated the United Kingdom the worst performing European Union (EU) state in terms of privacy protection and surveillance, categorizing it alongside the United States, China, and Russia as “endemic surveillance societies” (Privacy International, 2007). The dangers have not gone unrecognized. In its response to the House of Commons’ Home Affairs Committee’s report, “A Surveillance Society” (Home Affairs Committee, 2008), the UK Government articulated a number of commitments to increase data minimization and protection and to ensure balance, responsibility, and transparency in the employment of surveillance technologies (Secretary of State for the Home Department, 2008). This was a welcome pronouncement in the light of Privacy International’s findings. (By 2010, the United Kingdom’s ranking had been downgraded from “endemic” to merely “extensive” surveillance [Privacy International, 2010]. This is better but still not good.)

Orwellian fears of all-pervasive surveillance are exacerbated by a number of factors. As mentioned above, developments in biometric technologies mean that identification can increasingly take place at a distance, via gait, for example (BBC News, 2010b). Second, biometrics and surveillance are increasingly commercial domains and, through public–private interaction, this can give rise to the impression that responsibility for good practice is passed from directly elected, and hence accountable, public officials, to businessmen and executives, whose primary goals are not best practice but profit, and whose responsibilities are to shareholders first, citizens second. (Note that this is not an objection to commercialization or the private sector in general; we merely note that different structures of accountability apply in the public and private sectors.) A further concern is with the speed with which new surveillance technologies are implemented—the worry being that insufficient consultation takes place. Examples include the case of the Visionics Corporation, which offered their facial recognition systems to the Tampa Police Department for a year free of charge “in an effort to build a market among municipalities,” prompting the American Civil Liberties Union of Florida to comment that “This is yet another example of technology outpacing the protection of people’s civil liberties” (Canedy, 2001). While in the United Kingdom, biometrics and CCTV in schools have been a cause of consternation. The Guardian, to give just one example, recently carried a story reporting various problematic cases of CCTV in schools (not only in classrooms but also in the bathrooms). A teachers’ union officer is reported to have commented: “There are lots of schools that install CCTV and don’t know the rules—and the companies who supply it don’t feel the need to tell them” (Harris, 2011).

Whatever may be the facts of the cases mentioned above, the fears are real. And the retort that if you have nothing to hide you have nothing to fear does not hold water. Privacy, secrecy, and freedom from surveillance have no necessary connection with shame or wrongdoing (Bok, 1989). Moreover, as the example of Brandon Mayfield (who was wrongly connected to the 2004 Madrid bombings on the basis of a false-positive fingerprint match) attests, it may well happen that you have nothing to hide but everything to fear; Mayfield was arrested, imprisoned, and claims to have been threatened with the death penalty. Eventually the U.S. government agreed to compensate him to the tune of $2 million (Eggen, 2006).

Fears of a surveillance society are not, then, unjustified. However, to reiterate, as with the objection in section (i), there is no necessaryconnection between biometrics and surveillance. The anti-biometrics camp is, we argue, misguided. Their position is vulnerable to two telling objections. First, in practical terms, their proposal is extremely unrealistic. The biometrics industry is well established: it has gained much support at governmental level (if not at public level), and although the technology is not flawless, it is advancing rapidly and appears to be the most likely candidate for a global identification system in the digital age. Second, the anti-biometrics camp misconstrues the conceptual link between biometrics and the potential undesirable consequences (individuals being demeaned and subject to surveillance) mentioned above. The source of the trouble is not, we will claim, biometric identification systems themselves but the way in which they are implemented.

3. Biometric Identification as a Reciprocal Relation

In this section, we make a partial defense of biometrics as a desirable candidate for a global identification system in the digital age, diagnosing the cause of the undesirable consequences associated with biometrics, as discussed above. Having identified the root problem, we will conclude by proposing a guiding principle for the implementation of a global identification system based on biometrics:no identification without representation.

Are biometric identification schemes desirable? We think they can be, if suitably regulated. As described above, biometrics can lead to bad outcomes. However, that does not seem to be a solid reason for opposing them. Consider the following analogy (or rather:disanalogy). The anti-biometrics camp associates biometrics with a number of undesirable consequences and argues that since the consequences are so undesirable, the benefits of biometrics do not outweigh the risks: therefore, biometrics should be outlawed. Compare the controversy in the United States over the Second Amendment right to bear arms.

“Guns don’t kill people, people kill people,” or so the bumper sticker goes. There is a clear—but limited—sense in which this is obviously true: guns do not normally kill people unless somebody pulls the trigger (and notice that we do not normally punish the gun). However, as the comedian Eddie Izzard notes, “If you just stood there and yelled BANG, I don’t think you’d kill too many people” (Izzard, Jordan, & Swanson, 2004). When somebody is shot, the gun obviously plays a rather important role: they would not have been shot without it. To oppose restrictions on gun ownership on the basis that guns do not kill people, people kill people, is plainly wrongheaded. Other things being equal, the fewer guns at large, the less likely one is to be a victim of gun crime. Indeed, it is trivially true that if there were no guns—if Mr. Gunpowder had never invented the stuff—there would be no gun crime. Hence, it would seem, abstracting from complexities, that there is a prima facie case to be made for banning guns.7 It is alas true that even if there were no gun crime, there would still be crime and people would still get murdered. However, if there are fewer murders—even just one fewer—that is definitely a good thing.

An evangelical biometrician might adorn her bumper with a sticker reading “biometrics don’t identify people, people identify people” (it is not so catchy as its cousin, but zealotry sees past such trifles). Will the Izzard response work here? It is true that if contemporary automated biometric identification systems did not exist, less identification would occur (for one of the claims of biometrics is that it provides a potential mode of identity management to those who currently have no identity documents at all). So in the absence of biometrics, there would, trivially, be no biometric identification and there would very likely be less identification overall. However, while lowering the murder rate is highly desirable, lowering the identification rate is not desirable. In the developed world, most of us do not want to be without identity management. We need secure identification systems in order to travel, to communicate and transact across the internet, and to claim welfare or tax-relief. We do not want no identification, we simply want a more reliable, less objectionable system than we have at present. And in the developing world, people with weak identity documents need robust alternatives. Thus, the point of this dis-analogy between guns and biometrics is that while shooting people is inherently undesirable, identifying people is not.8

If we accept that identification is desirable and that biometrics are neither inherently demeaning, nor any more geared toward surveillance than other identification systems, it behooves us to investigate biometric identification more carefully. What positives can it bring?

The advantages of biometric identification systems are a function of limitations of more traditional schemes. Mariana Muzzi (2010, p. 2) reports that “Around 51 million births go unregistered every year in developing countries, which translates to one in three children globally.” Recording the identity of these children is important: “Children whose births are not registered at birth are not able to claim the services and protection to which they have a right on a full and equal basis with children who are registered at birth” (Muzzi, 2010, p. 3). That is, one needs to establish one’s identity in order to claim and secure access to one’s rights. This is also the rhetoric behind India’s Unique Identification Number scheme (although what the reality is apart from the rhetoric is a matter of dispute—see, e.g., Ramakumar [2010]). Moreover, it is, to some extent, borne out by the transfer of welfare and entitlements direct to individuals in a large number of African counties (Devarajan & Giugale, 2011Gelb & Decker, 2012)—such services being made cheaper and more secure by biometric means.

In such cases as these, we observe a reciprocal relation between identifier and identified. Schematically, we may put the point like this. “Aidentifies B,” but within this relational structure is the potential for reciprocity: A‘s identification of B can imply B‘s acknowledgement of A. This reciprocity is not essential. For example, if A is a geologist and B a fossil, the fossil does not acknowledge the geologist. However, where there is agency on the parts of both A and B, the relational structure “A identifies B” can imply reciprocity. Our claim is that “Aidentifies B” not only can imply reciprocity but should imply reciprocity. Let us try to be a little more specific. What exactly do we mean by “reciprocity?”

(i) Symmetry

By the reciprocity of identification we mean to imply a certain symmetry: if A identifies BA should also be identified to B. This is a sort of exchange of information, but it grounds only a weak symmetry since no specifics as to the balance of information are implied. A may demand from B more—or at any rate different—information than A divulges. The rights and wrongs of the balance here will depend on circumstances.

(ii) Bestowal and Acknowledgment of Rights

In identifying BA must bestow rights upon B, of which B is aware (or of which she can reasonably be expected to come to be aware).9 The system of registering children at birth is a fine example of this imperative. The child is registered and in that very act is documented as a bearer of rights. The provision of birth certificates may be thought of as the initial bestowal of rights. Subsequent identification transactions between A and B cannot, in general, be thought of as bestowing rights (although some may: e.g., A‘s issuing B a driving license could be thought of as A bestowing the legal right to drive—identifying B as a legal driver). However, these subsequent transactions may be thought of as A‘s acknowledging (explicitly or implicitly) the rights previously bestowed upon B (alternatively they might be thought of as premised upon A‘s earlier bestowal of rights upon B10).

(iii) Transparency

In normal circumstances, formal identification—i.e., identification by governments, commercial operations, and others—should be transparent. That is to say, it should be clear to B that they are being identified by A. The demands of transparency may depend on circumstances. For instance, if a border control agent asks for your passport, you do not normally ask them for proof of their identity and position—their identity and position are sufficiently clear in the context (they have the uniform, they are sitting in the booth at the airport, and so on). Or again, a store using CCTV to identify shoplifters need not be so transparent as to ask each customer to sign an informed consent form. However, they should, for example, display signs informing customers that they are being recorded. What level of transparency is appropriate to different contexts is a difficult issue which we have no intention of addressing here. We make the point in rather vague terms: identification should be tolerably transparent, given the circumstances.

Certainly, there is more to be said here. However, for present purposes, the above should suffice. In short, we argue that, at a minimum, the process of identification should: (i) be symmetrical; (ii) involve the bestowal upon, and acknowledgement of, the rights of the identified; and (iii) be transparent and open to the identified.

We conclude by looking at three problematic applications of biometric identification technologies. In each there is something objectionable. We will argue that what is objectionable is attributable to the failure to satisfy the reciprocity of identification.

Case 1: The Surveillance Society— Above, we identified a number of concerns regarding ubiquitous surveillance in a biometric future. The extent of CCTV coverage in public places is one cause for concern. However, the fact that you are often on film is not, in and of itself, any more objectionable than the fact that other people often observe you. Moreover, the fact that data regarding your whereabouts can be retrieved many years later is not, in and of itself, objectionable (if we were more observant and had better memories, the same data would be retrievable by testimony). Rather, what is objectionable about the profusion of CCTV cameras in public places is that, first, one does not know who is identifying one (although one knows that it is a formal identification—i.e., that it is a government or commercial agency, and so the situation is quite unlike being observed by a passerby in the street); second, it is not always apparent where the cameras are, so that one is not necessarily aware that one is under observation. These two problems are, respectively, failures to honor (i), the symmetry requirement, and (iii), the transparency requirement.

Similarly, the increased administration of surveillance by the private sector can be understood as objectionable in virtue of a failure to respect requirements (i) and (ii). Do the students in classrooms observed by cameras know which company is recording their images? If not, symmetry is not respected (or at least the symmetry is too weak given the context). Moreover, it will tend to be the case that if requirement (i) is not sufficiently well respected, requirement (ii) will not be either. Do private companies bestow any rights upon the students they identify? No.

To continue with the example of cameras in schools, one may object that the identification transactions do not involve the private companies. The private companies merely facilitate a transaction between the school and its students. If so, the use of CCTV in classrooms is, in some respects, less objectionable. Indeed, it is less objectionable to the extent that the situation is more in accord with requirements (i)–(iii).11

Finally, the concern that surveillance technologies are implemented too quickly, in advance of detailed consultation, may be understood as the concern that there is insufficient understanding of whether the administration of the new technology complies with requirements (i)–(iii). If the employment of new technology outstrips consultation as to its merits and demerits, the framework imposed by requirements (i)–(iii) cannot be guaranteed.

Case 2: The Afghan Villager— The New York Times reports that information on 1.5 million Afghans and 2.2 million Iraqis is now held in databases administered by U.S., NATO, and local forces (Shanker, 2011). In general, military–civilian identification transactions are liable to be problematic. This is evidenced by the prima facie double standards reported in the story: “While the systems [employed in Afghanistan and Iraq] are attractive to American law enforcement agencies, there is serious legal and political opposition to imposing routine collection on American citizens” (Shanker, 2011). We do not wish to comment on the specifics of the Afghan or Iraqi cases but speak, rather, about identification transactions between military forces and civilians in general, taking as inspiration the arresting image that accompanies the New York Times‘ article.

The photograph shows an aged, grey-bearded Afghan villager having his iris scanned. His right eye is shut, while the left is held open by the gloved hand of an American soldier. There are three soldiers in the picture: one holds the eye open, one holds the camera capturing the iris scan, and the other holds his hand above the villager’s forehead for shade. This shading hand is the only American flesh we see, all else is khaki, and we see no faces. It seems somehow significant that the uncovered hand casts a shadow not for the benefit of the villager, but in order that the iris camera is not “blinded” by the sunlight. It is a poignant image. What makes it so striking is the imbalance it portrays: they are soldiers, he is a civilian; they are three, he is one; his one eye is shut, the other held open.

Leaving aside the politics of the war in Afghanistan, as well as the particulars of the actual facts depicted in the photograph, this image—as a symbolic evocation—can only sound warning bells to those who are wary of biometrics. They will view it, not unreasonably, as a representation of the individual utterly overcome by faceless forces he is powerless to resist. Viewed in this way, what is objectionable about the image can be understood in terms of requirements (i)–(iii). First, this identification transaction is not symmetrical: the soldiers in the photo appear as anonymous.12 Second, the military cannot normally (in democratic societies at least) bestow rights upon individuals. Hence, requirement (ii) is not met.13 Third, it is entirely possible that military personnel operating overseas do not speak the local language. If so, it is not difficult to see how requirement (iii) might fail to be met. How can you explain to someone that they are being enrolled in a biometric database for whatever purpose, if you share no languages?14

The image of the Afghan villager is startling and, from a certain perspective, disturbing. What is disturbing about it is, we claim, that it is easy to read the story of the picture as if it involved the violation of the three requirements of the reciprocity of identification as described above.

Case 3: Bio-Political Tattooing— Recall that Agamben claims that the biometric enrollment required by the US-VISIT program is part of an attempt “to convince us to accept as the humane and normal dimensions of our existence, practices of control that had always been properly considered inhumane and exceptional” (Agamben, 2008, p. 201). We suggested that, in and of itself, biometric identification is neither inhumane nor exceptional. Rather, what is objectionable about U.S. immigration procedure is the manner in which it functions as an arbiter and medium of interpersonal relations. We are now in a position to make this a little clearer, with reference to requirements (i)–(iii).

Transparency does not appear to be an issue here. The procedures required as a condition of entry were sufficiently transparent that Agamben could consider them, judge them unreasonable, and decline to enter (although of course it is inconvenient not to enter a country having crossed the Atlantic to reach it). One could also make a case that symmetry is respected. The heart of the problem is requirement (ii), the bestowal and acknowledgment of rights.

Agamben is correct that there is something exceptional about the US-VISIT program. In broad terms, US-VISIT is simply an identification scheme: visitors must have their identities recorded upon entry. That is not exceptional: travel to almost any country and you will be identified as you cross the border. What is exceptional—what is not common to all border crossings—is that US-VISIT is not satisfied with the standard identity documents issued by other states but wishes to enrol individuals in a database wholly unconnected with their home state. This is an additional identification transaction, distinct from the presentation of a passport or visa. (We acknowledge of course that the United States is not the only state to request additional documentation or information to enter.) As such, if we are correct that identification should be governed by reciprocity as per requirements (i)–(iii), one ought to have some rights bestowed or acknowledged in the course of this additional identification transaction. But what rights does the entrant receive? She receives the privilege of entering the United States and enjoys the protection of the laws. However, that is something that, in pre-US-VISIT times, she would have received by virtue of the standard passport-based identification transaction; and (mutatis mutandis) it is something she still receives in most other countries by virtue of nothing more than a passport-based identification transaction. In this way, requirement (ii) is not met in the case of the additional biometric identification transaction that US-VISIT demands. However, pace Agamben, what is objectionableabout the additional biometric identification transaction is a failure of reciprocity—not anything specifically to do with biometric identification itself.

In insisting that the relational structure of identification be understood as reciprocal—i.e., that it involve symmetry adequate to the context; that it involve the bestowal upon, or acknowledgment of, rights of the identified individual; and that it be transparent—we are, in effect, insisting that identification be tightly bound to recognition of rights. If A may legitimately demand identifying data of BA must acknowledge the rights of BA owes something to B, which B may legitimately demand.

To speak in such terms is, of course, somewhat theoretical. In slightly more practical terms, our point can be made using the example of birth certificates. Registering births is a good thing because, as the child’s identity is registered, it becomes a bearer of rights; the child is, from the point of registration, hence, entitled to various protections by the state. However, as the statistics of birth registration attest, traditional means of identification are failing; and even where identification methods succeed, they are pressurized by the transition to the digital age. Biometric identification systems promise to be, from a technological point of view, adequate to the challenges of the digital age; and if they can be rolled out in accordance with the ideal of the reciprocity of identification, they will be a force for good. Rights will be protected because they will be enshrined in the very process of the state’s identification of its citizens. The state represents its citizens asbearers of rights. The power relations here may not be exactly equal, but they are at least reciprocal. Abuses of power arise where the reciprocity of identification falters.

Civil liberty advocates should not be frightened if it happens—as it has (Giroday, 2010)—that the head of Interpol calls for a globally verifiable electronic identity card (e-ID) system for migrant workers. This is a challenge and an opportunity because a global system of electronic identification is ethically and politically tenable only if it is sided by a global system for claiming fundamental rights and civil liberties; and this becomes increasingly feasible as we can provide everybody with secure and reliable identification. You can tax people, or alternatively identify them, only provided that you give them a political representation. In other words, identification is legitimate as far as it becomes instrumental to the enforcement of their political and civil rights. Identification without civil liberties would be no less abusive than taxation without representation. This is a lesson that—in a time of “tea party protesters”—it is worth remembering.15

Notes
  • 1 We intend no reference to any actual group of that name, should such exist.
  • 2 We do not discuss the other major concern, namely that the technology could be highly invasive of privacy and has the potential to reveal a huge amount of sensitive personal information regarding, say, health, background, lifestyle, and others. In this regard, there is some overlap with the issues discussed in section 2(ii).
  • 3 See, e.g., Kaluszynski (2001), Joseph (2001), as well as Project Bertillon athttp://www.criminocorpus.cnrs.fr/bertillon/enter_uk.html.
  • 4 In all cases bar the first of the following, biometrics is fairly obviously incidental. Even in the first (concerning Agamben) we feel that, ultimately, what is objectionable does not pertain to biometrics.
  • 5 We are here using the word “personal” (and cognates) in a very wide sense, according to which relations between the state and an individual may be described as personal.
  • 6 In the spirit of the (tongue in cheek) adage that 88.5% of statistics are made up, the veracity of these statistics is explored inAaronovitch (2009) and Channel 4 News (2008).
  • 7  There are of course a variety of issues at play in this controversy. Our point is merely that there is a prima facie case to be answered. Whether it can be answered and how is not a point of interest here.
  • 8  It is of course the case that if the primary goal of bearing arms is not to shoot people but, say, to shoot targets for sport, or to have something nice to hang above the mantelpiece, then we might construe the analogy differently. As mentioned in an earlier note, we are not really concerned with the rights and wrongs of gun ownership here.
  • 9  How strongly one reads “bestow” here is likely to depend upon one’s answers to antecedent questions in political philosophy. A certain variety of social contract theorist might suppose that the citizen is, in some sense, born of identification by the state; in which case bestowal here is more or less literal: the state creates the citizen as a bearer of rights. Alternatively, if one holds that rights accrue to the individual independently of the state, identification by the state will involve less of a bestowal and more of an acknowledgment of rights. Our use of “bestow” is not intended to prejudge any of these foundational matters in political ontology and philosophy.
  • 10  In the Kantian mode: the initial bestowal of rights serves as a condition of the possibility of all subsequent legitimate identification transactions between A and B, state and citizen.
  • 11  The use of CCTV in classes would still be objectionable on the grounds of data minimization. What need is there for cameras in classes? If it is for discipline, or for teacher-training, these ends could be met by less intrusive methods. We will not explore the issues.
  • 12  The soldiers appear in the photograph as anonymous. In reality they are (presumably) not, but have at least their names or numbers shown on their uniforms. Let us emphasize again that we are not discussing what or who is literally depicted in the photo, but its wider symbolic significance as an iconic image of the dark side of biometric identification transactions.
  • 13  Again, the facts in Afghanistan may be different, but we are not discussing Afghanistan.
  • 14  Once more: we are not discussing Afghanistan. Perhaps the actual soldiers in the photograph speak the villager’s language—perhaps he speaks theirs. Perhaps there has been a huge publicity campaign about the identification system.
  • 15  This work has been funded by two European Commission research grants, RISE—Rising panEuropean and International Awareness of Biometrics and Security Ethics (GA230389), and TABULA RASA—Trusted Biometrics under Spoofing Attacks (GA 257289).

About the Authors

Emilio Mordini is the founding director of the Centre for ScienceSociety and Citizenship in Rome, Italy. He was Professor of Bioethics in the Medical School of the University of Rome “La Sapienza” (1994–2005), and a member (1994–2000) and secretary (2000–2004) of the Bioethical Commission of the Italian National Research Council. Since 1992 he has served as a contractor in quite a number of European Commission (EC) funded projects. His current board participations include: the Biometric Sector Federation of the Italian Confederation of Education and Knowledge Companies; the Committee for Standardization in ICT Focus Group on Biometrics; and the EC expert group on “ethical and regulatory challenges to science and research policy at the global level.” His research interests include ethical and social implications of security technology policies, and the ethics and policy of biometrics and emerging identification technology. His main publications include Ageing and Invisibility (IOS Press, 2010, edited with P. de Hert), and Second Generation Biometrics: the Ethical and Social Context (Springer, 2011, edited with D. Tzovaras).

Andrew P. Rebera (DPhil, University of Sussex) is a researcher at the Centre for ScienceSociety and Citizenship in Rome, Italy. His research interests include identity, privacy and data protection, surveillance and security, as well as philosophical issues in logic and metaphysics.

 

References



Growing Mistrust of India’s Biometric ID Scheme

May 6th, 2012 | By | Category: News

MAY 4, 2012 | BY REBECCA BOWE

In India, a massive effort is underway to collect biometric identity information for each of the country’s 1.2 billion people. The incredible plan, dubbed the “mother of all e-governance projects” by the Economic Times, has stirred controversy in India and beyond, raising serious concerns about the privacy and security of individuals’ personal data.

The plan is moving ahead at a clip under the auspices of the National Population Register (NPR) and the Unique ID (UID) programs, separately governed initiatives that have an agreement to integrate the data they collect to build the world’s largest biometric database. Upon enrollment, individuals are issued 12-digit unique ID numbers on chip-based identity cards. For residents who lack the necessary paperwork to obtain certain kinds of employment or government services, there’s strong incentive to get a unique ID. While the UID program is voluntary, enrollment in the NPR program is mandatory for all citizens.

The NPR program’s stated objectives are to streamline the delivery of government services such as welfare or subsidies, prevent identity fraud, and facilitate economic development, but some critics contend that the plan has its roots in an agenda focused on national security. Indian journalist Aman Sethi argues in a New York Times Op-Ed that the NPR originated with a 1992 government campaign to deport undocumented Bangladeshi immigrants, and that the creation of a comprehensive identity database was intended “exclusively to assist law enforcement.” And while UID was originally created to target India’s poorest 200 million citizens to facilitate service delivery, it has since been expanded to cover the country’s entire population.

The UID program is administered by the Unique Identity Authority of India (UIDAI), an executive body created to oversee the issuance of unique ID numbers for the stated purpose of facilitating access to benefits and services. At the helm of UID is Nandan Nilekani, a billionaire who made his fortune in the tech industry before ascending to his current role as chairman of the UIDAI.

While the NPR program has been moving ahead since 2004 with a relatively low level of public opposition, the more recently introduced UID project has sparked controversy. UID took center stage during a political feud last December when Parliament’s Standing Committee on Finance rejected a bill establishing the National Identification Authority of India, which would have granted the UID program statutory mandate. Although the bill was submitted in 2010, the UIDAI had already begun processing individuals and issuing numbers pending Parliamentary approval of the legislation, operating under the authority of the executive branch. The committee rejected the reasoning that they had the authority to do so, calling the program’s legality into question.

In late January, a compromise deal was struck between the NPR and the UID program administrators following a political turf war, when officials announced “the NPR and UID projects would proceed side by side to ensure that all Indian citizens have a unique number by June 2013.” Project administrators from UIDAI and India’s Ministry of Home Affairs, which oversees the Indian Census and the NPR program, announced that they would collaborate to de-duplicate the data to eliminate overlap for integration purposes.

Collecting Biometric Data

To date, some 170 million individuals have been registered in the UID program. To perform the data collection, the UIDAI has executed Memoranda of Understanding (MOU) with partners — including states, union territories and 25 financial institutions — to act as registrars for implementing the scheme, according to a Parliamentary committee report.

The registrars, in turn, contract with tech firms such as Wipro, a company that has issued at least 6 million UID numbers in Maharashtra. Agents gather the data by going from village to village to set up processing camps, toting laptops and scanning equipment along with them and scrambling to process as many individuals as possible each day. In addition to demographic information, individuals’ biometric information is collected with iris scanners, fingerprint scanners, and face cameras that employ facial recognition technology. Morpho, a technology company, is a primary UID contractor that develops and maintains systems to crosscheck new applications by sifting through the biometrics database and prevent actual or fraudulent duplication.

The UID program is known as Aadhar, which also refers to the unique 12-digit number citizens are issued upon enrollment. According to recent news reports, a pilot program will link Aadhar with financial and banking services in 50 districts in a move that the UIDAI program director says will “change the financial landscape of the country.”

Nilekani has championed the UID program as a tool that can aid low-income sectors of India’s population by streamlining the delivery of public services and creating a system that is more inclusive to the poor. Yet R. Ramakumar of the Tata Institute of Social Sciences in Mumbai pushes back against this point in an op-ed in The Hindu, charging, “the UID would be an alibi for the state to leave the citizen unmarked in the market for social services.”

And if the interviews with Delhi’s poorest residents in this report is any indication, there’s also a danger that some marginalized individuals could slip through the cracks altogether.

An issue of greater concern, however, is that the biometric database could open the door to significant violations of personal privacy. The Aadhar system became mired in controversy last December surrounding the Parliamentary Standing Committee on Finance’s rejection of legislation that would have given it statutory mandate. In a report, lawmakers based their disapproval on concerns about security, data theft and the fact that that a national data protection law has yet to be enacted.

“The collection of biometric information and its linkage with personal information of individuals without statutory amendment appears to be beyond the scope of subordinate legislation,” committee members wrote.

They also seized on the risk, uncertainty, and potential for privacy violations that would be ushered in under the massive scheme:

“Considering the huge database size and possibility of misuse of information, enactment of a national data protection law, which is at a draft stage, is a prerequisite for any law that deals with large scale collection of information from individuals and its linkages across separate database…The committee is afraid that the scheme may wind up being dependent on private agencies…”

Despite these concerns, the UID program continues, while at the same time, biometric data collection for the NPR moves ahead on a separate track. Mandatory registration for all citizens in the NPR went into effect with the 2004 amendment of the Citizenship Act, providing that“the Central Government may compulsorily register every citizen of India and issue National Identity Card[s].”

Civil Society Responds

The Center for Internet and Society (CIS) has criticized the system due to design flaws that pose security and privacy concerns.

“We don’t need Aadhar because we already have a much more robust identity management and authentication system based on digital signatures that has a proven track record of working at a ‘billions-of-users scale on the Internet with reasonable security,” CIS Director Sunil Abraham noted in a Business Standard op-ed. “The UID project based on the so-called ‘infallibility of biometrics’ is deeply flawed in design. These design disasters waiting to happen cannot be permanently thwarted by band-aid policies.

“Biometrics are poor authentication factors because once they are compromised they cannot be re-secured unlike digital signatures. Additionally, an individual’s biometrics can be harvested remotely without his or her conscious cooperation. The iris can be captured remotely without a person’s knowledge using a high-res digital camera.” (For more detailed information on CIS’s work on India’s UID program, see hereherehereherehere, and here.

Delhi-based NGOs have also condemned UID as an affront to civil liberties that violates citizens’ basic constitutional right to privacy.

In his Op-Ed, Ramakumar echoes Indian economist Amartya Sen in arguing that the system could open the door to abuse by law enforcement:

“There is a related concern: police and security forces, if allowed access to the biometric database, could extensively use it for regular surveillance and investigative purposes, leading to a number of human rights violations. As Amartya Sen has argued elsewhere, forced disclosure and loss of privacy always entailed ‘the social costs of the associated programs of investigation and policing.’ According to him, ‘some of these investigations can be particularly nasty, treating each applicant as a potential criminal.’”

Meanwhile, famed activist Arundhati Roy voiced scathing criticism against India’s biometric collection scheme, saying, “The UID is a corporate scam which funnels billions of dollars into the IT sector. To me, it is one of the most serious transgressions that is on the cards. It is nothing more than an administrative tool in the hands of a police state.”

It is irrationally excessive to collect this sensitive biometric data in a centralized nation-wide ID scheme. The massive collection of biometric information in a centralized ID scheme is not necessary nor proportionate in a democratic society.

EFF has documented (herehere, and here) the function creep risks that this data collection poses to privacy and security, including in those countries with data protection laws like the European Union. Informed analysis of the long-term consequences of the misused and secondary uses of this data collection and its impact in people’s lives should have been given to all citizens before the collection even started. There is still time to ask the Indian government to dismantle that colossal database, like the UK did.



Information Technology – Israel New Biometric ID database raises significant privacy concerns

Sep 22nd, 2011 | By | Category: News

 The act as a whole (and the biometric database specifically) raises significant concerns. Privacy advocates have urged the Home Office to re-evaluate the potential grave risks to information security and privacy that the database poses – for example, the irreversibility of biometric data loss and the public’s general mistrust of the government’s ability to secure the database. A proposition to transform the database into a blurred set-base that would enhance security and privacy was recently offered by Professor Adi Shamir, a well-known cryptographer. However, despite backing from the Law Information and Technology Authority, the government eventually rejected Shamir’s proposition.

 

Contributed by Pearl Cohen Zedek Latzer

 

September 20 2011

New regulations and orders introduced by the Ministers’ Committee for Biometric Applications have paved the way for a two-year trial period for the issuance of biometric identification documents (IDs). The Ministry of Home Affairs is in the process of making its final preparations and aims to start issuing the IDs shortly. The IDs will contain encoded fingerprints and a facial image, and will be stored in a national database. A campaign led by privacy activists against the controversial biometric database has thus far failed to yield a positive result.In December 2009 the Israeli Parliament (the Knesset) enacted the Biometric Identifiers and Biometric Data Inclusion in Identification Documents and a Database Act.(1) The act is intended to tackle the large-scale loss and theft of identification cards and passports, which may then later be used by criminals or terrorists.The Biometric Data Act is far reaching. Following a two-year trial period, every citizen will be compelled to provide two fingerprint samples and a facial photograph, to be digitally stored in a national database and on chips embedded in passports and national IDs (mandatory in Israel for citizens over the age of 16). The digital ID will also carry a certified electronic signature that can be used as a substitute for regular handwritten signatures in the execution of transactions.

The biometric database is not intended solely to manage the processing of ID and passports applications. It will also serve as a valuable source of information for law enforcement agencies, under the supervision of a new authority that has been established specifically for that purpose by the Ministry of Home Affairs.

The act as a whole (and the biometric database specifically) raises significant concerns. Privacy advocates have urged the Home Office to re-evaluate the potential grave risks to information security and privacy that the database poses – for example, the irreversibility of biometric data loss and the public’s general mistrust of the government’s ability to secure the database. A proposition to transform the database into a blurred set-base that would enhance security and privacy was recently offered by Professor Adi Shamir, a well-known cryptographer. However, despite backing from the Law Information and Technology Authority, the government eventually rejected Shamir’s proposition.

The new regulations under the Biometric Data Act include procedures for:

  • issuing a biometric ID;
  • taking fingerprints and facial images from applicants;
  • encrypting and securing the data; and
  • transferring data between authorities.(2)

A governmental order accompanies the regulations and sets specific rules for the two-year trial period.(3)During this period (starting in November 2011), biometric IDs will be issued to Israeli citizens, subject to their written and signed consent. At the end of the trial period, professional auditors will evaluate the extent of the trial’s success, under a set of pre-determined parameters and following feedback from applicants. Unless the Ministry of Home Affairs decides otherwise, in light of the trials results and public debate, the Biometric Data Act will come into full effect at the end of the trial period and all citizens will be obliged to provide their biometric data, which will be included in IDs and passports, and stored in the national database.

 

For further information on this topic please contact Haim Ravia or Dan Or-Hof at Pearl Cohen Zedek Latzer by telephone (+972 9 972 8000), fax (+972 9 972 8001) or email (haimr@pczlaw.com ordano@pczlaw.com).

Endnotes

(1) The full wording of the Biometric Data Act (in Hebrew) is available at http://law.co.il/media/computer-law/biometric_law.pdf.

(2) The full wording of the new regulations (in Hebrew) is available at http://law.co.il/media/computer-law/biometric_id_reg.pdf.

(3) The full wording of the governmental order (in Hebrew) is available at http://law.co.il/media/computer-law/biometric_id_decree.pdf.

 

 



Canada to launch biometric passports by 2012 – Critics warn privacy at risk

Sep 18th, 2011 | By | Category: News

By Amy Chung, Postmedia News September 15, 2011

Some countries, such as France and Germany, implemented “ePassports” (with Empty Biometric information on their chip) five years ago to allow their citizens to travel to the U.S. under its Visa Waiver Program, which requires participating countries to have specified security measures on their passports. Canadians do not require a visa to enter the U.S. and are not subject to the program. Despite the new passport’s enhanced security features, some information security experts say the document is not necessary and can be vulnerable to privacy leaks.

