biometrics

{{Short description|Metrics related to human characteristics}}

{{Hatnote group|

{{For|the academic journal|Biometrics (journal){{!}}Biometrics (journal)}}

{{Distinguish|Biostatistics{{!}}Biometry}}

}}

{{Use dmy dates|date=June 2020}}

Biometrics are body measurements and calculations related to human characteristics and features. Biometric authentication (or realistic authentication) is used in computer science as a form of identification and access control. It is also used to identify individuals in groups that are under surveillance.{{Cite journal |last1=Blanco-Gonzalo |first1=Ramon |last2=Lunerti |first2=Chiara |last3=Sanchez-Reillo |first3=Raul |last4=Guest |first4=Richard Michael |date=2018-03-22 |title=Biometrics: Accessibility challenge or opportunity? |journal=PLOS ONE |language=en |volume=13 |issue=3 |pages=e0194111 |doi=10.1371/journal.pone.0194111 |doi-access=free |issn=1932-6203 |pmc=5864003 |pmid=29565989|bibcode=2018PLoSO..1394111B }}

Biometric identifiers are the distinctive, measurable characteristics used to label and describe individuals. Biometric identifiers are often categorized as physiological characteristics which are related to the shape of the body. Examples include, but are not limited to fingerprint,{{Cite journal |last1=Cao |first1=Liling |last2=Ge |first2=Wancheng |date=2015-03-10 |title=Analysis and improvement of a multi-factor biometric authentication scheme: Analysis and improvement of a MFBA scheme |url=https://onlinelibrary.wiley.com/doi/10.1002/sec.1010 |journal=Security and Communication Networks |language=en |volume=01 |issue=4 |pages=617–625 |doi=10.1002/sec.1010|url-access=subscription }} palm veins, face recognition, DNA, palm print, hand geometry, iris recognition, retina, odor/scent, voice, shape of ears and gait. Behavioral characteristics are related to the pattern of behavior of a person, including but not limited to mouse movement,{{Cite web|last=Villas-Boas|first=Antonio|title=Passwords are incredibly insecure, so websites and apps are quietly tracking your mouse movements and smartphone swipes without you knowing to make sure it's really you |quote=Passwords are incredibly insecure, so websites and apps are quietly tracking your mouse movements and Android swipes without you knowing to make sure it's really you|url=https://www.businessinsider.com/websites-apps-track-mouse-movements-screen-swipes-security-behavioral-biometrics-2019-7|access-date=2021-11-22|website=Business Insider|language=en-US}} typing rhythm, gait, signature, voice, and behavioral profiling. Some researchers have coined the term behaviometrics (behavioral biometrics) to describe the latter class of biometrics.{{Cite journal|last1=Alzubaidi|first1=Abdulaziz|last2=Kalita|first2=Jugal|date=2016|title=Authentication of Smartphone Users Using Behavioral Biometrics|url=http://dx.doi.org/10.1109/comst.2016.2537748|journal=IEEE Communications Surveys & Tutorials|volume=18|issue=3|pages=1998–2026|doi=10.1109/comst.2016.2537748|issn=1553-877X|arxiv=1911.04104|s2cid=8443300}}{{Cite journal |last1=Yang |first1=Wencheng |last2=Wang |first2=Song |last3=Sahri |first3=Nor Masri |last4=Karie |first4=Nickson M. |last5=Ahmed |first5=Mohiuddin |last6=Valli |first6=Craig |date=2021-09-14 |title=Biometrics for Internet-of-Things Security: A Review |journal=Sensors |volume=21 |issue=18 |pages=6163 |doi=10.3390/s21186163 |doi-access=free |issn=1424-8220 |pmc=8472874 |pmid=34577370|bibcode=2021Senso..21.6163Y }}

More traditional means of access control include token-based identification systems, such as a driver's license or passport, and knowledge-based identification systems, such as a password or personal identification number. Since biometric identifiers are unique to individuals, they are more reliable in verifying identity than token and knowledge-based methods; however, the collection of biometric identifiers raises privacy concerns.

Biometric functionality

Many different aspects of human physiology, chemistry or behavior can be used for biometric authentication. The selection of a particular biometric for use in a specific application involves a weighting of several factors. Jain et al. (1999){{Cite book

| title = Biometrics: Personal Identification in Networked Society

| publisher = Kluwer Academic Publications

| editor-last = Jain

| editor-first = A. K.

| editor2-last = Bolle

| editor2-first = R.

| editor3-last = Pankanti

| editor3-first = S.

| year = 1999

| isbn = 978-0-7923-8345-1

}} identified seven such factors to be used when assessing the suitability of any trait for use in biometric authentication. Biometric authentication is based upon biometric recognition which is an advanced method of recognising biological and behavioural characteristics of an Individual.

  • Universality means that every person using a system should possess the trait.
  • Uniqueness means the trait should be sufficiently different for individuals in the relevant population such that they can be distinguished from one another.
  • Permanence relates to the manner in which a trait varies over time. More specifically, a trait with good permanence will be reasonably invariant over time with respect to the specific matching algorithm.
  • Measurability (collectability) relates to the ease of acquisition or measurement of the trait. In addition, acquired data should be in a form that permits subsequent processing and extraction of the relevant feature sets.
  • Performance relates to the accuracy, speed, and robustness of technology used (see performance section for more details).
  • Acceptability relates to how well individuals in the relevant population accept the technology such that they are willing to have their biometric trait captured and assessed.
  • Circumvention relates to the ease with which a trait might be imitated using an artifact or substitute.

Proper biometric use is very application dependent. Certain biometrics will be better than others based on the required levels of convenience and security.{{Cite journal|url = http://www.appliedclinicaltrialsonline.com/biometrics-comes-age|title = Biometrics comes of age: despite accuracy and security concerns, biometrics are gaining in popularity|last = Bleicher|first = Paul|date = 2005|journal = Applied Clinical Trials| series=Applied Clinical Trials-12-01-2005 |access-date = 6 December 2019}} No single biometric will meet all the requirements of every possible application.

File:Biometric system diagram.pngThe block diagram illustrates the two basic modes of a biometric system.{{Cite book|last1=Jain|first1=Anil K.|title=Handbook of Biometrics|last2=Ross|first2=Arun|publisher=Springer|year=2008|isbn=978-0-387-71040-2|editor-last=Jain|editor-first=AK|pages=1–22|chapter=Introduction to Biometrics|editor2-last=Flynn|editor3-last=Ross|editor3-first=A|chapter-url=https://www.springer.com/computer/image+processing/book/978-1-4419-4375-0|archive-url=https://web.archive.org/web/20110309042959/http://www.springer.com/computer/image+processing/book/978-1-4419-4375-0|archive-date=9 March 2011|url-status=live}}{{payment required}} First, in verification (or authentication) mode the system performs a one-to-one comparison of a captured biometric with a specific template stored in a biometric database in order to verify the individual is the person they claim to be. Three steps are involved in the verification of a person.{{cite journal |last1=Sahoo |first1=Soyuj Kumar |last2=Choubisa |first2=Tarun |last3=Prasanna |first3=SR Mahadeva |title=Multimodal Biometric Person Authentication : A Review |journal=IETE Technical Review |date=1 January 2012 |volume=29 |issue=1 |pages=54–75 |doi=10.4103/0256-4602.93139 |doi-broken-date=1 November 2024 |doi-access=free|s2cid=62699150 }} In the first step, reference models for all the users are generated and stored in the model database. In the second step, some samples are matched with reference models to generate the genuine and impostor scores and calculate the threshold. The third step is the testing step. This process may use a smart card, username, or ID number (e.g. PIN) to indicate which template should be used for comparison.Systems can be designed to use a template stored on media like an e-Passport or smart card, rather than a remote database. Positive recognition is a common use of the verification mode, "where the aim is to prevent multiple people from using the same identity".

File:Biometric Island, Gdansk University of Technology 2021.jpg|right]]

Second, in identification mode the system performs a one-to-many comparison against a biometric database in an attempt to establish the identity of an unknown individual. The system will succeed in identifying the individual if the comparison of the biometric sample to a template in the database falls within a previously set threshold. Identification mode can be used either for positive recognition (so that the user does not have to provide any information about the template to be used) or for negative recognition of the person "where the system establishes whether the person is who she (implicitly or explicitly) denies to be". The latter function can only be achieved through biometrics since other methods of personal recognition, such as passwords, PINs, or keys, are ineffective.

The first time an individual uses a biometric system is called enrollment. During enrollment, biometric information from an individual is captured and stored. In subsequent uses, biometric information is detected and compared with the information stored at the time of enrollment. Note that it is crucial that storage and retrieval of such systems themselves be secure if the biometric system is to be robust. The first block (sensor) is the interface between the real world and the system; it has to acquire all the necessary data. Most of the times it is an image acquisition system, but it can change according to the characteristics desired. The second block performs all the necessary pre-processing: it has to remove artifacts from the sensor, to enhance the input (e.g. removing background noise), to use some kind of normalization, etc. In the third block, necessary features are extracted. This step is an important step as the correct features need to be extracted in an optimal way. A vector of numbers or an image with particular properties is used to create a template. A template is a synthesis of the relevant characteristics extracted from the source. Elements of the biometric measurement that are not used in the comparison algorithm are discarded in the template to reduce the file size and to protect the identity of the enrollee.{{Cite web|url=https://ievoreader.com/how-biometric-data-is-stored/|title=How Biometric Data is Stored|date=2018-12-10|website=ievo Ltd|language=en-GB|access-date=2020-02-22}} However, depending on the scope of the biometric system, original biometric image sources may be retained, such as the PIV-cards used in the Federal Information Processing Standard Personal Identity Verification (PIV) of Federal Employees and Contractors (FIPS 201).{{Cite journal|last1=Grother|first1=Patrick|last2=Salamon|first2=Wayne|last3=Chandramouli|first3=Ramaswamy|date=July 2013|title=Biometric Specifications for Personal Identity Verification|url=https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-76-2.pdf|pages=NIST SP 800–76–2|doi=10.6028/nist.sp.800-76-2|doi-access=free}}

During the enrollment phase, the template is simply stored somewhere (on a card or within a database or both). During the matching phase, the obtained template is passed to a matcher that compares it with other existing templates, estimating the distance between them using any algorithm (e.g. Hamming distance). The matching program will analyze the template with the input. This will then be output for a specified use or purpose (e.g. entrance in a restricted area), though it is a fear that the use of biometric data may face mission creep.{{Cite web|url=https://www.federalregister.gov/documents/2018/08/09/2018-17079/agency-information-collection-activities-biometric-identity|title=Agency Information Collection Activities: Biometric Identity|date=2018-08-09|website=Federal Register|access-date=2020-02-22}}{{Cite web|url=https://www.dhs.gov/sites/default/files/publications/Center%20for%20Democracy%20%20Technology%20Comment%20DHS-2019-0001%20%28003%29.pdf|title=Re: DHS 2019-00001, DHS Data Privacy and Integrity Advisory Council|last=Taylor|first=Sandra|date=25 February 2019|website=Department of Homeland Security|access-date=20 February 2020}}

Selection of biometrics in any practical application depending upon the characteristic measurements and user requirements. In selecting a particular biometric, factors to consider include, performance, social acceptability, ease of circumvention and/or spoofing, robustness, population coverage, size of equipment needed and identity theft deterrence. The selection of a biometric is based on user requirements and considers sensor and device availability, computational time and reliability, cost, sensor size, and power consumption.

Multimodal biometric system

Multimodal biometric systems use multiple sensors or biometrics to overcome the limitations of unimodal biometric systems.{{Cite journal|url=https://dx.doi.org/10.1109/TIFS.2016.2569061|doi = 10.1109/TIFS.2016.2569061|title = Discriminant Correlation Analysis: Real-Time Feature Level Fusion for Multimodal Biometric Recognition|year = 2016|last1 = Haghighat|first1 = Mohammad|last2 = Abdel-Mottaleb|first2 = Mohamed|last3 = Alhalabi|first3 = Wadee|journal = IEEE Transactions on Information Forensics and Security|volume = 11|issue = 9|pages = 1984–1996|s2cid = 15624506|url-access = subscription}} For instance iris recognition systems can be compromised by aging irises{{Cite news | title = Questions Raised About Iris Recognition Systems | url = http://sciencedaily.com/releases/2012/07/120712141938.htm | date = 12 July 2012 | work = Science Daily | url-status = live | archive-url = https://web.archive.org/web/20121022051152/http://www.sciencedaily.com/releases/2012/07/120712141938.htm | archive-date = 22 October 2012}} and electronic fingerprint recognition can be worsened by worn-out or cut fingerprints. While unimodal biometric systems are limited by the integrity of their identifier, it is unlikely that several unimodal systems will suffer from identical limitations. Multimodal biometric systems can obtain sets of information from the same marker (i.e., multiple images of an iris, or scans of the same finger) or information from different biometrics (requiring fingerprint scans and, using voice recognition, a spoken passcode).{{cite book |title=The Mobile Wave: How Mobile Intelligence Will Change Everything |last=Saylor |first=Michael |year=2012 |publisher=Perseus Books/Vanguard Press |page=99 |url=https://books.google.com/books?id=gJqxM8sAJmIC|isbn=9780306822988 }}{{Cite news | title = This is the 'biometric war' Michael Saylor was talking about | url = http://www.bizjournals.com/washington/blog/techflash/2013/10/this-is-the-biometric-war-michael.html | date = 3 October 2013 | work = Washington Business Journal | author = Bill Flook | url-status = live | archive-url = https://web.archive.org/web/20131007031912/http://www.bizjournals.com/washington/blog/techflash/2013/10/this-is-the-biometric-war-michael.html | archive-date = 7 October 2013}}

Multimodal biometric systems can fuse these unimodal systems sequentially, simultaneously, a combination thereof, or in series, which refer to sequential, parallel, hierarchical and serial integration modes, respectively.

Fusion of the biometrics information can occur at different stages of a recognition system. In case of feature level fusion, the data itself or the features extracted from multiple biometrics are fused. Matching-score level fusion consolidates the scores generated by multiple classifiers pertaining to different modalities. Finally, in case of decision level fusion the final results of multiple classifiers are combined via techniques such as majority voting. Feature level fusion is believed to be more effective than the other levels of fusion because the feature set contains richer information about the input biometric data than the matching score or the output decision of a classifier. Therefore, fusion at the feature level is expected to provide better recognition results.

Furthermore, the evolving biometric market trends underscore the importance of technological integration, showcasing a shift towards combining multiple biometric modalities for enhanced security and identity verification, aligning with the advancements in multimodal biometric systems.{{cite web |title=What is Biometrics? Definition, Data Types, Trends (2024) |url=https://www.aratek.co/news/what-is-biometrics-definition-data-types-trends |website=Aratek Biometrics |access-date=11 April 2024}}

Spoof attacks consist in submitting fake biometric traits to biometric systems, and are a major threat that can curtail their security. Multi-modal biometric systems are commonly believed to be intrinsically more robust to spoof attacks, but recent studiesZahid Akhtar, [http://pralab.diee.unica.it/sites/default/files/Akhtar_PhD2012.pdf "Security of Multimodal Biometric Systems against Spoof Attacks"] (PDF). {{webarchive|url=https://web.archive.org/web/20150402104529/http://pralab.diee.unica.it/sites/default/files/Akhtar_PhD2012.pdf |date=2 April 2015 }}. Department of Electrical and Electronic Engineering, University of Cagliari. Cagliari, Italy, 6 March 2012. have shown that they can be evaded by spoofing even a single biometric trait.

