Slashdot Mirror


Registered Traveler Program Open For Business

storem writes "Enrollment into TSA's Registered Traveler program started yesterday at Minneapolis-St. Paul International Airport. Frequent flyers are given the opportunity to sign up for a fast-track system using biometrics to identify themselves. It seems this is pretty much the same system tested in Europe in the s-Travel program. There frequent flyers carried their biometric identifiers (fingerprint & iris) with them between airports on a smart card (privacy reasons)."

41 of 262 comments (clear)

  1. Hmm.. by Zardus · · Score: 5, Insightful

    If they carried their information with them on a smartcard, couldn't someone edit the smartcard and fake their info?

    --
    You can mod your friends, you can mod your nose, but you can't mod your friend's nose.
    1. Re:Hmm.. by gregfortune · · Score: 5, Insightful

      Not if the data is altered and encrypted by the airlines each time it is accessed. Good luck ending up with the random set of bits that represents someone with a good flying history...

    2. Re:Hmm.. by aixou · · Score: 2, Insightful

      Yeah, thats awesome.

      We try to get away from cards because of inherent insecurity, and now we entrust biometric info to a card. When will it end?

      Imagine if you were able to bring your own background information with you when you were fingerprinted.

      I thought the purpose of biometric security was to have a database of info about people, not to verify that they are infact the true owner of a card.

    3. Re:Hmm.. by WiPEOUT · · Score: 5, Insightful

      This is how I'd envision it working:

      1. your biometric details are stored on the smart card
      2. your flight history is also stored on the smart card
      3. each time you use the card, it reads biometric data on the card, checking it against that read from you by fingerprint/iris sensors
      4. then, it reads all information on the card and MD5/SHA1 hashes it. If it matches the hash stored in the database, and if biometric data checks out, it adds current flight information/status to the card, calculates an updated hash (including the new information), and stores this hash (which is propagated to other airports)

      This way, your biometric data and flight history is never stored by the system, maintaining your privacy, but is available from your card as necessary. Your card cannot be forged as the hash will be different if any bit of data on your card is changed, and will not match that on record.

    4. Re:Hmm.. by halowolf · · Score: 4, Insightful
      Corruptible employees of said airlines or the owners of the company that maintains the airlines card information.

      A bribe here, some blackmail there and viola, a fake card or worse.

    5. Re:Hmm.. by fatgeekuk · · Score: 2, Insightful

      I started this message very critical of the system as it currently stands, but in writing this comment, I have reviewed the ultimate goals.

      There are ways to crack or spoof this system. It is far from secure and should not be considered by anyone as foolproof.

      It is a compromise between security and personal freedom and as such may serve neither.

    6. Re:Hmm.. by psoriac · · Score: 2, Insightful

      This way, your biometric data and flight history is never stored by the system, maintaining your privacy, but is available from your card as necessary.

      You must be new here...

      In all seriousness, do you for one second believe that the current government security agencies under Bush gave any thought at all to protecting your privacy? Your entire flight history including biometrics is probably stored, unencrypted, in some government database from the moment you sign up until your death. And probably well beyond that.

      --
      I browse Slashdot at +3, Funny
    7. Re:Hmm.. by Mark+Pitman · · Score: 2, Insightful
      Corruptible employees of said airlines or the owners of the company that maintains the airlines card information. A bribe here, some blackmail there and viola, a fake card or worse.

      So how is that any worse than what can happen today? There will always be someone to bribe to get what you want, no matter what system is in place.

  2. Rising cost of terrorism by Doc+Ruby · · Score: 5, Insightful

    Now planebombers need to practice their routes more than before, establishing their frequent flyer status. Their biometric IDs will ensure that only the suicidal dupe is making the runs. At least the final flight will be recoupable in earned mileage. Saudi oil billions will buy only so much air travel.

    --

    --
    make install -not war

    1. Re:Rising cost of terrorism by SideshowBob · · Score: 4, Insightful

      Hmm. Maybe the U.S. could, I don't know, improve its relationship with the rest of the world to the point that they don't want to kill us all?