The current Canadian passports will soon be replaced with a more high-tech design. Photograph by: Tom Hanson   Read more: http://www.canada.com/news/Canada+launch+biometric+passports+2012/5404109/story.html#ixzz1YHrR1K6w

 

OTTAWA — Canada’s long awaited ePassports will be ready by the end of 2012, making this country the last among G8 nations to have enhanced digital security measures on the documents.

The electronic passport program was first announced as part of the government’s National Security Policy in 2004.  Also known as a biometric passport, the document looks like the traditional book but will contain an electronic chip encoded with the bearer’s name, sex, date and place of birth, as well as a digital image of the person.

According to Passport Canada, 95 countries have issued approximately 350 million Biometric passports worldwide.

Asked why Canada was so late in bringing about the passports, Passport Canada spokeswoman Beatrice Fenelon said the agency had to repatriate overseas passport printing to Canada, which was completed in 2006, and it had to implement new facial recognition technologies.

Also, Fenelon said between 2007 and 2009, the department was flooded with increased numbers of passport applications when the U.S. Western Hemisphere Travel Initiative required Canadians to show their passports to enter the United States.

“As a result, the organization was not able to turn its full attention to the ePassport project until 2009, when planning began in earnest,” Fenelon wrote in an email.

Some countries, such as France and Germany, implemented “ePassports” (with Empty Biometric information on their chip) five years ago to allow their citizens to travel to the U.S. under its Visa Waiver Program, which requires participating countries to have specified security measures on their passports. Canadians do not require a visa to enter the U.S. and are not subject to the program. Despite the new passport’s enhanced security features, some information security experts say the document is not necessary and can be vulnerable to privacy leaks.

“After 9/11, the U.S. pressured the visa waiver countries to get (ePassports). Canada was out of that, but we were encouraged to go along with it,” said professor Andrew Clement, who coordinates the Information Policy Research Program at the University of Toronto. Clement says there has not been enough discussion to say if there are any problems with our current passport.

“With the 19 hijackers, there were a couple who had expired visas and not travelling under false documents. So it’s a bit of security theatre. So I think this was brought in for other reasons and there hasn’t been any debate if it’s a good thing or not,” said Clement. He said the facial recognition technology can allow border agents to screen your image in other databases like watch lists, creating risks of misidentification.

“It’s concerning that our everyday activity is surveyed, even if our behaviour is innocent, it could get the attention of authorities unnecessarily,” said Clement.

Postmedia News

© Copyright (c) Postmedia News

Dr. Ann Cavoukian, Information & Privacy Commissioner of Ontario, Canada



Fake biometric eye stamps: Three arrested at DIA

Sep 5th, 2011 | By | Category: Evidence

DNRD has referred three people – two Russians and a Moldavian – to Dubai International Airport (DIA) Police, for suspicion of smuggling forged Eye Biometrics Recognition Stamps

WAM –  UAE | General

XPRESS

The Naturalization and Residency Department in Dubai (DNRD), has referred three people – two Russians and a Moldavian – to Dubai International Airport (DIA) Police, for suspicion of smuggling forged Eye Biometrics Recognition Stamps with intent to facilitate the entry to the UAE of individuals who were previously banned.

A team of DNRD officers, consisting of preventive security staff and airports investigation department personnel, succeeded in arresting ‘F. Sh’, a 17-years-old Russian, at DIA, after he surrendered 72 fake Eye Biometrics Recognition stamps. Another suspect ‘Kh.A’, a 34-year-old Russian, who received the bag containing the fake stamps, was also captured.

A third suspect, ‘A.M’, 21 years old female holder of Moldavian passport was also arrested at the DIA with a laptop and 5 ink pads and later she acknowledged that she was going to deliver them to the first suspect. The DIA team prepared a criminal report against the three and referred them to special task forces for further investigation.

Major-General Mohammed Ahmed Al Marri, DNRD Director, revealed that the number of individuals arrested through the Iris Scan System at DIA reached 1,325 in 2006, which increased to 3,626 and 4,382 in 2007 and the first half of 2008, respectively.

 



Germany says “nein” to full-body scanners

Sep 4th, 2011 | By | Category: News

Germany has decided against deploying full-body scanners at German airports; after a 10-month trial, in which 1,280,000 passengers were scanned, the government said that the false alarm rate was just too high

Published 2 September 2011


Germany has decided against deploying full-body scanners at German airports; after a 10-month trial, in which 1,280,000 passengers were scanned, the government said that the false alarm rate was just too high

After trials which lasted ten month, the German government has decided against deploying full-body scanners at German airports.

The German Interior Ministry said that “the technology is not mature enough for the available equipment to be used in practice” and that it will therefore not be installed at the county’s airports “for the time being.”

The ministry spokesperson said that the agencies responsible for airport security were leaning toward supporting the use of body scanners to “improve efficiency and effectiveness of air transport security checks,” but that the trials showed that there were “too many” false alarms.

FlightGlobal quotes sources in the German federal police as saying that the false alarm rate was “significantly higher than 50 percent.”

There were also concerns about the health effects of backscatter X-ray scanners, so the system tested used millimeter wave technology.

The test was conducted at the Hamburg Airport from September 2010 to July 2011, and involved scanning 1,289,000 passengers.

 



Expert warns facial biometrics could compromise privacy

Aug 31st, 2011 | By | Category: News

As facial biometric technology becomes increasingly ubiquitous, IT experts warn that these systems can easily be abused and therefore require stringent privacy policies and data encryption

Published 30 August 2011

 

As facial biometric technology becomes increasingly ubiquitous, IT experts warn that these systems can easily be abused and therefore require stringent privacy policies and data encryption.

In an interview with Information Security Media Group, Beth Givens, the founder and director of the Privacy Rights Clearinghouse, cautioned that organizations using biometric facial solutions should encrypt their data.

“If they back up those applications with good, solid privacy policies and practices, they’ll be in good shape,” she said.

Givens explained that a major problem with facial recognition technology is the chance that sensitive information could be compromised. As evidence, Givens pointed to a Carnegie Mellon University study where researchers used only a photo of a person’s face and publicly available information to track down that individual’s birth date, personal interests, and Social Security number.

“To me, that’s astounding,” Givens said. “There are many places where you can get a person’s birth date; in fact, that’s public information. But being able to link it to a Social Security number as well as personal interest is another matter entirely, that takes it to an all new level.”

To help protect against the loss of sensitive data, Givens encouraged organizations to investigate biometric encryption.

 



Massive Biometric Project Gives Millions of Indians an ID

Aug 29th, 2011 | By | Category: News

More than 16 million Indians’ people have since been enrolled, and the pace is accelerating. By the end of 2011, the agency expects to be signing up, 1 million Indians a day, and by 2014, it should have 600 million people in its database. It takes about 10 minutes to enter someone into the Aadhaar database. A single UID, earlier estimated to cost around Rs 31 per person, may now end up in the Rs 400-500 territory. The reason: in one hour there are only 60 minutes it is 6 people per hour the “mission” is to provide 1 million ID’s per 24 hours… all that efforts just to create a USELESS invasive Biometric’s  collection on a “national database”…. India is a democratic country… with democratic privacy laws (!!!???)… {Innovya}

  • By Vince Beiser
  • August 19, 2011  |
  • 1:27 pm  |
  • Wired September 2011
  • 

    In India, hundreds of millions of impoverished people have no ID—which means no bank account, credit, insurance, or government aid. Photo: Jonathan Torgovnik; Fingerprints: Getty

    In India, hundreds of millions of impoverished people have no ID—which means no bank account, credit, insurance, or government aid. Photo: Jonathan Torgovnik; Fingerprints: Getty

 

The courtyard, just off a busy street in a Delhi slum called Mongolpuri, is buzzing with people—men in plastic sandals arguing with one another, women in saris holding babies on their hips, skinny young guys chattering on cheap cell phones. New arrivals take up positions at the end of a long queue leading to the gated entry of a low cement building. Every so often, a worker opens the gate briefly and people elbow their way inside onto a dimly lit stairway, four or five on each step. Slowly they work their way upward to a second-story landing, where they are stopped again by a steel grille.

After a long wait, a lean woman in a sequined red sari, three children in tow, has finally made it to the head of the line. Her name is Kiran; like many poor Indians, she uses just one name. She and her school-age brood stare curiously through the grille at the people and machines on the other side. Eventually, an unsmiling man in a collared shirt lets them into the big open room. People crowd around mismatched tables scattered with computers, printers, and scanners. Bedsheets nailed up over the windows filter the sun but not the racket of diesel buses and clattering bicycles outside. Kiran glances at the brightly colored posters in Hindi and English on the walls. They don’t tell her much, though, since she can’t read.

A neatly dressed middle-aged man leads the children to a nearby table, and a brisk young woman in a green skirt sits Kiran down at another. The young woman takes her own seat in front of a Samsung laptop, picks up a slim gray plastic box from the cluttered tabletop, and shows Kiran how to look into the opening at one end. Kiran puts it up to her face and for a moment sees nothing but blackness. Then suddenly two bright circles of light flare out. Kiran’s eyes, blinking and uncertain, appear on the laptop screen, magnified tenfold. Click. The oversize eyes freeze on the screen. Kiran’s irises have just been captured.

Kiran has never touched or even seen a real computer, let alone an iris scanner. She thinks she’s 32, but she’s not sure exactly when she was born. Kiran has no birth certificate, or ID of any kind for that matter—no driver’s license, no voting card, nothing at all to document her existence. Eight years ago, she left her home in a destitute farming village and wound up here in Mongolpuri, a teeming warren of shabby apartment blocks and tarp-roofed shanties where grimy barefoot children, cargo bicycles, haggard dogs, goats, and cows jostle through narrow, trash-filled streets. Kiran earns about $1.50 a day sorting cast-off clothing for recycling. In short, she’s just another of India’s vast legions of anonymous poor.

Now, for the first time, her government is taking note of her. Kiran and her children are having their personal information recorded in an official database—not just any official database, but one of the biggest the world has ever seen. They are the latest among millions of enrollees in India’s Unique Identification project, also known as Aadhaar, which means “the foundation” in several Indian languages. Its goal is to issue identification numbers linked to the fingerprints and iris scans of every single person in India.

That’s more than 1.2 billion people—everyone from Himalayan mountain villagers to Bangalorean call-center workers, from Rajasthani desert nomads to Mumbai street beggars—speaking more than 300 languages and dialects. The biometrics and the Aadhaar identification number will serve as a verifiable, portable, all but unfakable national ID. It is by far the biggest and most technologically complicated biometrics program ever attempted.

Aadhaar faces titanic physical and technical challenges: reaching millions of illiterate Indians who have never seen a computer, persuading them to have their irises scanned, ensuring that their information is accurate, and safeguarding the resulting ocean of data. This is India, after all—a country notorious for corruption and for failing to complete major public projects. And the whole idea horrifies civil libertarians. But if Aadhaar’s organizers pull it off, the initiative could boost the fortunes of India’s poorest citizens and turbocharge the already booming national economy.

It takes about 10 minutes to enter someone into the Aadhaar database. Photo: Jonathan Torgovnikf

It takes about 10 minutes to enter someone into the Aadhaar database. Photo: Jonathan Torgovnik

 

 

It takes about 10 minutes to enter someone into the Aadhaar database.
Photo: Jonathan Torgovnik

The Indian government has tried to implement national identity schemes before but has never managed to reach much more than a fraction of the population. So when parliament set up the Unique Identification Authority of India in 2009 to try again with a biometrically based system, it borrowed a trick used by corporations all over the world: Go to an outsourcer. The government tapped billionaire Nandan Nilekani, the “Bill Gates of Bangalore.”

Nilekani is about as close to a national hero as a former software engineer can get. He cofounded outsourcing colossus Infosys in 1981 and helped build it from a seven-man startup into a $6.4 billion behemoth that employs more than 130,000 people. After stepping down from the CEO job in 2007, Nilekani turned most of his energy to public service projects, working on government commissions to improve welfare services and e-governance. He’s a Davos-attending, TED-talk-giving, best-seller-authoring member of the global elite, pegged by Time magazine in 2009 as one of the world’s 100 most influential people. This is the guy who suggested to golf buddy Thomas Friedman that the world was getting flat. “Our government undertakes a lot of initiatives, but not all of them work,” says B. B. Nanawati, a career federal civil servant who heads the program’s technology-procurement department. “But this one is likely to work because of Chairman Nilekani’s involvement. We believe he can make this happen.”

The Unique Identification Authority’s headquarters occupies a couple of floors in a hulking tower complex of red stone and mirrored glass on Connaught Place, the bustling center of Delhi. As chair of the project, Nilekani now holds a cabinet-level rank, but his shop looks more like a startup than a government ministry. When I show up in February, the walls of the reception area are still bare drywall, and the wiring and air-conditioning ducts have yet to be hidden behind ceiling tiles. Plastic-wrapped chairs are corralled in unassigned offices.

“I took this job because it’s a project with great potential to have an impact,” Nilekani says in his spacious office, decorated with only a collection of plaques and awards and an electric flytrap glowing purple in a corner. He’s a medium-size man of 56 with bushy salt-and-pepper hair and a matching mustache. His heavy eyebrows and lips and protuberant brown eyes give him a slightly baleful look, like the villain in a comic opera. “One basic problem is people not having an acknowledged existence by the state and so not being able to access things they’re entitled to. Making the poor, the marginalized, the homeless part of the system is a huge benefit.”

Aadhaar is a key piece of the Indian government’s campaign for “financial inclusion.” Today, there are as many as 400 million Indians who, like Kiran, have no official ID of any kind. And if you can’t prove who you are, you can’t access government programs, can’t get a bank account, a loan, or insurance. You’re pretty much locked out of the formal economy.

Today, less than half of Indian households have a bank account. The rest are “unbanked,” stuck stashing whatever savings they have under the mattress. That means the money isn’t gaining interest, either for its owner or for a bank, which could be loaning it out. India’s impoverished don’t have much to save—but there are hundreds of millions of them. If they each put just $10 into a bank account, that would add billions in new capital to the financial system.

To help make that happen, Nilekani has recruited ethnic Indian tech stars from around the world, including the cofounder of Snapfish and top engineers from Google and Intel. With that private-sector expertise on board, the agency has far outpaced the Indian government’s usual leisurely rate of action. Aadhaar launched last September, just 14 months after Nilekani took the job, and officials armed with iris and fingerprint scanners, digital cameras, and laptops began registering the first few villagers and Delhi slum dwellers. More than 16 million people have since been enrolled, and the pace is accelerating. By the end of 2011, the agency expects to be signing up 1 million Indians a day, and by 2014, it should have 600 million people in its database.

More than 1.2 billion indians will be in the system—the biggest biometrics database on earth. Photos: Jonathan Torgovnik

More than 1.2 billion indians will be in the system—the biggest biometrics database on earth. Photos: Jonathan Torgovnik

 

 

More than 1.2 billion indians will be in the system—the biggest biometrics database on earth.
Photos: Jonathan Torgovnik

The village of Gagenahalli sits amid a placid quilt of green millet and tomato fields in the hinterlands of Karnataka state, some 1,300 miles south of Delhi. Bulls with tassels on their horns pull wooden carts decorated with deities and demons past tiny, cheerily painted houses of dried mud. Old men and skinny cows lounge in the shade of baobab trees. It’s a lovely place to visit but a hard place to live. Many of Gagenahalli’s 8,500 residents are landless peasants, and about three-quarters subsist below India’s official poverty line, earning less than a dollar a day.

Most Indians still live in rural hamlets like this, so getting them enrolled in Aadhaar requires some creativity. One evening not long ago, a man walked through Gagenahalli’s red-dirt streets beating a drum and calling the villagers to gather outside—the traditional way to make public announcements. He explained that the government wanted everyone to visit the village schoolhouse in the weeks ahead to be photographed.

A few days later, Shivanna, a stringy 55-year-old farmer—again, with just the one name—presents himself in a cement classroom commandeered by the agency. He doesn’t know what it’s all about, nor is he particularly interested. “When the government asks to take your picture, you just go and do it,” he shrugs. Shivanna takes a worn plastic chair at one of the four enrollment stations set up about the room. All the computer gear and the single bare lightbulb are plugged into a stack of car batteries and kerosene-powered generators—the village gets only a few hours of electricity a day from the national grid.

A young man in a polo shirt records Shivanna’s personal information in a form on his laptop. It’s bare-bones stuff: name, address, age, gender (including the option of transgender). He has Shivanna look into a camera mounted on the laptop. Once the Aadhaar software tells him he’s got Shivanna’s full face in the frame and enough light, he snaps the picture. The program runs similar quality checks on the agent’s work as Shivanna looks into the iris scanner and then puts his fingers on the glowing green glass of the fingerprint scanner. “We had to dumb it down so that anyone could learn to use the software,” says Srikanth Nadhamuni, Aadhaar’s head of technology, as he watches the scan progress.

About 100 miles east of Gagenahalli is Bangalore, the center of India’s booming IT industry. In one of its southern suburbs, across a busy street from Cisco’s in-country headquarters, sits the office building housing Aadhaar’s Central ID Repository. The information collected from Shivanna the farmer, Kiran the rag sorter, and every other person enrolled in the Aadhaar system gets sent here, electronically or via couriered hard drive.

