Slashdot Mirror


ATM Iris Recognition Coming Soon

Anonymous Cow writes "In Australia, iris technology is already being used by Qantas Airlines, Sydney Airport, foreign embassies, some banks and TAFE colleges, the Australian Protective Services, the Defence Department and the Police Integrity Commission. It is predicted that within five years every ATM in Australia will have iris recognition technology."

51 of 273 comments (clear)

  1. Iris DB by CowboyNick · · Score: 5, Interesting

    But who keeps the database of the eyes?

    --
    -CowboyNick
    1. Re:Iris DB by uk_greg · · Score: 5, Informative

      The financial institution, just like they do with your PIN these days.

      This isn't very different from fingerprint recognition. Chances of the iris changing are pretty slim.

      And if your recognition suddenly stops working for some reason, go to the bank and get rescanned for the master copy.

      Here's a (somewhat dated) story on CNN with more detail.

      CNN Story on iris recognition

    2. Re:Iris DB by rmadmin · · Score: 2, Informative

      What about eye injury? Yeah, I know we have redundant eyes and all. I don't know a whole lot about this technology, but what about the laser eye surgery that inproves your vision? Would something like this make enough of a change to mess up the scanner? But then again, like you said, just go and have the master updated. So I guess its not that big of a problem.

      Oh, except for the fact that (atleast around here) most of the banks are very vulnerable to social engineering. :-)

      Btw: The first thing that came to mind when I saw this was Minority Report. *gets fake eyeballs and steals a bunch of money* :-d

  2. Demolition Man by altek · · Score: 4, Funny

    Oh great, now when someone wants to rob me they dont just stick a pistol in my back they rip my eye out like Wesley Snipes did.

    Excuse me sir, can EYE talk to you???

    --
    THE MAGIC WORDS ARE SQUEAMISH OSSIFRAGE
  3. And I predict longer lines by Anonymous Coward · · Score: 5, Interesting

    I already have a problem with people who don't know how to operate the ATM as it is, now I have to wait even longer as they try to figure out how to hold their head just right for the machine to make a good reading. This will frustrate customers rather than unhinder them.

  4. Why is this bad? by Ars-Fartsica · · Score: 4, Insightful
    ATM transactions already create a full audit trail of your banking habits. At least this way, someone has to steal your eyeball and not just your card and PIN. The audit trail and data mining on your account takes place either way.

    f we're going to live in a database society at least I want some assurance that my identity is proven with more than a plastic card and a four digit password.

    1. Re:Why is this bad? by egoff · · Score: 3, Funny
      I've been doing that for awhile, I've signed with Queen Victoria, Napoleon Bonaparte, Margret Thatcher, and Elvis Presley. In over two years, only one cashier has ever noticed. He stopped me on the way out the door and said "Napoleon Bonaparte?"

      I said "yeah, its a nickname," and the man actually believed me.

      And accepted the payment.
    2. Re:Why is this bad? by shaper · · Score: 2, Interesting

      If your identity is tied to your iris and someone steals that identity (iris image), you have to get a new eye. Bummer.

    3. Re:Why is this bad? by ackthpt · · Score: 4, Insightful
      At least this way, someone has to steal your eyeball and not just your card and PIN.

      My eyeball? Man, I like to think my eyeball is one heck of a lot more important that whatever is in my checking or savings account. Someone carves out my eye and I'm sure I'll not be worrying about mere money.

      (Many years ago I bought a new car. Really sharp and very classy. I was pretty proud and happy to drive it around and show it off. 45 days later I was diagnosed with cancer. The car went from pride and joy to just some object.)

      There's also this thing about totally ruthless people. If they need your fingerprint, they don't think much of cutting off your finger to take it with them. So, what's to stop them from taking your eye? Advances in security are met with advances in criminal technique. Best to keey your eyes in a safe deposit box.

      --

      A feeling of having made the same mistake before: Deja Foobar
    4. Re:Why is this bad? by Greyfox · · Score: 4, Insightful
      Because they have to STEAL your EYEBALL! Christ man, didn't you even think about what you were saying?

      On a more serious note (As if eyeball stealing wasn't serious enough) no security system is perfect. Someone WILL crack that security. Some loophole will be found because some loophole always is. Nothing a human being can make can be perfect. Now imagine the poor guy who has to prove that a string of ATM transactions into his checking account didn't come from him. Everyone will assume that biometrics can't be beat and that guy will have no recourse except to eat his losses.

      Likewise, biometrics can change. How will that guy get his money from ATMs once criminals steal his eyeballs? Lets say for the sake of argument that great advances in eyeball stealing technology are made, to the point where a criminal can just pop them out while you're standing in line at the grocery. One minute you're counting your sausages, the next minute you have no eyeballs. You might not even notice for a couple of minutes. You'd be all like... "Hey... didn't I have eyeballs a minute ago?" Then you go up to the cash register to pay and you can't prove your identity because someone just made off with your eyeballs. Very embarassing.

      From time to time I get into something that causes an allergic reaction that in turn causes some nasty skin peeling on my hands. During that time my fingerprints are completely obscured (You have no idea how much grip fingerprints give you until you don't have them, let me tell you...) If my bank were relying competely on fingerprints for me to prove who I was, I'd be up the creek with no food to by groceries or eyeball stealing equipment until my fingerprints grew back.

      In a nutshell, I don't trust any identifying feature (including social security number) that can't be easily paired with a secret and changed at a moment's notice.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    5. Re:Why is this bad? by gbjbaanb · · Score: 4, Interesting

      Iris biometric devices also require some blood pulsing to be detected as well (as do fingerprint devices) so you cannot use a fancy glass eye, or an amputated eyeball.

      Sorry guys, best go back to the privacy debate on this one.

    6. Re:Why is this bad? by Boatman · · Score: 3, Interesting

      Clearly, you have not heard about the gummy fingers.

      --
      --Just the place for a snark!
  5. Major problem by phaze3000 · · Score: 5, Interesting

    I have a father who is blind. His 'eyes' are made of glass and removeable.

    How exactly is this system supposed to detect him?

    --
    Blaming GW Bush for the Iraq war is like blaming Ronald McDonald for the poor quality of food.
    1. Re:Major problem by Schwartzboy · · Score: 2, Funny

      My concern exactly. Also, what about black eyes, pinkeye, or some sort of serious facial injury or issues with contact lenses possibly inhibiting a correct scan or one of about a billion other variables? I'm not familiar enough with the tech involved to comment intelligently on the things that could mess up an otherwise good iris, but someone with two glass eyes would certainly throw things off for any system I can imagine. Possibly a blood/DNA scan for those people who don't have "valid" irises to scan? Is anyone else thinking that TV commercial with the password/blood sample/hair sample security system on all the office PCs where the entire staff was bald? I have seen the future, and it makes me queasy.

      --
      "Linux doesn't exist. Everyone knows Linux is an unlicensed version of Unix"- Kieren O'Shaughnessy
    2. Re:Major problem by Triv · · Score: 2, Informative

      You laugh, but I've seen braille on drive-up ATMs.

      Yeah, and it's there for three reasons, one silly, two practical.

      The practical reason is that it's cheaper (and/or less complicated) for the companies who make the ATM to only buy one set of buttons. Why bother discriminating between the two?

      Also, how can you be sure the person who's driving the car is the same person who's using the ATM?

      The silly reason is one of standards - certain things must be handicap-accessable regardless of where they are, like there being wheelchair access to government buildings, social security offices and the like. There are no exceptions to the rule, even if the rule makes no sense under some circumstances.

      It reminds me something I read about a town in Jersey that has to employ an elevator inspector even though the town has no elevators.