      Some ideas:

      1. Avoid installing or supporting despotic dictators that repress their own citizenry and exploit the resources of their nation for personal gain.

      2. Avoid bombing the crap out of countries that haven't attacked us.

      3. Avoid making up intelligence about other countries and then using that fake intelligence as an excuse to invade them.

      4. (It really amazes me as an American that it has come to the point where we have to even talk about this, but) avoid torturing citizens of other nations.

      Just a few pointers, hopefully that will get us started in the right direction. Maybe its time to get back to that whole idea of making the world a better place and promoting liberty and democracy by setting an example?

    2. Re:Rising cost of terrorism by More+Trouble · · Score: 2, Insightful

      What do you suggest the government do instead or in addition to this?

      Do about what? Do you seriously think that someone could successfully pull off another 9/11 style attack? The world changed a few minutes after it became common knowledge that hijacked planes could be used as missiles. Witness the UA flight 93, crashed by the hijackers when passengers learned about the WTC and Pentagon planes. Or how about this crazy?

      So given how hard it's become hijack planes, what exactly is the point of this tracking system?

      :w

  3. How does this help? by tarunthegreat2 · · Score: 5, Insightful

    If your aim is to use the plane as a suicide bomb, will it matter to you if are fingerprinted? The people who were behiond 9/11 weren't known terrorists/criminals. They were quiet people, under the radar....

    1. Re:How does this help? by gregfortune · · Score: 3, Insightful

      It doesn't.

      It does establish your identity though and reduces the time necessary for that task. Now, what might the airline do if it had some extra time for each person?

    2. Re:How does this help? by bgeer · · Score: 4, Insightful

      Exactly. Now all the terrorists have to do is get into the registered traveler program and since they're searched less thoroughly they'll have a very good chance of sneaking weapons in. This system nearly the same as CAPPS, the only difference is that terrorists will definitively know that they've been whitelisted and will therefore be even more confident that they can bring weapons with them. Since this system still relies on whitelisting, the Carnival Booth argument still applies and this system is still weaker than random searches.

    3. Re:How does this help? by tftp · · Score: 5, Insightful

      The airline will then fire half of its clerks.

    4. Re:How does this help? by tftp · · Score: 3, Insightful

      It is supposed to be compensated by more stringent checks before you get into the program. In other words, suspicious (?) people won't be allowed to join. On the other hand, majority of suicide bombers never attack twice...

    5. Re:How does this help? by NanoGator · · Score: 4, Insightful

      "If your aim is to use the plane as a suicide bomb, will it matter to you if are fingerprinted?"

      Where in the article does this promise to make terrorism harder?

      --
      "Derp de derp."
  4. nice try by corian · · Score: 2, Insightful

    There frequent flyers carried their biometric identifiers (fingerprint & iris) with them between airports on a smart card
    Actually, we carried our biometric identifiers on our FINGERS and our EYES. That's the whole point, you see?

    1. Re:nice try by aggiefalcon01 · · Score: 2, Insightful

      There frequent flyers carried their biometric identifiers (fingerprint & iris) with them between airports on a smart card.
      Actually, we carried our biometric identifiers on our FINGERS and our EYES. That's the whole point, you see?

      That's what I'm wondering about. Since we carry our fingers and eyes with us, why is a card necessary? A card can be manipulated, probably more easily than someone can fool a fingerprint/iris scanning machine with an airport agent watching.

      Aside from creating a fast-track for a few people, how does this help things?

      --
      Global warming is neither science, nor politics. It is a religion.
    2. Re:nice try by RollingThunder · · Score: 3, Insightful

      From the sound of the phrasing (I haven't RTFA), it would seem to me that the card is a relational link between your biometrics and the record in the database.

      Without the card, they can't peg that ID number 481453 is John Smith. That's the privacy aspect.

      The card has your biometrics on it to let them verify that you are the proper bearer - they compare it's digital copies of your biometrics to the real deal, then they know that you actually are the person that 481453 refers to, and so the green light actually applies to you.

      As I say, that's just how I interpret the submission. It's probably totally wrong.