This is Nadhamuni’s domain. He’s a trim, energetic, half-bald engineer with geek-chic rectangular glasses. His English is full of the awesomes and likes that he picked up in Silicon Valley, where he worked for 14 years. In 2002, he, his engineer wife, and their two kids returned to India, and a year later he and Nilekani launched a nonprofit dedicated to digitizing government functions. Nilekani even kicked the organization a few million dollars.

Some of the projects that Nadhamuni worked on—computerizing birth and death records, improving the tracking of schoolkids in migrant worker families—impressed upon him how much India needed a central identity system. When Nilekani asked him to be point man for the task of wrangling Aadhaar’s data, Nadhamuni says, “I was, like, delighted.”

The offices, like the identity program’s Delhi headquarters, are still under construction. When I tour them, rolls of carpet tied with string are stacked along a wall, and workers’ bare feet have left plaster-dust prints in a corridor leading to an unfinished meeting room. The rows of cubicles that will eventually accommodate roughly 400 workers are only about half full. The wall intended for a dozen video monitors showing incoming data packets is, for now, empty.

Getting the poor into the system is a huge benefit, says Nandan Nilekani. Photo: Jonathan Torgovnik

Getting the poor into the system is a huge benefit, says Nandan Nilekani. Photo: Jonathan Torgovnik

 

 

Getting the poor into the system is a huge benefit, says Nandan Nilekani.
Photo: Jonathan Torgovnik

Each individual record is between 4 and 8 megabytes; add in a pile of quality-control information and the database will ultimately hold in the neighborhood of 20 petabytes—that is, 2 x 1016 bytes. That will make it 128 times the size of the biggest biometrics database in the world today: the Department of Homeland Security’s set of fingerprints and photos of 129 million people.

The unprecedented scale of Aadhaar’s data will make managing it extraordinarily difficult. One of Nadhamuni’s most important tasks is de-duplication, ensuring that each record in the database is matched to one and only one person. That’s crucial to keep scammers from enrolling multiple times under different names to double-dip on their benefits. To guard against that, the agency needs to check all 10 fingers and both irises of each person against those of everyone else. In a few years, when the database contains 600 million people and is taking in 1 million more per day, Nadhamuni says, they’ll need to run about 14 billion matches per second. “That’s enormous,” he says.

Coping with that load takes more than just adding extra servers. Even Nadhamuni isn’t sure how big the ultimate server farm will be. He isn’t even totally sure how to work it yet. “Technology doesn’t scale that elegantly,” he says. “The problems you have at 100 million are different from problems you have at 500 million.” And Aadhaar won’t know what those problems are until they show up. As the system grows, different components slow down in different ways. There might be programming flaws that delay each request by an amount too tiny to notice when you’re running a small number of queries—but when you get into the millions, those tiny delays add up to a major issue. When the system was first activated, Nadhamuni says, he and his team were querying their database, created with the ubiquitous software MySQL, about 5,000 times a day and getting answers back in a fraction of a second. But when they leaped up to 20,000 queries, the lag time rose dramatically. The engineers eventually figured out that they needed to run more copies of MySQL in parallel; software, not hardware, was the bottleneck. “It’s like you’ve got a car with a Hyundai engine, and up to 30 miles per hour it does fine,” Nadhamuni says. “But when you go faster, the nuts and bolts fall off and you go, whoa, I need a Ferrari engine. But for us, it’s not like there are a dozen engines and we can just pick the fastest one. We are building these engines as we go along.”

Using both fingerprints and irises, of course, makes the task tremendously more complex. But irises are useful to identify the millions of adult Indians whose finger pads have been worn smooth by years of manual labor, and for children under 16, whose fingerprints are still developing. Identifying someone by their fingerprints works only about 95 percent of the time, says R. S. Sharma, the agency’s director general. Using prints plus irises boosts the rate to 99 percent.

That 1 percent error rate sounds pretty good until you consider that in India it means 12 million people could end up with faulty records. And given the fallibility of little-educated technicians in a poor country, the number could be even higher. A small MIT study of data entry on electronic forms by Indian health care workers found an error rate of 4.2 percent. In fact, at one point during my visit to Gagenahalli, Nadhamuni shows me the receipt given to a woman after her enrollment; I point out that it lists her as a man. A tad flustered, Nadhamuni assures me that there are procedures for people to get their records corrected. “Perfect solutions don’t exist,” Nilekani says, “but this is a substantial improvement over the way things are now.”

For the past year or so, Mohammed Alam, 24, has spent his nights in a charity-run Delhi “night shelter” for the homeless. Inside the weathered cement building, nearly 100 men and one 3-year-old boy in various states of dishevelment sprawl on worn cotton mats in a gloomy open room. A bloody Bollywood action movie flickers on a small TV sitting on a folding table in a corner. The stench of ammonia wafts from the group bathroom across the foyer.

Alam looks markedly healthier than most of his compeers, his glossy black hair elaborately gelled and his teal shirt and jeans spotless. He left his home in Lucknow because of family problems he’d rather not specify and has been getting by in the capital ever since, doing odd labor jobs. In a good month, he pulls in about $50. That makes it hard to afford his own place to live. But the Unique Identification Authority came to enroll the shelter’s inhabitants a few weeks ago, and Alam just received a letter from the authority with his randomly generated 12-digit Aadhaar number.

The authority doesn’t issue cards or formal identity documents. Once enrolled, each person’s eyeballs and fingertips are all they need to prove who they are—in theory, anyway. For now Alam keeps the folded-up letter in his pocket. It serves as ID when the police stop him, he says. But more important, he just used it to open a bank account. “I tend to spend more money when it’s on me,” he says.

Local grocers could act as banks, doling out cash and accepting deposits for a small fee.

That’s exactly the kind of thinking Nilekani is counting on. One of his first major coups was persuading India’s central bank to declare the Aadhaar number adequate identification to issue no-frills accounts. Bringing biometrically verified banking to the poor could lead to enormous savings in government benefit programs—for both the recipients and the state. Today, a pensioner in a village like Gagenahalli has to take a bus to the nearest town to collect his monthly payment in cash. That’s time and money lost for him. Meanwhile, more than 40 percent of the government’s $250 billion in subsidies and other spending on the poor will be siphoned off by scammers over the next five years, according to investment group CLSA. Both problems could largely be solved if instead the funds were sent straight to bank accounts held by biometrically verified recipients. “It’s like having 1.2 billion pipes through which you can send the benefits directly,” Sharma says. Connecting the poor to banks could also enable some of them to get loans to start businesses or pay for their children’s education.

Banks, however, are in short supply in the countryside, where most Indians live; the one nearest to Gagenahalli is 7 miles away. That’s one reason only 47 percent of Indian households have bank accounts (compared with 92 percent in the US). So Indian financial institutions have begun introducing “business correspondents” into bankless areas, essentially deputizing some shopkeeper or other trusted local who has access to a little cash to handle villagers’ tiny deposits and withdrawals. Here’s how it’s supposed to work: Say Shivanna wants 50 rupees from his savings account. Instead of schlepping miles to an actual bank, he goes to the little kiosk down the road from his house. The guy in the kiosk scans Shivanna’s fingerprints with an inexpensive handheld machine. (There are several on the market already; other similar gadgets—and even cell phone apps—that scan irises are in the works.) Then he transmits the image via cellular network to the tech hub in Bangalore and gets a simple confirmation-of-identity message. (The same process works for deposits.) Once Shivanna’s identity is validated, the kiosk guy gives him his cash or deposit receipt, minus a small commission. Shivanna’s bank reimburses the kiosk guy. Shivanna saves time and money, the kiosk guy makes a little profit, the bank gets more capital, and the rising tide lifts all boats.

Many Indians' finger pads have been worn smooth by years of manual labor. Photo: Jonathan Torgovnik

Many Indians' finger pads have been worn smooth by years of manual labor. Photo: Jonathan Torgovnik

 

 

Many Indians’ finger pads have been worn smooth by years of manual labor.
Photo: Jonathan Torgovnik

In practice, of course, all kinds of things might go wrong. “Some iris scanners can be fooled by a high-quality photo pasted onto a contact lens,” says a senior exec from a biometrics-equipment maker working on the project. Fingerprints can be lifted from almost anything you touch, and a laser-printer reproduction of one will have tiny ridges of ink that may fool scanners. Or a corrupt Aadhaar worker could pair a scammer’s name with someone else’s biometrics. The system is being built with open architecture so other agencies and businesses can add their own applications. The idea is to make Aadhaar a platform for all kinds of purposes beyond government benefits and banking, much like a smartphone is a platform for more than making phone calls. In January, the Indian Department of Communications declared Aadhaar numbers to be adequate ID to get a mobile phone. It’s easy to imagine the numbers being used to authenticate airline passengers, track students, improve land ownership records, and make health records portable. But opening up the Aadhaar system so widely makes it vulnerable. Each record is encrypted on the enroller’s hard drive as soon as it’s completed, and the central database will have state-of-the-art safeguards. Still, Sharma acknowledges, “there’s no lock in the world that can’t be broken.”

Anyway, Nadhamuni points out, credit card numbers are stolen all the time, but everyone still uses them because the card companies have come up with enough ways to spot when they’re being used fraudulently. In the big scheme of things, credit card fraud is a relatively small problem compared with the gigantic benefit of being able, say, to buy stuff online. He believes the same calculus will hold for Aadhaar. And if Aadhaar data is stolen, they have countermeasures to deal with it.

There’s also the question of whether India’s cell phone network, which will carry the bulk of the verification requests, can handle such a load. “We expect to be getting 100 million requests per day in a few years,” Nadhamuni says. “And the authentication needs to happen fast. The answer needs to come back in maybe five seconds.” Partly to meet that demand, the federal government is investing billions to massively expand the nation’s broadband capacity. “It’s not there yet,” Nilekani says. “But if someone had told you 10 years ago that there would be 700 million mobile phones in this country today, you’d say he was smoking something.”

The technological problems may pale compared to the potential civil liberties issues. Anti-Aadhaar protesters showed up at Nilekani’s January speech at the National Institute of Advanced Studies. Several anti-Aadhaar websites have sprung up. And members of parliament and prominent intellectuals have criticized the whole idea. (A Christian sect even denounced it as a cover for introducing the number of the Beast.)

Technically, Aadhaar is voluntary. No one is obligated to get scanned into the system. But that’s like saying no American is obligated to get a Social Security number. In practice, once the Aadhaar system really takes hold, it will be extremely difficult for anyone to function without being part of it. “I find it obnoxious and frightening,” says Aruna Roy, one of India’s most respected advocates for the poor (and, like Nilekani, one of Time’s 100 most influential people). India, she points out, is a country where people have many times been targeted for discrimination and violence because of their religion or caste.

Earlier this year, privacy concerns scuttled an effort to give every citizen of the United Kingdom a biometric ID card, and similar worries have slowed ID plans in Canada and Australia. “But the intentions were very different. It comes more from a security and surveillance perspective,” Nilekani says. “Many of these countries already have ID. In our situation, our whole focus is on delivering benefits to people. It’s all about making your life easier.”

The Unique Identification Authority is very deliberately not collecting information on anyone’s race or caste. But local governments and other agencies subcontracted to collect data are permitted to ask questions about race or caste and link the information they harvest to the respondent’s Aadhaar number. In Gagenahalli, for instance, agents asked villagers several extra questions about their economic conditions that the Karnataka state government requested. “I haven’t seen any agencies asking for caste or religion, but the fact that they can seems problematic,” admits a midlevel Aadhaar official who asked to remain anonymous. And while the agency has pledged not to share its data with security services or other government agencies, “if they want to, they can,” says Delhi human rights lawyer Usha Ramanathan. “All that information is in the hands of the state.” It’s not an unreasonable concern; in the wake of the Mumbai terror attacks, security is a major preoccupation in India. Armed guards, x-ray machines, and metal detectors are standard features at the entrances of big hotels, shopping centers, and even Delhi subway stations. Police officials have told Indian newspapers that they would love to use Aadhaar numbers to help catch criminals. And, in fact, some of the agency’s own publicly available planning documents mention the system’s potential usefulness for security functions. “We would share data for national security purposes,” Nilekani admits. “But there will be processes for that so you have checks and balances.” Every official I speak with, from Nilekani on down, seems impatient when I bring up this issue. They breezily remind me that there’s an electronic data privacy bill before parliament—as though the mere fact that the government is thinking about the issue is enough.

For supporters, the bottom line is simple: The upsides beat the downsides. “Any new technology has potential risks,” Nilekani says. “Your mobile phone can be tapped and tracked. One could argue we already have a surveillance state because of that. But does that mean we should stop making mobile phones? When you have hundreds of millions of people who are not getting access to basic services, isn’t that more important than some imagined risk?”

Indeed, Kiran, the mother of three at the Mongolpuri enrollment station, actively wants the government to have a record of her and her children. She’s a bit mystified when I ask if the idea worries her. If you’ve never read a newspaper, let alone fretted over your Facebook privacy settings, the question of whether the government might abuse your digital data must seem pretty abstract—especially when you compare it with the benefits the government is offering.

The first thing Kiran plans to use her Aadhaar number for, she says, is to obtain a city government card that will entitle her to subsidized groceries. “I’ve tried very hard to get one before, but they wouldn’t give it to me because I couldn’t prove I live in Delhi,” she says. Having that proof will take some other stress off her mind, too. She’s constantly afraid the police will order non-Delhi residents to leave the overcrowded slum, but now she has something to show them if they do.

Her three children come running up, fresh from having their own irises scanned. They’re excitedly waving their receipts for the numbers that will be attached to them for the rest of their lives. “It was fun!” 7-year-old Sadar says. “It wasn’t scary at all.”

Vince Beiser (@vincelbwrote about activists combating Chinese online censorship in issue 18.11.

 

 



Facial Biometrics Pose Privacy Woes

Aug 29th, 2011 | By | Category: News


Lack of Consent Bothers Privacy Advocate Beth Givens

Privacy Advocate Beth Givens explains that use of facial recognition technology could:

  • Violate privacy rights by not getting an individual’s consent.
  • Result in unequal treatment of consumers by businesses.
  • Encourage stalking and violence.



August 29, 2011 – Eric Chabrow, Executive Editor, GovInfoSecurity.com

 

Facial recognition technology could prove to be an effective way to authenticate individuals seeking entry to secured buildings or databases storing sensitive information. But the biometric technology already is being abused, and IT security managers employing facial recognition should be careful to encrypt the biometric data, cautions a privacy rights leader.

“If they back up those applications with good, solid privacy policies and practices, they’ll be in good shape,” Beth Givens, founder and director of the Privacy Rights Clearinghouse, says in an interview with Information Security Media Group (select one of Podcast Options at right to listen).

Givens says the danger of privacy loss is a major problem with facial recognition technology. She cites a Carnegie Mellon University study in which using only a photo of a person’s face and information publicly available online, researcher identified the person’s birth date, personal interests and Social Security number.

“To me, that’s astounding,” Givens says. “There are many places where you can get a person’s birth date; in fact, that’s public information. But being able to link it to a Social Security number as well as personal interest is another matter entirely, that takes it to an all new level.”

In the interview, Givens explains that use of facial recognition technology could:

  • Violate privacy rights by not getting an individual’s consent.
  • Result in unequal treatment of consumers by businesses.
  • Encourage stalking and violence.

Givens founded the Privacy Rights Clearinghouse in 1992. She developed the clearinghouse’s Fact Sheet series that addresses a wide variety of privacy matters. Givens also authored the encyclopedia entries on identity theft for Encyclopedia of Privacy, World Book Encyclopedia and Encyclopedia of Crime and Punishment. She also authored The Privacy Rights Handbook: How to Take Control of Your Personal Information (Avon, 1997) and co-authored Privacy Piracy: A Guide to Protecting Yourself from Identity Theft (1999). She contributed a chapter on consumer and privacy rights to the 2006 book, RFID: Applications, Security and Privacy.

 



Black Hat: System links your face to your Social Security number and other private things

Aug 15th, 2011 | By | Category: News

Soon it will be practicable to take someone’s photo on a smartphone and within minutes know their Social Security number and a range of other private data like their personal interests, sexual preference and credit status, researchers will tell the Black Hat security conference

Aug. 3, 2011 (1:35 pm) By: Jennifer Bergen

Soon it will be practicable to take someone's photo on a smartphone and within minutes know their Social Security number and a range of other private data like their personal interests, sexual preference and credit status

The annual Black Hat security conference is in full swing right now in Las Vegas. The conference, which started on July 30 and goes to August 4, is the place to be for security researchers to discuss and learn about different types of security vulnerabilities seen in almost every area of technology. One area of security that touches close to home for everyone is the privacy of our personal data being linked to our faces. Specifically, information can be linked to your face and made available to anyone who snaps your picture with their smartphone camera.

With major companies like Apple offering face detection APIs to developers in iOS 5, the method of taking a picture and having a database recognize the person’s face is available, and over the years, it will only get more and more advanced.