One such proposed system of Multimodal Biometric Cryptosystem Involving the Face, Fingerprint, and Palm Vein by PrasanalakshmiPrasanalakshmi,[https://citeseerx.ist.psu.edu/document?repid=rep1&type=pdf&doi=803002976e55927583ef8a57b9586c50b4398a11"Multimodal Biometric Cryptosystem Involving Face, Fingerprint, and Palm Vein"], July 2011 The Cryptosystem Integration combines biometrics with cryptography, where the palm vein acts as a cryptographic key, offering a high level of security since palm veins are unique and difficult to forge. The Fingerprint Involves minutiae extraction (terminations and bifurcations) and matching techniques. Steps include image enhancement, binarization, ROI extraction, and minutiae thinning. The Face system uses class-based scatter matrices to calculate features for recognition, and the Palm Vein acts as an unbreakable cryptographic key, ensuring only the correct user can access the system. The cancelable Biometrics concept allows biometric traits to be altered slightly to ensure privacy and avoid theft. If compromised, new variations of biometric data can be issued.

The Encryption fingerprint template is encrypted using the palm vein key via XOR operations. This encrypted Fingerprint is hidden within the face image using steganographic techniques. Enrollment and Verification for the Biometric data (Fingerprint, palm vein, face) are captured, encrypted, and embedded into a face image. The system extracts the biometric data and compares it with stored values for Verification. The system was tested with fingerprint databases, achieving 75% verification accuracy at an equal error rate of 25% and processing time approximately 50 seconds for enrollment and 22 seconds for Verification. High security due to palm vein encryption, effective against biometric spoofing, and the multimodal approach ensures reliability if one biometric fails. Potential for integration with smart cards or on-card systems, enhancing security in personal identification systems.

Performance

The discriminating powers of all biometric technologies depend on the amount of entropy they are able to encode and use in matching.{{cite journal |last1=Daugman |first1=John |title=Collision Avoidance on National and Global Scales: Understanding and Using Big Biometric Entropy |date=24 February 2021 |doi=10.36227/techrxiv.14061671 |url=https://www.cl.cam.ac.uk/~jgd1000/BiomEntropy.pdf}}

The following are used as performance metrics for biometric systems:{{cite web|url=http://www.ccert.edu.cn/education/cissp/hism/039-041.html|title=Characteristics of Biometric Systems|publisher=Cernet|url-status=dead|archive-url=https://web.archive.org/web/20081017165633/http://www.ccert.edu.cn/education/cissp/hism/039-041.html|archive-date=17 October 2008}}

  • False match rate (FMR, also called FAR = False Accept Rate): the probability that the system incorrectly matches the input pattern to a non-matching template in the database. It measures the percent of invalid inputs that are incorrectly accepted. In case of similarity scale, if the person is an imposter in reality, but the matching score is higher than the threshold, then he is treated as genuine. This increases the FMR, which thus also depends upon the threshold value.
  • False non-match rate (FNMR, also called FRR = False Reject Rate): the probability that the system fails to detect a match between the input pattern and a matching template in the database. It measures the percent of valid inputs that are incorrectly rejected.
  • Receiver operating characteristic or relative operating characteristic (ROC): The ROC plot is a visual characterization of the trade-off between the FMR and the FNMR. In general, the matching algorithm performs a decision based on a threshold that determines how close to a template the input needs to be for it to be considered a match. If the threshold is reduced, there will be fewer false non-matches but more false accepts. Conversely, a higher threshold will reduce the FMR but increase the FNMR. A common variation is the Detection error trade-off (DET), which is obtained using normal deviation scales on both axes. This more linear graph illuminates the differences for higher performances (rarer errors).
  • Equal error rate or crossover error rate (EER or CER): the rate at which both acceptance and rejection errors are equal. The value of the EER can be easily obtained from the ROC curve. The EER is a quick way to compare the accuracy of devices with different ROC curves. In general, the device with the lowest EER is the most accurate.
  • Failure to enroll rate (FTE or FER): the rate at which attempts to create a template from an input is unsuccessful. This is most commonly caused by low-quality inputs.
  • Failure to capture rate (FTC): Within automatic systems, the probability that the system fails to detect a biometric input when presented correctly.
  • Template capacity: the maximum number of sets of data that can be stored in the system.

History

{{further|Biostatistics}}

An early cataloguing of fingerprints dates back to 1885 when Juan Vucetich started a collection of fingerprints of criminals in Argentina.[http://onin.com/fp/fphistory.html The History of Fingerprints] {{webarchive|url=https://web.archive.org/web/20130312012330/http://onin.com/fp/fphistory.html |date=12 March 2013 }}. Josh Ellenbogen and Nitzan Lebovic argued that Biometrics originated in the identification systems of criminal activity developed by Alphonse Bertillon (1853–1914) and by Francis Galton's theory of fingerprints and physiognomy.Josh Ellenbogen, Reasoned and Unreasoned Images: The Photography of Bertillon, Galton, and Marey (University Park, PA, 2012) According to Lebovic, Galton's work "led to the application of mathematical models to fingerprints, phrenology, and facial characteristics", as part of "absolute identification" and "a key to both inclusion and exclusion" of populations.Nitzan Lebovic, "Biometrics or the Power of the Radical Center", in Critical Inquiry 41:4 (Summer, 2015), 841–868. Accordingly, "the biometric system is the absolute political weapon of our era" and a form of "soft control".Nitzan Lebovic, "Biometrics or the Power of the Radical Center", in Critical Inquiry 41:4 (Summer, 2015), p. 853. The theoretician David Lyon showed that during the past two decades biometric systems have penetrated the civilian market, and blurred the lines between governmental forms of control and private corporate control.David Lyon, Surveillance Society: Monitoring Everyday Life (Philadelphia, 2001). Kelly A. Gates identified 9/11 as the turning point for the cultural language of our present: "in the language of cultural studies, the aftermath of 9/11 was a moment of articulation, where objects or events that have no necessary connection come together and a new discourse formation is established: automated facial recognition as a homeland security technology."Kelly A. Gates, Our Biometric Future: Facial Recognition Technology and the Culture of Surveillance (New York, 2011), p. 100.

Adaptive biometric systems

Adaptive biometric systems aim to auto-update the templates or model to the intra-class variation of the operational data.A. Rattani, "Adaptive Biometric System based on Template Update Procedures", PhD thesis, University of Cagliari, Italy, 2010 The two-fold advantages of these systems are solving the problem of limited training data and tracking the temporal variations of the input data through adaptation. Recently, adaptive biometrics have received a significant attention from the research community. This research direction is expected to gain momentum because of their key promulgated advantages. First, with an adaptive biometric system, one no longer needs to collect a large number of biometric samples during the enrollment process. Second, it is no longer necessary to enroll again or retrain the system from scratch in order to cope with the changing environment. This convenience can significantly reduce the cost of maintaining a biometric system. Despite these advantages, there are several open issues involved with these systems. For mis-classification error (false acceptance) by the biometric system, cause adaptation using impostor sample. However, continuous research efforts are directed to resolve the open issues associated to the field of adaptive biometrics. More information about adaptive biometric systems can be found in the critical review by Rattani et al.

Recent advances in emerging biometrics

In recent times, biometrics based on brain (electroencephalogram) and heart (electrocardiogram) signals have emerged.{{cite book | doi=10.1007/11875581_73 | chapter=Electroencephalogram Signals from Imagined Activities: A Novel Biometric Identifier for a Small Population | title=Intelligent Data Engineering and Automated Learning – IDEAL 2006 | series=Lecture Notes in Computer Science | date=2006 | last1=Palaniappan | first1=Ramaswamy | volume=4224 | pages=604–611 | isbn=978-3-540-45485-4 }}{{cite book | doi=10.1109/SPCOM.2004.1458524 | chapter=Identifying individuals using ECG beats | title=2004 International Conference on Signal Processing and Communications, 2004. SPCOM '04 | date=2004 | last1=Palaniappan | first1=R. | last2=Krishnan | first2=S.M. | pages=569–572 | isbn=0-7803-8674-4 | s2cid=16091945 }}{{cite journal|last1=Arnau-González|first1=Pablo|last2=Katsigiannis|first2=Stamos|last3=Arevalillo-Herráez|first3=Miguel|last4=Ramzan|first4=Naeem | title=BED: A new dataset for EEG-based biometrics | journal=IEEE Internet of Things Journal | volume=(Early Access)|date=February 2021 |issue=15|pages=12219–12230|doi=10.1109/JIOT.2021.3061727 |s2cid=233916681|issn=2327-4662|url=https://ieeexplore.ieee.org/document/9361690 }} An example is finger vein recognition, using pattern-recognition techniques, based on images of human vascular patterns. The advantage of this newer technology is that it is more fraud resistant compared to conventional biometrics like fingerprints. However, such technology is generally more cumbersome and still has issues such as lower accuracy and poor reproducibility over time.