    3. Re:nice try by tftp · · Score: 3, Insightful
      The card is necessary because it's awfully expensive to check relations of one pair of eyes against 260,000,000 pairs of eyes. You'd need a lifetime to do that.

      However if the card says "I am John Smith, iris 0x1234ABCD5678FEDC" then it is trivial to pull the said iris' pattern out of the central database and check your real eyes against that trusted copy. By changing the direction of search they simplified the task immensely.

      Besides, right now there is no central d/b yet, and all passengers carry their pieces of the database with them. This won't last, though - it is far more practical to have the database centralized. Then even a nudist can fly, as long as he remembers his SSN. Maybe that's the whole point, after all :-)

  5. Nice that it's an option by gregfortune · · Score: 2, Insightful

    The only problem with an optional service that has an advantage over the standard service (ie, shorter lines...) is that it might become the defacto method over time. If enough people agree to the tracked biometrics, the entire system will inevitably switch over to biometrics.

    And I'd probably defect to the "convenience" side myself if I were flying fairly often. Not really that different than the privacy invasion I tolerate for using a credit card. Boy do we pay for our conveniences in the long run...

  6. Re:Frequent flyers- such as international terroris by genixia · · Score: 5, Insightful

    No, the hidden subtext is "We really want to make this compulsory but cannot. So we'll give people the chance to opt in and over time make it really inconvenient for those who choose not to until eventually everyone opts in just to avoid the hassle."

    Been through a fast-lane enabled toll booth recently? The cash lanes are getting fewer and slower all the time.

  7. Re:Frequent flyers- such as international terroris by gregfortune · · Score: 2, Insightful

    But they'll still know he is that businessman from the Middle East rather than a random dude who decided to pose as a business man. Establishing identity is a cruicial step in any security system and while it doesn't solve the problem directly, it will help reduce resources needed to establish identity. It also raises the bar for the terrorists a tad.

  8. Here's an idea by Neo-Rio-101 · · Score: 2, Insightful

    I suppose this is a consolation for having REALLY LONG security lineups in the US, but I can't help but wonder....

    Rather than concentrating on doing things to secure planes from mad people, shouldn't we concentrate more on doing things to make mad people NOT want to blow us all up?

    --
    READY.
    PRINT ""+-0
    1. Re:Here's an idea by NanoGator · · Score: 2, Insightful

      "...shouldn't we concentrate more on doing things to make mad people NOT want to blow us all up?"

      Like caving in to extremist demands?

      --
      "Derp de derp."
    2. Re:Here's an idea by Anonymous Coward · · Score: 2, Insightful

      I wish we could. The problem is that the people who want to blow us up want to blow us up because they believe God told them to. There's not a damn thing you can do about that. There is no rationality here...there's no "let's sit down and talk about it, and you'll see God doesn't really want you to kill people."

      Before this, we fought the Soviets. Well, that was a political system. There was nothing sacred there. Eventually, the people came to realize that a capitalist democracy is superior to a communist totalitarianism. Changing political and economic systems is easy. Changing religious beliefs is difficult, if not impossible.

      Islamic fanatics are about as likely to come to the rational decision that we can all live together in peace as a southern Baptist is likely to rational decide that homosexuality is no threat to his marriage or society in general.

      Part of the problem is that Islam is not just a religion...it's an entire way of life. Mohammed was not just a prophet. He was also a military commander, and a statesman. The Koran doesn't just tell you how to worship Allah...it also tells you how to structure your government, and how to run your household, and how much you should charge for goods and services.

      Ultimately, the problem is that Islam never had a reformation. There's not much difference between Islam today and Islam of the middle ages, whereas Christianity and Judaism today are vastly different than they were in 1500. Notice we're not burning people at the stake anymore. The Christian world came to the conclusion that, in general, church and state should be separated, and can live together in peace. With Islam...no such thing.

      That's not always the case, of course. There are peaceful Muslims. Turkey is the world's only secular democracy that is primarily Muslim, and they do pretty well. However, that's the minority, sadly. The majority opinion in the Islamic world is that Westerners (not just Americans, mind you, but all decadent Westerners) need to convert or die. I don't know about you, but I'm not converting. So, we've got two options: tear down Islam, or kill the militant Muslims. What's your choice?

