Report: Biometric Technologies ‘Inherently Fallible,’ Better Science Base Needed

Biometric systems -- designed to automatically recognize individuals based on biological and behavioral traits such as fingerprints, palm prints, or voice or face recognition -- are "inherently fallible," says a new report by the National Research Council, and no single trait has been identified that is stable and distinctive across all groups.  To strengthen the science and improve system effectiveness, additional research is needed at virtually all levels of design and operation.
 
"For nearly 50 years, the promise of biometrics has outpaced the application of the technology," said Joseph N. Pato, chair of the committee that wrote the report and distinguished technologist at Hewlett-Packard's HP Laboratories, Palo Alto, Calif.  "While some biometric systems can be effective for specific tasks, they are not nearly as infallible as their depiction in popular culture might suggest.  Bolstering the science is essential to gain a complete understanding of the strengths and limitations of these systems."
 
Biometric systems are increasingly used to regulate access to facilities, information, and other rights or benefits, but questions persist about their effectiveness as security or surveillance mechanisms.

 The systems provide "probabilistic results," meaning that confidence in results must be tempered by an understanding of the inherent uncertainty in any given system, the report says.  It notes that when the likelihood of an imposter is rare, even systems with very accurate sensors and matching capabilities can have a high false-alarm rate.  This could become costly or even dangerous in systems designed to provide heightened security; for example, operators could become lax about dealing with potential threats.
 
The report identifies numerous sources of uncertainty in the systems that need to be considered in system design and operation.  For example, biometric characteristics may vary over an individual's lifetime due to age, stress, disease, or other factors.  Technical issues regarding calibration of sensors, degradation of data, and security breaches also contribute to variability in these systems.
 
Biometric systems need to be designed and evaluated relative to their specific intended purposes and the contexts in which they are being used, the report says.  Systems-level considerations are critical to the successful deployment of biometric technologies.  Effectiveness depends as much on factors such as the competence of human operators as it does on the underlying technology, engineering, and testing regimes.  Well-articulated processes for managing and correcting problems should be in place. 
 
The report notes that careful consideration is needed when using biometric recognition as a component of an overall security system.  The merits and risks of biometric recognition relative to other identification and authentication technologies should be considered.  Any biometric system selected for security purposes should undergo thorough threat assessments to determine its vulnerabilities to deliberate attacks.  Trustworthiness of the biometric recognition process cannot rely on secrecy of data, since an individual's biometric traits can be publicly known or accessed.  In addition, secondary screening procedures that are used in the event of a system failure should be just as well-designed as primary systems, the report says.
 
The report identifies several features that a biometric system should contain.   Systems should be designed to anticipate and plan for errors, even if they are expected to be infrequent.  Additional research is needed in all aspects of design and operation, from studying the distribution of biometric traits in given populations to understanding how people interact with the technologies.  In addition, social, legal, and cultural factors can affect whether these systems are effective and accepted, the report says. 
 
The study was funded by the Defense Advanced Research Projects Agency, the Central Intelligence Agency, and the U.S. Department of Homeland Security, with assistance from the National Science Foundation.  The National Academy of Sciences, National Academy of Engineering, Institute of Medicine, and National Research Council make up the National Academies.  They are private, nonprofit institutions that provide science, technology, and health policy advice under a congressional charter.

Featured

  • Progressing in Capabilities

    Progressing in Capabilities

    Hazardous areas within industries like oil and gas, manufacturing, agriculture and the like, have long-sought reliable video surveillance cameras and equipment that can operate safely in these harsh and unpredictable environments. Read Now

  • A Comprehensive Nationwide Solution

    A Comprehensive Nationwide Solution

    Across the United States, manufacturing facilities, distribution centers, truck yards, parking lots and car dealerships all have a common concern. They are targets for catalytic converters. In nearly every region, cases of catalytic converter thefts have skyrocketed. Read Now

  • Planning for Your Perimeter

    Planning for Your Perimeter

    The perimeter is an organization’s first line of defense and a critical element of any security and surveillance program. Even if a building’s interior or exterior security is strong, without a solid perimeter surveillance approach any company or business is vulnerable. Read Now

  • The Key Issue

    The Key Issue

    It is February 2014. A woman is getting ready in her room on a cruise ship when she hears a knock on the door; it is a crewmember delivering breakfast. She is not presentable so she tells him to leave it by the door. Read Now

Featured Cybersecurity

New Products

  • Genetec Security Center

    Genetec Security Center

    This major new release allows more system components to run in the cloud, reducing the gap between cloud and on-premises security systems. It also makes it easier to connect external systems and tap external data for use in dashboards, maps and investigations without relying on complex, specialized integrations. 3

  • VideoEdge 2U High Capacity Network Video Recorder

    VideoEdge 2U High Capacity Network Video Recorder

    Johnson Controls announces a powerful recording solution to meet demanding requirements with its VideoEdge 2U High Capacity Network Video Recorder. This solution combines the powerful capabilities of victor with the intelligence of VideoEdge NVRs, fueled by Tyco Artificial Intelligence, for video management that provides actionable insights to save time, money and lives. 3

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3