Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears...

34
DO ANDROIDS DREAM OF BIOMETRIC SHEEPS? Emilio Mordini Centre for Science, Society & Citizenship (Italy) [email protected]

Transcript of Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears...

Page 1: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

DO ANDROIDS DREAM OF BIOMETRIC SHEEPS?

Emilio MordiniCentre for Science, Society & Citizenship (Italy)

[email protected]

, y p ( y)

Page 2: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Blade Runner

Early in the 21st Century, the Tyrell Corporation advanced robot evolution into the NEXUS phase a being virtually identical to a human knowninto the NEXUS phase - a being virtually identical to a human - known as a Replicant. Replicants were used Off-world as slave labour, in the hazardous exploration and colonization of other planets.

After a bloody mutiny, Replicants were declared illegal on earth - under e a b oody u y, ep ca s e e dec a ed ega o ea u depenalty of death. Special police squads - BLADE RUNNER UNITS -had orders to shoot to kill, upon detection, any trespassing Replicant. Replicants can be identified only by using the Voight Kampff Machine, which analyzes the iris contractions and dilatations ”

[email protected]

which analyzes the iris contractions and dilatations…

Page 3: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Replicants and Humans…

This is the initial plot of “Blade Runner”, a science fiction s s e a p o o ade u e , a sc e ce c ofilm that became the cult movie of the 80's and is still a cornerstone of sociological science fiction.

The machine that allows to identify the Replicants was aThe machine that allows to identify the Replicants was a biometric devise.

[email protected]

Page 4: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Biometrics may reveal a “core humanity”, any hidden secret of the person

[email protected]

Page 5: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Biometric Fallacy

Both hypes and fears that d bi t isurround biometric

technologies stem from this fallacyThose who overestimateThose who overestimate biometrics tend to think that biometrics can solve problems that actually p ycannot solve; those who are overconcerned think that biometrics threat liberty and privacy more than it actuallyprivacy more than it actually does.Both categories of people do not often see the real noveltynot often see the real novelty of biometric identification technologies.

[email protected]

Page 6: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The Biometric Persona

Many ancillary and shadow y ydata can be generated by biometric technologies, in particular by new multimodal

d b h i l bi t iand behavioural biometrics and their potential for misuse is high. But this is quite trivial. Th l ti i b dThe real question is: beyond any risk of misuse, is standard use of biometric technology a danger for liberty and privacy?danger for liberty and privacy? Are biometrics threatening human dignity, as it has been stated by the French CCNEstated by the French CCNE for instance?

[email protected]

Page 7: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

How Biometrics work

[email protected]

Page 8: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

With biometrics you don’t read the body, you generate templates

Biometrics do not make theBiometrics do not make the body readable, not yet reveal any secret mathematic ratio in themathematic ratio in the body, but use your body to generate a code, which is actually created by a specific software. If you change the software youchange the software you create a different code.

Biometric is not Pitagoras or Fib i’ d dFibonacci’s dream made reality.

[email protected]

Page 9: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Don’t confuse

An alphanumeric string

With the golden ratio

[email protected]

Page 10: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Some consequences…q

An importantAn important consequence of my argument is that it is hardly tenable that biometrics are personal datapersonal data

As a matter of fact, a template cannot be equated to a row imagecannot be equated to a row image and when images are not stored there is no real reason to give tothere is no real reason to give to templates the same protection accorded to personal data.

[email protected]

Page 11: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

A second consequence is that…q

Templates should be treatedTemplates should be treated as PIN or other kinds of tokenBiometric templates deserve the same level of protection that we give to any other tokentoken. It is not true that they are token that cannot be changed. It is enough to change the software and you can generate a totally new template from the samenew template from the same body feature.

[email protected]

Page 12: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

In a sense, however, biometrics have a special relation with the bodyIn principle biometricIn principle biometric

identification is based on the idea that there is a bi i l l ti b tbiunivocal relation between a body and its owner.

If the one who has that body isIf the one who has that body is x, you has that body, then you are x

This scheme is highly metaphysical and culturally determineddetermined...

[email protected]

Page 13: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The Body

The body is a culturalThe body is a cultural construction par excellence.The same idea of a “body” is a cultural constructMany cultures do not distinguish the body from the individual and whenthe individual and when they have a word to describe the body, this y,word means “corpse”.

[email protected]

Page 14: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Body

It is difficult indeed to imagine something more remote from an actual human face than a passport photograph “takenpassport photograph taken with a neutral expression”, which leaves only a frozenwhich leaves only a frozen expression whose concrete liveliness evaporates.

