UK To Start Biometric Passport Trials 153
pearljam145 writes that the "UK is planning to test biometric passports that will include face and iris or fingerprint recording and recognition for a 6 month period on 10000 volunteers. Read here for more details. A face recognition chip is going to be the primary biometric and iris or fingerprint scanning will be use as a secondary biometric. However face recognition might not be the perfectly viable solution since it has produced too many false positives in the past. Face recogntion to this date is not robust enough to support real time recognition in a crowd (more failures?). Only with cooperation of the subject does this system produce good results. So will face recognition join fingerprint and iris recognition in a long list of obtrusive recognition techniques?"
Hey, these guys helped JBoss... (Score:4, Insightful)
Favorite quote... (Score:5, Informative)
Re:Favorite quote... (Score:3, Insightful)
That's rather interesting, considering how much money it would cost to set up such an infrastructure in a country. Looks like if you're not from a first world country, we don't want you here. Mexico who?
Re:Favorite quote... (Score:3, Insightful)
As soon as they're done postponing the date for requiring biometric passports, they'll start reading the biometrics of the countries that have them, and spend more time harassing the people from other countries. This will in turn give us a false sense of security. The worst criminals can spontaneously ap
Re:Favorite quote... (Score:5, Insightful)
Not even. I don't know about other countries, but I know my US passport is good for ten years. So even if the US required biometrics tomorrow, we'd still have to wait until the end of 2013 for the change to have any real effect.
What would be more productive (and probably cheaper) than requiring biometrics would be better ways of verifying the passport itself. The Bureau of Engraving and Printing is doing all sorts of things to make US paper currency more secure, but even paper currency from the 1980s is more difficult for counterfeiters to reproduce than your typical passport. Heck, driver's licenses and state ID cards are harder to forge. And let's not forget birth certificates while we're at it.
The only thing requiring biometric information on passports accomplishes is it allows the US government to collect and store the biometric information, from citizens as well as foreign nationals.
Re:Favorite quote... (Score:2)
One of the reasons we're being forced into this idea is because of the US insistence on foreign nationals carrying biometric-enabled passports...
Is the US proposing biometric passports for its own citizens?
I'd love to know the answer.
Thanks in advance
Mike.
Re:Favorite quote... (Score:2)
You will neeed to turn up to the US consulate in person to get your visa, because the visa itself will contain biometrics (iris scan, IIRC). So, you cannot get out of giving your love to Uncle Sam.
Limited trials? (Score:5, Interesting)
It seems like their trial might be a little limited in scope, don't you think? I understand from the article that this trial is being run by the Passport Service, so presumably the various test stations will be deployed for use in areas of entry to and egress from the UK
I wonder why the numbers are so small.
Other curious questions involve what you'd use a mobile station for -- not portable, but truly mobile, i.e., mounted in a vehicle or similar; stop someone on the street randomly to see if they have a passport and if they're participating in the trial?
Re:Limited trials? (Score:3, Insightful)
Cost, Cost, COST!
I don't think anyone wants to stick thier neck out that far for a feasability study.
From what I read in the article, this is a proof of concept if anything else.
Re:Limited trials? (Score:2)
Haven't we already learned... (Score:1, Redundant)
The Day of The Laughing Hyena (Score:3, Insightful)
In the book and film, the Jackal (a hired assassin) applies for a copy of the birth certificate of someone who had died as a child. When he gets it, he uses that to apply for a passport in the name of that person.
A year or so ago, some investigative reporters used a similar method to get hold of Frederick Forsyth's ID and get credit cards, etc, in his name.
Re:The Day of The Laughing Hyena (Score:2)
Re:The Day of The Laughing Hyena (Score:2)
Re:The Day of The Laughing Hyena (Score:2)
Re:The Day of The Laughing Hyena (Score:2)
Re:The Day of The Laughing Hyena (Score:2)
I say might, because that requires that the system is good enough to actually identify an unknown person based on their biometrics, which is a much harder problem than simply verifying that two sets of biometrics match. I havn't seen anything that suggests the former is a realizable aim of this system.
