BIOMETRICS: ENHANCING SECURITY OR INVADING PRIVACY? OPINION Published by The Irish Council for Bioethics 1 Ormond Quay Lower, Dublin 1. E-mail: [email protected] Website: www.bioethics.ie © Irish Council for Bioethics 2009 All or part of this publication may be reproduced without further permission, provided the source is acknowledged. Biometrics: Enhancing Security or Invading Privacy? Opinion. Published by The Irish Council for Bioethics, Dublin ISBN 978-0-9563391-0-2 Price €10.00 BIOMETRICS: ENHANCING SECURITY OR INVADING PRIVACY? Preface Biometric technologies including iris, voice, fingerprint and vein pattern recognition – once the realm of science fiction and film – are now becoming more of a daily reality. The potential biometrics provides as an individual identifier has resulted in the widespread diffusion of this technology into people’s lives. For example, Irish citizens now encounter biometric applications in many different situations, such as for workplace time and attendance, for physical and logical access (e.g. for laptops) and particularly in relation to international travel. In addition, Ireland is now recognised as a European hub for biometric research in both industry and academia. Indeed, the European Biometrics Forum (a European-wide stakeholder group supporting the appropriate use of biometric technologies) was established in Dublin and is part funded by the Irish government. Given Ireland’s involvement in and contribution to biometric research, the Irish Council for Bioethics (the Council) considered it appropriate to examine the ethical, social and legal issues associated with biometric technologies and the collection, use and storage of biometric information. This opinion document outlines the Council’s views and recommendations on these issues. In contrast to many emerging technologies, biometrics has the potential to impact peoples’ lives directly at the level of the individual, but also from a larger societal perspective. Therefore, the Council considers it imperative for there to be increased trust, transparency and honest engagement with the public in relation to biometric technologies and applications. The Council is hopeful that this document can provide a useful and informative resource for both policy makers and the general public and will also help to engender greater discussion and consideration of the issues pertaining to biometrics. I would like to express my thanks to the members of the Rapporteur Group and the Council, as well as to the Council’s Secretariat, for the time and effort they have expended in the production of this document. The Council would also like to thank both the stakeholders and the members of the focus groups who contributed to the consultation process. Their input proved very helpful in the Council’s deliberations on this rapidly developing and multifaceted topic. Dr Dolores Dooley Chairperson Irish Council for Bioethics i THE IRISH COUNCIL FOR BIOETHICS Foreword This opinion document examines, in detail, existing and forthcoming biometric technologies, and the ethical and legal ramifications that are relevant to this technology. Developments in biometrics hold very great hopes of ensuring the protection and maintenance of one’s identity and privacy. Biometric technologies also have the great potential to enhance security and safety of citizens. However, along with this potential, is also the potential to compromise the privacy of individuals in the misapplication of the technology. Central to this discussion are the themes of balance, proportionality and transparency. The Council recognises benefits of biometric technology however in alliance with these themes. Any technology which purports to collect and retain personal information in relation to an individual should be used only after careful consideration and only as to its necessity as is required for the intended use. In order for individuals to have confidence that this technology will properly provide the positive benefits which it can, manufacturers, policy makers and end users of this technology should be as transparent as possible in relation to the technology, the reasons for its use and how the information obtained from the technology is to be secured. The autonomy of individuals again features in this opinion document of the Council: in relation to biometric technology, the autonomy of the individual should be protected by allowing an individual’s involvement in the use of the technology, as much as is possible. There may be circumstances that are exceptions, where in the common good/public interest, the individual’s involvement may have to be limited. However, these circumstances should be limited and properly considered and discussed before the invocation of such exceptions. As is the Council’s normal practice, it engaged in a consultation process by way of focus groups. The results of this exercise are to be found in the appendices of this report. In addition, the Irish Council for Bioethics organised a conference in November 2008 entitled ‘Biometrics: Enhancing Security or Invading Privacy?’. The Council is very grateful to the participants at the conference. The views of our distinguished speakers have assisted as part of the process of the preparation and consideration of this opinion document. The Council is also grateful to all those who made submissions to it (a list of submissions received by the Council can be found in the appendices). It is the Council’s hope that this detailed document will provide information, insight, and guidance to the public at large and to any party that is likely to be involved in biometric technology. We also hope that the document will act as a catalyst to further discussion of this topic at both national and international level. ii BIOMETRICS: ENHANCING SECURITY OR INVADING PRIVACY? The Council’s terms of reference are to identify and interpret the ethical questions raised by biomedicine in order to respond to, and anticipate, questions of substantive concern and also to investigate and report on such questions in the interest of promoting public understanding, informed discussion and education. The Council hopes that this document achieves such ends. The Rapporteur Group and the Council would again like to extend its gratitude and appreciation to the members of the secretariat, Dr Siobhan O’Sullivan, Ms Emily de Grae, Mr Paul Ivory and Ms Emma Clancy. Their efforts and diligence are invaluable to the Council’s work past, present and future and to the completion and compilation of this opinion document. Silence and inaction have very rarely served, if ever, to promote progress and prosperity in any given field. The Council hopes that it can continue fulfilling its objectives through its terms of reference in order to play its part in ensuring that constructive debate and activity in the field of bioethics continues and prospers. We hope that this opinion document is another small, but helpful step in that process. Professor Alan Donnelly Mr Stephen McMahon Mr Asim A. Sheikh, BL (Vice Chair) Rapporteur Group on Biometrics Members, Irish Council for Bioethics iii THE IRISH COUNCIL FOR BIOETHICS Table of Contents Preface ......................................................................................................... i Foreword ..................................................................................................... ii Executive Summary .....................................................................................vi Chapter 1: An Overview of Biometrics and its Applications ...................... 1 What are Biometrics? .....................................................................................................................2 Why are Biometrics Used? .............................................................................................................3 Architecture and Design of Biometric Recognition Systems ......................................................4 Practical Considerations.................................................................................................................8 Technology Associated with Biometric Systems ........................................................................14 Chapter 2: Overview and Comparison of Biometric Modalities .............. 17 Market Overview ...........................................................................................................................18 Fingerprint Recognition ...............................................................................................................19 Palm Print Recognition .................................................................................................................25 Hand Geometry ............................................................................................................................26 Vein Pattern Recognition .............................................................................................................29 Facial Recognition ........................................................................................................................31 Facial Thermography ...................................................................................................................35 Ear Geometry Biometrics .............................................................................................................36 Iris Recognition .............................................................................................................................37