    3. Re:Here's an idea by Neo-Rio-101 · · Score: 3, Insightful

      No. More like "Stop being assholes".

      I never heard of any prior and specific demands when those planes hit the WTC. I figure that they simply couldn't be bothered asking and having to go through the ordeal of taking hostages - knowing full well the US wouldn't give anyway.

      --
      READY.
      PRINT ""+-0
  9. Watch out by tftp · · Score: 2, Insightful

    Within a few years this "innovation" will be mandatory, and nobody will be allowed to fly without it.

  10. Client-Side Vs. Server-Side by mp3LM · · Score: 2, Insightful

    I think keeping the information closer to where it is used is much better. They could simply have a card with a persons ID#, and then when they go...they put the card in, give and iris and fingerprint scan. That way we don't have to worry about it being hacked.

    I believe every programmer knows that giving variables to the client are less safe then keeping them on the server, even beginners such as myself.

  11. Re:Frequent flyers- such as international terroris by kfg · · Score: 4, Insightful

    Raise the bar high enough that everyone's equally suspect and no one stands out as a suspect either. We're right back where we started, except more repressive. In a sense this makes things easier on potential terrorists as the rules are more overt, rigid, and thus defined and gamable.

    Raise the bar higher and everyone is treated like a criminal, but the criminals are the only ones that don't mind.

    KFG

  12. Israel Already Does This... by Landaras · · Score: 4, Insightful

    I'm a little surprised that no one has mentioned that Israel has been offering a "trusted traveler" program since 1996.

    Regardless of your politics or religion or whatever, you have to admit that there are few countries that have to deal with terrorism on a more daily basis than Israel.

    And it appears that Israel's voluntary program has also been effective on a logistics level. I found this quote via Google, from the page of Sen. Hutchison (R-TX) referencing a report by the General Accounting Office :

    At Tel Aviv's Ben Gurion Airport, security waiting time has been reduced from approximately one hour to 20 seconds through the use of biometric identifiers.

    The biometric identifiers mentioned are part of the "trusted traveler" program.

    As long as any program such as this is not compulsory, I view it as a useful option.

    - Neil Wehneman

    1. Re:Israel Already Does This... by Jah-Wren+Ryel · · Score: 4, Insightful

      Regardless of your politics or religion or whatever, you have to admit that there are few countries that have to deal with terrorism on a more daily basis than Israel.

      And regardless of your politics, you have to admit that there is no country that has been more spectacular at failing to solve their terrorism problems than Israel. For all their logistical ability, Israel is on the top of list of countries that we should avoid emulating when it comes to actually dealing with terrorism.

      --
      When information is power, privacy is freedom.
    2. Re:Israel Already Does This... by _Spirit · · Score: 2, Insightful

      Your reply might have some merit, but it has nothing to do with the case in point, which is stopping a terrorist from boarding a plane and wreaking havoc. Israel has been pretty effective there.

      --

      beauty is only a light switch away

  13. That's not possible by The+Tyro · · Score: 4, Insightful

    Nobody is liked by everyone... the diversity of ideas and viewpoints on a planet with multi-billions of people will absolutely ENSURE that someone, somewhere, hates you. Besides, does being unpopular justify violent action?

    Just a couple of comments.

    1. Fair point... I'll grant you this one.

    2. In the right circumstances, I fully support preemptive war, just as I endorse police officers not waiting until they're shot at to shoot back (as a former SWAT officer, I've personal experience with this one). Giving your enemies the first punch is stupid; I can't see sacrificing lives on the basis of either indecision or moral cowardice.

    3. Intelligence is often nothing more than a best guess. Occam's razor may be appropriate here... don't attribute to malice that which is explained by simple incompetence.