      Triv

  6. Which means by Apreche · · Score: 4, Insightful

    That there is a database somewhere that matches their eyeballs with their personal information. Sorry, but I'd rather not have another database with my info in it.

    --
    The GeekNights podcast is going strong. Listen!
  7. Re:What if i do by Organic_Info · · Score: 5, Funny

    If I use my card and get my pin number wrong three times the ATM shreds my card.

    If my eyes are wrong will the ATM shred my eyes with a laser. What if some one steals my eyes in a "Demolition Man - Simon Phoenix" stylee and robs my bank account. That could make for a messy robbery.

    I tired and talking crap...nuff said.
    .

    --
    "Things that you own end up owning you" - Tyler Durden (via Diogenes of Sinope).
  8. One question by Lord+Sauron · · Score: 4, Interesting

    Does anyone who already worked with this system know how it deals with color contact lenses ? I assume it doesn't.

    And is there any problem with regular contact lenses ?

    1. Re:One question by joebagodonuts · · Score: 2, Funny

      BUZZZZZZZZZZZZZZZZ!

      That's 2 quesions.

      Sorry. couldn't resist

      --
      "Give a woman two glasses of wine and some pad thai, and they'll agree to just about anything." the Sports Guy
    2. Re:One question by cabraverde · · Score: 2, Informative

      I beleive they work based on patterns in the relative luminance of different parts of the iris (ie disregarding colour).

  9. Not just protecting clients by Badgerman · · Score: 2, Insightful

    Though I'm all behind this (and the additional technologies it'll bring), this is more than just protecting clients - it's protecting the bank.

    Take a look at the Citibank issue. Having advanced security technology like this is a great way to protect your customers - which in turn protects your reputation and protects you from lawsuits.

    I also wonder if this will raise the bar for other institutions.

    --
    "The Sage treasures Unity and measures all things by it" - Lao Tzu
  10. Not quite by tomzyk · · Score: 2, Insightful
    Mr Grimes predicted that Australia's financial institutions would begin adopting iris technology at automatic teller machines within five years.

    BEGINING to use them does not mean that EVERY SINGLE ONE WILL contain it immediately. It could mean that just every time a new machine is created, it will contain this functionality.
    --
    Karma: NaN
  11. Bigbrother is becoming BigDaddy by the_mutha · · Score: 2, Insightful

    Its hard to believe that even after books like 1986 and A Brave New World, people accept this kind of control.

    Its because people accept this kind of control, and think its ok that we will face BigDaddydom in the future.

    I believe in PREVENTATIVE medicine more than in CORRECTIVE medicine... and in the same way, belive that problems should be fought at their source, and not at the consequences.

    E.g. Better educate people better, stimulate production to increase jobs, give away free tecnical education for the poor, than to build more jails, put more cops on the streets, etc.

    1. Re:Bigbrother is becoming BigDaddy by DonFinch · · Score: 2, Insightful

      OK, slow down for just a second. When it comes to banking this is a great idea. The bank already has your name, social, phone, and a miryad of other peices of personal information. This is all protected by a card and one or two pass-nums, or a checkbook. Both of which are very easily stolen, with lower-teir punishments. I'm sorry but since have only the choice of give the bank this data, or use nothing but cash all the time (plus never being able to use an interest-bearing savings account, invest, get a loan etc) I would much rather have it protected by my eye, which is attached to me, and to use illegially would involve either A. Armed Kiddnapping B. Serious assult (de-eyeing) C. Murder, all of which carry SUBSTANTIALLY stiffer penalties than pick-pocketing. There is no need for a tinfoil hat. This is not big brother spying on you. This is them giveing you a better lock and key to protect your data with.

      --
      -- Insert wisdom here:
  12. Lasik surgery by sglafata · · Score: 2

    And let's say I get scanned at an ATM or bank or airport - wherever! And then let's say that I decide I want to get Lasik surgery to "improve" my vision.

    How will the Lasik surgery effect my retina scans? Is the ATM going to think, I am another person?