Biometrics are bad because... (Score:5, Interesting)
The flip side of not being able to lose or forget your biometrics is that you can't change it when it gets stolen. And, yes, people will find ways to spoof biometric authentication schemes into believing that they have your data. Whether it's fake fingerprints, or (more likely) some sort of data hack that sendst the computer the right bitstream for a given person's biometric data, once yours is gone, you're just hosed forever.
If your password or PIN gets stolen, you can make a new password, or get a new ATM card and a new PIN, and cancel the old ones. Once your biometric info is stolen or spoofed, you have the choice of cancelling it and not being able to authenticate anywhere, or just accpeting that your identity is stolen and will stay stolen.
Biometrics are great if *combined* with a password. But by themselves, they're foolish for strong authentication. Just because your fingerprints are on your hand doesn't mean that there isn't a pattern there that could be stolen and stored somewhere by bad actors.
Re:Biometrics are bad because... (Score:1)
Re:Biometrics are bad because... (Score:3, Insightful)
How is it worse or more error-prone or more insecure than eyeballing the passport photo and comparing with the guy in front of you? How many people actually look unmistakably like their passport photos?
The difference is that when they screw up your passport info, nobody's going to believe it. You really will need a new face.
Re:Biometrics are bad because... (Score:2, Insightful)
And maybe they'll have contact lens in 2007 that will fake out a retinal scan... but the scanners made in 2009 will penetrate at different angles, showing up the lens with no problem.
And the problem with a data hack is the location
Re:Biometrics are bad because... (Score:2, Funny)
Well fine then, I'll just have my gloves made from real skin.
Re:Biometrics are bad because... (Score:2)
Blunkettcards will be used as a form of ID for almost all services (in much the same way as many American businesses rely on a driving licence or social security card for ID).
In those places, a simple visual inspection will be made of the card - so you could use a fake card safe in the knowledge that the biometrics will never be c
Re:Biometrics are bad because... (Score:1)
Hmm... I really, really want to disagree with you... but considering how rarely anyone actually checks my credit card signature against the one I put on the paper, I'll have to concede that if the biometric ID system spreads much beyond the airport/border/port area, we are pretty much fucked.
Re:Biometrics are bad because... (Score:5, Insightful)
Becuase you can change your password a whole lot easier than you can change your DNA.
That's nice, but it has nothing to do with what they're doing.
Passwords are authentication. Passports are identification. Identification and authentication are not the same. This use of biometrics would be more analagous to the username than the password.
Keep in mind, also, that this is being used with passports. Passports, unlike ATM cards, are usually presented manually for verification. When the security guard wipes your fingers with an alcohol wipe and mashes them against the machine, spoofing the machinery (e.g., jelly fingers) is a bit harder.
This might even fix the achilles heel of identification (licenses, passports, etc) which is that it is too easy to forge or bribe your way to a fake one. If the big ol' biometric databases notes that Mr. Hakim Faisal is registering for a second passport as Mr. Jorge Fuentes, then that should throw up a flag.
Re:Biometrics are bad because... (Score:4, Interesting)
That depends on how you define "identification."
Does a passport need your name on it to fufill its main task? The answer is a resounding no. The main purpose of the passport is to identify you as belonging to the class of citizens from country X. Most "name and face" transactions, wherein the name is significant, is not done with passports (it's done with normal photo ID cards. Now this is partially disingenuous...on your typical international trip, your passport is used for "name and face" on checkin to make sure your name doesn't appear on a list o'terrorists, and then a class transaction with immigration. But, having said that, the main purpose of the passport is still class authentication and not personal identification.)
Which is why, incidentally, passports are rarely counterfeited just for name and face transactions. They are mostly counterfeited for class transactions.
