From Government Computer News
http://www.gcn.com/vol18_no32/news/702-1.html
September 27, 1999
The service wants to eliminate passwords for verifying users
By Patricia Daukantas
GCN Staff
The Army will investigate biometric recognition devices as a way to reduce or eliminate password use for accessing computer and weapons systems.
Commercial biometrics can be leveraged for military systems, said Phillip Loranger, a division chief at the Army Information System Security Office in the Directorate of Information Systems for Command, Control, Communications and Computers.
The Army wants soldiers to have unique identifiers that cannot be stolen or forgotten. ³We need to dump the way we do passwords,² Loranger said this month at a meeting of the Biometric Consortium in Arlington, Va.
The service approved the study early this month and is kicking it off with fiscal 1999 year-end funds. Loranger declined to put a price on the effort, which he will lead. He said the study, slated for completion by spring, will consider the legal and sociological implications and the feasibility of large-scale biometric recognition for Army systems.
Iris recognition, in which an imaging system scans the pattern of an eyeıs iris, will be the first technology studied. It has an edge over fingerprint and voice recognition, Loranger said, because it works even when someone is wearing protective headgear.
³Voice doesnıt work through a gas mask,² Loranger said. ³Fingerprints canıt be taken through rubber gloves.² He said recent innovations allow iris recognition through plastic face shields and eyeglasses.
The system uses a small imaging device, not unlike a digital camera, that plugs into a PC and compares a userıs iris image against stored patterns of known users.
The study will also examine fingerprint and voice recognition. Loranger said the Army already collects soldiersı fingerprints. The recognition tools for desktop PCs cost $100 to $2,000, he said, and can be built into keyboards, mice and notebook computers.
Voice recognition systems can work either at desktop systems or over dial-up lines, re-quiring only a microphone and a sound card.
The study will examine setting up an Army or Defense Department center for biometric technology. ³You couldnıt find a better test bed anywhere² than the Army, Loranger said, because its computers run at least 17 operating systems, including legacy OSes.
Too hard
He acknowledged that some systems still will require passwords, at least with todayıs technology. But asking soldiers to remember multiple eight-digit, randomly generated pass codes is ³hard security,² Loranger said. ³The easier you make reliable security, the better that security will be.²
He said he is more interested in integrating off-the-shelf technology into military systems than in conducting an extensive development effort from scratch.
Loranger said he envisions a time when biometric recognition will even be integrated into the handgrips of guns to prevent unauthorized use. ³All it takes is time and money,² he said.
|