On the portability side of biometric products, more and more vendors are embracing significantly miniaturized biometric authentication systems (BAS) thereby driving elaborate cost savings, especially for large-scale deployments.

=Operator signatures=

An operator signature is a biometric mode where the manner in which a person using a device or complex system is recorded as a verification template. One potential use for this type of biometric signature is to distinguish among remote users of telerobotic surgery systems that utilize public networks for communication.{{cite news |url=http://www.scientificcomputing.com/news/2015/05/researchers-hack-teleoperated-surgical-robot-reveal-security-flaws |title=Researchers hack Teleoperated Surgical Robot to Reveal Security Flaws |author=Langston, Jennifer |date=8 May 2015 |access-date=17 May 2015 |work=Scientific Computing |location=New Jersey |url-status=live |archive-url=https://web.archive.org/web/20160304050336/http://www.scientificcomputing.com/news/2015/05/researchers-hack-teleoperated-surgical-robot-reveal-security-flaws |archive-date=4 March 2016}}

= Proposed requirement for certain public networks =

John Michael (Mike) McConnell, a former vice admiral in the United States Navy, a former director of U.S. National Intelligence, and senior vice president of Booz Allen Hamilton, promoted the development of a future capability to require biometric authentication to access certain public networks in his keynote speech{{Cite conference

|last1 = McConnell

|first1 = Mike

|title = KeyNote Address

|conference = Biometric Consortium Conference

|date = January 2009

|place = Tampa Convention Center, Tampa, Florida

|url = http://www.boozallen.com/consulting-services/services_article/42861927

|access-date = 20 February 2010

|url-status = dead

|archive-url = https://web.archive.org/web/20100218024851/http://www.boozallen.com/consulting-services/services_article/42861927

|archive-date = 18 February 2010}} at the 2009 Biometric Consortium Conference.

A basic premise in the above proposal is that the person that has uniquely authenticated themselves using biometrics with the computer is in fact also the agent performing potentially malicious actions from that computer. However, if control of the computer has been subverted, for example in which the computer is part of a botnet controlled by a hacker, then knowledge of the identity of the user at the terminal does not materially improve network security or aid law enforcement activities.{{cite web

|last = Schneier

|first = Bruce

|title = The Internet: Anonymous Forever

|date = 12 May 2010

|url = http://www.schneier.com/essay-308.html

|access-date = 1 October 2011

|url-status = live

|archive-url = https://web.archive.org/web/20111012204958/http://www.schneier.com/essay-308.html

|archive-date = 12 October 2011}}

=Animal biometrics=

Rather than tags or tattoos, biometric techniques may be used to identify individual animals: zebra stripes, blood vessel patterns in rodent ears, muzzle prints, bat wing patterns, primate facial recognition and koala spots have all been tried.{{cite news |last1=White |first1=Anna |title=The High-Tech, Humane Ways Biologists Can Identify Animals |url=https://www.smithsonianmag.com/science-nature/high-tech-humane-ways-biologists-identify-animals-180971632/ |access-date=22 March 2019 |work=Smithsonian |date=April 2019}}

Issues and concerns

=Human dignity=

Biometrics have been considered also instrumental to the development of state authorityBreckenridge K. (2005). "[https://wiser.wits.ac.za/sites/default/files/Breckenridge%20-%202005%20-%20The%20Biometric%20State%20The%20promise%20and%20peril%20of%20digi.pdf The Biometric State: The Promise and Peril of Digital Government in the New South Africa]". Journal of Southern African Studies, 31:2, 267–82 (to put it in Foucauldian terms, of discipline and biopowerEpstein C. (2007), "[https://academic.oup.com/ips/article-abstract/1/2/149/1799677 Guilty Bodies, Productive Bodies, Destructive Bodies: Crossing the Biometric Borders]". International Political Sociology, 1:2, 149–64). By turning the human subject into a collection of biometric parameters, biometrics would dehumanize the person,Pugliese J. (2010), Biometrics: Bodies, Technologies, Biopolitics. New York: Routledge infringe bodily integrity, and, ultimately, offend human dignity.French National Consultative Ethics Committee for Health and Life Sciences (2007), Opinion N° 98, [http://www.ccne-ethique.fr/en/publications/biometrics-identifying-data-and-human-rights#.VenJ87TDU5E "Biometrics, identifying data and human rights"] {{webarchive|url=https://web.archive.org/web/20150923201410/http://www.ccne-ethique.fr/en/publications/biometrics-identifying-data-and-human-rights |date=23 September 2015 }}

In a well-known case,Agamben, G. (2008). "No to bio-political tattooing". Communication and Critical/Cultural Studies, 5(2), 201–202. Reproduced from Le Monde (10 January 2004). Italian philosopher Giorgio Agamben refused to enter the United States in protest at the United States Visitor and Immigrant Status Indicator (US-VISIT) program's requirement for visitors to be fingerprinted and photographed. Agamben argued that gathering of biometric data is a form of bio-political tattooing, akin to the tattooing of Jews during the Holocaust. According to Agamben, biometrics turn the human persona into a bare body. Agamben refers to the two words used by Ancient Greeks for indicating "life", zoe, which is the life common to animals and humans, just life; and bios, which is life in the human context, with meanings and purposes. Agamben envisages the reduction to bare bodies for the whole humanity.Agamben G.(1998), Homo Sacer: Sovereign Power and Bare Life. Trans. Daniel Heller-Roazen. Stanford: Stanford University Press For him, a new bio-political relationship between citizens and the state is turning citizens into pure biological life (zoe) depriving them from their humanity (bios); and biometrics would herald this new world.

In [https://www.dukeupress.edu/dark-matters Dark Matters: On the Surveillance of Blackness], surveillance scholar Simone Browne formulates a similar critique as Agamben, citing a recent study{{Cite book|chapter-url=https://www.researchgate.net/publication/221383488|chapter=Face Gender Classification on Consumer Images in a Multiethnic Environment|last1=Gao|first1=Wei|last2=Ai|first2=Haizhou|pages=169–178|doi=10.1007/978-3-642-01793-3_18|url-status=live|archive-url=https://web.archive.org/web/20161009123149/https://www.researchgate.net/publication/221383488_Face_Gender_Classification_on_Consumer_Images_in_a_Multiethnic_Environment|archive-date=9 October 2016|title=Advances in Biometrics|volume=5558|series=Lecture Notes in Computer Science|year=2009|isbn=978-3-642-01792-6|s2cid=17596655 }} relating to biometrics R&D that found that the gender classification system being researched "is inclined to classify Africans as males and Mongoloids as females." Consequently, Browne argues that the conception of an objective biometric technology is difficult if such systems are subjectively designed, and are vulnerable to cause errors as described in the study above. The stark expansion of biometric technologies in both the public and private sector magnifies this concern. The increasing commodification of biometrics by the private sector adds to this danger of loss of human value. Indeed, corporations value the biometric characteristics more than the individuals value them.{{Cite journal|url = https://litigation-essentials.lexisnexis.com/webcd/app?action=DocumentDisplay&crawlid=1&doctype=cite&docid=25+Fordham+Intell.+Prop.+Media+%26+Ent.+L.J.+831&srctype=smi&srcid=3B15&key=a4b55d68b2513a0c985a62bb9064501d|title = Biometric Boom: How the private sector Commodifies Human characteristics|last = Walker|first = Elizabeth|date = 2015|journal = Fordham Intellectual Property, Media & Entertainment Law Journal|url-status = dead|archive-url = https://web.archive.org/web/20170120172630/https://litigation-essentials.lexisnexis.com/webcd/app?action=DocumentDisplay|archive-date = 20 January 2017|access-date = 1 May 2017}} Browne goes on to suggest that modern society should incorporate a "biometric consciousness" that "entails informed public debate around these technologies and their application, and accountability by the state and the private sector, where the ownership of and access to one's own body data and other intellectual property that is generated from one's body data must be understood as a right."{{Cite book|title=Dark Matters: On the Surveillance of Blackness|last=Browne|first=Simone|publisher=Duke University Press|year=2015|pages=116}}

