Difference between revisions of "Biometric Identifier"

From MgmtWiki
Jump to: navigation, search
(Created page with "==Full Title or Meme== Biometric Attributes of the biologic phenotype of a User may be used to Identify that user. ==Context== *Biometric Attributes are taken to...")
 
(Categories)
 
(11 intermediate revisions by the same user not shown)
Line 4: Line 4:
 
==Context==
 
==Context==
 
*[[Biometric Attribute]]s are taken to be exclusively the measure of human characteristics like fingerprint, facial and behavior patterns.
 
*[[Biometric Attribute]]s are taken to be exclusively the measure of human characteristics like fingerprint, facial and behavior patterns.
*The human characteristics are another factor that can be a part of [[Multi-factor Authentication]].
+
*The human characteristics are another factor that can be a part of [[Multi-factor Authentication]] (aka Something you are).
 
*So the human characteristics can be considered to be a [[Credential]].
 
*So the human characteristics can be considered to be a [[Credential]].
 
*The measurements of the characteristic are compared against a template of the characteristics using some [[Assurance]] level to produce a [[Validated]] claim.
 
*The measurements of the characteristic are compared against a template of the characteristics using some [[Assurance]] level to produce a [[Validated]] claim.
  
 
==Problems==
 
==Problems==
*False positives typically come from either relaxed testing, environmental noise or obsolete technology.
+
*[[Biometric Attribute]]s attached to official documents may inadvertently become [[Biometric Identifier]]s which invade the user's privacy. This wiki page [[Biometric Identifier]] has user cases where that has damaged a user's life.
*False negatives infuriate [[User]]s which is why false positives are tolerated.
+
* In 2022 Europe Is Building a Huge International Facial Recognition System which sounds like huge over kill, but typical of all European governments.<ref>Matt Burgess, ''Europe Is Building a Huge International Facial Recognition'' System Wired 2022-04) https://www.wired.com/story/europe-police-facial-recognition-prum/?esrc=AUTO_PRINT&source=EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired</ref> Lawmakers are advancing proposals to let police forces across the EU link their photo databases—which include millions of pictures of people’s faces. Pictures of people’s faces shouldn’t be combined in one giant central database, the official proposal says, but police forces will be linked together through a “central router.”
*Attacks against the sensor capabilities. Various movie and television plots have shown the attacks like taking someone's eyeball, or using a thin-film replica of a finger print to complete an [[Authentication]] which [[Authorization|Authorizes]] access.
+
*In a case described in the New York Times Magazine<ref>Seth Freed Wessler, Denaturalized. (2018-12-30) New York Times Magazine p. 36ff</ref> an emigrant from Haiti had her fingerprints taken on several occasion while applying for citizenship. One of those forms was used to apply for citizenship for a differently named person. When that case was abandoned, a judge issues a deportation order. The emigrant was later granted citizenship. Many years later the government digitalized all the fingerprint records, found the fraudulent earlier application and used the fingerprints on the fraudulent form to charge with new citizen with a felony in spite of no evidence that she had filed the fraudulent form.
*Attacks against the template store. Access to the [[Authentication]] data store can often be the simplest attack as it is based on known techniques.
+
 
*[[Biometric Attribute]]s attached to official documents may inadvertently become [[Biometric Identifier]]s which invade the user's privacy. See the wiki page [[Biometric Identifier]] for user cases where that has damaged a user's life.
+
==Categories==
 +
* Full face photos and comparable images
 +
* Fingerprints
 +
* Palm prints - [https://techcrunch.com/2022/08/10/amazon-expands-palm-scanning-payment-tech-to-65-more-whole-foods-locations/ Whole Foods scanning palm prints] 2022-08-10
 +
* Voice prints
 +
* Retinal images
  
 
==Solutions==
 
==Solutions==
* ISO 30107-3:2017 describes testing of [[Biometric Attribute]] presentations.
+
*Use of [[Biometric Identifier]]s can be crucial in cases where no other identity documents are available, such as refugees or homeless people, but their use without evidence of intent, or contemporaneous binding to a document, is fraught with the potential for severe privacy violations.
* The first Level 1 rating in the NIST/NVLAP-certified iBeta Presentation Attack Detection (PAD) Certification test was granted on (2018-09-23) to [https://www.zoomlogin.com/ facetec]<ref>Planet Biometrics, ''FaceTec notes achievement in anti-spoofing test.'' (2018-09-23)  http://www.planetbiometrics.com/article-details/i/7463/desc/facetec-notes-achievement-in-anti-spoofing-test/</ref>
 
  
 
==References==
 
==References==
  
 
[[Category:Glossary]]
 
[[Category:Glossary]]
 +
[[Category:Identifier]]

Latest revision as of 12:58, 12 August 2022

Full Title or Meme

Biometric Attributes of the biologic phenotype of a User may be used to Identify that user.

Context

  • Biometric Attributes are taken to be exclusively the measure of human characteristics like fingerprint, facial and behavior patterns.
  • The human characteristics are another factor that can be a part of Multi-factor Authentication (aka Something you are).
  • So the human characteristics can be considered to be a Credential.
  • The measurements of the characteristic are compared against a template of the characteristics using some Assurance level to produce a Validated claim.

Problems

  • Biometric Attributes attached to official documents may inadvertently become Biometric Identifiers which invade the user's privacy. This wiki page Biometric Identifier has user cases where that has damaged a user's life.
  • In 2022 Europe Is Building a Huge International Facial Recognition System which sounds like huge over kill, but typical of all European governments.[1] Lawmakers are advancing proposals to let police forces across the EU link their photo databases—which include millions of pictures of people’s faces. Pictures of people’s faces shouldn’t be combined in one giant central database, the official proposal says, but police forces will be linked together through a “central router.”
  • In a case described in the New York Times Magazine[2] an emigrant from Haiti had her fingerprints taken on several occasion while applying for citizenship. One of those forms was used to apply for citizenship for a differently named person. When that case was abandoned, a judge issues a deportation order. The emigrant was later granted citizenship. Many years later the government digitalized all the fingerprint records, found the fraudulent earlier application and used the fingerprints on the fraudulent form to charge with new citizen with a felony in spite of no evidence that she had filed the fraudulent form.

Categories

Solutions

  • Use of Biometric Identifiers can be crucial in cases where no other identity documents are available, such as refugees or homeless people, but their use without evidence of intent, or contemporaneous binding to a document, is fraught with the potential for severe privacy violations.

References

  1. Matt Burgess, Europe Is Building a Huge International Facial Recognition System Wired 2022-04) https://www.wired.com/story/europe-police-facial-recognition-prum/?esrc=AUTO_PRINT&source=EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired
  2. Seth Freed Wessler, Denaturalized. (2018-12-30) New York Times Magazine p. 36ff