    4. Avoid torturing? Good advice, and probably followed by the vast, overwhelming majority. But defining torture... and whether it's ever permissible is a great debate. Rhetorically, a case can be made for torture in some circumstances (if a terrorist knew where a nuke was, and refused to divulge that info, is torture justifiable? Does the tiny private moral victory of "I'm a good person... I don't torture others" drown out the screams of the millions you might be sacrificing by staying within your own moral comfort zone?) I honestly don't know the answer to that one. As technology progresses, and the technological bar to enter the nuclear-club gets lower and lower (and as nukes proliferate, ala AQ. Khan), that scenario becomes plausible... Seriously... what would you do?

    --
    Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.
  14. Why This Solution Really Sucks by Jah-Wren+Ryel · · Score: 4, Insightful

    So far it seems no one has pointed out the flipside of this "solution" and the social problems that follow. I'm talking about the effect it will have on the people who sign up and use it, instead of worrying about the system's effectiveness at discouraging terrorism (which is an altogether very important risk) I'm talking about its effective on our nation's social structure.

    Without a doubt, some of the earliest users of this system will be the political class. Right now we are suppossed to be subject to random searches (as well as an apparently random no-fly list, but that's another topic). This condition means that potentially anyone, all the way up to the speaker of the house and the senate majority/minority leaders must entertain the possibility of being subjected to random search and all the inconvenience and embarrasment that goes with it.

    There have been countless stories in the news of big famous celebrities and big important rich white politicians being subject to "pointless searches" since everybody knows they aren't terrorists. Well, besides the fact that some of these people are clearly off their rocker to begin with, at least being subjected to a search is equalitarian or in other words, it's "keeping it real," for those who make the rules too.

    Once all the big fat important people effectively opt out of the hassle of searches, only the occasional flyer, the average joe and his poorer cousin, who still make up the majority of passengers, will be subject to the hassle of searches. The people in power will no longer have to live with the consequences of their (assinine and useless) "security" while the rest of us will still bear the brunt of it.

    The next logical step is for "security" measures to be stepped up one little bit at a time because, after all, what politician wants to be seen as "soft on terrorism?" More thorough and invasive searches adding, say, 20 minutes to your wait time -- not a problem on paper since we are all expected to get to the airport 4 hours before departure, so there is plenty of time for extended and more frequent searches (yeah right). Since the very people who will inevitably be tightening the screws on the thumbs of general public will never feel the pressure themselves, it makes it that much easier for them to fuck with us with impunity.

    On the plus side, the database of people in this program is certain to be a high-value target for identity theft. If security on the data is handled by the same people responsible for airport (in)security, then we can look forward to a successful break-in and theft of the database and all the personal information contained therein. Maybe the fallout from such a theft will be enough to get some effective data privacy laws passed in this country. But I'm not holding my breath.

    --
    When information is power, privacy is freedom.
  15. Oh puh-lease by Moraelin · · Score: 4, Insightful

    Let me tell you something about torture.

    It's only good for one thing: getting some innocent bugger to "confes" anything you want to hear, so you can then hold a fake trial and execute them. That's why it's been used so much for the last 10 millenia or so, and is still loved by dictators.

    Think just of the _millions_ (literally, and we even have the records) who confessed to flying on broomsticks, having sex with the devil, summoning vile demons and plagues, signing pacts in blood with Satan, etc, at the hands of the Inquisition. Stuff that isn't even physically _possible_, but enough torture got that crap "confessed" anyway. That's the kind of bullshit that torture produces.

    You get a fellow snug on a rack and torture them enough, they'll tell you any _lie_ you want to hear, just to make it stop. You just have to bring them to the point where even death looks like a nicer alternative.

    But for actually obtaining _intelligence_ it's fucking useless. What you get is whatever _you_ had already decided you want to hear, not trze information you didn't know. I.e., you could just as well just act on your mis-conceptions and prejudice, and spare the torture part, since you'll get exactly there anyway.

    So you know what will actually happen in your "terrorist with a nuke" scenario? You'll torture some innocent arab who probably didn't even like the fundamentalists at all in the first place. And you'll keep torturing him until he tells you whatever false "confession" you wanted to hear, just to make the pain stop.

    Will you find your nuke? No fucking way. But now you have a "confession" so you can execute or deport an innocent.

