Security threats Toolkit

Gov't: Most biometric checks will bypass ID database

Tags:
Cards,
Identity,
Register,
Checks

Kable

Published: 19 Nov 2008 16:41 GMT

Identity checks will normally rely on the biometric data held on ID cards and passports rather than the National Identity Register, according to identity minister Meg Hillier.

"Verification checks of biometrics identifiers will be made against the card in most cases using the biometrics stored in the chip, for example if the facial image or fingerprint biometrics are verified as part of an immigration check at the border," Hillier said in a parliamentary written answer on 17 November, 2008.

"Only in specific circumstances, for example if an ID card has been lost, would verification of identity take place against the biometrics held on the National Identity Register. Such checks will provide a very secure and reliable means of proving identity."

Hillier was responding to questions from Labour MP Lynne Jones about the use of biometrics in the scheme. Databases of biometrics become less reliable for picking out a single individual as they grow in size, as the chance of a false match grows with every extra member.

Read this

Gartner: Authentication systems are 'fatally flawed'

Security analyst Jay Heiser gives his take on the rash of UK public-sector data losses and explains why authentication systems aren't up to scratch...

Philippe Martin, a senior analyst at Kable, said: "This is actually the best way of doing it as in most cases biometric data does not need to be checked against a database. When you imagine the number of people travelling in and out of the country every day, you don't want millions of people's biometrics flying across networks. The only interaction needed with the database is a check certifying the cardholder's entitlement to the service requested."

Jones asked Hillier for the Home Office's estimate of the number of false matches likely to arise from use of fingerprint biometrics after the enrolment of one million, six million, 40 million and 60 million people.

"The Identity and Passport Service is still in the process of procurement of specific biometric systems, hence we are unable to give an estimate of false matches that may occur," replied Hillier. "In the event of an uncertain fingerprint match, the scheme will make use of human fingerprint experts to resolve uncertain fingerprint matches from the automated fingerprint-matching system."

In reply to a question from Jones about the problems for those aged 75 and over in using fingerprint scanners, mentioned in the Biometrics Assurance Group's 2007 annual report, Hillier said "as no specific recommendation was made regarding exception handling or the collection of fingerprint biometrics for the elderly, no comment was made" by the Home Office.

The Identity and Passport Service has announced that Vince Gaskell, currently chief executive of the Criminal Records Bureau, will join the service in the new year as executive director for new service implementation. He will have overall responsibility for implementing initiatives including cards for airside workers.