Other scholarsMordini, E; Massari, S. (2008), "Body, Biometrics and Identity" Bioethics, 22, 9:488 have emphasized, however, that the globalized world is confronted with a huge mass of people with weak or absent civil identities. Most developing countries have weak and unreliable documents and the poorer people in these countries do not have even those unreliable documents.UNICEF, [http://www.unicef.org/protection/57929_58010.html Birth Registration] {{webarchive|url=https://web.archive.org/web/20150906150500/http://www.unicef.org/protection/57929_58010.html |date=6 September 2015 }} Without certified personal identities, there is no certainty of right, no civil liberty.Dahan M., Gelb A. (2015) [http://documents.worldbank.org/curated/en/2015/07/24849193/role-identification-post-2015-development-agenda "The Role of Identification in the Post-2015 Development Agenda"] {{webarchive|url=https://web.archive.org/web/20150920050041/http://documents.worldbank.org/curated/en/2015/07/24849193/role-identification-post-2015-development-agenda |date=20 September 2015 }} – World Bank Working Paper No. 98294 08/2015; One can claim his rights, including the right to refuse to be identified, only if he is an identifiable subject, if he has a public identity. In such a sense, biometrics could play a pivotal role in supporting and promoting respect for human dignity and fundamental rights.Mordini E, Rebera A (2011) "No Identification Without Representation: Constraints on the Use of Biometric Identification Systems". Review of Policy Research, 29, 1: 5–20

=Privacy and discrimination=

{{further|privacy|right to privacy|medical privacy}}

It is possible that data obtained during biometric enrollment may be used in ways for which the enrolled individual has not consented. For example, most biometric features could disclose physiological and/or pathological medical conditions (e.g., some fingerprint patterns are related to chromosomal diseases, iris patterns could reveal sex, hand vein patterns could reveal vascular diseases, most behavioral biometrics could reveal neurological diseases, etc.).Mordini E, Ashton H,(2012), "The Transparent Body – Medical Information, Physical Privacy and Respect for Body Integrity", in Mordini E, Tzovaras D (eds), Second Generation Biometrics: the Ethical and Social Context. Springer-Verlag: Berlin Moreover, second generation biometrics, notably behavioral and electro-physiologic biometrics (e.g., based on electrocardiography, electroencephalography, electromyography), could be also used for emotion detection.Mordini E, Tzovaras D,(2012), Second Generation Biometrics: the Ethical and Social Context. Springer-Verlag: Berlin

There are three categories of privacy concerns:{{cite book

| title=Security in Computing

| last1=Pfleeger

| first1=Charles

| last2=Pfleeger

| first2=Shari

| publisher=Pearson Education

| year=2007

| location=Boston

| page=220

| edition=4th

| isbn=978-0-13-239077-4

}}

  1. Unintended functional scope: The authentication goes further than authentication, such as finding a tumor.
  2. Unintended application scope: The authentication process correctly identifies the subject when the subject did not wish to be identified.
  3. Covert identification: The subject is identified without seeking identification or authentication, i.e. a subject's face is identified in a crowd.

=Danger to owners of secured items=

When thieves cannot get access to secure properties, there is a chance that the thieves will stalk and assault the property owner to gain access. If the item is secured with a biometric device, the damage to the owner could be irreversible, and potentially cost more than the secured property. For example, in 2005, Malaysian car thieves cut off a man's finger when attempting to steal his Mercedes-Benz S-Class.{{cite news|url=http://news.bbc.co.uk/2/hi/asia-pacific/4396831.stm|title=Malaysia car thieves steal finger|last=Kent|first=Jonathan|date=31 March 2005|work=BBC Online|access-date=11 December 2010|location=Kuala Lumpur|url-status=live|archive-url=https://web.archive.org/web/20101120203534/http://news.bbc.co.uk/2/hi/asia-pacific/4396831.stm|archive-date=20 November 2010}}

=Attacks at presentation=

In the context of biometric systems, presentation attacks may also be called "spoofing attacks".

As per the recent ISO/IEC 30107 standard,{{Cite web|url=http://www.iso.org/cms/render/live/en/sites/isoorg/contents/data/standard/05/32/53227.html|title=ISO/IEC 30107-1:2016|website=iso.org|language=en|access-date=2019-04-23}} presentation attacks are defined as "presentation to the biometric capture subsystem with the goal of interfering with the operation of the biometric system". These attacks can be either impersonation or obfuscation attacks. Impersonation attacks try to gain access by pretending to be someone else. Obfuscation attacks may, for example, try to evade face detection and face recognition systems.

Several methods have been proposed to counteract presentation attacks.{{Cite journal|date=2014|editor-last=Marcel|editor-first=Sébastien|editor2-last=Nixon|editor2-first=Mark S.|editor3-last=Li|editor3-first=Stan Z.|title=Handbook of Biometric Anti-Spoofing|journal=Advances in Computer Vision and Pattern Recognition|doi=10.1007/978-1-4471-6524-8|issn=2191-6586|isbn=978-1-4471-6523-1|s2cid=27594864}}

=Surveillance humanitarianism in times of crisis=

Biometrics are employed by many aid programs in times of crisis in order to prevent fraud and ensure that resources are properly available to those in need. Humanitarian efforts are motivated by promoting the welfare of individuals in need, however the use of biometrics as a form of surveillance humanitarianism can create conflict due to varying interests of the groups involved in the particular situation. Disputes over the use of biometrics between aid programs and party officials stalls the distribution of resources to people that need help the most. In July 2019, the United Nations World Food Program and Houthi Rebels were involved in a large dispute over the use of biometrics to ensure resources are provided to the hundreds of thousands of civilians in Yemen whose lives are threatened. The refusal to cooperate with the interests of the United Nations World Food Program resulted in the suspension of food aid to the Yemen population. The use of biometrics may provide aid programs with valuable information, however its potential solutions may not be best suited for chaotic times of crisis. Conflicts that are caused by deep-rooted political problems, in which the implementation of biometrics may not provide a long-term solution.{{Cite news|url=https://www.nytimes.com/2019/07/11/opinion/data-humanitarian-aid.html|title=Opinion | Stop Surveillance Humanitarianism|newspaper=The New York Times|date=12 July 2019|last1=Latonero|first1=Mark}}

=Cancelable biometrics=

One advantage of passwords over biometrics is that they can be re-issued. If a token or a password is lost or stolen, it can be cancelled and replaced by a newer version. This is not naturally available in biometrics. If someone's face is compromised from a database, they cannot cancel or reissue it. If the electronic biometric identifier is stolen, it is nearly impossible to change a biometric feature. This renders the person's biometric feature questionable for future use in authentication, such as the case with the hacking of security-clearance-related background information from the Office of Personnel Management (OPM) in the United States.

Cancelable biometrics is a way in which to incorporate protection and the replacement features into biometrics to create a more secure system. It was first proposed by Ratha et al.N. K. Ratha, J. H. Connell, and R. M. Bolle, "[https://www.researchgate.net/profile/Jonathan_Connell/publication/220353130_Enhancing_Security_and_Privacy_in_Biometrics-Based_Authentication_Systems/links/555a010508ae6fd2d8281b10/Enhancing-Security-and-Privacy-in-Biometrics-Based-Authentication-Systems.pdf Enhancing security and privacy in biometrics-based authentication systems]", IBM Systems Journal, vol. 40, pp. 614–634, 2001.