    --
    "If you can't dazzle them with brilliance, baffle them with bullshit."
    1. Re:Lasik surgery by mstockman · · Score: 2, Informative

      How will the Lasik surgery effect my retina scans? Is the ATM going to think, I am another person?

      LASIK surgery modifies your cornea, not your retina, so my guess it it just won't matter.

      See Lasik Institute explanations for details (perhaps more details than one would like).

      Now, once law enforcement decides to use retinal scans to ID criminals, my guess is you'll probably see a black market in retinal modifications (as well as a lot of blind former criminals).

  13. Fingerprint recognition by ifreakshow · · Score: 2, Interesting

    While in College at Purdue my local bank used finger print recognition on some of their ATMs. I always found this convenient, as I didn't have to carry a card with me. Just stick your finger on the sensor and you have access to your bank account. The only thing that worried me about that was the fact that my fingerprints were then on file. And if I decided to become a criminal they could track my prints. This is why I feel Iris based recognition is so necessary. Who care if a bank knows what your eye looks like? Your certainly not going to leave a trace of that on any ransom notes you write.

  14. Re:Injury/Astigmatism? by Qzukk · · Score: 3, Insightful

    I believe that the pattern scanned is the pattern of blood vessels in the eyes, which is more random than genetically determined except possibly in cases where the eye is malformed.

    Probably to maintain a reasonable sized database they would stick to right eye or left eye, and assume that the person knows which eye to scan.

    I would suppose that they would have a backup ID system in place for people with eye injuries or fake eyes, or whatever other problems.

    --
    If I have been able to see further than others, it is because I bought a pair of binoculars.
  15. I'd hate to see what happens by IWantMoreSpamPlease · · Score: 2, Funny

    I once inserted my ATM card and just after, the machine experienced a malfunction and kept my card (apparently for security reasons)... ...I'd hate to see when happens if the ATM malfunctioned as you were putting your eye to the device...

    --
    So rise up, all ye lost ones, as one, we'll claw the clouds.
  16. Easily defeated by petgiraffe · · Score: 5, Interesting

    Here is how criminals, the paranoid, and people who want to use their wife/boss/mother's account will do so.

    --
    -- The reader anything less than completely failing to not misunderstand this sig is cursed.
  17. Re:That will be cool. by Prizm · · Score: 2, Funny

    No doubt about it. I'd be a bit weary of sticking my eye up to some grungy, downtown ATM and "hoping for the best." I can already see the future of pranks, like catapulting acid into my retina. Ouch.

  18. I'm in the money! by grub · · Score: 2, Funny


    All I have to to is aquire one of Bill Gates' eyeballs and I'll be able to quit my job!

    --
    Trolling is a art,
  19. What if you're blind? by GamezCore.com · · Score: 3, Insightful

    How bout the blind, and or people with damaged/missing eyes? As it stands now, ATM's do have braille support.

    --

    www.GamezCore.com For Hardcore PS2 Gamerz : By Hardcore PS2 Gamerz
  20. Re:And I predict neck injuries by mariox19 · · Score: 5, Funny

    I'm just thinking of the cashier at the supermarket checkout counter, rolling items over and over the scanner until the machine reads the UPC.

    I predict neck injuries!

    --

    quiquid id est, timeo puellas et oscula dantes.

  21. I'd give $20 dollars to... by QwkHyenA · · Score: 5, Funny
    The first person at the front of a long line of folks to walk up to the ATM, do the retina scan, then cup their eye and scream out in pain until the ambulance actually appears...

    ROFLMAO

    god knows, if that were to happen in our little town, no one would ever use that ATM again. FOREVER! Heck, folks here are just beginning to USE an ATM

    --
    LFS. Have you built your system today?
  22. The vendor by fbrehm · · Score: 2, Informative

    If you want to know more about who supplies this technology, go to http://www.iridiantech.com/

    The site has some brief background on the technology and how it works.