Really? (Score:2)
What you say might be true if you are IN the US... as there are lots of more common forms of ID that can be used for basically everything... though your passport will work for all of them as well....
Living abroad, your passpot IS your identification, and trumps anything else you get. Expat living in some other country? You want a bank account? Let's see your passport. Pulled over speeding? Let's see your passport. Need to fill out any kind of local government documentation? Let's see your passport.
Re:Biometrics are bad because... (Score:2)
The assumption is that they can easily verify the passports validity against a database, so the problem is authenticating that you are who the passport says you are.
One of the goals is to AVOID having to do manual verification. Frequent travellers to the US has long been able to be fast tracked through immigration if they're willing to register
All true, but one "Unless" (Score:1)
Unless the people making the programs accessing the information do not check for duplicates. And of course, there will have to be circumstances where it purposely ignores such things, because underc
Re:Biometrics are bad because... (Score:2, Insightful)
Re:Biometrics are bad because... (Score:2)
Facial recognition and hand recognition, which both rely on shapes, is quite unreliable if used for identification, and as such certainly not foolproof to use for authentication as well.
However it means you won't have to put your fingers on some plate, or step up to a scanner to have your irises scanned, which apparently causes more resistance because it reminds people too much about dystopian sci-fi and makes people think about police (the fingerprints) treatment of susp
Re:Biometrics are bad because... (Score:1)
Re:Biometrics are bad because... (Score:2)
Re:Biometrics are bad because... (Score:2, Interesting)
Re:Biometrics are bad because... (Score:2, Insightful)
Biometrics won't replace password authentication (at least not anytime soon). But there's a lot of places that you DON'T have a registered account that they can just do a password lookup. It's just not practical to have an international database of people and passwords (or a series of individual databases). With all the bureacracy and red ta
MORI looking for volunteers (Score:3, Interesting)
"Pollsters MORI will be ensuringthat the Digitised 10K will be a representative sample the UK population: and here's where it gets interesting. MORI are inviting people to apply. Assuming that those most worried about biometrics in society aren't going to leap at the chance to be fingerprinted in advance of the giant Orwellian (etc) database, why not help the sample from getting a bit too skewed? Plus who wouldn't want to mess with cool, hackable, potentially dystopian gadgets?"
Seems a oppotune time to get my passport renewed, perhaps.
I don't know about this (Score:2, Insightful)
Re:I don't know about this (Score:1)
The trend in the UK (Score:2, Insightful)
Re:The trend in the UK (Score:3, Interesting)
In other areas, not. Contrary to many other countries, the UK doesn't have a central database of all citizens for instance. You d
Biometric Identification (Score:2, Insightful)
This isn't really anything more, other than possibly higher resolution recordings.
Re:Biometric Identification (Score:1)
This isn't really anything more, other than possibly higher resolution recordings.
(troll? what a putz some moderator must be)
The thing about passports (Score:5, Insightful)
So will face recognition join fingerprint and iris recognition in a long list of obtrusive recognition techniques?
Passports are inherently obtrusive. You walk up to the person in the uniform behind the desk, hand over your passport, and wait for them to decide if it matches you. Matching a face by camera at this point is no more of a bother. (Well, if you don't pass the scan, it is...but that's a different subject.)
Plus, the people manning the desk control the lighting and the positioning of your face. If you don't take off your sunglasses and look straight ahead, you don't pass. This will improve the performance of the software far above the 'scan the crowd' attempts. You'll still have some false positives, of course; but all systems dealing with humans do.
Re:The thing about passports (Score:2)
Re:The thing about passports (Score:3, Informative)
The UK government has already proposed linking all government data
Re:The thing about passports (Score:2)
Re:The thing about passports (Score:2)
Oh I agree it would be a disaster, but the repercussions would be felt by those people who need government services. The recent fiasco with
Imagine... (Score:4, Funny)
Helping to make a reality (Score:3, Funny)
Re:Helping to make a reality (Score:1, Funny)
Also covered in The Economist (Score:5, Informative)
Among other things, the article makes the very good point that there are two ways to use biometrics: for identification (i.e., who is this J. Random Person), and for authentication (i.e., is this really Rich, as he claims to be).