    Well gee... if that's what the "land of the free" is supposed to mean...

    --
    A polar bear is a cartesian bear after a coordinate transform.
  16. Convenient? Perhaps - but where's the security? by putaro · · Score: 2, Insightful

    The problem with the whole airline security mess is that they are trying to secure a very large area with the goal being to keep out less than 1/1000 of 1% of the people - and that group of people is not known. It simply doesn't make any sense. Military bases and other secure areas work by keep out 99% of the population and those who are allowed in are reasonably well checked. Trying to keep out an unknown .001% is impossible.

    The old system worked reasonably well. During the 9/11 hijackings no guns, bombs, chemical mace, swords, stun guns or other major weapons were used. The security system worked. The failure wasn't in the security system - it was in how the flying populace was trained to react to a hijacking. Five guys with box cutters will not be able to take over an airplane again.

    This new measure will make it easier for frequent flyers to put up with the current nonsense, allowing the TSA to perpetuate itself while offering no real security. There is no way you can keep hijackers off an airplane because YOU DON'T KNOW WHO THEY ARE. We have been successful in keeping them from having any major weapons. That, combined with the new attitude passengers will take towards hijackers are sufficient.

    The next terrorist act in the U.S. will not involve airplanes. That barn door doesn't need any more shutting.

  17. I'll tell you a little secret by Moraelin · · Score: 2, Insightful

    European countries already have to deal with terrorist attacks every year. E.g., see the bombing in Spain. I'm sure I've seen mentions of it even on tech sites.

    But you know what? We still didn't devolve into a scared mob led by aggressive retards. We also didn't use it an excuse to either torture people or invade muslim countries for oil. We didn't burn mosques down, nor deport random arab-looking people each time someone detonated a bomb.

    So get over it. The whole "oooh, scary terrorists, let's let the government fuck us 7 ways to sunday" scare in the USA just make me laugh. And the funny coloured alert level codes each time someone thought the neighbour's cat acts funny, really give me the fits of laughter.

    You haven't even seen a fraction of the terror attacks the rest of the world has seen. You know how many terror attacks you've had in the USA last year? Exactly _zero_. Nil. Nada. Zilch. Nix.

    And you still use that piss-poor excuse to justify torture or giving totalitarian powers to an illiterate retard. (Bush Jr.) You want to torture innocents for what? For a terror threat you _don't_ _even_ _have_? Geeze...

    Here's an idea: those constitutional rights are there to protect _you_. If you let a retard take that away from you, in the name of a bogus terrorist scare, it is _you_ who'll have a problem, not the terrorists.

    Here's another idea: How about taking a hint from the rest of the world already? You're the mightiest nation on Earth, for fuck's sake. Might as well finally start acting that way, instead of screaming in terror each time Bush Jr scared himself by thinking about the bogeyman under his bed.

    --
    A polar bear is a cartesian bear after a coordinate transform.
  18. Why bother? by nursedave · · Score: 2, Insightful
    The thing I can't understand is, why bother? I've travelled internationally several times since our 'security' was 'heightened,' some from Saudi Arabia even, and I can't tell what it is that this smart card is supposed to do for me. I would hope that certain security measures would be made irregardless of having or not having a card. I've had to go through metal detectors, bomb sniffers, my luggage x-rayed, my passport scanned to ensure it was legit and not stolen, etc.; all things I would hope would happen if I did have one of those fancy-pants cards.

    Guess I'm just missing something; I've not felt like security was too big a pain in the ass anyway.

    --

    The Democratic Party: We've been pussies since 1968!

  19. Think of the (frightening) possibilities... by gschwim · · Score: 2, Insightful

    Think of the things to come from this wonderous technology. I *really* can't wait until I can pay for things by fingering a nearby cash register... er, biometric validation register...

    Sheesh... how long until we start seeing information from this system used against *us* (the NON-terrorists) in court? It's already being done with EZ-Pass and the like. ("Yes, your honor, it was my finger that purchased those condoms...")
    This only makes it worse...

    I think it's time for a one way ticket to Antartica!