    If you want more technical information, go to http://www.cl.cam.ac.uk/users/jgd1000/

  23. What about the wife/hubby/sig other? by beacher · · Score: 2, Interesting

    Maybe I'm kicking a gift horse in the teeth here, but my wife loots my checking account on a fairly regular basis (Share and share alike when it's my wallet but not her purse.. I still haven't figured that out) I'd like to have the extra control on my card to lock out people that do have regular access to my wallet.

    On the other hand, if I get thrown in jail or put in the hospital, she isn't going to be able to get to the funds to get me out.

    A joint checking account is not a viable option unless I want to live in a cardbaord box.

    Interesting quandry.
    -beacher

  24. How often is your info even compromised? by antinous57 · · Score: 2, Insightful

    With all the times you use your atm card, in all the different locations, how often do you find yourself calling up the bank and having to report fraud on your account because of someone stealing your card and pin number? If these things happened often ATMs would not have become such a necessary convenience. I know in the past 10 years when ATMs have really been readily available my account has never been compromised due to me losing my card and someone finding my pin, and I'd say that is the same for most people. Isn't that why most banks offer fraud protection anyways??

  25. No. really. they *won't* scan me. by Frymaster · · Score: 5, Insightful
    the problem with this is that carrying your id is now mandatory. i have a driver's license. it demonstrates to the authorities that i am qualified to drive. when i am not driving i do not carry my driver's license with me and i do not show it the police when i am not accused of a driving violation. i have a social insurance number. it is only to be used for taxation purposes. i give the number to no one else for no other reason. they have no need nor right to ask for it.

    with iris recognition these two pieces of id are always on me.

    1. Re:No. really. they *won't* scan me. by da · · Score: 2, Insightful

      The problem with id is not what problems it causes now, but the potential for it's abuse. Sure, our current governments would never dream of misusing the data that are held about us, but what about when a democratically elected government, e.g. the Nazis in pre-war Germany turns out to be a bunch of loonies who want to persecute those who disagree with them, and those who just happen to offend their arbitary prejudices. Then, you are in BIG trouble, unless you are a Nazi... So it is very important that these issues are taken serious, and not treated with the "well I've got nothing to hide, you must have" mentality...

      --
      I reserve the right to be wrong.
  26. Cost benefits, people by Anonymous Coward · · Score: 2, Informative

    While it would seem that iris would be a great biometric secutity device for ATM machines, it turns out that there is absolutely no way to make it pay off. If you look up the statistics it turns out that the average ATM fraud in the US per ATM machine per year is something like $50. As a result, even a really cheap iris scanner becomes hard to justify putting in EVERY single ATM out there. I doubt the fraud cost is much higher in Australia....

    This is not meant to knock iris biometrics. I think they are probably the only real sensible one out there. The false pos/neg of stuff like face recognition is truly a joke...

    The primary manufacturer of iris scan devices is:
    http://www.iridiantech.com

  27. Low-down ATMs! by MaestroSartori · · Score: 2, Informative

    Dunno how many of you have this problem, but I find that many ATMs are far too low to use comfortably. I'm 6' 2" tall, which isn't too huge for where I live (the UK), but I still find that most ATMs require me to bend fairly low in order to read the screen. There's one near my house that needs me to bend over like I'm about to take it up the ass. Hopefully when this takes off round here, the scanner will be placed in a nice and easy-to-use position for everyone (ha!)

  28. I already see a problem for lazy parents with this by Phelan · · Score: 2, Interesting

    So what about lazy parents that need money and have Junior go grab his car and take Dads ATM card to the Bank and get him some money from the machine, used to have to run that errand frequently for my parents. This new system while creating better secuirty is also going to cause quite the hazzel.

    "Nimis exalatus rex sedet in vertice - caveat ruinam!"