This privacy-invading technology is what Alessandro Acquisti, a professor at Carnegie Mellon University, will present at the conference on August 4. Acqusiti’s study uses three different technologies, including cloud-computing, facial recognition, and public information that can be found via various social networks. The technology would allow the user to see information about the person, in addition to the social security number, like sexual orientation, credit ratings, and personal interests.

Acquisiti says the point of the technology is to show that it’s something that’s already available, which means digital surveillance will only get better as technologies improve. He told Network Wold that “this and fear is the future we are walking into.”

The presentation is based on research that he and his team conducted. First, the team was able to identify people on an online dating site where members use aliases as identification. To do this, they looked at a person’s Facebook profile photo and compared it using PittPatt face-recognition software. They were able to identify other photos of the same person in the dating service database, and once the software made a match, the team looked at the photos to see how close of a match it was.

It’s not perfect yet, as the software ended up only identifying 1 of every 10 people. But, the team said this was actually acceptable number considering that the software only used one profile photo to identify the person. The number may also be improved if they considered Pitt-Patt’s second and third guesses.

The subsequent two experiments identified random people on a college campus (with 33% accuracy) and predicted the first five digits of a person’s social security number. The latter is possible because those digits are based on place and date of birth, both of which are available on many people’s Facebook pages.

The fact that these are all rough technologies that are only going to be fine-tuned in the near future is pretty scary. Facebook had implemented a facial recognition photo-tagging feature a few months ago that made many people upset, but now only lets people in your friends list can use the service. Facial recognition isn’t an immediate privacy threat but as technology improves it will be a way to quickly collect increasing amounts of information in people, using only publicly available data. Partial records could be constructed and then filled out as potential targets are identified.

via Network World

 

 



Biometric recognition and privacy concerns

Aug 14th, 2011 | By | Category: News

Face recognition software of the kind incorporated into biometric identification tools, photo-gallery applications and social media websites can be very useful but the technology raises privacy concern

 

Post by: crisisboomThe more you know, the better off you will be…

sciencecodex

 

Face recognition software of the kind incorporated into biometric identification tools, photo-gallery applications and social media websites can be very useful but the technology raises privacy concerns, given the seeming ease with which faces in photos can now be tied to an individual. Researchers in Russia and Poland hope to take face recognition technology an important step forward with the even more powerful software they have developed.

Writing in the International Journal of Biometrics, Georgy Kukharev of Saint Petersburg Electrotechnical University in Russia, and colleagues Paweł Forczmański and Andrzej Tujaka of the West Pomeranian University of Technology, Szczecin, Poland, explain how they have developed algorithms they refer to as two-dimensional Canonical Correlation Analysis (CCArc) and two-dimensional Partial Least Squares (PLSrc) for image matching where “rc” implies the analysis is applied to the images’ rows and columns.

Conventionally, scanning techniques based on CCA and PLS convert an image into a small set of variables, such as distance between eyes, width of jaw, and other factors. New images in which a face is to be identified are then categorized in the same way and the variables compared with those in the database. Correlation of a significant number of the variables gives a variable positive identification for the “new” face with one in the database and allows the software to verify with varying degrees of certain whether that new face is a specific individual in the database. The same technology can be used for biometric identification of a face on a driver’s license or on a social network, or for finding your friends and relatives in your photo collection.

The original algorithms for assessing and assigning variables are based on statistical methods developed in the 1930s. However, with the advent of more and more powerful computing, Forczmański and colleagues realized that these algorithms could be made much more powerful by measuring and analyzing many more variables in each image.

The team has extended the algorithms to utilize rows and columns and so generate a matrix for each image. They have tested them on known family databases as well as a photo gallery of their own creation with positive results. The algorithms perform well even with low-resolution images of faces and with varying lighting conditions and even if other objects, such as overhead lights or “loud” shirts are present in the photo. They have even developed a practical application that can find a person’s spouse given the presence of pairs of faces in single photographs.

 

 



Hacking Passports – Exposing the Vulnerabilities of ‘Smart Card’ Technology

Aug 10th, 2011 | By | Category: News

“I spent most of my career writing embedded software and designing the related hardware at Motorola Government Electronics Division in Scottsdale, Arizona. Many of the design projects I worked on were for government secure communication applications. As a result of my professional experience I understand that these threats are very real, even though they may sound esoteric. Hacker attacks against passports could potentially dwarf credit card and identity fraud and pose a serious threat to personal privacy and national security”

By Rob Sanchez
Published in The Social Contract
Volume 20, Number 4 (Summer 2010)
Issue theme: “Remembering Terry Anderson”

http://www.thesocialcontract.com/artman2/publish/tsc_20_4/tsc_20_4_sanchez.shtml

If there is one document that serves as a ticket to just about anywhere in the world it’s the United States passport. Passports are the ultimate breeder documents for almost everything that requires identification. Owning one is essential for millions of international travelers, and in many countries they are used for identification and transactions. Security of the personal information on passports is critical for ensuring privacy, and yet the expediency and cost savings realized by offshore outsourcing have been a more important priority than using common sense measures to reduce the risks of hacker attacks.

In order to thwart fraud, identification theft, and counterfeiting, the U.S. government and most other nations in the world embarked on programs to design a new generation of passports with “smart card” technology. Despite the grandiose efforts to incorporate technology into the passports, about all that has been accomplished is to shift the tools of crime from color copy machines to computers.

Smart technology gives the public a false sense of security because of its high-tech mystique. Smart technology, like any electronic device, is vulnerable to tampering. Software code and the microelectronics used to make the passports are vulnerable to attack, and the risk is heightened by outsourcing the engineering and production of the components to private companies that are foreign owned and located overseas. Some of the nations involved are hostile to the United States, or they don’t have the law enforcement infrastructure to control criminals.

A recent Scientific American article about hardware hacking provides excellent background for the problems with smart technology. The article didn’t explicitly mention passports, but the same issues apply.

As if software viruses weren’t bad enough, the microchips that power every aspect of our digital world are vulnerable to tampering in the factory. The consequences could be dire:

• Integrated circuits are increasingly complex and capable — but also increasingly vulnerable to attack.

• The circuits typically include designs from many sources. A “Trojan” attack hidden in one of these designs could surface long after the circuit has left the factory.

This is one possible way that we might experience a large-scale hardware attack — one that is rooted in the increasingly sophisticated integrated circuits that serve as the brains of many of the devices we rely on every day. These circuits have become so complex that no single set of engineers can understand every piece of their design; instead teams of engineers on far-flung continents design parts of the chip, and it all comes together for the first time when the chip is printed onto silicon. The circuitry is so complex that exhaustive testing is impossible. Any bug placed in the chip’s code will go unnoticed until it is activated by some sort of trigger, such as a specific date and time — like the Trojan horse, it initiates its attack after it is safely inside the guts of the hardware.

“The Hacker in Your Hardware: The Next Security Threat,” by John Villasenor, Scientific American, August 4, 2010 [1]

 

Tampering with passport hardware is not difficult when the engineers who designed it or the factory workers that assembled it are the saboteurs. Detection and prevention of covert sabotage is much more difficult when the production process takes place in dispersed locations worldwide where the U.S. government has little influence.

Each e-passport contains a microprocessor chip and a memory that stores the software for the operating system. Software is implanted into a small computer memory chip in much the same way as the BIOS is programmed on a home computer. It’s at this stage that hacking is the easiest to accomplish by technically proficient infiltrators who could slip a small piece of code into the software that is, for all practical purposes, invisible. The code could be programmed as a Trojan horse that is only activated when the passport is queried with a surreptitious request. Trojans that have been put into code at this level would be virtually impossible to detect.

The U.S. Government Accountability Office (GAO) recognizes that malicious code could be slipped into the passport hardware. It’s worth noting that they give the public no more than a vague “reasonable assurance” that the passports are secure:

If properly validated, the digital signatures on State’s e-passports should provide those reading the chip data, including DHS [Department of Homeland Security], reasonable assurance that the data stored on the chip were written by State and have not been altered. Proper validation includes verifying that the document signer certificate was issued by the State Department.

Border Security: Better Usage of Electronic Passport Security Features Could Improve Fraud Detection, GAO, January 2010.[3]

The components for the e-passport are manufactured in locations all over the globe in places such as Asia and Europe. Brian Ross of ABC News did an excellent report investigating how outsourcing to foreign countries exacerbates security problems: “Operation Outsourced: Security of U.S. Passports” can still be watched online. [2]

ABC made the connection that critical parts of the passport are made in Thailand — a country with a significant radical Islamic population. What ABC didn’t make very clear is that Thailand is just one of dozens of nations that are involved in the manufacture of passports.

The following statement by the GAO describes the globalized design and manufacturing of passports. It is alarming to read because the product supply and design chain is so similar to the scenarios described by the Scientific American article.

In producing e-passport booklets for State, the Government Printing Office (GPO) has tapped into the existing global smart card industry, resulting in a wide number of different companies involved in the e-passport chip production and inlay process. Two separate companies were awarded contracts to supply chips for the U.S. e-passports. Infineon, a German company, fabricates its own chips and embeds a commercial operating system from a third-party company on them. Gemalto, a Dutch company, obtains chips from NXP, a Dutch semiconductor manufacturer. Gemalto provides NXP with its own operating system, which NXP embeds within the chip prior to shipping the chip to Gemalto.

Better Usage of Electronic Passport Security Features Could Improve Fraud Detection, GAO, January 2010 [3]

 

The manufacturing trail for passports is complex because it is dispersed over many different countries and companies. Identities of most of the companies who are suppliers are withheld by the GPO for security reasons, but they name a few of the major ones. The NXP website [4] for the Dutch-owned company claims to have 13 manufacturing sites worldwide and 26 R&D centers located in 12 countries. NXP engineers in foreign countries designed the software to control the smart chips, so it’s doubtful that our government knows who designed it or where. Gemalto is a company jointly owned by the Dutch and French with locations worldwide. Infineon [5] is a German company that makes passport hardware for many different countries including China and the U.S.

The Chinese government is using security microcontrollers of Infineon Technologies AG (FSE: IFX / OTCQX: IFNNY) for its new electronic passports. Infineon today announced that it recently started deliveries to the Chinese electronic passport project which volume-wise is one of the world’s two biggest electronic passport projects. As of the first quarter of 2010, all new Chinese passports will be issued as electronic passports. The Chinese government estimates that, beginning in the first full year of the roll-out, about 6.5 million electronic passports will be handed out annually to citizens, diplomats and government workers. In total, there are currently more than 30 million passports in circulation in China, which are usually valid for ten years.
China Selects Infineon’s Security Chips for Electronic Passports, Infineon Press Release, November 11, 2009 [6]

Sharing common technology platforms with other countries is risky because hackers worldwide can concentrate their efforts on fewer systems to break into. As these technologies proliferate, there will be increasing probabilities that somebody will figure out how to hack them, and the motivation to do so will increase as the value of the information expands. Sharing those systems with enemies such as China or with countries that have large terrorist organizations exacerbates the risk. One only has to look at the worldwide popularity of the Microsoft Windows operating system to see a common example that demonstrates how a popular platform encourages the proliferation of malicious viruses.

China’s desire for hacking passports cannot be underestimated. In 2007 Smartrac filed a complaint in the International Court of Justice based in The Hague. Smartrac accused China of stealing their patented technology for e-passport chips. It must now be assumed that China has obtained the secrets of the technology, so their engineers have figured out all the vulnerabilities of e-passports.

Passports are supposed to be valid for 10 years, so that’s how long the Chinese and the world’s best hackers have to compromise them. Just imagine how simple it would be if a hacker with today’s powerful computers was tasked with hacking a 10-year-old computer!

E-passports are so globalized it’s fair to assume that all citizens from all nations are in jeopardy of privacy breaches. If personal information is pried out of passports, it will not matter to the victims if the system is upgraded or improved because biometric information such as fingerprints, face pictures, and eye scans lasts the duration of a lifetime, not a decade.

Worldwide, nations are trending towards standard designs and common databases for passports. As this trend progresses, governments will want to simplify data sharing by making a worldwide database of everyone in the world. Databases will either be centralized or the data of individual nations will be linked together by networks.

The development of a worldwide database almost seems inevitable. Policy decisions concerning passports are mostly invisible to the public as they are made and implemented by faceless bureaucrats instead of elected officials that are accountable to the people of the U.S. Most of the decisions on passport standards and policies aren’t even made in the U.S.— they are made by international committees and agencies such as the International Civil Aviation Organization (ICAO), a specialized agency within the United Nations, and the International Organization for Standardization (ISO), based in Geneva.

Passports are morphing into global identification cards, and the American public has almost no voice or control in the way they are to be manufactured or used. It wouldn’t be much of a stretch to say that the U.S. has almost no control over e-passports. Even U.S. law is out of control, considering that the Visa Entry Reform Act of 2002 doesn’t require the U.S. government to make a radio frequency identification device (RFID) passport and it doesn’t give the State Department or the GPO the statutory authority to manage one.

Globalized systems have inherent security problems because they are connected to networked computers that affect large groups of people simultaneously. The story about a recent malfunction of a European smart card system received very little media coverage in the U.S., but it should have because it serves as a warning about what the future holds:

“Late Millennium bug” hits Germany leading to over 30 million debit and credit cards damaged and incapable of transactions. The mishap was reported to have occurred as a result of a programming failure, which left the German credit and automated teller machine (ATM) cards unable to deal with the change in year from 2009 to 2010.

The bug has left cardholders unable to use their payment cards in drawing cash from the cash machines or make payments throughout Germany and abroad.

Gemalto Counts Cost of New Year Bug , Smart Card News, January 2010 [7]

Robert Mocny, acting director of the Department of Homeland Security US-VISIT program, described the push for globalized identification in a speech at an international biometrics and ethics conference in 2006. US-VISIT is a system that screens foreigners for criminal or terrorist connections using their biographical and biometric data. While describing why countries have an obligation to share the personal information of travelers with other nations, Mocny admitted [27] to the desire to implement a worldwide system when he said, “We have an ethical responsibility to make the vision of a global security envelope possible sooner rather than later.”

Citizens of the U.S. have no choice whether their passports have the e-passport technology because all passports issued since 2007 are required to include it. E-passports can be identified by the international logo on the front cover. [link]

 

According to the State Department, [8] over 48 million U.S. passports have been issued with e-passport smart technology per fiscal year. Worldwide over 100 million e-passports are in use by about 50 different countries.

tsc_20_4_sanchez_1.gif

As of June 2010, the GPO claimed that they have delivered more than 55 million [8] blank e-passports without a single security breach. Boasting over their security success rate is somewhat of an empty claim because the e-passport system is only partially completed. Most U.S. passports are used in the conventional fashion as a paper document because the DHS is behind on installing passport scanners and the networked computers necessary to make the system fully operational. Responsibility for installing scanners was pushed onto the Customs and Border Patrol (CBP), but that hasn’t helped to speed things up. As of January 2006 only 500 scanners have been deployed, and since then due to lack of funding no additional ones have been installed. If the CBP decides to buy more scanners, they will most likely purchase ones that are made overseas so even those devices are suspect.

So, let’s review the entire picture: The brain of the passport is a smart chip that is manufactured somewhere in the world by NXP, Infineon, and probably contracted fabrication plants. The smart chip and associated hardware are shipped to Gemalto for packaging and programming. Integration of the components is completed after they are shipped to Smartrac in Minnesota or Thailand for assembling the inlay. The inlay is a laminate containing an RFID and antenna. Outer layers of sheet material, such as the passport cover stock, security paper, or laser-engravable polycarbonate, protect the electronics on the front of the passport. [link]

The GPO is the sole provider of blank U.S. passports, but they are merely the front end of a very large and complicated process. Blank passports are sold exclusively by the GPO to the Department of State. The State Department has a procedure called “personalization” when the personal information of the passport owner is implanted into the smart card. The easiest way to counterfeit passports is to steal blank passports at this stage of the operation because they could be implanted with fake biometric data that could be used to confound security databases.

The final product is shipped to the U.S. Government Printing Office (GPO) to employees at secure production facilities in Washington, D.C., and at the Stennis Space Center in Mississippi [9]. It’s at those locations where somebody puts a stamp on the document that says “Made in the USA.” The GPO shipped the blank passports to the State Department by unsecured FedEx until they decided to use an armored car company. There was a debate about whether to contract the armored car out to a foreign-owned company, but a few diplomats at the State Department raised loud enough objections to stop that from happening.

Does the entire process sound confusing? That’s because it is! There are plenty of reasons to doubt that government bureaucracies are capable of keeping track of the interconnected manufacturing process. At least 60 suppliers all over the world are used to manufacture components. Government agents inspect the supply chain, but there are only about 30 agents that travel all over the world to inspect the suppliers. Inadequate manpower problems of this type are almost a guarantee that security gaps will occur. Typically inspectors target about 16 companies that are considered to be the most critical. During an audit in 2006, most of those companies didn’t have documented security plans — and adding to the concern, due to budget cuts the GPO only has one employee to oversee the formal security supply chain assessment process. [10]

This statement by the GPO isn’t very reassuring:

The sites are spread across several countries, and within some countries there may be multiple sites. For example, for both Infineon and Gemalto, production of the chips involves several sites within Europe. [3]

The GAO explains the globalized passport design and manufacturing system in more detail:

In producing e-passport booklets for State, GPO has tapped into the existing global smart card industry, resulting in a wide number of different companies involved in the e-passport chip production and inlay process. Two separate companies were awarded contracts to supply chips for the U.S. e-passports. Infineon, a German company, fabricates its own chips and embeds a commercial operating system from a third-party company on them. Gemalto, a Dutch company, obtains chips from NXP, a Dutch semiconductor manufacturer. Gemalto provides NXP with its own operating system, which NXP embeds within the chip prior to shipping the chip to Gemalto. [3]

The types of cyber attacks on passports are as vast as the imagination of criminals and terrorists. The Center for Public Integrity (CPI) gave this warning in June, 2010:

Thai workers there assemble inlays that embed wireless transmitters and sophisticated computer chips that store biometric and other personal information used by customs officials and border guards to verify the identities of those who enter the United States.

