Fingerprint ID system taken offline, jail releases wrong man

This is why Intake-and-Release biometrics are gaining popularity in jail management circles…

Escaped Inmate Captured As Investigation Continues At The Chatham County Jail  (Old link dead)
The Georgia jail that released the wrong prisoner ordinarily uses fingerprint biometrics to ensure that the correct person is being set free. The system, however, was not in use at the time.

UPDATE: There is still video available of the story.

Biometrics help ID fugitive officer at border crossing

Former officer arrested at bridge (Brownsville Herald)

He was arrested and accused in 2008 of being involved in unlawful firearm purchases and failing to appear at his arraignment, according to a 2009 news release from then-U.S. Attorney Tim Johnson.

Duenez walked up to the bridge and presented his Texas driver’s license and U.S. birth certificate, CBP said in a news release.

“Preliminary checks revealed that the individual, later identified as Armando Duenez, was a possible match to an arrest warrant and was referred to secondary for further inspection,” the press release states.

During secondary inspection, biometric checks through CBP and law-enforcement databases matched him to a U.S. Marshals warrant, according to CBP.

Is the Five Country Conference hitting its stride on ID?

The US, UK, Canada, Australia, New Zealand (Five Country Conference) share information, including biometrics, on foreign visitors. Reading between the lines of the article linked below, they appear to hitting their stride.

Biometrics has “just completely changed the way we do business,” DHS director of US-VISIT. (Fierce Homeland Security)

See also:
Privacy Impact Assessment for the US-VISIT Five Country Joint Enrollment and Information-Sharing Project (2009 pdf at DHS.gov)

Australia to test drive ABIS developed for US by Northrop Grumman

Australia to test biometric system (UPI)

Australia’s Defense Department has received a trial proof of concept for an automated biometric information system from Northrop Grumman.

The proof of concept, modeled after the U.S. Department of Defense Automated Biometric Identification System, will be used to produce biometrically enabled intelligence.

Farm Bureau working group suggests biometric Ag Card for migrant workers

Would an ‘ag card’ labor proposal work for agriculture? (Western Farm Press)

To help alleviate labor shortages in U.S. agriculture, an American Farm Bureau Federation (AFBF) working group has proposed work authorization for “a limited population of key workers that have agricultural experience and will continue to work in agriculture to remain in status on what we call an ‘ag card,’” says Kristi Boswell, AFBF director of congressional relations.

The card would be biometric and carried by migrant laborers to prove work authorization.

Irish privacy commissioner’s report

It’s mostly inspired by the Facebook photo tagging affair but it deals with privacy issues and biometrics in a holistic way.

Ireland: Preserving Privacy In The Age Of Biometrics (mondaq)

The Office of the Irish Data Protection Commissioner (‘ODPC’) recently published its audit report regarding Facebook. The audit was undertaken to determine whether Facebook had implemented recommendations stemming from the ODPC’s first audit in 2011. While the audit was largely positive in its findings, the photo tagging feature introduced by Facebook, ‘tag suggestion’, was deemed by the ODPC to be a step too far for compliance with European data protection rules. This tool used cutting-edge facial recognition technology to automatically suggest the matching of names and pictures, i.e. upon the Facebook user uploading a photo, ‘tag suggestion’ would prompt the names of the individuals appearing in such image.

Consent, contract and transparency are all discussed in some detail at the link and we’ve discussed those topics philosophically on this blog in the past. There is also an analysis of proportionality in the linked article. Proportionality is a concept seen a lot in discussions of privacy issues involving European government institutions. It’s not a big part of privacy discussions in the United States.

In Europe, governments seem to feel freer to proactively inject themselves into arrangements between private entities than do governments in the United States. The recent French decision re biometrics for time-and-attendance is a good example of the invocation of proportionality to regulate the behavior of private entities.

In the United States, negligence, liability and torts seem to fill some of the roles proportionality plays in Europe. Since the legal system in the United States generally holds that one cannot consent to another party’s negligence, negligent parties are exposed to civil suits in the event that a data breach harmful to individuals occurs.

In general, it seems that the European approach is more proactive and government driven while the approach in the United States is more reactive and driven by private interests.

What about the United States?

So, having put Africa under the microscope (above, here & here) how is the United States doing?