"Cancelable biometrics refers to the intentional and systematically repeatable distortion of biometric features in order to protect sensitive user-specific data. If a cancelable feature is compromised, the distortion characteristics are changed, and the same biometrics is mapped to a new template, which is used subsequently. Cancelable biometrics is one of the major categories for biometric template protection purpose besides biometric cryptosystem."{{Cite journal|title = Cancelable biometrics – Scholarpedia|journal = Scholarpedia|volume = 5|pages = 9201|doi = 10.4249/scholarpedia.9201|year = 2010|last1 = Hui|first1 = Lim|last2 = Jin|first2 = Andrew|doi-access = free}} In biometric cryptosystem, "the error-correcting coding techniques are employed to handle intraclass variations."{{Cite journal|last1=Feng|first1=Y. C.|last2=Yuen|first2=P. C.|last3=Jain|first3=A. K.|date=2010-03-01|title=A Hybrid Approach for Generating Secure and Discriminating Face Template|journal=IEEE Transactions on Information Forensics and Security|volume=5|issue=1|pages=103–117|doi=10.1109/TIFS.2009.2038760|issn=1556-6013|citeseerx=10.1.1.389.5322|s2cid=18156337}} This ensures a high level of security but has limitations such as specific input format of only small intraclass variations.

Several methods for generating new exclusive biometrics have been proposed. The first fingerprint-based cancelable biometric system was designed and developed by Tulyakov et al.S. Tulyakov, F. Farooq, and V. Govindaraju, "[https://www.acsu.buffalo.edu/~tulyakov/papers/tulyakov_ICAPR05_fingerprint_hash.pdf Symmetric Hash Functions for Fingerprint Minutiae]", Proc. Int'l Workshop Pattern Recognition for Crime Prevention, Security, and Surveillance, pp. 30–38, 2005 Essentially, cancelable biometrics perform a distortion of the biometric image or features before matching. The variability in the distortion parameters provides the cancelable nature of the scheme. Some of the proposed techniques operate using their own recognition engines, such as Teoh et al.A. B. J. Teoh, A. Goh, and D. C. L. Ngo, "Random Multispace Quantization as an Analytic Mechanism for BioHashing of Biometric and Random Identity Inputs", IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 28, pp. 1892–1901, 2006. and Savvides et al.,M. Savvides, B. V. K. V. Kumar, and P. K. Khosla, "'Corefaces' – Robust Shift-Invariant PCA based Correlation Filter for Illumination Tolerant Face Recognition", presented at IEEE Computer Society Conference on Computer Vision and Pattern Recognition (CVPR'04), 2004. whereas other methods, such as Dabbah et al.,M. A. Dabbah, W. L. Woo, and S. S. Dlay, "Secure Authentication for Face Recognition", presented at Computational Intelligence in Image and Signal Processing, 2007. CIISP 2007. IEEE Symposium on, 2007. take the advantage of the advancement of the well-established biometric research for their recognition front-end to conduct recognition. Although this increases the restrictions on the protection system, it makes the cancellable templates more accessible for available biometric technologies

=Proposed soft biometrics=

Soft biometrics are understood as not strict biometrical recognition practices that are proposed in favour of identity cheaters and stealers.

Traits are physical, behavioral or adhered human characteristics that have been derived from the way human beings normally distinguish their peers (e.g. height, gender, hair color). They are used to complement the identity information provided by the primary biometric identifiers. Although soft biometric characteristics lack the distinctiveness and permanence to recognize an individual uniquely and reliably, and can be easily faked, they provide some evidence about the users identity that could be beneficial. In other words, despite the fact they are unable to individualize a subject, they are effective in distinguishing between people. Combinations of personal attributes like gender, race, eye color, height and other visible identification marks can be used to improve the performance of traditional biometric systems.Ratha, N. K., J. H. Connell, and R. M. Bolle. (2001). "Enhancing security and privacy in biometrics based authentication systems". IBM Systems Journal 40(3): 614–634. Most soft biometrics can be easily collected and are actually collected during enrollment. Two main ethical issues are raised by soft biometrics.Mordini E, Ashton H (2012), "The Transparent Body – Medical Information, Physical Privacy and Respect for Body Integrity'". In Mordini E, Tzovaras D (eds), [https://www.springer.com/us/book/9789400738911 Second Generation Biometrics: the Ethical and Social Context. Berlin: Springer-Verlag] {{webarchive|url=https://web.archive.org/web/20180216025115/https://www.springer.com/us/book/9789400738911 |date=16 February 2018 }}, 2057–83 First, some of soft biometric traits are strongly cultural based; e.g., skin colors for determining ethnicity risk to support racist approaches, biometric sex recognition at the best recognizes gender from tertiary sexual characters, being unable to determine genetic and chromosomal sexes; soft biometrics for aging recognition are often deeply influenced by ageist stereotypes, etc. Second, soft biometrics have strong potential for categorizing and profiling people, so risking of supporting processes of stigmatization and exclusion.Mordini E (2013) Biometrics. In Henk A. M. J. ten Have, Bert Gordijn (eds) Handbook of Global Bioethics Berlin: Springer, 341–356

=Data protection of biometric data in international law=

Many countries, including the United States, are planning to share biometric data with other nations.

In testimony before the US House Appropriations Committee, Subcommittee on Homeland Security on "biometric identification" in 2009, Kathleen Kraninger and Robert A Mocny{{Cite journal

|title = Testimony of Deputy Assistant Secretary for Policy Kathleen Kraninger, Screening Coordination, and Director Robert A. Mocny, US-VISIT, National Protection and Programs Directorate, before the House Appropriations Committee, Subcommittee on Homeland Security, 'Biometric Identification'

|publisher = US Department of Homeland Security

|date = March 2009

|url = https://www.dhs.gov/ynews/testimony/testimony_1237563811984.shtm

|access-date = 20 February 2010

|url-status = live

|archive-url = https://web.archive.org/web/20100218104515/http://www.dhs.gov/ynews/testimony/testimony_1237563811984.shtm

|archive-date = 18 February 2010}} commented on international cooperation and collaboration with respect to biometric data, as follows:

{{cquote|To ensure we can shut down terrorist networks before they ever get to the United States, we must also take the lead in driving international biometric standards. By developing compatible systems, we will be able to securely share terrorist information internationally to bolster our defenses. Just as we are improving the way we collaborate within the U.S. Government to identify and weed out terrorists and other dangerous people, we have the same obligation to work with our partners abroad to prevent terrorists from making any move undetected. Biometrics provide a new way to bring terrorists' true identities to light, stripping them of their greatest advantage—remaining unknown.}}

According to an article written in 2009 by S. Magnuson in the National Defense Magazine entitled "Defense Department Under Pressure to Share Biometric Data" the United States has bilateral agreements with other nations aimed at sharing biometric data.{{Cite journal

|last1 = Magnuson

|first1 = S

|title = Defense department under pressure to share biometric data.

|website = NationalDefenseMagazine.org

|date = January 2009

|url = http://www.nationaldefensemagazine.org/ARCHIVE/2009/JANUARY/Pages/DefenseDepartmentUnderPressuretoShareBiometricData.aspx

|access-date = 20 February 2010

|url-status = dead

|archive-url = https://web.archive.org/web/20100312215019/http://www.nationaldefensemagazine.org/archive/2009/January/Pages/DefenseDepartmentUnderPressuretoShareBiometricData.aspx

|archive-date = 12 March 2010}} To quote that article:

{{cquote|Miller [a consultant to the Office of Homeland Defense and America's security affairs] said the United States has bilateral agreements to share biometric data with about 25 countries. Every time a foreign leader has visited Washington during the last few years, the State Department has made sure they sign such an agreement.}}

=Likelihood of full governmental disclosure=

Certain members of the civilian community are worried about how biometric data is used but full disclosure may not be forthcoming. In particular, the Unclassified Report of the United States' Defense Science Board Task Force on Defense Biometrics states that it is wise to protect, and sometimes even to disguise, the true and total extent of national capabilities in areas related directly to the conduct of security-related activities.{{Citation |mode=cs1

|last = Defense Science Board

|title = On Defense Biometrics

|series = Unclassified Report of the Defense Science Board Task Force

|publisher = Office of the Under Secretary of Defense For Acquisition, Technology, and Logistics

|date = March 2007

|place = Washington, D.C.

|chapter-url = http://www.acq.osd.mil/dsb/reports/ADA465930.pdf

|access-date = 20 February 2010

|page = 84

|chapter = Chapter 17 §Recommendation 45

|archive-url = https://web.archive.org/web/20110613155549/http://www.acq.osd.mil/dsb/reports/ADA465930.pdf

|archive-date = 13 June 2011}} This also potentially applies to Biometrics. It goes on to say that this is a classic feature of intelligence and military operations. In short, the goal is to preserve the security of 'sources and methods'.