[email protected]

Page 15: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

But…

The biunivocal relationThe biunivocal relation between the individual and his body is a and his body is a cultural construct.

1) Demoniac possession1) Demoniac possession2) Suggestion and

hypnosishypnosis3) Brain washing4) Clones4) Clones5) Twins

[email protected]

Page 16: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Can the body lie?

People – and policy makers -People and policy makers naively believe that the body cannot lie about identity.

It is no true. Bodies per se cannot prove identities because identities concernsbecause identities concerns persons and not bodies.

If you change an individual’s mind you change the individual though his body remains identicalremains identical.

[email protected]

Page 17: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

No need of fake identities

For instance if you want toFor instance if you want to overcome a security system, you don’t need

fto create a fake identity, it is enough that you convince someone -convince someone -who is entitled to access - to help you. This is the p yway in which spies have always operated and in which they will continuewhich they will continue operating.

[email protected]

Page 18: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The fallacy that links identification to surveillance

“The chief principle of a well-regulatedThe chief principle of a well-regulated police state is this: That each citizen shall be at all times and places ... recognized as this or that particular person No one must remainperson. No one must remain unknown to the police. This can be attained with certainty only in the following manner: Each one gmust always carry a pass with him, signed by his immediate government official, in which his person is accurately described. p yThere must be no exception to this rule.”

Johann G. Fichte, THE SCIENCE OF RIGHTS.Johann G. Fichte, THE SCIENCE OF RIGHTS.

[email protected]

Page 19: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Rights and Identity

We usually think that the request for proof of identity is q p yan expression of power by the person doing the requesting.

On the contrary IDENTIFICATION IS ALWAYS FOR BESTOWING SOMEONE WITH A RIGHTSOMEONE WITH A RIGHT.

Secure identities are not primarily means to control citizens, on the contrary they are essential instruments to empower themempower them.

[email protected]

Page 20: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Idenfication vs Categorisationg

Absolute powers needAbsolute powers need categories, they don’t need identifiable need identifiable individuals.

The individual is, even in extreme conditions,in extreme conditions, an istance of liberty.

[email protected]

Page 21: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The Convention on the Rights of the Child is the only International Convention that addresses the subject of Identity as a j y

fundamental right of every human being

Article 7The child shall be registered immediately after birth and shall have

the right from birth to a name, the right to acquire a nationality and. g , g q yas far as possible, the right to know and be cared for by his or her parents.

Article 8States Parties undertake to respect the right of the child to preserve

his or her identity, including nationality, name and family relations i d b l ith t l f l i t fas recognized by law without unlawful interference.

[email protected]

Page 22: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Biometric Novelty

[email protected]

Page 23: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Why identification/verification matter today?

The couple citizenship/personal p p pidentity emerged from around the sixteenth century, and is beginning to disintegratebeginning to disintegrate.

Globalization, which is in its essence removal of fixessence removal of fix boundaries, implies weakening of the traditional concept of iti hi d l id titcitizenship and personal identity

based upon the notion of a bounded society.

[email protected]

Page 24: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Unreliable identities

In 2000 the UNICEF hasIn 2000 the UNICEF has calculated that 50 million babies (41% of births worldwide) were not registered and thus without any identitywithout any identity document. Pakistan, Bangladesh, Nepal have

d dnot yet made mandatory child registration at birth

[email protected]

Page 25: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

World Percentage of Unregistred Children

[email protected]

Page 26: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Types of mobile populations

Note: ‘UNHCR population of concern includes refugees, asylum seekers, returnees (returned refugees), Internally Displaced Persons (IDPs), returned IDPs, and others of concern to UNHCR (stateless, those holding temporary asylum, etc).SSources:•Grondin D. and Collett E. (2004) ‘Failing migration health, the case of Tuberculosis’, Business Briefing: Clinical virology and infectious diseases •Trends in Total Migrant Stock: The 2005 Revision. UN Department of Social and Economic Affairs, Population Division. No.: POP/DB/MIG/Rev.2005/Doc. February 2006 •2004 Global Refugee Trends: Overview of Refugee Populations, New Arrivals, Durable Solutions, Asylum-Seekers, Stateless and Other persons of concern to UNHCR. Population and

Geographical Data Section, Division of Operational Support. UNHCR: Geneva. June 2005. Available from: < http://www.unhcr.org/statistics> [18 May 2006] •ILO (2004a) ‘Facts on Migrant Labour’ [Online]. Available from: <http://www.ilo.org/public/english/bureau/inf/download/factsheets/pdf/migrants.pdf> [18 May 2006] •USDS (2005) Trafficking in Persons Report [Online] Available from: http://www state gov/g/tip/rls/tiprpt/2005/> [18 May 2006]