Tests of face recognition for the first purpose have basically been miserable failures, as far as I can see. (As I'm sure most Slashdotters know, facial recognition is computationally a vey hard problem, even though we clever apes do it all the time.) For the second application, face recognition or fingerprints would seem more promising, since one is comparing them with, in effect, a known right answer.
The article also points out that all of this is being sold as a way to "increase security" -- but it would have done exactly nothing to prevent 9/11, since the hijackers entered the US and traveled as themselves.
Re:Also covered in The Economist (Score:2)
Perhaps some did, but not all. Apparently at least 2 of them [bbc.co.uk] were alive a couple weeks after the attacks. One of them, for example, says he "lost his passport while studying in Denver". Presumably the real hijacker used that passport, or one based on it but with a new picture, when he entered the country.
Whether the owner of the "lost passport" actually helped the hijacker by faking a lost
Re:Also covered in The Economist (Score:3, Insightful)
Now there would be an incentive for faked passports or human smuggling.
Re:Also covered in The Economist (Score:2)
The trouble is, it is not clear that these identity-verification systems are worth the cost and trouble of introducing them. All 19 of the September 11th hijackers entered the United States using valid visas, on their own passports, for example. Verifying their identities using biometric visas would have made no difference.
In any case, even if we had all the technology you describe, it would not solve the problem, because the probl
Full biometric data should be on all passports... (Score:2, Interesting)
I think it just makes sense to push for a full biometric smart
Re:Full biometric data should be on all passports. (Score:5, Interesting)
It's good to know that your government takes your personal opinion so seriously.
Or, just perhaps, given that the US is in effect demanding that all other countries do what it wants, it was giving them a little bit more reasonable an ammount of time to implement a system that has little point beyond jingoistic technobable-like 'look, look, we're doing something, please re-elect us' politico-speak.
Possibly, but if it's too US-led, people will see it (however correctly) as an attempt to erode their sovereignty in favour of America.
You might have the money, but does, say, Rwanda, or Indonesia? Can there not be made an argument that this is effectively protectionism as to the kind of people economically 'allowed' in to the country to conduct business, &c.?
Apart from the obvious cost implications, well, countried get 'favored' status for a reason - they have (what are regarded as) 'sufficiently' thorough security on the other side. Indeed, having seen my fair share of airport security, I'd say that the laxest I ever saw was for a (domestic, but even so) flight from Denver to Washington (pretty much nothing beyond my bag getting spot-checked for explosives' residues), as compared to a flight out of Sri Lanka (including what felt like a highly competent mandatory body pat-down - thrice - and canon emplacements around the airport).
Yeah, sure, let's dispose of several hundred years of diplomacy because it's a system that can be exploited.
You either get seriously tough on security, or admit defeat. You can't show you are securing the country if kids can still buy pot, crack and smack.
Yes, because it's well known that kids who do drugs grow up to die in terrorist-related activitiy. What?
Back on-topic, I see no reason for people to object to the use of computer-read, rather than human-read, biometric data (height 182 cm, weight 72 kg is biometric data, after all), as long as it is used for a reasonably good, but not necessarily perfect, confirmation of identity - after all, if the data matches, all that means is that the person is who the database says they are claiming to be, but not necessarily who they actually are...
Re:Full biometric data should be on all passports. (Score:2)
I rambled on a bit previously.
I believe that the US government owes i
Re:Full biometric data should be on all passports. (Score:4, Interesting)
Only in very unusual circumstances (such as loosing one's passport). Do you mean, perhaps, visas?
