Biometrics

[Bill Vermillion]

On Fri, Jun 04, 2004 at 07:26:46PM -0400, Fairlight thus spoke:
> When asked his whereabouts on Fri, Jun 04, 2004 at 05:03:44PM -0400,
> Nancy Palmquist took the fifth, drank it, and then slurred:

> > The biometric thing does not keep a picture of your fingerprints, it
> > translates the nature of your print into a unique number or code of
> > somekind.  

> > I agree - how is that different than showing a picture ID?

> I'd assume that to be reliable it must be the equivalent of
> a unique digital signature--sort of like MD5 or SHA1 for
> fingerprint patterns. If it's indeed unique to each person,
> that could be construed as medical information.

Medical information is typically that information which you will
have to sign a privacy statement and a release for anyone other
than a doctor to see it.   The changes in privacy this past year
means you sign everywhere - even at a dentist.   

> > A better way to identify people will improve security. My
> > plan would create an ID card with the biometrics recorded on
> > the card. You show the person the card, swipe it in a reader
> > and put your finger on a scanner. If the swipe matches the
> > scan, you are who the card says you are. They do not need to
> > keep the information at all.

> Congratulations on just reiterating a slew of sci-fi cliches.  :)

> It's not the technicalities, it's the principle.  It's an invasion of
> privacy, IMHO.  

> > Do you want a picture ID to be the only way they can identify
> > the person(s) with access to critical things such as
> > aircraft, water supplies, medical labs, chemical plants, your
> > 3 yr old at day care, etc.

> It's worked for however long they've had picture ID's. People
> are overly paranoid nowadays. The people they're trying to keep
> out aren't going to be terribly -concerned- about biometric
> ID's and access. The kind of people they're trying to keep out
> are the type that will whip out a gun, kill the guard, and use
> the corpse and ID to let themselves in.

The place that I use a biometric ID with card and palm scanner has
no guard present.  You are on video at all times.  The card opens
the main door to the building.  Then you are in a hallway and at
the end of that short hallway is another card slot to turn on the
biometric.

The doors are all magnetic.  I suppose that if you tried to break
in, they would seal the doors.  Going out the pressure bar
activates the magnetic release.  At that same time I suspect the
closest police office would be notified to get thier quickest,
along with the sherriff and what ever Federal agency has
jurisidiction - probably the FBI.  There are signs posted - not
large but they do have the rules - and it is federal violation to
have a fire-arm with you.

And one or two other places that had guards but no ID had ARMED
guards and they were expected to use them if someone gave warranted
that.  Not all places have the typical 'security' guards.  

> If someone -really- wants in, they'll get in one way or
> another. The old saw is that a lock only keeps an honest man
> out. It doesn't particularly matter how complex the lock
> is--there's always a way if there's sufficient will.

In the above place you probalby could get past get in the first
door but it would probably take some HE to do it. And if you did
that, by the time you got to the second it would probably be all
over and swarming with all sort of enforecement agencies and
probably the FD as well.

Security has changed dramatically over the years.

Bill
-- 
Bill Vermillion - bv @ wjv . com