[email protected]

•USDS (2005) Trafficking in Persons Report, [Online] Available from: http://www.state.gov/g/tip/rls/tiprpt/2005/> [18 May 2006]

Page 27: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Estimated Global Mobile Populations

Refugees /uprooted people 22 million (UNHCR 2002)Undocumented Migrants 10 -15 million (ILO 2000)g ( )International Travelers 698 million (WTO 2000)Migrant Workers 70-80 million (ILO 2001)Survivors of Trafficking 700,000-2m (U.S. State

Dept 2002)Dept. 2002)

~ 800 million

[email protected]

Page 28: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

IDENTITY AND THE INTERNET

An increasing number of online li ti i li blapplications require a reliable

means of identification of users. There are numerous examplesThere are numerous examples of such applications including Internet banking, online trading, remote management g, gof confidential databases and access to personal information. The conventional means of id tifi ti ( didentification (e.g.passwords, personal identification numbers) can be easily compromised observed orcompromised, observed or forgotten.

[email protected]

Page 29: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

WORLD INTERNET USAGE AND POPULATION STATISTICS

World Regions Population( 2006 Est.)

Population% of

World

Internet Usage,Latest Data

% Population(

Penetration )

Usage% of Wor

Usage Growth2000-

200ld 2005

Africa 915,210,928 14.1 % 23,649,000 2.6 % 2.3 % 423.9 %

Asia 3,667,774,066 56.4 % 380,400,713 10.4 % 36.5 % 232.8 %

Europe 807,289,020 12.4 % 294,101,844 36.4 % 28.2 % 179.8 %

Middle East 190,084,161 2.9 % 18,203,500 9.6 % 1.7 % 454.2 %

North America 331 473 276 5 1 % 227 470 713 68 6 % 21 8 % 110 4 %North America 331,473,276 5.1 % 227,470,713 68.6 % 21.8 % 110.4 %

Latin America/Caribbean 553,908,632 8.5 % 79,962,809 14.7 % 7.8 % 350.5 %

Oceania / Australia 33,956,977 0.5 % 17,872,707 52.6 % 1.7 % 134.6 %

WORLD TOTAL 6,499,697,060 100.0 % 1,043,104,886 16.0 % 100.0 % 189.0 %

[email protected]

Page 30: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The Identity Revolution

) G) G

Mass of People in transit too huge to be

1) Global Human Mobility1) Global Human Mobility

Mass of People in transit too huge to be handled in traditional ways

2) U li bl Id tit D t2) Unreliable Identity Documents

Too many people without reliable documents.Too many people without reliable documents. Too many unreliable States

3) Global Electronic Mobility) y

Digital Identities, dispersed and globalised

[email protected]

g p g

Page 31: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

Biometric IdentityWITH BIOMETRICS YOU DON’T NEED ANY LONGERWITH BIOMETRICS YOU DON T NEED ANY LONGER A FAMILY, A TRIBE, A CITY, A STATE, WHICH

GUARANTEES WHAT YOU ARE . YOU JUST NEEDGUARANTEES WHAT YOU ARE . YOU JUST NEED A SHARED PROCEDURE, AN ALGORYTHM.

TO CERTIFY IDENTITIES THERE IS NO NEED OF NATION STATES, AND COMPLEX BIRTH ,

REGISTRATION SYSTEMS.

WITH BIOMETRICS, MICROSOFT OR GOOGLE, OR EVEN A SMALL SOFTWARE

HOUSE IN INDIA, COULD DO THE SAME JOB BETTER THAN A NATION STATE.

[email protected]

BETTER THAN A NATION STATE.

Page 32: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

The identity revolution

This is the deep revolutionthat biometrics isintroducing in the historyof human civilization.of human civilization.

Identity management endsy gbeing a matter of localhuman communities, andstart being a globalstart being a globalmatter, which can beruled through shared,global, procedures

[email protected]

Page 33: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

HIDEHOMELAND SECURITY, BIOMETRIC IDENTIFICATION &

PERSONAL DETECTION ETHICS

[email protected]

Page 34: Emilio Mordini ,y p(y) Androids dream of biometric sheeps... · 2008-05-23 · Both hypes and fears that ... data can be generated by biometric technologies, in particular by new

My name

... And I heard... And I heardmy name as if for the first time,

heard it in the wayOne hears the wind or the rain,

but faint and far offA th h it b l d t tAs though it belonged not to me

but to the silenceFrom which it had come and toFrom which it had come and to

which it would go.Mark Strand, 2006, “My name”

[email protected]

[email protected]