Advertisement
Promo

Security management Toolkit

ID-cards scheme will 'drown' in mismatches

Nick Heath silicon.com

Published: 29 Sep 2008 08:16 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The government has underestimated the probable failure rate of the ID-card scheme, according to a biometrics expert who reviewed the system.

The ID-card scheme will guard against one person having multiple identities by checking the two fingerprints and facial scan held on a chip on the ID card against biometrics in a central database — the National Identity Register.

But academic John Daugman, a former member of the Biometrics Assurance Group (BAG), which reviewed the scheme, said its reliance on fingerprints and facial photos to verify a person's identity will cause the system to collapse under the weight of mismatched identifications.

Daugman, an expert on iris recognition, said fingerprints and facial photos are not distinctive enough for telling the UK's 45-million-strong adult population apart.

Daugman said that, even if the error rate was as low as one in a million, the 10 to the power of 15 comparisons needed to verify the indentities of 45 million people would result in one billion false matches.

He told ZDNet.co.uk sister site silicon.com: "The use of fingerprints will cause deduplication to drown in false matches."

"The government was badly advised by its internal scientists in the Home Office when it took the decision to base the biometric system on fingerprints instead of iris patterns," said Daugman. "Only iris patterns have enough randomness and distinctiveness to survive so many comparisons without making false matches."

The Home Office rejected allegations that the scheme would be swamped with false matches, citing the example of two already operational schemes larger than the ID-card scheme: the FBI's fingerprint database, with more than 50 million records, and the US-Visit database, with more than 80 million records.

A spokesman for the Identity and Passport Service said: "Unexpected matches reported by an automated fingerprint system are checked by expert human-fingerprint examiners."

"The level of false matches for current, large-scale, automated fingerprint systems is sufficiently small that it is entirely practical to use human examiners to resolve them," he added.

Daugman also echoed the findings of a recent BAG report that stated there could be around four million elderly people in the UK whose fingerprint skin is either too dry or fine to take useful prints from.

Speaking at the launch of the UK's first ID cards on Thursday, home secretary Jacqui Smith claimed problems with taking or recognising fingerprints pose no threat to the effectiveness of the ID-card system.

"Because it is so exceptional, it is not going to be a problem that undermines the entire scheme," she said.

Credit: ID card 'will drown in a billion mismatches' from silicon.com

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
28 out of 28 people found this useful


Full Talkback thread

1 comment

  1. Policy is Truth Andrew Meredith

Company/Topic Alerts

Create a new alert from the list below:





Video icon

Video

Sentry Posts Blog

Climate research centre compromised

One of the UK's leading climate change research centres has had a security breach. The Climate Research Unit at the University of East Anglia (UEA) suffered a compromise of information,... More

1 comment

Government web-monitoring plans on hol...

Government plans to compel ISPs to process and store details of all web communications have been put on hold until after the next election. The Home Office told ZDNet UK on Wednesday... More

1 comment

Watchdog reveals illegal sale of phone...

The Information Commissioner's Office is preparing a prosecution file against a mobile operator's employees who allegedly sold on thousands of customers' details to a competitor. The... More

1 comment

Featured Talkback

In association with Network Liberation Movement
It seems to me this is a burden being placed on the wrong shoulders. There is not an It system in the world that can stop an individual taking information in their heads and spewing out at the nearest undesirable third party.

By: RonaldWilkins

Read full story:
Deloitte: People are still weakest security link


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters