Iris Scans: Security Breakthrough Or Privacy Invasion?

via InformationWeek.com

New technology allows irises to be scanned from 40 feet away. Is this a wonder weapon against crime and terrorism or a way for governments to invade our privacy and track our movements?

Imagine if you could be identified with certainty from 40 feet away by anyone with a special camera and your iris scan in a database. Carnegie Mellon researchers at the Cylab Biometrics Center have invented a device that can do that. It should definitely have criminals feeling nervous, but maybe we should all be nervous.

First the good news. According to SRI International, a spinoff of Stanford Research Institute, iris scans are 1,000 times more accurate than fingerprint scans. We’re already using handheld iris scanners in high security situations. The new Carnegie Mellon device will work up to 40 feet away — even in a mirror — so, for example, a police officer making a traffic stop can safely identify a potentially dangerous suspect before he even exits his vehicle.

The whole system works with fewer false positives than fingerprints, and it’s effective at the same general range as facial recognition. (Facial recognition famously failed during the Boston bombings because no pictures were close enough.)

Here’s the bad news. At 40 feet away, the government could now (or soon, because this version looks like it needs some focus time and for you to sit still a bit) scan crowds of people for “irises of interest” and literally troll a city street for “the bad guys.” Even the most security-minded person probably feels a little strange about that, especially when you consider that irises can be scanned passively.

For now, this isn’t a major threat because if your iris has never been scanned, no one can identify you. The FBI has at least 104 million fingerprints in its database — 70 million of which are from criminals. It has no known iris database, though it has experimented with the idea.

What if you scanned a city street daily? You may not be able to identify whom all the irises belong to, but you could say, “The same iris, which we now call Iris 543-X, walks by here at roughly the same time every day.” The assumption, then, is that Iris 543-X belongs to someone who lives or works in the area. As thousands of irises are scanned and stored, eventually a giant database could be created to track the movements of every iris that walks in front of a camera. Eventually, you’re going to identify Iris 543-X, especially if Iris 543-X can be cross-matched to facial recognition software or other forensic databases.

Read more: Iris Scans: Security Breakthrough Or Privacy Invasion?