    --
    "Nimis exaltatus rex sedet in vertice - caveat ruinam!"
  29. how they work by Hubert_Shrump · · Score: 2, Informative

    FWIW --

    Iris scanners check to make sure the pupil moves and the eye is made of liquid BEFORE doing other checks, so a screenshot isn't going to help.

    They do a neat little radar-screen-like scan, transforming a circle into a 2D map. That 2D map is what's compared. I would make a stab and say it's difficult to reconstruct the iris from the map.

    Iris scans (as of right now) have the lowest failure rate of any biometric. They're better than fingerprints because the iris is behind the cornea, so it's less likely to be damaged or changed than the fingers - which are always going places they probably shouldn't.

    HAND

    --
    Keep your packets off my GNU/Girlfriend!
  30. Re:Laser Eye Answer by Anonymous Coward · · Score: 2, Interesting

    Laser eye surgery scratches the cornea. Not the iris, which, although the colors may change during your life, or even during the day, the patter of light vs. dark remains constant.

    I seem to recall reading somewhere that babies seem to have large eyes because they do. Their eyes are the same size as adults' eyes, just in their smaller cranium.

    -Xoder

  31. Three Pillars of Security by Sgs-Cruz · · Score: 2, Interesting

    I read somewhere (and I think it's a great idea) that all good security should have three things: something you have (in this case, your ATM card), something you know (in this case, your password), and something you are. This iris recognition completes the triangle. With all three of those systems in place (you need a card, password, and you have to be the right person) it gets quite hard to get at someone's money unlawfully through an ATM. Assuming (and yes, this is a HUGE assumption) that the database is kept securely, then this is good news.

    --

    Karma: pi (Mostly due to circular reasoning in posts).

  32. I'll keep my PIN thanks. by cosmosis · · Score: 4, Insightful

    Maybe I'm just paranoid, but I'll be damned if I submit to biometric identifiers to bank. It is afterall MY bank account that is insecure, not anyone elses, if I decide to remaim with using a so-called less secure PIN method. And only I to blame if someone steals it, which by the way has not happened once in all the years there has been a PIN number. I've been using ATM's since they were first introduced, and not once, have I had any security breach on my accont. Your crazy, if I'm going to let some corporation get their hands on my unique biometric identifiers which they will most likely sell to other companies. Before you know it, my biometric date will be on hundreds of databases outside of my control. My identity, both analog and digital is my own. Period.

    Planet P Blog

  33. It's all fun and games... by FFFish · · Score: 2, Funny

    ...until somebody loses an eye!

    --

    --
    Don't like it? Respond with words, not karma.
  34. Hygene? by Zepalesque · · Score: 3, Interesting

    Does this mean I need to stick my eye up to a cup-thingy like at the optomatrist? ATM's get handled all the time, all day long. Seems like if not built properly, such a device could promote the spread of the common cold :(

    *cough*

  35. Please provide sources if this is the case by Palshife · · Score: 2, Interesting

    Iris biometric devices also require some blood pulsing to be detected as well (as do fingerprint devices) so you cannot use a fancy glass eye, or an amputated eyeball.

    Can you back this up with anything? According to this article the iris is recognized by a single snapshot, not a "scan". How then could you determine if blood were flowing or not?

    Every fingerprint ID device I've ever seen is comprised of a clear plate and a scanner. You could press a ham against it and it would take its picture.

    Links? Support? Shooting things down arbitrarily doesnt fly with me.

    --
    Attention deficit disorder is a complicated issue, spanning several major... HEY LET'S GO RIDE BIKES!
  36. already experienced the long lines... by Art+Popp · · Score: 2, Interesting

    The serverlocker my servers are in is retina-scan protected. The device that does the trick requires precise alignment to get a good scan, and every other time I have to do it twice. If there are three people in front of me I can just sit down on the edge of my briefcase because at least one of them is going to have a problem. Most of the delay after getting successive good scans is in the scanning device looking up the eye in the database 30-50 seconds, then it reject you you align your head again, scan, and wait another 30-50 seconds.....

    Ugh.