If you mean that people should only be allowed into the US on pre-accepted visas, well, OK, but I (as a citizen of the European Union) can move freely between 15 (and soon to be 25) countries with ease, and normally without a check of my passport in the first place (unless travel is by air, that is, as there aren't European terminals as well as international ones), and in practice, also into and out of Switzerland - I once went from Austria -> Switzerland -> Italy -> France -> Switzerland -> Germany -> France -> United Kingdom, and only got my passport checked on arrival in the UK.
It is widely believed that this freedom of movement has benefitted the EU's member states greatly (especially economically), and that security has, if anything, been increase, by concentrating on intelligence rather than rote scanning of all incomers. Why could this system of trusted others be kept in use in the US/.
Re:Full biometric data should be on all passports. (Score:3, Informative)
Catch 22 (Score:2)
Guess what you need to show to prove that?
Re:Full biometric data should be on all passports. (Score:2)
Yes, that is what I meant.
People can apply for visas to visit the US and be issued a smart card passport/visa to pass customs/security. The US embassies would do all background work and process the smart card visa/passport. Countries with embassies would not need to purchase anything, only supply whatever information an e
Re:Full biometric data should be on all passports. (Score:1)
If tons of crack can still make it over the border, how can you expect to keep terrorists out? We have drug sniffing dogs and robots, how are those people sniffing dogs coming? And big bags of white stuff tends to stand out more than another normal looking
biometrics problematic for some (Score:5, Interesting)
Re:biometrics problematic for some (Score:2)
Big Brother is watching you (Score:4, Interesting)
If I make no sense in this post, you'll have to excuse me. I'm a little intoxicated tonight.
Re:Big Brother is watching you (Score:3, Insightful)
So yes, I'm an American and glad. This country may suck, but it sucks a lot less than most other countries.
What the fuck next? (Score:3, Funny)
"Sorry, sir, we have detected couscous and figs in your feces. If you'll kindly step over there towards the gentlemen with the M-16s, they'll escort you to your flight to Guantanamo Bay."
At least.. (Score:5, Funny)
The rich and famous... (Score:5, Interesting)
On a more serious note, how does this effect people who are the result of severe burns, car accidents, plastic surgergy, radioactive mutations, aging, etc? Obviously if someone's face is altered they will have some problems.
Re:The rich and famous... (Score:5, Informative)
Re:The rich and famous... (Score:1)
Although it might be necessary. Still, what if someone was in the healing process or getting their face repaired, which may take multiple operations over a period of time? As I understand it, getting your body/face repaired after a severe accident can take quite a while, I don't think it happens overnight with a single surgery. Although I might be wrong.
Re:The rich and famous... (Score:1)
I have difficulty imagining there are hordes of people in the middle of massive reconstructive surgery going on holiday and about to bring the passport system crashing down around them.
even if there were, how does it differ from the current photo only passports? surely having face AND iris AND fingerprints makes the situation a lot better?
Re:The rich and famous... (Score:1)
Seriously, though... you do need to take into consideration small things like this. Would YOU like to be thrown into a loop because of the current limitations of technology?
Iris and fingerprints are probably more reliable. I was, however, referring to just the face portion.
I don't really have any problem with scanning eyes or fingerprints, although I wonder how a severe-burn victim with no eyes and no hands would deal with this...
We can't automate the pro
Re:The rich and famous... (Score:2)
Re:The rich and famous... (Score:1)
Re:The rich and famous... (Score:3, Funny)
Which finger? (Score:1)
On Fingerprints and other biometrics (Score:5, Informative)
Blurb out of the Cryptogram:
"So it is our opinion, that as long as the manufacturers of fingerprint equipment do not solve the live detection problem (i.e. detect the difference between a live finger and a dummy), biometric fingerprint sensors should not be used in combination with identity cards, or in medium to high security applications. In fact, we even believe that identity cards with fingerprint biometrics are in fact weaker than cards without it. The following two examples may illustrate this statement.
