Advertisement
Promo

Security management Toolkit in association with http://ad.doubleclick.net/clk;214682528;14505427;f?http://uk.blackberry.com/ataglance/security/

ID-cards scheme will 'drown' in mismatches

Nick Heath silicon.com

Published: 29 Sep 2008 08:16 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The government has underestimated the probable failure rate of the ID-card scheme, according to a biometrics expert who reviewed the system.

The ID-card scheme will guard against one person having multiple identities by checking the two fingerprints and facial scan held on a chip on the ID card against biometrics in a central database — the National Identity Register.

But academic John Daugman, a former member of the Biometrics Assurance Group (BAG), which reviewed the scheme, said its reliance on fingerprints and facial photos to verify a person's identity will cause the system to collapse under the weight of mismatched identifications.

Daugman, an expert on iris recognition, said fingerprints and facial photos are not distinctive enough for telling the UK's 45-million-strong adult population apart.

Daugman said that, even if the error rate was as low as one in a million, the 10 to the power of 15 comparisons needed to verify the indentities of 45 million people would result in one billion false matches.

He told ZDNet.co.uk sister site silicon.com: "The use of fingerprints will cause deduplication to drown in false matches."

"The government was badly advised by its internal scientists in the Home Office when it took the decision to base the biometric system on fingerprints instead of iris patterns," said Daugman. "Only iris patterns have enough randomness and distinctiveness to survive so many comparisons without making false matches."

The Home Office rejected allegations that the scheme would be swamped with false matches, citing the example of two already operational schemes larger than the ID-card scheme: the FBI's fingerprint database, with more than 50 million records, and the US-Visit database, with more than 80 million records.

A spokesman for the Identity and Passport Service said: "Unexpected matches reported by an automated fingerprint system are checked by expert human-fingerprint examiners."

"The level of false matches for current, large-scale, automated fingerprint systems is sufficiently small that it is entirely practical to use human examiners to resolve them," he added.

Daugman also echoed the findings of a recent BAG report that stated there could be around four million elderly people in the UK whose fingerprint skin is either too dry or fine to take useful prints from.

Speaking at the launch of the UK's first ID cards on Thursday, home secretary Jacqui Smith claimed problems with taking or recognising fingerprints pose no threat to the effectiveness of the ID-card system.

"Because it is so exceptional, it is not going to be a problem that undermines the entire scheme," she said.

Credit: ID card 'will drown in a billion mismatches' from silicon.com

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
28 out of 28 people found this useful


Full Talkback thread

1 comment

  1. Policy is Truth Andrew Meredith

Company/Topic Alerts

Create a new alert from the list below:





Video icon

Video

Sentry Posts Blog

Behind the Scenes: Next Gen Mobile Tec...

Behind the Scenes: Next Gen Mobile Technology Author: Eric Everson, Founder MyMobiSafe.com With infrastructure speeds continually improving at the network level of the world’s leading... More

Post a comment

Nasa hacker petition presented to Numb...

Sting's wife Trudie Styler and Janis Sharp have presented a petition to Number 10 calling for Nasa hacker Gary McKinnon not to be extradited to the US. Styler, and Sharp, who is... More

Post a comment

UK to appoint cyber-sec tsar?

The UK is to appoint a cyber security tsar along the lines of the US, according to a story in the Telegraph this morning. The story is similar to one that appeared in the Guardian... More

Post a comment

Featured Talkback

It seems to me this is a burden being placed on the wrong shoulders. There is not an It system in the world that can stop an individual taking information in their heads and spewing out at the nearest undesirable third party.

By: RonaldWilkins

Read full story:
Deloitte: People are still weakest security link


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters