http://www.thestandard.com/node/103423/comments comments feed. en http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics <!--paging_filter--><p>Every time we leave our homes, we enter a world dominated by strangers and anonymity. Although facial or voice recognition may help us authenticate a few of those we encounter, what about the many people we don't know? In particular, how do we authenticate ourselves to each other when we need to know who we are dealing with?</p> <p>Confusing privacy with anonymity has delayed implementation of robust, virtually tamper-proof biometric authentication to replace paper-based forms of ID that neither assure privacy nor reliably prove identity. The <a href="http://www.boston.com/news/local/new_hampshire/articles/2008/03/12/senators_ask_feds_to_scrap_real_id_deadline/">debate over Real ID</a> and <a href="http://www.news.com/National-ID-cards-on-the-way/2100-1028_3-5573414.html">sensitivity to creation of any form of national ID</a> reveal a fear that anything that identifies us to others will intrude on privacy. This has led to a preoccupation with forms of ID rather than the fundamental question of how we can reliably identify ourselves to each other. This is a crucial issue: We live in a society where we are often unknown to the people we encounter, including people who need to know exactly who they are dealing with.</p> <p>While anonymity implies privacy, it does not confer it. We delude ourselves into thinking we have privacy if the person next to us doesn't know our name. If we use cash and avoid technological conveniences such as credit cards and windshield-mounted RFID devices to pay highway tolls, we may think we are going about life anonymously. We are allowing ourselves to believe that our public acts, how we communicate to others by word or deed in public space, are now somehow private.</p> <p>In the tight-knit communities in which people used to live, people presumed that neighbors always knew whenever someone ventured outside of his or her front door, because everyone knew each other and could see public conduct. In the global virtual neighborhood, we now live among strangers. We may have anonymity as we encounter people who are not familiar with us, but it is only an illusion that public acts are now private.</p> <p>Outside our homes, we have always lived in a public space where our open acts are no longer private. Anonymity has not changed that, but has provided an illusion of privacy and security. A credit card, rather than a shopkeeper, might record our purchases. Or, the RFID chip in our EZ pass might recognize that we cross a bridge at a given moment, instead of a toll taker. But these are records of public acts in which we openly engage in a public space with no reasonable expectation of confidentiality.</p> <p>In public space, we engage in open acts where we have no expectation of privacy, as well as private acts that cannot take place within our homes and therefore require authenticating identity to carve a sphere of privacy. Such private acts might involve receiving medical treatment or conducting financial transactions. Individuals have a strong interest in maintaining control of treatment records that we rightly consider confidential, and knowing that finances cannot be misappropriated or snooped without consent.</p> <p>The false privacy of anonymity allows others to steal what remains private to us in public space. Personal identity is unique and should remain in our control. Our lives outside our homes include not only open acts, but also those private transactions that have to take place in space we cannot control.</p> <p>The lack of reliable authentication becomes a threat to control of our own identity and confidential information, because it enables others to take advantage of living among strangers to assume a false identity undetected. Strangers can falsely assume our identities when they steal identifying information like social security or credit card numbers. They can also threaten our personal, economic and national security when they garb themselves in legitimacy by forging ID or misusing someone else's ID with or without that person's collusion.</p> <p>Biometric authentication has a role in maintaining and defending our control of our own identity and personal data. This emerging technology makes it virtually impossible to assume someone else's unique identity. It is a way of providing the same kind of security in the virtual neighborhood that we once had in rooted neighborhoods, where the uniqueness of individual identity was assured by neighbors authenticating each other through facial recognition.</p> <p>We have to expect that people will see us when we are in public and that our open public acts will be just that. But we have to worry that, in an anonymous world without authenticated identity, privacy will be violated when others can assume our identifying characteristics and take control of transactions and interactions outside the home that are indeed personal and unique to us. This is a threat to the sphere of privacy we take with us outside our homes, including not only our interest in maintaining control of our names and reputations, but also of transactions and records that are highly confidential to us. Authenticated identity can address this threat, as well as the threat posed to society by strangers exploiting the vulnerability of anonymity to assume false identity.</p> <p><i>Mark A. Shiffrin, a lawyer, is a former Connecticut state consumer protection commissioner.</i></p> <p><i>Avi Silberschatz is Sidney J. Weinberg Professor and Chair of Computer Science at Yale.</i></p> <p><b>Related news, commentary, and predictions:</b></p> <ul> <li>Mark A. Shiffrin and Avi Silberschatz: <b><a href="/news/2008/02/13/making-wikipedia-available-anytime-anywhere?page=0%2C1">Making Wikipedia available anytime, anywhere</a></b></li> <li>Fred Wilson: <b><a href="/news/2007/11/30/facebook-and-privacy-backlash">Facebook and The Privacy Backlash</a></b></li> <li>News: <b><a href="/news/2008/03/18/facebook-beefs-privacy-options-readies-online-chat">Facebook beefs up privacy options, readies online chat</a></b></li> <li>News: <b><a href="/news/2008/03/19/privacy-advocate-aclu-hit-new-virginia-privacy-law">Privacy advocate, ACLU hit new Virginia privacy law</a></b></li> </ul> <p><b>Note:</b> Anonymous comments on The Industry Standard are disabled. To leave a comment and participate in the Standard's <b><a href="/predictions">prediction market</a></b>, please <b><a href="/user/register?destination=search/predictions">register</a></b> first.</p> http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics#comments Authentication Biometrics Privacy Security Software &amp; Web The Industry Standard Wed, 19 Mar 2008 08:59:23 -0700 Mark A. Shiffri... 103423 at http://www.thestandard.com http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics <!--paging_filter--><p>Every time we leave our homes, we enter a world dominated by strangers and anonymity. Although facial or voice recognition may help us authenticate a few of those we encounter, what about the many people we don't know? In particular, how do we authenticate ourselves to each other when we need to know who we are dealing with?</p> <p>Confusing privacy with anonymity has delayed implementation of robust, virtually tamper-proof biometric authentication to replace paper-based forms of ID that neither assure privacy nor reliably prove identity. The <a href="http://www.boston.com/news/local/new_hampshire/articles/2008/03/12/senators_ask_feds_to_scrap_real_id_deadline/">debate over Real ID</a> and <a href="http://www.news.com/National-ID-cards-on-the-way/2100-1028_3-5573414.html">sensitivity to creation of any form of national ID</a> reveal a fear that anything that identifies us to others will intrude on privacy. This has led to a preoccupation with forms of ID rather than the fundamental question of how we can reliably identify ourselves to each other. This is a crucial issue: We live in a society where we are often unknown to the people we encounter, including people who need to know exactly who they are dealing with.</p> <p>While anonymity implies privacy, it does not confer it. We delude ourselves into thinking we have privacy if the person next to us doesn't know our name. If we use cash and avoid technological conveniences such as credit cards and windshield-mounted RFID devices to pay highway tolls, we may think we are going about life anonymously. We are allowing ourselves to believe that our public acts, how we communicate to others by word or deed in public space, are now somehow private.</p> <p>In the tight-knit communities in which people used to live, people presumed that neighbors always knew whenever someone ventured outside of his or her front door, because everyone knew each other and could see public conduct. In the global virtual neighborhood, we now live among strangers. We may have anonymity as we encounter people who are not familiar with us, but it is only an illusion that public acts are now private.</p> <p>Outside our homes, we have always lived in a public space where our open acts are no longer private. Anonymity has not changed that, but has provided an illusion of privacy and security. A credit card, rather than a shopkeeper, might record our purchases. Or, the RFID chip in our EZ pass might recognize that we cross a bridge at a given moment, instead of a toll taker. But these are records of public acts in which we openly engage in a public space with no reasonable expectation of confidentiality.</p> <p>In public space, we engage in open acts where we have no expectation of privacy, as well as private acts that cannot take place within our homes and therefore require authenticating identity to carve a sphere of privacy. Such private acts might involve receiving medical treatment or conducting financial transactions. Individuals have a strong interest in maintaining control of treatment records that we rightly consider confidential, and knowing that finances cannot be misappropriated or snooped without consent.</p> <p>The false privacy of anonymity allows others to steal what remains private to us in public space. Personal identity is unique and should remain in our control. Our lives outside our homes include not only open acts, but also those private transactions that have to take place in space we cannot control.</p> <p>The lack of reliable authentication becomes a threat to control of our own identity and confidential information, because it enables others to take advantage of living among strangers to assume a false identity undetected. Strangers can falsely assume our identities when they steal identifying information like social security or credit card numbers. They can also threaten our personal, economic and national security when they garb themselves in legitimacy by forging ID or misusing someone else's ID with or without that person's collusion.</p> <p>Biometric authentication has a role in maintaining and defending our control of our own identity and personal data. This emerging technology makes it virtually impossible to assume someone else's unique identity. It is a way of providing the same kind of security in the virtual neighborhood that we once had in rooted neighborhoods, where the uniqueness of individual identity was assured by neighbors authenticating each other through facial recognition.</p> <p>We have to expect that people will see us when we are in public and that our open public acts will be just that. But we have to worry that, in an anonymous world without authenticated identity, privacy will be violated when others can assume our identifying characteristics and take control of transactions and interactions outside the home that are indeed personal and unique to us. This is a threat to the sphere of privacy we take with us outside our homes, including not only our interest in maintaining control of our names and reputations, but also of transactions and records that are highly confidential to us. Authenticated identity can address this threat, as well as the threat posed to society by strangers exploiting the vulnerability of anonymity to assume false identity.</p> <p><i>Mark A. Shiffrin, a lawyer, is a former Connecticut state consumer protection commissioner.</i></p> <p><i>Avi Silberschatz is Sidney J. Weinberg Professor and Chair of Computer Science at Yale.</i></p> <p><b>Related news, commentary, and predictions:</b></p> <ul> <li>Mark A. Shiffrin and Avi Silberschatz: <b><a href="/news/2008/02/13/making-wikipedia-available-anytime-anywhere?page=0%2C1">Making Wikipedia available anytime, anywhere</a></b></li> <li>Fred Wilson: <b><a href="/news/2007/11/30/facebook-and-privacy-backlash">Facebook and The Privacy Backlash</a></b></li> <li>News: <b><a href="/news/2008/03/18/facebook-beefs-privacy-options-readies-online-chat">Facebook beefs up privacy options, readies online chat</a></b></li> <li>News: <b><a href="/news/2008/03/19/privacy-advocate-aclu-hit-new-virginia-privacy-law">Privacy advocate, ACLU hit new Virginia privacy law</a></b></li> </ul> <p><b>Note:</b> Anonymous comments on The Industry Standard are disabled. To leave a comment and participate in the Standard's <b><a href="/predictions">prediction market</a></b>, please <b><a href="/user/register?destination=search/predictions">register</a></b> first.</p> http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics#comments Authentication Biometrics Privacy Security Software &amp; Web The Industry Standard Wed, 19 Mar 2008 08:59:23 -0700 Mark A. Shiffri... 103423 at http://www.thestandard.com http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics <!--paging_filter--><p>Every time we leave our homes, we enter a world dominated by strangers and anonymity. Although facial or voice recognition may help us authenticate a few of those we encounter, what about the many people we don't know? In particular, how do we authenticate ourselves to each other when we need to know who we are dealing with?</p> <p>Confusing privacy with anonymity has delayed implementation of robust, virtually tamper-proof biometric authentication to replace paper-based forms of ID that neither assure privacy nor reliably prove identity. The <a href="http://www.boston.com/news/local/new_hampshire/articles/2008/03/12/senators_ask_feds_to_scrap_real_id_deadline/">debate over Real ID</a> and <a href="http://www.news.com/National-ID-cards-on-the-way/2100-1028_3-5573414.html">sensitivity to creation of any form of national ID</a> reveal a fear that anything that identifies us to others will intrude on privacy. This has led to a preoccupation with forms of ID rather than the fundamental question of how we can reliably identify ourselves to each other. This is a crucial issue: We live in a society where we are often unknown to the people we encounter, including people who need to know exactly who they are dealing with.</p> <p>While anonymity implies privacy, it does not confer it. We delude ourselves into thinking we have privacy if the person next to us doesn't know our name. If we use cash and avoid technological conveniences such as credit cards and windshield-mounted RFID devices to pay highway tolls, we may think we are going about life anonymously. We are allowing ourselves to believe that our public acts, how we communicate to others by word or deed in public space, are now somehow private.</p> <p>In the tight-knit communities in which people used to live, people presumed that neighbors always knew whenever someone ventured outside of his or her front door, because everyone knew each other and could see public conduct. In the global virtual neighborhood, we now live among strangers. We may have anonymity as we encounter people who are not familiar with us, but it is only an illusion that public acts are now private.</p> <p>Outside our homes, we have always lived in a public space where our open acts are no longer private. Anonymity has not changed that, but has provided an illusion of privacy and security. A credit card, rather than a shopkeeper, might record our purchases. Or, the RFID chip in our EZ pass might recognize that we cross a bridge at a given moment, instead of a toll taker. But these are records of public acts in which we openly engage in a public space with no reasonable expectation of confidentiality.</p> <p>In public space, we engage in open acts where we have no expectation of privacy, as well as private acts that cannot take place within our homes and therefore require authenticating identity to carve a sphere of privacy. Such private acts might involve receiving medical treatment or conducting financial transactions. Individuals have a strong interest in maintaining control of treatment records that we rightly consider confidential, and knowing that finances cannot be misappropriated or snooped without consent.</p> <p>The false privacy of anonymity allows others to steal what remains private to us in public space. Personal identity is unique and should remain in our control. Our lives outside our homes include not only open acts, but also those private transactions that have to take place in space we cannot control.</p> <p>The lack of reliable authentication becomes a threat to control of our own identity and confidential information, because it enables others to take advantage of living among strangers to assume a false identity undetected. Strangers can falsely assume our identities when they steal identifying information like social security or credit card numbers. They can also threaten our personal, economic and national security when they garb themselves in legitimacy by forging ID or misusing someone else's ID with or without that person's collusion.</p> <p>Biometric authentication has a role in maintaining and defending our control of our own identity and personal data. This emerging technology makes it virtually impossible to assume someone else's unique identity. It is a way of providing the same kind of security in the virtual neighborhood that we once had in rooted neighborhoods, where the uniqueness of individual identity was assured by neighbors authenticating each other through facial recognition.</p> <p>We have to expect that people will see us when we are in public and that our open public acts will be just that. But we have to worry that, in an anonymous world without authenticated identity, privacy will be violated when others can assume our identifying characteristics and take control of transactions and interactions outside the home that are indeed personal and unique to us. This is a threat to the sphere of privacy we take with us outside our homes, including not only our interest in maintaining control of our names and reputations, but also of transactions and records that are highly confidential to us. Authenticated identity can address this threat, as well as the threat posed to society by strangers exploiting the vulnerability of anonymity to assume false identity.</p> <p><i>Mark A. Shiffrin, a lawyer, is a former Connecticut state consumer protection commissioner.</i></p> <p><i>Avi Silberschatz is Sidney J. Weinberg Professor and Chair of Computer Science at Yale.</i></p> <p><b>Related news, commentary, and predictions:</b></p> <ul> <li>Mark A. Shiffrin and Avi Silberschatz: <b><a href="/news/2008/02/13/making-wikipedia-available-anytime-anywhere?page=0%2C1">Making Wikipedia available anytime, anywhere</a></b></li> <li>Fred Wilson: <b><a href="/news/2007/11/30/facebook-and-privacy-backlash">Facebook and The Privacy Backlash</a></b></li> <li>News: <b><a href="/news/2008/03/18/facebook-beefs-privacy-options-readies-online-chat">Facebook beefs up privacy options, readies online chat</a></b></li> <li>News: <b><a href="/news/2008/03/19/privacy-advocate-aclu-hit-new-virginia-privacy-law">Privacy advocate, ACLU hit new Virginia privacy law</a></b></li> </ul> <p><b>Note:</b> Anonymous comments on The Industry Standard are disabled. To leave a comment and participate in the Standard's <b><a href="/predictions">prediction market</a></b>, please <b><a href="/user/register?destination=search/predictions">register</a></b> first.</p> http://www.thestandard.com/news/2008/03/19/understanding-anonymity-and-need-biometrics#comments Authentication Biometrics Privacy Security Software &amp; Web The Industry Standard Wed, 19 Mar 2008 08:59:23 -0700 Mark A. Shiffri... 103423 at http://www.thestandard.com