Quantcast
PCWorld.com is upgrading some back-end systems. Some site features, such as user registration, may be temporarily unavailable.

Blogs

    Privacy Watch

  • Few things are more valuable than your personal data. Associate Editor Erik Larkin shows you how to protect it.
  • Subscribe to this blog

Privacy Watch: Biometric Passports Fail Early Privacy Tests

Andrew Brandt

Federal officials, eager to step up controls on people entering the United States, are preparing to issue Americans passports with embedded personal and face-recognition data. It's a good plan to fight terrorists--but poorly executed, it will put your privacy at risk.

The federal Department of Homeland Security spent the past six months testing biometric passport prototypes and wants to roll out the new technology as soon as possible.

The passport's chip will store more than just your name. It will store biometric facial recognition scan data--the kind of information that could help a computer recognize you by, for instance, the distance between your eyes. It'll also contain your passport photo in digital form, as well as personal data including your name, birth date and birthplace, gender, and passport number.

Other countries, as well, are adopting passports with electronic data, under a specification developed by the International Civil Aviation Organization (ICAO). The organization has created the specifications for most of the world's passports for more than 50 years.

U.S. Homeland Security officials say that the new passports go a long way toward preventing people from using another person's passport. The passports also permit touchless data transfer, meaning that a passport agent can collect the data without connecting the passport's chip physically to a computer. The DHS wants all travel documents to have touchless technology by 2006.

Unfortunately, the personal information is stored in unencrypted form. Worse, touchless technology might let someone with the right equipment read your personal information at a distance.

Officials are developing workarounds to prevent so-called skimming, but until they do, I think we should stop using contactless technology. Instead, officials should use smart cards that must be physically connected before they'll divulge their data. We should also encrypt the data included on a passport.

There's still time to change the passport plan. If you're concerned, get in touch with both the ICAO and the State Department.

Andrew Brandt is a senior associate editor for PC World. You can send him e-mail at consumerwatch@pcworld.com.

  • Recommend this story?
  • 0 Yes
    0 No

Featured APC Accessories

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

Deal Breakers

Special Offers for PC World Users

Focus on Personal Productivitysponsored by Microsoft

  • Personal Finance 2.0 These free and fee-based Web services not only aggregate data from your online bank accounts, they give you tools for managing your money.
  • High-Tech Travel Tips Plenty of stories provide advice for elite mobile professionals. But what about you, the unproductive traveler?

People who read this also read:

Privacy Watch

All PC World Blogs

  • 15 Minutes to a Secure Business Get the Secure in 15 toolkit starting with the "15 Minutes Month-at-a-Glance" calendar. McAfee will send you additional tools and tricks to stay protected around the clock.
  • A Buyer's Guide to Data Protection Implementing data protection products and processes can be daunting. Make the right decisions by exploring what is available and what makes sense for your organization. Use this simple guide to evaluate different vendor offerings.

Sponsored Links