America’s election process an international embarrassment (CNN)

America has one of the world’s most antique, politicized and dysfunctional procedures for its elections. A crazy quilt patchwork of state and local laws with partisan officials making key decisions and ancient technology that often breaks down. There are no national standards. American voters in more than a dozen states, for example, don’t need ID. But even India, with a GDP just 12 percent that of ours, is implementing a national biometric database for 1.2 billion voters. The nascent democracy in Iraq famously dipped voters’ fingers in purple to ensure they didn’t vote again. Why are we so behind the curve?

Ouch.

Benghazi: US uses face rec to confirm that suspect held in Tunisia was present at attack

US officials ID’d Libya attack suspect on surveillance video, sources say (FOX)

Ali Ani al Harzi and one other suspect were detained at an airport in Turkey in the days after the attack while travelling with false documents, and Harzi now has been identified as being present at the attack using the images obtained from the consulate compound video, Fox News’ sources say.

Harzi was transferred to Tunisian custody, but U.S. interrogators so far have not had access to him, much to the frustration of American authorities. Even so, U.S. intelligence agencies have confirmed through facial recognition technology that the Tunisian was present the night of the consulate attack.

Taiwan passport holders to enjoy visa-free travel to the US…

… but only those who carry the newer, biometric passports.

US approves Taiwan Visa Waiver Program (China Post)

Taiwan has been officially included in the United States Visa Waiver Program (VWP), allowing Taiwanese passport holders to travel to U.S. for stays of up to 90 days without obtaining a visa, the U.S. government announced Tuesday.

Taiwan is the 37th country to join the VWP. The nation is also the seventh country in Asia, following Japan, South Korea, Singapore, Brunei, Australia and New Zealand, to be included in the VWP.

Canada and the US to require better ID from border crossers

Border law will demand travel docs from Canadians: Documents (Embassy)

Citizenship and Immigration Canada plans to introduce new legal rules that would force Canadians and Americans to present authorized travel documents such as passports when entering Canada, according to departmental notes.

Government documents obtained by Embassy under access to information legislation show the move, part of the perimeter security plan between Canada and the United States, will bring Canadian and American law closer.

Under the US Western Hemisphere Travel Initiative, Canadians and others have had to pack official travel documents like passports since 2007 when they fly to the US, and since 2009 when driving or sailing there.

“Rapid” DNA: Not super rapid. Still really cool. More steak than sizzle.

FBI eager to embrace mobile ‘Rapid DNA’ testing (PC Advisor)

It’s been the FBI’s dream for years — to do near-instant DNA analysis using mobile equipment in the field — and now “Rapid DNA” gear is finally here.

Really!? Near instant? Mobile equipment? Are FBI agents are running around with hand held DNA devices that give instant feedback?

Not really.

According to the article, “…[T]he Rapid DNA device can spit out an individual’s DNA data within 90 minutes… measures about 27-by-24-by-16 inches, costs about $245,000.”

Compared to other biometric deployments, this isn’t particularly rapid or mobile.

Though I’ve made some sport with rapid DNA in the past, there are some applications where only DNA analysis will do and the applications that government bodies have in mind for “rapid DNA” don’t exactly lend themselves to breathless reporting or Gattaca* references.

First, the FBI wants faster and cheaper DNA analysis to help clear cold cases where the state possesses DNA evidence by comparing the DNA of arrestees with an evidence database.

We discussed this very point with Mike Kirkpatrick in a recent twitter Biometric Chat.

Q4: Then, if the Big Three of biometrics are Face, Finger/palm print & Iris – Where does DNA fit in?

A4: There’s an ongoing multi-agency effort on rapid DNA, which will put a “quick” DNA capability at the booking stations. We should see this in the market within the next couple of years. It’ll help solve alot of cases. DNA in many ways is the ultimate biometric but still has many privacy issues associated with it as well as the past relative slowness in getting results. It can prove someone innocent as easily as proving someone guilty, which is good as all in criminal justice should be searching for the truth. [ed. formatting edited to de-twitter the Q&A]

Then, there are other government ID applications where only DNA will suffice such as this one, having to do with immigration and whether certain individuals are related by family, described in a very interesting Computerworld article from about a year ago (blog post here).

One pent-up need for a rapid DNA analysis kit is coming for the Department of Homeland Security’s citizenship and emigration services, according to Christopher Miles, biometrics program manager at DHS.

The uncomfortable realization that the government might be wasting a huge amount of time reading fraudulent documents and listening to lies was a lesson learned a few years ago in trying to help refugees in Kenya that wanted to emigrate to the U.S. In that instance, the U.S. government took about 500 DNA samples, did a lab analysis to verify family relationships, and found out 80% were fraudulent, Miles said.

If all you have is a DNA database or if you need to find out if two people are related, DNA is the only biometric modality that can help. In these cases, and compared to what went before it: 90 minutes really is fast; $1,500 per transaction (a guess) really is cheap; and something the size of a microwave oven really is mobile.

*The article’s author, while suspected of the former, is innocent of the latter. As for Gattaca, I enjoyed the film but I can’t believe it was released fifteen years ago: October 24, 1997.

US: Border biometrics make a difference

US-VISIT Proves That Biometrics Make A Difference (Homeland Security Today)

On February 6, 2012, a man we’ll call “Walter” arrived at the George Bush Intercontinental Airport in Houston, Texas after a trip to Panama and applied for admission as a returning lawful permanent resident. He presented a valid Mexican passport and a valid US Permanent Resident Card. Everything seemed to be in order and the young man breathed a little easier.

But when the Customs and Border Protection officer directed “Walter” to place both of his hands on the US-VISIT Automated Biometric Identification System (IDENT) so all ten of his fingerprints could be scanned, “Walter” knew in his gut that he was in for a long day.

The full article is available here in HSToday’s magazine viewer.

Biometrics Uncover 825,000 ID Inconsistencies in DHS Database

Fingerprint Records Reveal 825,000 Immigrants With Multiple Names (Mashable)

Many of the situations involved women who legally altered their names. “We found that nearly 400,000 records for women have different last names for the same first name, date of birth and [fingerprint identification number],” he wrote. “These instances are likely women who changed their names after a marriage.”

During the study, auditors examined records covering 1998 through 2011.

Most of the time, US-VISIT personnel try to resolve cases in which people who appear to be one and the same have different information listed in records, the auditors found. The researchers are not specifically targeting scams, Deffer explained. Accidental typos, the fact that various immigration-related agencies use incompatible data formats and other keying mistakes are factors they look for when probing mismatches. During the course of typical procedures, US-VISIT has picked up on only two instances of fraud, agency officials reported to the IG.

The enormity of the conflicting data, however, may obscure actual fraud. “These inconsistencies can make it difficult to distinguish between data entry errors and individuals potentially committing identity fraud,” he wrote.

As they grow and age databases can get really junked-up. Biometrics, in this case fingerprint biometrics, can be extremely helpful in maintaining their integrity. The database involved here is the on maintained by the US Department of Homeland Security US-VISIT program. It contains (wait for it) information, including a fingerprint, on all visitors to the US. The fingerprint has been the linchpin of the audit that discovered 825,000 database errors because it is the only  piece of truly unique and durable, personal information stored.

Before automated fingerprint ID systems (AFIS), combinations of data were used to reduce ID error rates to some reasonable approximation of zero. While names, birth dates, and other descriptors aren’t unique, multiplying them together works pretty well for a while. Working against this system are legal name changes and human typographical errors in data entry which have the database effect of creating a whole new person,  which runs counter to the reasons for keeping such a database in the first place.

See Biometric “Fix” Identity which takes on this issue from the angle of intentional fraud.

Biometrics and “Green on Blue” Violence in Afghanistan

Another ‘green-on-blue’ attack kills NATO troop; 10 dead in 2 weeks (Stars & Stripes)

Afghanistan ‘insider’ attacks pose threat to West’s exit strategy (Stars & Stripes)

How to guard against such attacks is the subject of considerable debate in military leadership circles, because overtly heavy-handed measures can send a signal to the Afghans that they are not trusted, which can be taken as an insult. And in traditional Afghan culture, perceived insult can swiftly lead to exactly the sort of violence the attacks represent.

Efforts on the Afghan side include embedding undercover intelligence officers in some battalions, and stricter scrutiny of recruits, including the collection of biometric data to compare against a database of known insurgents. Some observers, though, believe the safeguards built into the recruitment process, including the requirement that village elders vouch for those who want to join the army, are routinely bypassed in many provinces.

Biometrics can help with identity management but they are always just a part of an overall organizational plan.

This short passage touches on a few important issues: technology, managing people, managing a security regime once it’s in place. All must work together in furtherance of organizational goals. If one leg of the stool goes, the whole structure is at risk. For some organizations that means embarrassing CEO speeches and annoyed customers. For others the results are utterly tragic.

UPDATE II: Remotely-Staffed US-Mexico Border Crossings

FEB. 9, 2012: Self-service U.S.-Mexican border crossing could be replicated (NextGov)

Under the agency’s plan, people carrying passports or other citizenship documents embedded with computer chips will approach kiosks to enter the United States. The kiosks will be mounted with digital scanners connected to a staffed entry point in El Paso, Texas, where CBP officers will see them through one-way video cameras and check their IDs. When near the scanner, the microchip, a radio frequency identification transmitter, signals a remote database to draw up biographical records and a photo of the document-holder. Officers then can confirm that the person in the database is the person on the camera.

AUG. 6, 2012
UPDATE:It looks like they’re installing something along these lines in Nogales, Arizona.

Avatar Officer Installed at Arizona-Mexico Border Station (Yahoo)

[Customs and Border Protection] CBP is actually installing an updated version of the University of Arizona’s kiosk—the original was tested at the station from December to March—to determine its ability to help enroll applicants in its Trusted Traveler programs at the Mexican border. The programs, also available for airline passengers, were created after 9/11 at various ports of entry into the U.S. to expedite preapproved, low-risk travelers through dedicated lanes and kiosks. All Trusted Traveler applicants must voluntarily undergo a background check against criminal, law-enforcement, customs, immigration, agriculture and terrorist databases. The process also includes biometric fingerprint checks and an interview with a CBP officer.

In Nogales, human CBP officers monitor the avatar-administered pilot-test interviews, which provide them with automated feedback uploaded wirelessly to an iPad tablet that these officers can use to conduct follow-up interviews.

AUG. 15, 2012
UPDATE II:
This robot border officer knows when you lie (Channel 3000)

Applicants for the program must undergo an interview and biometric fingerprinting to be eligible for the program — both of which can be performed by the AVATAR kiosk.

Derrick said the kiosk could process travelers in five minutes.

Travelers simply stand in front of the unit — which “looks like an ATM on steroids,” according to Derrick — and respond to yes/no questions asked in Spanish or English. “You speak to it like you speak to a person,” he said.

Their answers are monitored, with any unusual physiological responses passed on to “a human field agent” who then subjects them to “a more careful interview process,” said CBP spokesman Bill Brooks.

Unusual responses were not a sure sign of a lie, said Derrick. “There might be valid reasons for it beyond deception.”

The computer uses three sensors to assess physiological responses: a microphone, which monitors vocal quality, pitch and frequency; an infrared camera, which looks at pupil dilation and where the eyes focus; and a high-definition camera recording facial expressions.

Much more at the link.

It looks like this is much more than a tele-presence or biometric document authentication app. If this article is accurate, U.S. Customs and Border Protection is actually piloting an automated deception detector in the field and has settled upon voice as the most important thing to measure.

Strange Things Afoot in Kenya Biometric Voter Registration Procurement

Following a flurry of activity that included overtures from U.S. Secretary of State Hilary Clinton, the idea of renting registration kits from Ghana, and an electoral commission reluctant or unable to pick a bid, Kenya seems to be heading toward biometric voter registration for the elections scheduled for March 2013.

In order to move the project forward, two adjustments to the ordinary electoral process have been made.

The law mandating that the electoral register be completed 90 days prior to an election will be changed to allow the electoral commission an extra 45 days to complete its work. (Nairobi Star via All Africa)

The Cabinet yesterday accepted a request by the IEBC to acquire the biometric voter registration kits through a government to government arrangement. The Elections Act will also be amended to allow for the voter register to close 45 days to the polling date of March 4,2013 instead of the stipulated 90 days. These are among the decisions that were made during a meeting held between President Kibaki and the Independent Electoral and Boundaries Commission to resolve the crisis surrounding the procurement of the BVR kits which would have seen Kenyans revert to the manual voter registration system.

The amendment in the Elections Act will give the IEBC time to complete voter registration and allow scrutiny of the same and still keep within the elections time table it had drawn up. “The Government agreed to initiate amendments with the Elections Act to reduce the period for closure of the register from 90 days to 45 days so as to allow more time for voter registration,” a statement issued after the meeting read.

The stated procurement process has been thrown out the window. (Capital FM via All Africa)

MPs want Justice and Constitutional Affairs Minister Eugene Wamalwa to explain the criteria used by the Cabinet to select a Canadian firm to supply Biometric Voter Registration kits ahead of next year’s general election.

Ikolomani MP Boni Khalwale said the move amounted to the government taking over the procurement of the BVR kits from the Independent Electoral Boundaries Commission.

The commission cancelled the tender for the supply of 9,750 BVR kits on Wednesday following immense public outcry on the manner the tender had been awarded. In announcing the cancellation, the commission said the two lowest bidders did not meet the due diligence requirements while the other two firms who met the due diligence including Symphony Limited, were above budget.