=Data security=

The frequent use of biometric authentication for security and the permanence of an individuals biometrics make the security of biometric data crucial.

==Events where biometric data was compromised==

  • Office of Personnel Management data breach in 2015
  • Biostar 2 fingerprints leak in 2019{{Cite news |date=2019-08-14 |title=Biostar security software 'leaked a million fingerprints' |url=https://www.bbc.com/news/technology-49343774 |access-date=2025-02-15 |language=en-GB}}
  • Taliban seizure of US biometric data in 2021{{Cite web |title=This is the real story of the Afghan biometric databases abandoned to the Taliban |url=https://www.technologyreview.com/2021/08/30/1033941/afghanistan-biometric-databases-us-military-40-data-points/ |access-date=2025-02-15 |website=MIT Technology Review |language=en}}{{Cite web |date=2021-09-07 |title=U.S.-built databases, biometric data a potential tool of the Taliban |url=https://www.pbs.org/newshour/world/u-s-built-databases-biometric-data-a-potential-tool-of-the-taliban |access-date=2025-02-15 |website=PBS News |language=en-us}}{{Cite web |last=Sirota |first=Ken Klippenstein, Sara |date=2021-08-17 |title=The Taliban Have Seized U.S. Military Biometrics Devices |url=https://theintercept.com/2021/08/17/afghanistan-taliban-military-biometrics/ |access-date=2025-02-15 |website=The Intercept |language=en-US}}
  • Afghan & Iraqi Fingerprints and Iris database{{Cite news |last=Hill |first=Kashmir |last2=Ismay |first2=John |last3=Schuetze |first3=Christopher F. |last4=Krolik |first4=Aaron |date=2022-12-27 |title=For Sale on eBay: A Military Database of Fingerprints and Iris Scans |url=https://www.nytimes.com/2022/12/27/technology/for-sale-on-ebay-a-military-database-of-fingerprints-and-iris-scans.html |access-date=2025-02-15 |work=The New York Times |language=en-US |issn=0362-4331}}

==Legislation and governmental Action==

Biometrics are considered personal information/data under multiple laws

  • GDPR in the European Union became law in 2018{{Cite web |date=2018-11-07 |title=What is GDPR, the EU’s new data protection law? |url=https://gdpr.eu/what-is-gdpr/ |access-date=2025-02-15 |website=GDPR.eu |language=en-US}}
  • LGPD in Brazil became law in 2020{{Cite web |title=L13709 |url=https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm |access-date=2025-02-15 |website=www.planalto.gov.br}}
  • Protection of Personal Information Act in South Africa came into force in 2020{{Cite web |date=26 November 2013 |title=Protection of Personal Information Act, 2013 |url=https://www.gov.za/sites/default/files/gcis_document/201409/3706726-11act4of2013popi.pdf |archive-url=https://web.archive.org/web/20211206032139/https://www.gov.za/sites/default/files/gcis_document/201409/3706726-11act4of2013popi.pdf |archive-date=6 December 2021 |access-date=15 February 2025}}
  • Personal Data Protection Act in Sri Lanka implementation started in 2023{{Cite web |title=Personal Data Protection Act |url=https://parliament.lk/uploads/acts/gbills/english/6242.pdf |archive-url=https://web.archive.org/web/20250102035842/https://parliament.lk/uploads/acts/gbills/english/6242.pdf |archive-date=2 January 2025 |access-date=15 February 2025}}

===United States===

The United States does not have a nationwide data privacy law that includes biometrics. Several states and local governments, led by the Illinois Biometric Information Privacy Act, have legislation regarding biometric data.{{Cite web |date=2022-07-20 |title=The basics, usage, and privacy concerns of biometric data |url=https://legal.thomsonreuters.com/en/insights/articles/the-basics-usage-and-privacy-concerns-of-biometric-data |access-date=2025-02-15 |website=legal.thomsonreuters.com |language=en-US}} The FTC has also taken actions to protect biometric data including against Facebook in 2019, charging they misrepresented their uses of facial recognition technology.{{Cite web |date=2023-05-18 |title=FTC Warns About Misuses of Biometric Information and Harm to Consumers |url=https://www.ftc.gov/news-events/news/press-releases/2023/05/ftc-warns-about-misuses-biometric-information-harm-consumers |access-date=2025-02-15 |website=Federal Trade Commission |language=en}}{{Cite web |date=2019-07-24 |title=FTC Imposes $5 Billion Penalty and Sweeping New Privacy Restrictions on Facebook |url=https://www.ftc.gov/news-events/news/press-releases/2019/07/ftc-imposes-5-billion-penalty-sweeping-new-privacy-restrictions-facebook |access-date=2025-02-15 |website=Federal Trade Commission |language=en}}

Countries applying biometrics

{{Main|Biometric identification by country}}

Countries using biometrics include Australia, Brazil, Bulgaria, Canada, Cyprus, Greece, China, Gambia, Germany, India, Iraq, Ireland, Israel, Italy, Malaysia, Netherlands, New Zealand, Nigeria, Norway, Pakistan, Poland, South Africa, Saudi Arabia, Tanzania, Turkey,[http://www.planetbiometrics.com/article-details/i/2740/ web article dated 24 February 2015] {{webarchive|url=https://web.archive.org/web/20160203144930/http://www.planetbiometrics.com/article-details/i/2740/ |date=3 February 2016 }} in planet biometrics entitled "Biometric voter registration launches in Tanzania" accessed 21 January 2016 Ukraine, United Arab Emirates, United Kingdom, United States and Venezuela.

Among low to middle income countries, roughly 1.2 billion people have already received identification through a biometric identification program.{{cite book|last=Gelb|first=Alan|title=Identification for Development: The Biometrics Revolution|year=2013|publisher=The Center for Global Development|url=http://www.cgdev.org/content/publications/detail/1426862/|author2=Julia Clark|url-status=live|archive-url=https://web.archive.org/web/20130313020049/http://www.cgdev.org/content/publications/detail/1426862/|archive-date=13 March 2013}}

There are also numerous countries applying biometrics for voter registration and similar electoral purposes. According to the International IDEA's ICTs in Elections Database,{{Cite web|url=http://www.idea.int/data-tools/data/icts-elections|title=ICTs in Elections Database {{!}} International IDEA|website=www.idea.int|language=en|access-date=2017-07-19|url-status=live|archive-url=https://web.archive.org/web/20170722121736/http://www.idea.int/data-tools/data/icts-elections|archive-date=22 July 2017}} some of the countries using (2017) Biometric Voter Registration (BVR) are Armenia, Angola, Bangladesh, Bhutan, Bolivia, Brazil, Burkina Faso, Cambodia, Cameroon, Chad, Colombia, Comoros, Congo (Democratic Republic of), Costa Rica, Ivory Coast, Dominican Republic, Fiji, Gambia, Ghana, Guatemala, India, Iraq, Kenya, Lesotho, Liberia, Malawi, Mali, Mauritania, Mexico, Morocco, Mozambique, Namibia, Nepal, Nicaragua, Nigeria, Panama, Peru, Philippines, Senegal, Sierra Leone, Solomon Islands, Somaliland, Swaziland, Tanzania, Uganda, Uruguay, Venezuela, Yemen, Zambia, and Zimbabwe.{{Cite web|url=http://www.idea.int/data-tools/question-view/738|title=If the EMB uses technology to collect voter registration data, is biometric data captured and used during registration? {{!}} International IDEA|website=www.idea.int|language=en|access-date=2017-07-19|url-status=live|archive-url=https://web.archive.org/web/20170729113721/http://www.idea.int/data-tools/question-view/738|archive-date=29 July 2017}}{{Cite web|url=http://aceproject.org/electoral-advice/archive/questions/replies/916219364|title=Biometric Voter Registration and Voter Identification —|website=aceproject.org|language=en|access-date=2017-07-19}}

