[118552] in Cypherpunks
Biometrics: You're In The Army Now
daemon@ATHENA.MIT.EDU (Anonymous)
Fri Oct 1 22:05:54 1999
Date: Sat, 2 Oct 1999 03:34:04 +0200 (CEST)
Message-Id: <199910020134.DAA28926@mail.replay.com>
From: Anonymous <nobody@replay.com>
To: cypherpunks@toad.com
Reply-To: Anonymous <nobody@replay.com>
<http://www.gcn.com/vol18_no32/news/702-1.html>
The service wants to eliminate passwords for verifying users
By Patricia Daukantas
GCN Staff
The Army will investigate biometric recognition devices as a way to reduce or eliminate password use for accessing computer and weapons systems.
Commercial biometrics can be leveraged for military systems, said Phillip Loranger, a division chief at the Army Information System Security Office in the Directorate of Information Systems for Command, Control, Communications and Computers.
The Army wants soldiers to have unique identifiers that cannot be stolen or forgotten. ÒWe need to dump the way we do passwords,Ó Loranger said this month at a meeting of the Biometric Consortium in Arlington, Va.
The service approved the study early this month and is kicking it off with fiscal 1999 year-end funds. Loranger declined to put a price on the effort, which he will lead. He said the study, slated for completion by spring, will consider the legal and sociological implications and the feasibility of large-scale biometric recognition for Army systems.
Iris recognition, in which an imaging system scans the pattern of an eyeÕs iris, will be the first technology studied. It has an edge over fingerprint and voice recognition, Loranger said, because it works even when someone is wearing protective headgear.
ÒVoice doesnÕt work through a gas mask,Ó Loranger said. ÒFingerprints canÕt be taken through rubber gloves.Ó He said recent innovations allow iris recognition through plastic face shields and eyeglasses.
The system uses a small imaging device, not unlike a digital camera, that plugs into a PC and compares a userÕs iris image against stored patterns of known users.
The study will also examine fingerprint and voice recognition. Loranger said the Army already collects soldiersÕ fingerprints. The recognition tools for desktop PCs cost $100 to $2,000, he said, and can be built into keyboards, mice and notebook computers.
Voice recognition systems can work either at desktop systems or over dial-up lines, re-quiring only a microphone and a sound card.
The study will examine setting up an Army or Defense Department center for biometric technology. ÒYou couldnÕt find a better test bed anywhereÓ than the Army, Loranger said, because its computers run at least 17 operating systems, including legacy OSes.
Too hard
He acknowledged that some systems still will require passwords, at least with todayÕs technology. But asking soldiers to remember multiple eight-digit, randomly generated pass codes is Òhard security,Ó Loranger said. ÒThe easier you make reliable security, the better that security will be.Ó
He said he is more interested in integrating off-the-shelf technology into military systems than in conducting an extensive development effort from scratch.
Loranger said he envisions a time when biometric recognition will even be integrated into the handgrips of guns to prevent unauthorized use. ÒAll it takes is time and money,Ó he said.
