1 / 9

“Lessons for Biometrics from SSNs & Identity Fraud”

“Lessons for Biometrics from SSNs & Identity Fraud”. Peter P. Swire Ohio State University National Academy of Sciences March 15, 2005. Overview. Theme for today: Learn from SSNs & identity theft problems “Don’t release the keys”, in cryptographic systems or in biometrics

elsa
Download Presentation

“Lessons for Biometrics from SSNs & Identity Fraud”

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. “Lessons for Biometrics from SSNs & Identity Fraud” Peter P. Swire Ohio State University National Academy of Sciences March 15, 2005

  2. Overview • Theme for today: • Learn from SSNs & identity theft problems • “Don’t release the keys”, in cryptographic systems or in biometrics • Proposal: law to prohibit the selling or sharing of individuals’ biometrics • Prevent loss of the keys that breed fraud

  3. Swire Background • Now law professor at Ohio State • Teach computer security, privacy, cyber • Consultant, Morrison & Foerster • Was Chief Counselor for Privacy, OMB • 1999-early 2001 • Worked to fund CSTB study on authentication and privacy; discussed biometric study

  4. Problems with SSNs • Technically weak identifier • No check sum • Easy to fake or to steal • Uses have spread dramatically over time • Despite earlier promises to use only for federal programs • Nonetheless, SSN is now the “key” information that gives access to credit system and authoritative credentials • ChoicePoint incident & data compromised for at least 145,000 persons

  5. Algorithms and Keys • Modern crypto • Kerchkoff’s law and assume the algorithm should be public • Keep the key/password secret • If the key is copied/compromised, the system is wide open • Especially for online/remote applications • Also for fake drivers license • “A Model for When Disclosure Helps Security: What Is Different About Computer and Network Security?”, at www.ssrn.com

  6. How to Prevent Loss of Keys • For SSNs, perhaps law this year prohibiting “sale or display” of SSNs • Goal of enhancing the security of the “keys” • For biometrics, why not have a law prohibiting the “sale or display” of plaintext of biometrics? • Goal of enhancing the security of the “keys”

  7. Benefits of the No Display Law • Prophylactic rule, before have commercial enterprises who depend on the sale or display • Keep the keys more secure from the start • Bad enough to get a new SSN • Much harder to get a new finger, iris, etc. • Encourage encryption in storage and use of images of fingerprints, etc. • [Interlude – best practice should be to encrypt biometrics in storage]

  8. Exceptions to the Law • Photos • Many non-security uses of photos • Faces are seen in public • DNA samples • When is transfer appropriate for medical treatment or research? • Burden on others to explain why the biometric “keys” should be made public

  9. Conclusion • One-time opportunity for society to protect biometric keys before they are compromised • Let those who think display or sale is good explain precisely why, and craft exceptions • Without clear law, we will see proliferation of disclosures, in insecure applications • Without encryption, will have data leaks • If so, biometrics could become a failed approach, like SSNs today

More Related