1. Suppose, because of the fingerprint check, there is no longer visual identification by an official or a controller. When the fingerprint matches with the template in the card then access is granted if it is a valid card (not on the blacklist). In that case someone who's own card is on the blacklist, can buy a valid identity card with matching dummy fingerprint (only 15 minutes work) and still get access without anyone noticing this.
2. Another example: Suppose there still is visual identification and only in case of doubt--the look-alike problem with identity cards--the fingerprint will be checked. When the photo on the identity card and the person do not really match and the official asks for fingerprint verification, most likely the positive result of the fingerprint scan will prevail. That is, the "OK" from the technical fingerprint system will remove any (legitimate) doubt.
It is our opinion that especially the combination of identity cards and biometric fingerprint sensors results in risks of which not many people are aware."
Full article is here:
http://www.schneier.com/crypto-gram-0311.h
Re:On Fingerprints and other biometrics (Score:3, Interesting)
Biometrics (Score:2)
Many high-security areas use biometric devices in addition to traditional methods such as badges, access codes and guards.
You say that like it's a bad thing. (Score:2)
Consider, for your second item, what happens for someone right now in the passport system. You end up with basically three possibilites mapping to two results. The end cases are easy--you look like the picture and go through, you don't look like the picture and you're rejected. However, you have a middle ground where you look enough like the picture to exclude you from the third class, but there's enough differences to exclude you from the first class. There is no other help for the passport officer to deci
I'm more worried about fake/buggy biometrics... (Score:2, Insightful)
I can just imagine my biometric record getting screwed up because of some random computer bug, and guys with shotguns and big dogs coming out when I show my passport the next time I travel internationally...
Obviously this would work best in England (Score:2, Funny)
Re:Obviously this would work best in England (Score:3, Funny)
Re:Obviously this would work best in England (Score:2)
For your information, dentistry here is free on the NHS, which means that British kids get a check up every six months and free correction. I'd bet good money that if you took 1,000 British kids and a 1,000 American kids at random then you'd find it was the group from the US that more uncorrected problems than those from the UK.
This "British people all have bad teeth" joke is so laughable, if only because the opposite is true.
Re:Obviously this would work best in England (Score:1)
The UK bad-teeth thing IS true, at least on people aged over about 40, due to earlier recognition of the importance of dental hygiene in places such as the US.
Re: (Score:2)
beard? (Score:2, Interesting)
Why? (Score:1)
I can see it now, at the airport... (Score:3, Funny)
<Igor> Yeth, mathter. </Igor> (opening suitcase full of body parts)
Gattaca (Score:4, Interesting)
Re:Gattaca (Score:2)
Re:Gattaca (Score:2)
-molo
We already have a face recognition system (Score:1)
What do you think their doing when they look at the photo in the back of your passport and compare it to your face?
So a computers going to do it instead, What makes the process more obtrusive because its automated?
This is mandated by the US (Score:3, Informative)
So in the near future it's either biometrics, or having to apply for a visa to get into the US.
Iris recognition is definitely NOT obtrusive (Score:2)
Modern techniques of Iris recognition can obtain ultra-high resolution images of the Iris (used for verification of identity) from video in a matter of seconds from metres away.
Hmmm I see a problem (Score:2)
Now we've been told that the reason for ID cards is that the existing databases are corrupt - full of dead people, fake records and so on.
Which means that we are putting garbarge into the system. Someone who already possesses a fake ID can simply go along with their false identification, get their eyes scanned and be give
Biometrics in the U.A.E. (Score:2, Interesting)
False positives (Score:2)
False positives aren't too much of a problem here. I think face recognition has about a 1/1000 false positive rate, which is a killer for crowd recognition, but would be entirely acceptable for this application (the result would be that 1 time in a thousand somebody tried to use someone else's passport, they wouldn't be caught).
False negatives are
Re:Step in the right Direction (Score:1)