Face recognition among tools to guard technology
For the London Free Press – June 30, 2008
The Ontario Information and Privacy Commissioner’s 2007 annual report outlines the efforts undertaken by the IPC in promoting privacy enhancing technologies.
Some IPC initiatives include: privacy by design, secure technologies, biometric encryption and private face recognition.
One way the IPC promotes data security is to offer guidance for effective privacy design. The idea is to consider privacy issues early in the design of new technology and address them as part of the design. The IPC stresses that minimizing the quantity of personal information sought will minimize the likelihood of the data being lost or misused.
The IPC also encourages individuals to get involved in managing their own personal information.
In the report, the IPC supports the use of secure technologies, such as encryption. The idea behind encryption is that collected data will be unintelligible unless a decryption tool is used.
“As long as the passkey is kept secure, the encrypted data cannot be viewed in ‘plain text’ format, even if intercepted,” commissioner Ann Cavoukian says.
Privacy commissioners are strong advocates of encryption. The challenge, of course, is to manage the passkeys.
Using fingerprints or iris scans to recognize and verify someone’s identity, a technology referred to as biometric encryption, is also recommended by the IPC. But while accepting that BE improves the security of information systems, the IPC also has voiced concern with this type of technology; specifically, the ramifications if this type of technology is misused.
For example, because of the nature of the data collected by BE, there’s always the potential for discrimination or identify theft. The key is to use the technology without creating a master database of actual fingerprints or scans, as the consequences if that was ever compromised would be huge.
One of the most interesting initiatives discussed by Cavoukian in her 2007 report is private face recognition (PFR). This technology is being explored by the Ontario Lottery and Gaming Corp., but has not come into effect.
PFR makes use of facial biometrics in identifying an individual. Ontario Lottery and Gaming is looking at whether this technology should be used to assist gambling addicts.
Once implemented, this technology would be part of a voluntary exclusion program.
Individuals who opted into the program would be barred from entering casinos after their faces were scanned into the system.
As pointed out by Cavoukian in her report, the University of Toronto undertook research in 2007 to determine whether a system should be developed in which BE is integrated with PFR.
Regardless of which program is adopted, Cavoukian has ensured the Canadian public that the IPC will continue to do more work in this area and to advocate for privacy enhancing technologies.
The Information and Privacy Commissioner of Ontario, 2007 annual report is available at www.ipc.on.ca.