= India's national ID program =

India's national ID program called Aadhaar is the largest biometric database in the world. It is a biometrics-based digital identity assigned for a person's lifetime, verifiable{{cite news |title=Aadhaar data kept, processed only on own secure servers: UIDAI |newspaper=The Economic Times |date=30 August 2017 |url=https://economictimes.indiatimes.com/news/politics-and-nation/aadhaar-data-kept-processed-only-on-own-secure-servers-uidai/articleshow/60295134.cms |url-status=live |archive-url=https://web.archive.org/web/20171207134042/https://economictimes.indiatimes.com/news/politics-and-nation/aadhaar-data-kept-processed-only-on-own-secure-servers-uidai/articleshow/60295134.cms |archive-date=7 December 2017}} online instantly in the public domain, at any time, from anywhere, in a paperless way. It is designed to enable government agencies to deliver a retail public service, securely based on biometric data (fingerprint, iris scan and face photo), along with demographic data (name, age, gender, address, parent/spouse name, mobile phone number) of a person. The data is transmitted in encrypted form over the internet for authentication, aiming to free it from the limitations of physical presence of a person at a given place.

About 550 million residents have been enrolled and assigned 480 million Aadhaar national identification numbers as of 7 November 2013.{{cite news |title=Aadhaar scheme does not violate fundamental rights, says UIDAI |publisher=Zee News |date=22 October 2013 |url=http://zeenews.india.com/news/nation/aadhaar-scheme-does-not-violate-fundamental-rights-says-uidai_884850.html |url-status=live |archive-url=https://web.archive.org/web/20131025053446/http://zeenews.india.com/news/nation/aadhaar-scheme-does-not-violate-fundamental-rights-says-uidai_884850.html |archive-date=25 October 2013}} It aims to cover the entire population of 1.2 billion in a few years."Building a Biometric National ID: Lessons for Developing Countries from India's Universal ID Program", Alan Gelb and Julia Clark, The Center for Global Development, October 2012, {{cite web |url=http://www.cgdev.org/doc/full_text/GelbClarkUID/1426583.html |title=Building a Biometric National ID: Lessons for Developing Countries from India's Universal ID Program |access-date=2013-02-27 |url-status=live |archive-url=https://web.archive.org/web/20180917181612/https://www.cgdev.org/doc/full_text/GelbClarkUID/1426583.html |archive-date=17 September 2018}} However, it is being challenged by critics over privacy concerns and possible transformation of the state into a surveillance state, or into a Banana republic.{{cite web|url=https://www.ndtv.com/india-news/aadhaar-fir-are-we-living-in-banana-republic-asks-shatrughan-sinha-1797330|title=Aadhaar FIR: "Are We Living in Banana Republic?" Asks Shatrughan Sinha|website=ndtv.com|access-date=6 May 2018|url-status=live|archive-url=https://web.archive.org/web/20180203005827/https://www.ndtv.com/india-news/aadhaar-fir-are-we-living-in-banana-republic-asks-shatrughan-sinha-1797330|archive-date=3 February 2018}}{{cite news|url=https://timesofindia.indiatimes.com/home/sunday-times/giving-aadhaar-the-finger/articleshow/62675842.cms|title=Giving Aadhaar the finger - Times of India|newspaper=The Times of India|date=28 January 2018 |access-date=6 May 2018|url-status=live|archive-url=https://web.archive.org/web/20180213131346/https://timesofindia.indiatimes.com/home/sunday-times/giving-aadhaar-the-finger/articleshow/62675842.cms|archive-date=13 February 2018}}§ The project was also met with mistrust regarding the safety of the social protection infrastructures.{{Cite journal|last=Masiero|first=Silvia|date=September 2018|title=Explaining Trust in Large Biometric Infrastructures: A Critical Realist Case Study of India's Aadhaar Project|journal=The Electronic Journal of Information Systems in Developing Countries|volume=84|issue=6|pages=e12053|doi=10.1002/isd2.12053|url=https://dspace.lboro.ac.uk/2134/35413|doi-access=free}} To tackle the fear amongst the people, India's supreme court put a new ruling into action that stated that privacy from then on was seen as a fundamental right.{{Cite web|url=https://www.gemalto.com/govt/customer-cases/aadhaar|title=Aadhar project in India: 2018 facts and trends|last=Gemalto|date=1 July 2018|website=Gemalto|access-date=8 October 2018}} On 24 August 2017 this new law was established.

= Malaysia's MyKad national ID program =

The current identity card, known as MyKad, was introduced by the National Registration Department of Malaysia on 5 September 2001 with Malaysia becoming the first country in the world{{Cite web|title=Malaysia's national 'MyKad' ID card succeeding through service to citizens|url=https://www.secureidnews.com/news-item/malaysias-national-mykad-id-card-succeeding-through-service-to-citizens/|access-date=2020-12-13|website=SecureIDNews|language=en-US}} to use an identification card that incorporates both photo identification and fingerprint biometric data on a built-in computer chip embedded in a piece of plastic.

Besides the main purpose of the card as a validation tool and proof of citizenship other than the birth certificate, MyKad also serves as a valid driver's license, an ATM card, an electronic purse, and a public key, among other applications, as part of the Malaysian Government Multipurpose Card (GMPC) initiative,{{Cite web|date=2010-11-02|title=MalaysiaCentral.com - MyKad: The Government Multipurpose Card|url=http://www.malaysiacentral.com/article_people_of_malaysia/mykad_the_government_multipurpose_card.php|access-date=2020-12-13|archive-url=https://web.archive.org/web/20101102011327/http://www.malaysiacentral.com/article_people_of_malaysia/mykad_the_government_multipurpose_card.php|archive-date=2 November 2010}} if the bearer chooses to activate the functions.

See also

Notes

References

{{Reflist}}

Further reading

  • [http://www.fulcrumbiometrics.com/Articles.asp?ID=268 Biometrics Glossary – Glossary of Biometric Terms] based on information derived from the National Science and Technology Council (NSTC) Subcommittee on Biometrics. Published by Fulcrum Biometrics, LLC, July 2013
  • [https://www.biometricsinstitute.org/what-is-biometrics/biometrics-dictionary/ Biometrics Institute - Explanatory Dictionary of Biometrics] A glossary of biometrics terms, offering detailed definitions to supplement existing resources. Published May 2023.
  • Delac, K., Grgic, M. (2004). [http://www.vcl.fer.hr/papers_pdf/A%20Survey%20of%20Biometric%20Recognition%20Methods.pdf A Survey of Biometric Recognition Methods].
  • "Fingerprints Pay For School Lunch". (2001). Retrieved 2008-03-02. [https://web.archive.org/web/20020601171100/http://www.cbsnews.com/stories/2001/01/24/national/main266789.shtml]
  • "Germany to phase-in biometric passports from November 2005". (2005). E-Government News. Retrieved 2006-06-11. [http://ec.europa.eu/idabc/en/document/4338/194]{{dead link|date=January 2025|bot=medic}}{{cbignore|bot=medic}}
  • Oezcan, V. (2003). "Germany Weighs Biometric Registration Options for Visa Applicants", Humboldt University Berlin. Retrieved 2006-06-11.
  • [https://web.archive.org/web/20120401144536/http://www.german-times.com/index.php?option=com_content&task=view&id=91&Itemid=12 Ulrich Hottelet: Hidden champion – Biometrics between boom and big brother], [https://web.archive.org/web/20111213222947/http://www.german-times.com/ German Times], January 2007.
  • Dunstone, T. and Yager, N., 2008. Biometric system and data analysis. 1st ed. New York: Springer.