The company, which was second-placed in the tender bid, said it had fallen victim to “unknown intrigues.”

The Indian firm 4G Identity Solutions which had bid the lowest said it would respect the decision by the IEBC to cancel the tender. However, the firm appealed to the commission to rethink the cancellation since it would negatively impact them.

The Public Procurement and Disposal Act 2005 allows the IEBC to terminate the process before it awards the contract. In such case, the bidders cannot seek court intervention.

Apart from 4G and Symphony of Kenya, other companies shortlisted for the tender were Face Technologies of South Africa and Ontrack Innovations of Israel.

For a summary chronology:

1. IEBC solicits proposals

2. IEBC narrows list to four providers

3. For whatever reason, IEBC can’t choose among them.

4. IEBC cancels the project foreclosing any recourse to the bidders who followed the IEBC’s instructions.

5. Hilary Clinton offers Kenya free biometric registration kits.

6. IEBC rejects the offer citing (unstated) political implications that would have arisen from such a donation, and a lack of time to complete the process.

7. IEBC makes a request of the Cabinet to acquire biometric registration kits through a government to government arrangement (Ghana, perhaps).

8. Laws will be changed to ensure that there’s enough time.

9. Vendors scratch heads.

10. Still, nobody is sure where the kits will come from.

That’s kind of a mess.

Post Offices Streamlining Government Services with Biometrics

The UK Post Office is active in the ID management industry, serving as a clearing house between individuals residing in Britain and various government bureaucracies dealing with ID and now Post Office Limited has processed the biometric information of more than one and a half million applicants through its Applicant Enrollment Identification (AEI) service.

The UK Post Office serves as a customer service link between individuals and the Driver Vehicle Licensing Authority (DVLA) and the UK Border Agency, capturing applicant information such as fingerprints, photographs, and digital signatures and charging a fee of £19.20.

The DVLA uses the AEI service to allow drivers to renew their drivers’ licenses. By capturing drivers’ photographs and digital signatures at Post Office branches, the service has automated the renewal process that occurs every ten years. Using AEI, the renewal process takes an average of 3.5 – 5 minutes.

The UK Border Agency uses Post Office branches to record and securely transmit biometric information and other applicant data for those wishing to extend their visas. Once the digital signature, photograph, and fingerprints are received and checked by the UK Border Agency and they are satisfied with all aspects of the immigration application, the UK Border Agency issues the foreign national a Biometric Residence Permit.

Here’s how it works…

National post offices are in a unique position to offer services like these. Some have been better than others at managing through the information revolution. Australia blazed a trail that the UK followed. The template is there for others to follow.

Unfortunately it’ll be difficult to pull off in the United States because most ID is administered at the state, rather than at the national level. The US Postal Service does provide passport services for first-time passport requests and charges $25 for the service, but it’s largely locked out of the more lucrative ID business the state’s have carved out for themselves.

See also: 3M’s press release about its relationship with Post Office Limited

News Round-up: Government Biometrics in the US

TINKER AIR FORCE BASE, Okla. is beginning to use hand held biometric ID scanners for access to the base. (Tinker.af.mil)

NEW YORK State Senator urges biometric ID for Medicaid recipients (Buffalo News)

U.S. SUPREME COURT: Criminal DNA Collection Law Stays In Place (WRTV 6 – Indiana)
Contrary to the author’s assertion, collecting DNA after arrest and before trial isn’t controversial; it is evidence. Evidence can be used to exonerate as well as convict. Now, what happens to the evidence following a not guilty verdict is another matter altogether.

“It brings together data from all the sensors.”

It looks like the US Military is developing the Mother of All (Data)bases — a military intelligence MOAB, if you will.

Integrated Intelligence Framework Takes Shape (GlobalSecurity.org)

This state-of-the-art battlefield intelligence, reconnaissance and surveillance architecture will enable analysts from every service to take data from multiple military and government sensors and databases and compile them into a single, easy-to-access format, he explained.

DCGS-Army, already fielded in Afghanistan as it undergoes operational testing and evaluation, provides a glimpse into that intelligence enterprise.

“It brings together data from all the sensors,” Wells said, regardless of whether they’re based in space, on aircraft or on the ground — even biometric data collected by a soldier at a local forward operating base — and incorporates it into a single platform.

See also:
What if? Online Real-Time Searchable Sensor Data

The original MOAB is here. (You Tube)