The U.S. Government Printing Office, the agency charged with producing the new e-Passports, has been warned repeatedly since 2006 by its own security officer that the Thai manufacturing site posed a “potential long term risk to the USG (U.S. government’s) interests,” according to inspection reports obtained by the Center for Public Integrity and ABC News.

U.S. Lacks Basic Security for e-Passport Manufacturing, Key Tool for Border Security Made in High-Risk Locations, by John Solomon, June 14, 2010 [23]

More recently the CPI published another article, and things don’t look any better:

A decade after the Sept. 11, 2001, terror attacks brought to light the dangers of fake IDs, federal undercover agents are still able to easily obtain genuine U.S. e-Passports using clearly fraudulent information that should have raised red flags at the State Department.

Undercover Feds Able to Easily Obtain Fraudulent e-Passports, by John Solomon, July 29, 2010 [24]

Although most U.S. passports that are in use haven’t been used as e-passports due to the lack of installed scanners, they still pose a security risk for anyone that carries one because they could transmit personal information. Passports use RFID technology, which means that they could in theory broadcast personal information to surveillance by hackers who shouldn’t have access by a process called skimming, which often involves nothing more than a laptop computer that is configured as a scanning device.

E-passports are supplied with a shielding envelope that attenuates all but the most sophisticated attacks using advanced receiver and antenna equipment. Owners have to make sure that their passport is completely closed for the shield to be effective. Keeping passports closed at all times is problematic and not as easy to do in Europe where passports are used for various forms of identification for credit cards, to lease cars, or to register to vote, etc. The following excerpt from eWeek explains the problems with RFID:

At the same time, there have been persistent outcries from privacy and security advocates regarding the use of Radio-frequency identification (RFID) technology in passports in order to transmit and receive data from scanners. It’s not that difficult to imagine some rogue code inserted into the smart chip that would only broadcast information when it received a specific code from a spy, terrorist, or criminal. The hack could be programmed to respond when a specific query is transmitted to the RFID but it will operate normally in all other situations. Information transfer would be almost impossible to detect because it could happen in a fraction of a second at any place somebody might be carrying a passport. Just imagine if an enemy government used it to track our spies!

In response, the State Department has increased the security technology for the electronic passports, adding both shielding and access control measures.

Infineon Announces Deal for U.S. Passport RFID Chips, Renee Boucher Ferguson, eWeek, 2006-08-29 [12]

Hardware hacks to obtain personal information are a very real threat to privacy because worldwide governments are embedding biometric information on passports. [11] To get an idea what types of information could be stored, one only needs to look at the European Union, [13] which established a biometric standard that requires a face picture and fingerprints. In the U.S. the RealID Act would require similar biometric information. So, just imagine the ramifications if an unsuspecting victim lost his or her biometric information to a criminal hacker: faces and fingerprints can’t be changed (barring plastic surgery or amputation), so exposing these data could affect innocent victims for their entire lifespan.

Some immigration reform groups support the RealID Act. They tend to ignore the privacy concerns because they think this technology will make it nearly impossible to be in the U.S. illegally. Their enthusiasm for national identification cards is misplaced. They are probably not aware of the real security issues involved, as outlined in this article. Few realize how easy it is to clone them to assume fake identities.

Hacking smart chips and the RFID interface aren’t the only things to worry about, although that is one of the scariest scenarios because attacks of that kind would be virtually impossible to detect until the data are compromised. Two excerpts below describe examples of successful hacker attacks:

A security expert has cracked one of the U.K.’s new biometric passports, embarrassing the British government which has touted [them] as a way of cutting down cross-border crime and illegal immigration.

The attack, which uses a common RFID reader and customised code, siphoned data off an RFID chip from a passport in a sealed envelope, said Adam Laurie, a security consultant who has worked with RFID and Bluetooth technology. The attack would be invisible to victims, he said.

“That’s the really scary thing,” said Laurie, whose work was detailed in the Sunday edition of the Daily Mail newspaper. “There’s no evidence of tampering. They’re not going to report something has happened because they don’t know.”

UK biometric passports succumb to hack, by Jeremy Kirk, IDG News Service, March 6, 2007. [14]

Recently a group of Indian hackers were caught hacking system software:

Seven people were arrested in Andhra Pradesh for hacking the online passport application software of the Hyderabad regional passport office, police said Friday. Police Commissioner A.K. Khan told reporters that seven people, among them five passport agents, were arrested and a search was on for two other agents involved in the racket.

Seven held in Andhra for hacking passport software, Thaindian News, June 4, 2010 [15]

The U.S. government recognizes the security threat that outsourcing to Thailand poses. In June of 2010, Steve LeBlanc, Managing Director, Security & Intelligent Documents, GPO, announced that the assembly of the passports will move to Chanhassen, Minnesota. [16] Shifting the assembly plant operations of the Dutch-owned company Smartrac from Thailand to Minnesota was a good idea to improve security, but the move is no panacea. Changing locations is somewhat futile since Smartrac will still produce passport inlays by using the same complicated chain of foreign suppliers for the components. The threat of compromised hardware is unlikely to improve much because by the time Smartrac gets the parts to assemble the inlay, the malicious code would already be in place. Smartrac would be very unlikely to discover the sabotage in the assembly process.

Smartrac produces inlays for most of the passports in the world, so they will continue to produce inlays at their Thailand location. Smartrac could shift some of the production of inlays for U.S. passports back to Thailand if they lack capacity at the U.S. location or for any other reason they deem it necessary (like for cheap labor). As of June 2010, 20 percent of the inlays were still being made in Thailand. [17] Fraud investigators would have a daunting task if they had to do a forensic search to trace where the inlay components for a passport came from because Thailand will continue to assemble passports for other countries including the U.S. Any damage that has already been done to the system will continue until an anomaly is detected.

The most insidious and difficult to detect hacker attacks would most likely be done covertly by employees of one of the many companies that contribute to the manufacture of passports. Hiring foreign workers increases security risks because allegiance to the U.S. isn’t required, and perhaps even more important, criminal background checks of foreign nationals are often difficult or impossible to do. Smartrac hires foreigners that have proof of legal residence and valid green cards or H-1B visas. Foreign nationals are allowed to work at Smartrac for various support positions, such as, for instance, “maintenance manager” and “research assistant.” [18] Smartrac employs about 20 people in Chanhassen, Minnesota, which is good for the local economy although it’s not clear how many of the workers are local versus foreign, and there doesn’t seem to be much oversight on the criteria Smartrac uses to hire people. If foreign entities wanted to implement espionage at the Smartrac plant, the H-1B visa would be an excellent conduit for saboteurs to position themselves into the right places.

Considering that security experts within the U.S. government recognize the dangers of outsourcing the manufacture of passport components to overseas locations, why did they decide to do it? The best explanation is straight out of the mouth of the GPO when they responded to a scathing series of articles done by the Washington Times that raised the same question (excerpt from the Times followed by GPO response):

According to interviews and documents, GPO managers rejected limiting the contracts to U.S.-made computer chip makers and instead sought suppliers from several countries, including Israel, Germany and the Netherlands.

Mr. Somerset, the GPO spokesman, said foreign suppliers were picked because “no domestic company produced those parts” when the e-passport production began a few years ago.
Outsourced passports netting government profits, risking national security, by Bill Gertz, Washington Times, March 26, 2008 [19]

GPO Response:

In coordination with the State Department and the U.S. intelligence community, GPO conducted a Request for Proposal (RFP), under GPO’s procurement rules and regulations, to procure the required bio-metric components to build an e-passport. GPO incorporated The Buy American Act in accordance with MMAR-52-225. Those responding to the RFP all submitted Buy American Act certificates. However, many companies were able to achieve Buy American Act certification due to their North American subsidiaries. There were no U.S. companies who manufactured integrated circuits that met ICAO
[ICAO is International Civil Aviation Organization] standards and/or rigorous testing. During the vendor selection process, GPO and the State Department vetted the limited number of qualified vendors through rigorous security audits. Those audits included inspections of facilities and employee background checks. GPO was shocked to learn no U.S. company manufactured an integrated circuit that met the ICAO standards and/or rigorous testing. Since 2004, GPO has encouraged U.S. companies to consider producing ICAO compliant components.

GPO Responds to Second Washington Times Story, March 27, 2008 [20]

On first impression it may seem that the GPO is making lame excuses for buying smart chips and other components in the U.S., but the reality is that they probably couldn’t find domestic suppliers no matter what price they were willing to pay. The manufacturing sectors in the U.S. have been decimated to such an extent that foreign countries dominate the semiconductor business. Over the last 20 years U.S. companies have outsourced most of their production capacity offshore. Manufacturing & Technology News published an article that describes the trends in very stark terms: “U.S. Becomes a Bit Player in Global Semiconductor Industry: Only One New Fab Under Construction In 2009,” by Richard A. McCormack, February 12, 2010. [21]
Important highlights of the article:

• In 2009, 16 fabrication plants (fabs) began construction throughout the world. One of them was in the United States.

• In 2007, only 8 percent of all new semiconductor fabs under construction in the world were located in the United States.

• As of 2009, the percentage of global semiconductor production capacity located in the United States was 14 percent, down from 25 percent in 2005 and 17 percent in 2007.

• The United States leads the world in one category: closures! In 2009, 27 fabs closed worldwide, with 15 of them in the United States followed by four in Europe, four in Japan, two in China, one in Korea, and one in Southeast Asia.

According to RAND, [26] in 1980 the U.S. had about 60 percent of the world market share.

The bottom line is that it may no longer be possible for any of the electronic semiconductor components used for e-passports to be produced in the U.S. because it has lost most of its semiconductor manufacturing foundries. If the exodus of U.S. manufacturing continues it’s doubtful that passports could be made in the U.S. for decades to come.

tsc_20_4_sanchez_2.gif

 

 

The lack of domestic suppliers for government-funded projects is a problem that simply wouldn’t have happened before 1990 because the U.S. government considered it a national security priority to procure electronic semiconductors from domestic sources.

Several factors in the 1980s contributed to the decline of the government’s ability to mandate that domestic suppliers be used for their contracts: growing consumer buying power, shrinking military budgets, and globalization. The military share of the electronics industry became insignificant compared to the civilian market by 1990 and by that time American owned companies were moving their facilities offshore as fast as they could. In some cases the military or other large buyers like NASA paid far more than commercial market prices to subsidize U.S. manufacturers so that private industry would keep fabs open, but it was a losing battle that could only stall the inevitable stampede overseas.

In view of the trend towards globalization the Department of Defense adopted a new policy called the Commercial-Off-The-Shelf (COTS) program. [22] Parts procurement by commercial producers was mandated because it was considered more cost effective to do so. National security was sacrificed in order to buy civilian components — even when they were made in foreign countries. Governmental agencies purchased from the lowest-cost suppliers even as U.S. companies were closing fabs, going out of business, and moving overseas.

Of course there is a more obvious explanation for passport outsourcing — simple greed and stupidity. In a scheme that resembles a starving man who cuts off his legs to satiate his hunger, the GPO made about $100 million in profits by selling the blank passports to the State Department. [19] More than likely, the GPO rationalizes that using domestic suppliers for components would cut profit margins from their sales to the State Department, so they use the lowest-cost bidders, who always happen to be overseas suppliers.

A video called “The Myth of Biometrics’ Enhanced Security” [25] by Michael (Micha) Shafir and David J. Weiss, February 17, 2009, does an excellent job of illustrating the various threats posed by e-passports. Warning: the animated person doing the narrative is rather annoying and the video is partially an infomercial.

I spent most of my career writing embedded software and designing the related hardware at Motorola Government Electronics Division in Scottsdale, Arizona. Many of the design projects I worked on were for government secure communication applications. As a result of my professional experience I understand that these threats are very real, even though they may sound esoteric. Hacker attacks against passports could potentially dwarf credit card and identity fraud and pose a serious threat to personal privacy and national security.

 

Endnotes

1. “The Hacker in Your Hardware: The Next Security Threat,” by John Villasenor, Scientific American, August 4, 2010

2. ABC Reports, “Operation Outsourced: Security of U.S. Passports

3. BORDER SECURITY: Better Usage of Electronic Passport Security Features Could Improve Fraud Detection, GAO, January 2010

4. NXP Locations

5. Infineon Subsidiaries

6. China Selects Infineon’s Security Chips for Electronic Passports, Infineon Press Release, November 11, 2009

7. Gemalto Counts Cost of New Year Bug, Smart Card News, January 2010

8. Passport Statistics

9. U.S. e-Passport facts at-a-glance, GPO

10. Secrity of GPO’s e-Passport Supply Chain, March31, 2010

11. ICAO: Machine Readable Passports to be Issued Worldwide by 2010, Information Handling Services, July 20, 2005

12. Infineon Announces Deal for U.S. Passport RFID Chips, Renee Boucher Ferguson, eWeek, 2006-08-29

13. Integration of biometric features in passports and travel documents

14. UK biometric passports succumb to hack, by Jeremy Kirk, IDG News Service, March 6, 2007

15. Seven held in Andhra for hacking passport software, Tahindian News, June 4, 2010

16. GPO reassures your passport is secure, Federal News Radio, June 17, 2010

17. PASSPORT SUPPLY CHAIN IS SECURE, GAO Press Release, June 15, 2010

18. GPO Responds to Second Washington Times Story, March 27, 2008

19. Outsourced passports netting government profits, risking national security, by Bill Gertz, March 26, 2008

20. H-1B Visa application for Smartrac

21. “U.S. Becomes a Bit Player in Global Semiconductor Industry: Only One New Fab Under Construction in 2009,” by Richard A. McCormack, February 12, 2010

22. Outsourcing Poses Unique Challenges for the U.S. Military-Electronics Community, by Randall Milanowski and Mark Maurer, Chip Design, 2006

23. U.S. Lacks Basic Security for e-Passport Manufacturing, Key Tool for Border Security Made in High-Risk Locations, by John Solomon, June 14, 2010

24. Undercover Feds Able to Easily Obtain Fraudulent e-Passports, by John Solomon, July 29, 2010

25. “The Myth of Biometrics’ Enhanced Security,” by Michael (Micha) Shafir and David J. Weiss, February 17, 2009

26. High-Technology Manufacturing and U.S. Competitiveness, RAND Research, March 2004

27. Robert Mocny statement

 

About the author

Rob Sanchez keeps track of non-immigrant visa and offshoring developments at his website, www.jobdestruction.info. He also publishes the Job Destruction Newsletter. To get on the free mailing list, send an e-mail to: news at JobDestruction dot info.

Copyright The Social Contract Press, 445 E Mitchell Street, Petoskey, MI 49770; ISSN 1055-145X
(Article copyrights extend to the first date the article was published in The Social Contract)

 



FBI’s NGI database could include non-criminals, said privacy rights group

Jul 17th, 2011 | By | Category: News

Lynch contends that the NGI will not just collect and store criminal justice data because one third of the FBI’s IAFIS data is from civil sources like attorney bar applications, federal and state employees, and people who work with children or the elderly. She said the FBI hadn’t allowed those kinds of records to include photos and had segregated civil records from criminal data. “Civil records were also not included in bulk checks for criminal investigative purposes,” she wrote. The FBI’s NGI may remove those barriers, she warned. “There is some evidence to show the FBI is considering including this data in future NGI database searches and, according to the CCR FOIA documents, has already begun to include civil records from DHS and State Department database files such as visa applications, immigration records, and border entries and exits,” she said.

 

Mon, 2011-07-11 09:31 AM

EFF’s Lynch

The FBI’s next-generation criminal identification biometric database could include not only information about criminals, but every day people, said the Electronic Frontier Foundation (EFF) on July 8.

Documents recently released under the Freedom of Information Act (FOIA) show the FBI’s Next Generation Identification (NGI) database could include biometric and other identification information from civil sources like attorney bar applications, federal and state employees, and people who work with children or the elderly, said EFF staff attorney Jennifer Lynch in a July 8 posting on the group’s Web site.

The National Day Laborer Organizing Network (NDLON), the Center for Constitutional Rights (CCR), and the Cardozo Law School Immigration Justice Clinic had publicly released the FOIA documents on July 6. The groups contended the documents showed Immigration and Custom Enforcement’s Secure Communities biometric identification system identify criminal aliens for deportation, is also a key component the FBI’s NGI. The combination, the groups said, will accumulate a massive store of personal biometric information on citizens and non-citizens with an aim to create a sort of electronic national identification card.

In remarks on the EFF’s Web Site on July 8, Lynch said the FBI’s NGI program hasn’t been secret. The FBI, she said, has “bragged” about it over the last 10 years and has “carefully laid the groundwork for extensive data sharing and database interoperability through publicly-available privacy impact assessments and other records.”

Even though the NGI program was developed in the open doesn’t make it any less dangerous, she said.  The FBI’s IAFIS [Integrated Automated Fingerprint Identification System] and DHS’ IDENT [Automated Biometric Identification System] systems, she said, can store extensive amounts of names, addresses, social security numbers, telephone numbers, e-mail addresses, fingerprints, booking photos, unique identifying numbers, gender, race and dates of birth. “Within the last few years, DHS and FBI have made their data easily searchable between the agencies,” she said. “However, both databases remained independent, and were only ‘unimodal,’ meaning they only had one biometric means of identifying someone—usually a fingerprint.”

The documents obtained under FOIA, she said, show the NGI database will contain both FBI and DHS records in “multimodal” capability.

“This means NGI is designed to allow the collection and storage of the now-standard 10-print fingerprint scan in addition to iris scans, palm prints, and voice data. It is also designed to expand to include other biometric identifiers in the future,” she said.

Lynch contends that the NGI will not just collect and store criminal justice data because one third of the FBI’s IAFIS data is from civil sources like attorney bar applications, federal and state employees, and people who work with children or the elderly. She said the FBI hadn’t allowed those kinds of records to include photos and had segregated civil records from criminal data. “Civil records were also not included in bulk checks for criminal investigative purposes,” she wrote. The FBI’s NGI may remove those barriers, she warned. “There is some evidence to show the FBI is considering including this data in future NGI database searches and, according to the CCR FOIA documents, has already begun to include civil records from DHS and State Department database files such as visa applications, immigration records, and border entries and exits,” she said.

 



Privacy is vital to freedom from ‘Big Brother’

Jul 17th, 2011 | By | Category: Articles

“Big Brother Is Watching You” was the pervasive punch-line in British writer George Orwell’s classic novel “1984.” Now we know Big Brother is listening too.

Arthur I. Cyr

By Arthur I. Cyr

“Big Brother Is Watching You” was the pervasive punch-line in British writer George Orwell’s classic novel “1984.” Now we know Big Brother is listening too.

Revelations that Rupert Murdoch’s News International Corp. for years has conducted massive hacking into British cell phone information is truly shocking. Alleged targets include cell phones of a murdered young girl and relatives of soldiers killed in action. Britain’s political parties have united in Parliament, an unusual move, to condemn the company.

The scandal includes allegations of police payoffs. An initial police investigation concluded the snooping was a renegade incident targeting only a few individuals.

Murdoch’s political influence in Britain has been enormous. Politicians across the spectrum fear his power to embarrass or endorse, and have assiduously courted his favor.

Orwell, one of the greatest writers of the 20th century, was a committed socialist. Unlike many on the left, however, he had personal involvement with working people, because he was one. He stressed egalitarianism, while warning about the dangers of concentrated power in government as well as corporations.

The Murdoch snooping scandal is particularly grotesque, and may bring down that media empire. However, guarding individual freedom, including privacy, from intrusive power structures inevitably is a challenge.

Other developments in British politics and American business underscore this tension. Britain’s coalition government has wisely repealed a national identity card. A card microchip linked to biometric data encouraged bureaucratic snooping. Amid launch of the latest iPhone, Apple leader Steve Jobs gave particular emphasis to protecting customer privacy.

A wag once suggested that “1984″ was really about 1948, a reference to the Stalinist dictatorships ruling in Eastern Europe as well as the Soviet Union when the novel was published. The Cold War had just emerged, and for many communism seemed the wave of the future.

Intense anti-communism seriously distorted U.S. domestic politics and the wider society intellectuals accused of left-wing views found their careers damaged and in some cases destroyed. Blacklisting of writers became a symbol of this intimidation.

An open economy under the rule of law helps limit abuse. Modern Britain has never had dictatorship, and the effects of Conservative Prime Minister Margaret Thatcher’s “Big Bang” deregulation of the economy were important in facilitating freedom. Her heavy-handed style earned her the sobriquet “Big Sister,” but the reforms were crucial to Britain’s economic recovery and reassertion of international influence starting in the 1980s.

A similar process unfolded in the U.S., beginning in the Carter administration and carried much further by the Reagan administration. The financial crises of the past decade, facilitated in part by deregulation gone too far, overshadow the durable beneficial consequences of this market freedom.

This in turn brings context to Steve Jobs’ statement. Apple last year surpassed Microsoft in total capitalization, a major accomplishment for a firm floundering less than 10 years ago before cofounder Jobs returned. Products that facilitate freedom are now major Apple marketing themes.

Meanwhile, competitor Google has grappled with embarrassing accusations that extensive information on individuals has been collected. For example, Google Earth cars driving through random neighborhoods captured specific data from unsecure wireless outlets in unsuspecting households.

In our fascinating, fantastic global information revolution, institutions committed to following the law and protecting personal privacy, not just profits and power, deserve our support. Murdoch and crew deserve condemnation, and prosecution.

Above all, remember: Big Brother is not watching you.

Not yet.

But he’d like to.

Arthur I. Cyr is Clausen distinguished professor at Carthage College. He is also a columnist for Scripps Howard News Service (www.scrippsnews.com). E-mail him at acyr@carthage.edu.

 



Police eyeing iris scanners, civil libertarians fret over privacy

Jul 17th, 2011 | By | Category: News

A Plymouth company whose technology turns ordinary iPhones into facial recognition tools has garnered rave reviews from law enforcement even as civil libertarians worry about the device’s privacy-invading potential.

BI2 Technologies makes a Biometric smartphone peripheral that scans irises, takes fingerprints and recognizes facesThe American Civil Liberties Union has expressed concerns over the technology because it could be construed as a “search. But B12 CEO Sean Mullin said “none of the data is stored on the smartphone” (IT WILL BE STORED AT THE POLICE DATABASES?), “and the system requires a basic level of consent from the party being scanned”.

Business & Markets

By Brendan Lynch
Sunday, July 17, 2011

A Plymouth company whose technology turns ordinary iPhones into facial recognition tools has garnered rave reviews from law enforcement even as civil libertarians worry about the device’s privacy-invading potential.

BI2 Technologies makes a biometric smartphone peripheral that scans irises, takes fingerprints and recognizes faces. The $3,000 Mobile Offender Recognition and Information System, or MORIS, will roll out to about 40 police departments starting this fall.

The American Civil Liberties Union has expressed concerns over the technology because it could be construed as a “search.” But B12 CEO Sean Mullin said none of the data is stored on the smartphone, and the system requires a basic level of consent from the party being scanned.

“If you’re going to have your face scanned, you have to stand still for a second and let me take a picture of your face,” he said.

Using the 12-ounce MORIS attached to the back of an Apple-made iPhone, a police officer responding to a domestic dispute could take video statements, search for and read relevant restraining orders or outstanding warrants, and record locations using GPS.

“Click, click. Get in the back seat. Watch your head,” said Mullin, who founded BI2 with former Plymouth County Sheriff Peter Flynn.

The Plymouth County Sheriff’s Department has ordered less than 10 MORIS units for the fall, said spokesman John Birtwell. Since Massachusetts sheriffs act mostly as jail keepers, the scanners will be used to confirm the identities of the 10,000 people it processes every year.

“It’s not only a practical time saver, it’s foolproof,” Birtwell said.

Birtwell said the department is sensitive to privacy concerns, though everyone they would scan would have already appeared before a magistrate.

We’re not going to be randomly scanning people walking down the street,” he said.

The technology has applications in other markets such as health care IT and mobile payments. EMTs could access electronic medical records by scanning a patient’s iris, while shoppers could “sign” a transaction by scanning their eye.

“You won’t be able to steal the credit card, but you would be able to steal someone’s iPhone or Droid,” he said. “What this does is secure that transaction biometrically.”

Those applications are in the analysis stage. MORIS was similarly tested by the Brockton Police Department to offer suggestions for the law enforcement application.

“I wish I was a smart guy,”Mullin said. “I’m not. I’m a good listener.”

The company has shifted into expansion mode with plans to hire eight to 10 people — engineers, salespeople, marketers and management — over the next year in Massachusetts. Research and development is done at BI2 headquarters while the MORIS device is manufactured at contract manufacturer Columbia Tech in Worcester.

BI2 generated a lot of buzz last week with a prominent story in the Wall Street Journal on Wednesday and segment on CBS’ “The Early Show” on Friday, the company’s fifth anniversary.

Mullin said BI2 fielded about 2,500 inquiries about its system. “It’s great,” he said. “I just wish it wouldn’t all come in three days.”




The FBI’s Next Generation Identification: Bigger and Faster but Much Worse for Privacy

Jul 10th, 2011 | By | Category: Articles

This week, the Center for Constitutional Rights (CCR) and several other organizations released documents from a FOIA lawsuit that expose the concerted efforts of the FBI and DHS to build a massive database of personal and biometric information. This database, called “Next Generation Identification” (NGI), has been in the works for several years now. However, the documents CCR posted show for the first time how FBI has taken advantage of the DHS Secure Communitiesprogram and both DHS and the State Department’s civil biometric data collection programs to build out this $1 billion database.


 

JULY 8TH, 2011 by Jennifer Lynch

 

This week, the Center for Constitutional Rights (CCR) and several other organizations released documents from a FOIA lawsuit that expose the concerted efforts of the FBI and DHS to build a massive database of personal and biometric information. This database, called “Next Generation Identification” (NGI), has been in the works for several years now. However, the documents CCR posted show for the first time how FBI has taken advantage of the DHS Secure Communitiesprogram and both DHS and the State Department’s civil biometric data collection programs to build out this $1 billion database.

Unlike some government initiatives, NGI has not been a secret program. The FBI brags about it on its website (describing NGI as “bigger, faster, and better”), and both DHS and FBI have, over the past 10+ years, slowly and carefully laid the groundwork for extensive data sharing and database interoperability through publicly-available privacy impact assessments and other records. However, the fact that NGI is not secret does not make it OK. Currently, the FBI and DHS have separate databases (called IAFIS and IDENT, respectively) that each have the capacity to store an extensive amount of information—including names, addresses, social security numbers, telephone numbers, e-mail addresses, fingerprints, booking photos, unique identifying numbers, gender, race, and date of birth. Within the last few years, DHS and FBI have made their data easily searchable between the agencies. However, both databases remained independent, and were only “unimodal,” meaning they only had one biometric means of identifying someone—usually a fingerprint.

In contrast, as CCR’s FOIA documents reveal, FBI’s NGI database will be populated with data from both FBI and DHS records. Further, NGI will be “multimodal.” This means NGI is designed to allow the collection and storage of the now-standard 10-print fingerprint scan in addition to iris scans, palm prints, and voice data. It is also designed to expand to include other biometric identifiers in the future. NGI will also allow much greater storage of photos, including crime scene security camera photos, and, with its facial recognition and sophisticated search capabilities, it will have the “increased ability to locate potentially related photos (and other records associated with the photos) that might not otherwise be discovered as quickly or efficiently, or might never be discovered at all.”

The FBI does not just collect and store data from people caught up in the criminal justice system;about 1/3 of the data collected and reviewed in IAFIS is from civil sources such as attorney bar applications, federal and state employees, and people who work with children or the elderly. In the past, the FBI has not allowed these records to include photos and has segregated civil records from criminal data. Civil records were also not included in bulk checks for criminal investigative purposes. NGI may take down these barriers, however. There is some evidence to show the FBI is considering including this data in future NGI database searches and, according to the CCR FOIA documents, has already begun to include civil records from DHS and State Department database files such as visa applications, immigration records, and border entries and exits.

So why should we be worried about a program like NGI, which the FBI argues will “reduce terrorist and criminal activities”? Well, the first reason is the sheer size of the database. Both DHS and FBI claim that their current biometrics databases (IDENT and IAFIS, respectively) are the each the “largest biometric database in the world.” IAFIS contains 66 million criminal records and 25 million civil records, while IDENT has over 91 million individual fingerprint records.

Once these records are combined into one database and once that database becomes multimodal, as we discussed in our 2003 white paper on biometrics, there are several additional reasons for concern. Three of the biggest are the expanded linking and tracking capabilities associated with robust and standardized biometrics collection systems and the potential for data compromise.

Already, the National Institute for Standards and Technology, along with other standards setting bodies, has developed standards for the exchange of biometric data. FBI, DHS and DoD’s current fingerprint databases are interoperable, indicating their systems have been designed (or re-designed) to read each others’ data. NGI will most certainly improve on this standardization. While this is good if you want to check to see if someone applying for a visa is a criminal, it has the potential to be very bad for society. Once data is standardized, it becomes much easier to use as a linking identifier, not just in interactions with the government but also across disparate databases and throughout society. This could mean that instead of being asked for your social security number the next time you apply for insurance, see your doctor, or fill out an apartment rental application, you could be asked for your thumbprint or your iris scan.

This is a big problem if your records are ever compromised because you can’t change your biometric information like you can a unique identifying number such as an SSN. And the manyrecent security breaches show that we can never fully protect against these kinds of data losses.

The third reason for concern is at the heart of much of our work at EFF. Once the collection of biometrics becomes standardized, it becomes much easier to locate and track someone across all aspects of their life. As we said in 2003, “EFF believes that perfect tracking is inimical to a free society. A society in which everyone’s actions are tracked is not, in principle, free. It may be a livable society, but would not be our society.”

Unfortunately, biometric data collection is not limited to NGI or even to the legacy DHS, FBI and DoD fingerprint collection programs. The federal government and states have been steadily expanding their DNA collection efforts over the last 10 years as well. Currently all 50 states, the federal government and the District of Columbia collect and share DNA records through the FBI’sCODIS database. At least 15 of those states, as of 2010, collect DNA from defendants convicted of misdemeanor offenses. And as of 2009, under the federal DNA Fingerprint Act of 2005 and several recently-expanded state statutes, at least 21 states and the federal government collect DNA samples from any adult arrested for (not just convicted of) a crime. This has led to an exponential increase in the amount of DNA collected in the United States on an annual basis, with nearly 1.7 million samples processed (pdf Pg8) in 2009, alone. As of 2011, the National DNA Index or NDIS (the federal level of CODIS) contains over 9,748,870 offender profiles, and the states’ individual databases are each expanding as well.

Currently, it doesn’t appear the FBI plans to incorporate the DNA data held by CODIS into NGI. However, NGI has been designed to be flexible and to be able to incorporate additional biometric identifiers as the need arises in the future. This means that we can’t rule anything out. FBI claimsNGI “doesn’t threaten individual privacy,” but the government’s continuing efforts to collect, store and track the biometric data for so many Americans and foreigners cannot bode well for a society that values privacy.

 

 



Biometric Identity: The Great Divider

Jul 10th, 2011 | By | Category: News

The use of Biometrics in national identity cards has spliced the globe into two with people in developed nations looking at it as infringement of their privacy and civil liberties, reports Team Inclusion

 

A debate has been raging in India since Manmohan Singh government broadened the sphere of MNIC (Multi-purpose National Identity Cards) to National Population Register (NPR) appending into it a biometrics-based Unique Identification (UID) number. The opponents of the scheme have accused the central government of snooping into privacy of residents. They fear that the project would prove to be the death of right to privacy implicit in Article 21, which guarantees protection of life and personal liberty. They apprehend that the governmental agencies would misuse the information collected under the project to harass individuals.

The UID-Aadhaar detractors frequently quote the examples of UK, USA and Netherlands, Greece, France and Turkey, which recently scrapped either their identity projects, or use of biometrics on the grounds that they intruded into residents’ privacy. Their argument is that once a person hacks into the UID database, he can gain access to any other database as the UID will be linked with banks, phone companies, Public Distribution System (PDS), ministries, departments, Public Sector Units (PSUs) etc. They fear since many US companies are involved in the project, there is a possibility that Washington will have access to the database. They also fear that the unique identity would encourage identity thefts and misuse.

The project backers on the other hand hope that the linkages of UID with social sector schemes would improve targeting and delivery of services, reduce their cost and provide online cost-effective, ubiquitous authentication services.  Denying that the unique number was a guarantee to rights, citizenship and entitlements, they add that the project would promote financial inclusion as the UID number facilitates opening of bank accounts.

There seems to be a major rich-poor, developed-developing and big economy-small economy divide among the countries when it comes to implementation of the national ID project with people in upper western hemisphere and parts of Europe rejecting their government’s efforts to introduce and store biometrics in a central system.  Countries like United Kingdom, France, Hungary, Netherland, Greece, Norway, Turkey and Ireland in Europe have either not incorporated biometrics in the ID or stopped scanning biometric information.
Similarly in North America and Australia continents, countries like USA, Canada, Australia and New Zealand have kept off the biometrics.  In Asia, China, Japan, Sri Lanka are yet to join the clamour for biometric identity.  Russia and Turkey, the two majors of Eurasia, have also not signed up for the biometrics till now.

Here is a list of international experiments that have taken place in various countries around the globe:

Europe
Ironically Europe, which is extremely paranoid about terrorism, is also the one, which leads the campaign against use of biometrics in National ID Cards with Britain, Norway, Netherlands and Ireland having witnessed major opposition to the concept in the past.

Britain in fact seems to have done so many somersaults on the issue that it is never clear whether the ID card is in or out.  The project made its first appearance in UK during World War II when then British government decided to use national ID cards to facilitate identification of foreigners around the same time when Greece and France also introduced the cards.

Persons were required to carry the card at all times and show it on demand to police and members of the armed forces.  And this is what brought its downfall. In 1951 Acting Chief Justice Lord Rayner Goddard ruled that police demanding ID card “from all and sundry” was unlawful leading to repealing of National Registration Act, the law which facilitated issuance of the ID card.

In 1984 and 1998, the UK government put in place a Data Protection Act, which authorised storage of lot of personal information in databases.

The UK Parliament passed Identity Cards Act in 2006 providing linkages of National Identity Cards, a personal identification document and European Union travel document with a database known as National Identity Register (NIR).

Another two years later, then UK Home Secretary Jacqui Smith proposed that web communication be stored by the ISPs and MSPs in a giant database for 12 months. “Our ability to intercept communications and obtain communications data is vital to fighting terrorism and combating serious crime, including child sex abuse, murder and drugs trafficking. Communications data – that is, data about calls, such as the location and identity of the caller, not the content of the calls themselves – is used as important evidence in 95% of serious crime cases and in almost all security service operations since 2004,” she said.i

These anti-civil liberties measures proved to be the undoing of Labour government as two years later Conservatives rode back into power on the same issue. In February this year, the government finally scrapped the identity card scheme, terminated Identity Commissioner and destroyed all information held in the National Identity Register. UK Home Secretary Theresa May declared invalidation of existing cards saying they were ‘intrusive, bullying and ineffective’.

Earlier this month, however, the UK government once again revealed plans for an identity assurance scheme, which will help people access services, related to the Department for Work and Pensions. Under the scheme, private companies will run the accreditation services that verify a person’s identity when they log in to a service online. But this may still not be the last word on the subject.

The current French government has proposed a compulsory biometric card system, which is being opposed by human rights groups.

In Greece, fields included in previous ID card formats, such as vocation or profession, religious denomination, domiciliary address, name and surname of spouse, fingerprint, eye and hair color, citizenship and ethnicity were removed permanently as being intrusive of personal data or superfluous for the sole purpose of personal identification.
The plastic card in Hungary does not have any information about the owner’s residential address, nor his Personal ID. This sensitive information is contained on a separate card, called Authority ID.

Ireland and Norway have felt that ‘very serious privacy issues’ are involved in the biometric identity scheme. Austria has also restricted use of Social Security Number (SSN) to areas of social security, taxes, education and other administrative areas.

Yet many European countries – Belgium, Bulgaria, Denmark, Estonia, Finland, Iceland, Italy, Latvia, Lithuania, Poland, Portugal, Romania, Slovakia, Slovenia, Sweden, Switzerland and Ukraine have introduced a National Identification Number for their citizens.

North America
Like Europe, North America too has serious issues with the use of fingerprints, iris scan for national identity cards with America and Canada, the two major countries of the continent having failed to convince their citizens on the subject.

Americans have resisted quite a few attempts of their government to upgrade Social Security Card to a National ID Card. In 1971 and 1973, the American government was forced to say that National ID card was not desirable. Ronald Reagan and Bill Clinton administrations too preferred not to touch the controversial biometrics.

The 9/11, however, did tamper the opposition to identity card as US Congress legislated Real ID Act of 2005 calling for national digital identification system. The Act amended US federal law pertaining to security, authentication and issuance procedures standards for the state driver’s licenses and identification cards, as well as various immigration issues pertaining to terrorism. Since United States has no national identification card, driver’s licenses have been used as a de-facto standard form of identification within the country.
Real ID Act set 11th May 2008 as compliance deadline for all states. But majority of the states have either applied for extensions of the original compliance deadline or received unsolicited extension. Over half of the states have approved either resolutions or binding legislation not to participate in the programme.

Yet Obama Administration has not quite given up.  It hopes to fund pilot projects on adoption of Internet IDs next year.  The administration’s idea is to have multiple identity providers that are part of an ‘identity ecosystem’.

Although every now and then one hears voices for attaching biometrics to Social Security Card to bring about immigration reforms, so far, the American administration has not succeeded in convincing citizens who back civil liberties and privacy.

Earlier Canadians rejected a proposal for a National ID Card that would require fingerprints and an iris (eye) scan. The Canadians estimated that this system would cost Rs 226 billion for their 32 million citizens and offered no security for the country from terrorists as some experts suspected that even with eye scan the cards could be duplicated.
Mexico, however, is on way to introduce iris scan for all its citizens for identification. It has made a beginning with the city of Leon and Guanajuato.

South America
In South America, the saying ‘what is good for goose is good for gander’ stands on its head, as unlike their counterparts in North America, the countries in down South, appear to have no issues with biometrics. Recently UID honchos from India visited Brazil to learn from that country’s ‘innovative targeting and identification mechanisms for social programmes’.
The government of Brazil is engaged in a nation-wide effort to replace its traditional ID card with a Registery of Civil Identity (RCI) card enhanced with biometric data. The new chip-based identity card stores information about the cardholder’s name, gender, date of birth, photograph, affiliation, place of birth, signature, fingerprint, place and date of issuance and expiration. It uses state-of-the-art technology and is designed to avoid repeated identity registration in different states as well as confusion caused by different people with the same name.

Last year Brazil used biometrics in Presidential election to prevent voter fraud and ballot stuffing.

Brazil’s neighbour and second largest country of South America, Argentina, recently signed up with Cross Match Technologies, a global provider of biometric identity solutions, for deployment of identity management systems throughout the country. Cross Match will provide guidance and expertise in the areas of forensic-quality fingerprint and palm print capture devices, multi-model biometric capture systems, document readers, software and associated professional services. The Argentine government uses biometric identity solutions to enhance safety, security and promote welfare programmes for its citizens.

DNI (Documento Nacional de Identidad) is the official form of identification for citizens in Peru, another country in South America. The electronic DNA has facial image and print of right index finger of the cardholder besides other general details like name, date of birth etc.

Chile on the other hand uses biometrics extensively for healthcare insurance, banks, pension funds and retailers as well as police and immigration services. Santiago airport in the country uses facial recognition technology for security.

Pablo Izquierdo, Director General of I-Med, a Santiago-based company explains the diametrically opposite views held on biometrics in North and South America. . “In the U.S. people don’t much like the idea of a database of digital fingerprints; Latin Americans – well – they couldn’t care less about it,” Izquierdo says.ii
Bolivia, which shares borders with Brazil, Peru, Argentina, Chile, registered more than 5 million voters by collecting their fingerprints, biometric photographs and electronic signatures within 75 days before the 2009 elections and is now advising Georgia on the same.

Australia (Oceania)
Both the major countries in the region – Australia and New Zealand – are opposed to national identity and biometrics so much so that the former has rejected proposals for the card twice. The first proposal to create a universal number for Australian citizens and permanent residents was jettisoned in 1987. The second proposal – floated in 2005 for an Access Card for health and welfare benefits – was abandoned two years later due to privacy concerns relating to identity theft and disclosure of information. The country protects its Medicare and tax file number identifiers with strict privacy laws.

A parliamentary committee in Australia recently rejected the use of biometrics as a form of identification technology for gamblers saying that the technology would be a privacy overreach.

In 2009 when New Zealand tried to introduce biometrics in immigration, it kicked up a furore with people fearing that technology will be extended to other arms of the law. No wonder the island country is among the few countries of the world, which do not have a national ID card.

Africa
The situation in poor African continent would bring a big smile on the faces of votaries of biometric-based national ID in India as an overwhelming majority of the countries there have either already introduced the cards or are in the process of doing it.

While South Africa, Mauritius, Gambia and Zimbabwe have brought in biometric identity cards, Tanzania, Sudan, Lesotho, Nigeria, Angola, are on course to get them.
In Gambia and Mauritius, citizens above 18 years of age are required to apply for a National Identity Card. The former has made it mandatory for its citizens to show the biometric card at the time of applying for a driving license.

In South Africa, it is necessary for the citizens to carry identity document, which resembles a passport, at the time of opening a bank account, registering at an educational institution, buying a mobile or applying for a driver’s license, passport, unemployment insurance and voting in elections.

Tanzania’s National Identification Authority (NIDA) recently awarded a deal for national ID system for 25 million cards.

NIMC has the mandate to establish, own, operate, maintain and manage the National Identity Database, register persons covered by the Act, assign a Unique National Identification Number and issue General Multi-Purpose Cards (GMPC) to those registered individuals, and to harmonise and integrate existing identification databases in Nigeria.

Sudan is launching a civil registry project that expects to have the fingerprints of 8 million of the 16 million citizens and foreign residents for the country’s national database.
The Angolan Government has officially approved the design of its new ID card for all its adult citizens. The cards will store personal data including personal and biometric identification.

Asia
When it comes to biometric national ID cards, Asian continent is divided among ayes and nays with China, Japan and Turkey yet to give assent to biometric identification. Pakistan, Bangladesh and Malaysia, on the other hand have already issued biometric identification for their citizens.  Sri Lanka and Indonesia are all set to join the bandwagon.

In Pakistan, National Database & Registration Authority (NADRA) has captured 371 million fingerprints and 99 million faces and also facilitates mobile-to-mobile payment.  The ID is tagged with Benazir Income Support Programme for poor. NADRA issued support to 500,000 Watan Card-holders during floods in Pakistan in last year.

Bangladesh has had biometric identification since 2008. Bangladeshis use NID card for obtaining passports, driving licenses, credit cards and for registering land ownership. MyKad or Government Multipurpose Card (GMPC), the official compulsory card in Malaysia, carries a microchip, which contains several items including biometrics.

In Israel, a move to have biometric database is being criticised for not using encryption method to minimise infringement to highly sensitive information. The database will be in the custody of Interior Ministry. Association for Civil Rights, an NGO headquartered in Jerusalem, fear the database will grossly infringe on Israeli citizens’ rights.iii

i. A report on BBC uploaded on October 15, 2008
ii. bUSiness, a business magazine of the Chilean American Chamber of Commerce (AmCham Chile)
iii. Report on ynetnews.com




March 8 – FBI Announces Next Generation Biometric Identification System… Built by Lockheed Martin (Hacked on May 29)

Jun 6th, 2011 | By | Category: News

BIOMETRIC: “If you can store it; I can steal it”

March 08, 2011: FBI : “The Next Generation Identification System (NGI), built by Lockheed Martin, delivers an incremental replacement of the FBI’s Integrated Automated Fingerprint Identification System (IAFIS)”

May 29, 2011: Lockheed Martin hit by cyber attack!….

 


 

March 08, 2011
  • FBI National Press Office(202) 324-3691

CLARKSBURG, WV—New technology designed to revolutionize law enforcement’s ability to process fingerprints has reached its initial operating capability, the FBI announced today.

The Next Generation Identification System (NGI), built by Lockheed Martin, delivers an incremental replacement of the FBI’s Integrated Automated Fingerprint Identification System (IAFIS). NGI provides automated fingerprint and latent search capabilities, electronic image storage, and electronic exchange of fingerprints to more than 18,000 law enforcement agencies and other authorized criminal justice partners 24 hours a day, 365 days a year. Upon completion, NGI will have the ability to process fingerprint transactions more effectively and accurately.

“The implementation announced today represents a tremendous achievement in enhancing our identification services. Already, we’re seeing how the NGI system is revolutionizing fingerprint identification in support of the FBI’s mission,” said Louis E. Grever, executive assistant director, FBI Science and Technology Branch.

“Lockheed Martin was there supporting the FBI when IAFIS went live in 1999, and we’re thrilled to be here for NGI today,” added Linda Gooden, executive vice president, Lockheed Martin Information Systems and Global Solutions. “Technology like this is a powerful tool when it comes to protecting America’s citizens, and we’re proud to serve as a partner in that mission.”

“While IAFIS has been effective, criminal and terrorist threats have evolved over the past decade. Today’s environment demands faster and more advanced identification capabilities,” said Assistant Director Daniel D. Roberts, FBI Criminal Justice Information Services Division. “NGI represents a quantum leap in fingerprint identification that will help us in solving investigations, preventing crime, and apprehending criminals and terrorists.”

In addition to the new fingerprint identification technology, the NGI program has also delivered Advanced Technology Workstations to the FBI’s fingerprint examiner staff. The workstations include significantly larger display screens with higher resolution and true color support, allowing staff to see more detailed attributes of biometric data for more efficient decision-making.

 



RSA hack makes Biometric databases more dangerous – data exposed – reducing the effectiveness of SecurID tokens

Mar 21st, 2011 | By | Category: News

Top security firm RSA Security revealed that it’s been the victim of an “extremely sophisticated” hack.

RSA’s ‘SecurID’ adds an extra layer of protection to a login process by requiring users to enter a secret code number displayed on a keyfob, or in software, in addition to their password. The number is cryptographically generated and changes every 30 seconds.

Michael (Micha) Shafir, the founder of Innovya says: “To make things clear, using an OTP (One Time Password device…) during a simple 1-way authentication with the presence of a HACKED TECHNOLOGY is NOT SECURE it is like showing your ID (passport, fingerprints…) to a fake police officer. In fact, the user is “strongly authenticated” but to the wrong person/target.

Saving Biometric information in databases or turning the human body into the ultimate identification card is extremely dangerous. The possibility of fraud with electronic chips and stored biometric data should not be underestimated. Exposing or losing biometric property is a permanent problem for the life of the individual, since, there is no practical way of changing one’s physiological or behavioral characteristics”.

By Tim Stevens posted Mar 18th 2011 8:49AM

RSA Hacked

 

If you’ve ever wondered whether two-factor authentication systems actually boost security, things that spit out pseudorandom numbers you have to enter in addition to a password, the answer is yes, yes they do. But, their effectiveness is of course dependent on the security of the systems that actually generate those funny numbers, and as of this morning those are looking a little less reliable. RSA, the security division of EMC and producer of the SecurID systems used by countless corporations (and the Department of Defense), has been hacked. Yesterday it sent out messages to its clients and posted an open letter stating that it’s been the victim of an “advanced” attack that “resulted in certain information being extracted from RSA’s systems” — information “specifically related to RSA’s SecurID two-factor authentication products.”

Yeah, yikes. The company assures that the system hasn’t been totally compromised, but the information retrieved “could potentially be used to reduce the effectiveness of a current two-factor authentication implementation as part of a broader attack.” RSA is recommending its customers beef up security in other ways, including a suggestion that RSA’s customers “enforce strong password and pin policies.” Of course, if security admins wanted to rely on those they wouldn’t have made everyone carry around SecurID tokens in the first place.

 

Sunday March 20, 2011

RSA Hack Demonstrates Superiority of Cell Phone as 2nd Factor

RSA 2 factor authentication gets Hacked… RSA is an important measure, making attacks against authentication systems much harder to commit (??) – NOT ANY MORE…

The company said in a note posted on its website that the intruders succeeded in stealing information related to the company’s SecurID two-factor authentication products. SecurID adds an extra layer of protection to a login process by requiring users to enter a secret code number displayed on a keyfob, or in software, in addition to their password. The number is cryptographically generated and changes every 30 seconds.



Outrange: Think tank slams plan for biometric database

Mar 14th, 2011 | By | Category: News

“The plan to establish a central biometric database, along with the use of biometric identity cards, will make Israel the only Western democracy to store biometric information about its own citizens,” economist Diana Zaks wrote. “Israel will be in the company of countries such as Ethiopia, Indonesia, Yemen and Pakistan.”

 

By NADAV SHEMER – Jpost.com
03/13/2011 23:22

If implemented, Interior Ministry will convert Israelis’ identity cards into smart cards with digital chips storing biometric data.

The government is about to begin compiling a biometric database of all Israelis that will put their personal data in the hands of at least 10,000 government employees, according to a position paper released Sunday by the Jerusalem Institute for Market Studies. 

“The plan to establish a central biometric database, along with the use of biometric identity cards, will make Israel the only Western democracy to store biometric information about its own citizens,” economist Diana Zaks wrote. “Israel will be in the company of countries such as EthiopiaIndonesia, Yemen and Pakistan.”

Founded in 2003, JIMS is a nonprofit economic-policy think tank whose declared mission is to promote social progress in Israel through economic freedom and individual liberty.

Its position paper, which analyses the Biometric Law passed by the Knesset in 2009, warns that if implemented, the Interior Ministry will be tasked with converting Israelis’identity cards into smart cards with digital chips storing biometric data, and at the same time the government will establish a central database with each individual’s personal biometric information.

According to the paper, the government is about to embark on a two-year pilot program with voluntary registration, before the program becomes mandatory for all citizens.

The paper argues that the program presents a host of dangers, including leakage of data, possible use by terrorists, criminal penetration and identity theft, increase in police powers and likely pressure on the government to make the data available to local or international businesses or to pharmaceutical companies for research.

“Considering the marginal benefits from establishing a biometric database, the alternative means of achieving its aims, its high cost and the many dangers involved,the government of Israel could do well to consider whether such a database is necessary, and Israelis could do well to express themselves concerning this intended invasion of their privacy and the dangers ahead,” Zaks wrote.