Wednesday, August 22, 2007

Child fingerprinted without parents knowledge

As Gloucester County Council decide whether or not to endorse the recent governments advice to schools on biometric systems one family in Gloucester finds out that their son was fingerprinted without their knowledge, for library use.

The parents are rightly furious.

Roberta Smart said: "They should certainly have asked before doing anything like this. I would have refused. Systems can also be hacked into, and identity fraud takes place often. Will our children be next?

These are youngsters and for them this is just the way things are done. That is why parents, who know it isn't, need to take a stand." Absolutely!

Certain comments on the 'this is gloucestershire.co.uk' website have been made by people uneducated on this issue, ignorant of the potential risks with these systems - however this is encouragingly balanced with informed comments.

Ignorance is driven by this practice of schools taking children's biometrics without properly consulting parents.

Thursday, August 16, 2007

ACLU voices concerns as Indiana schools use fingerprint scanners

The Herald Argos in Indiana, USA, have reported that biometric systems are to be implemented in the La Porte and New Prairie school corporations.

"Some parents were unaware of the fingerprint scan until contacted by The La Porte County Herald-Argus Tuesday. Parents at Olive have not received detailed information on the technology.

La Porte spent between $100 and $200 each for 15 scanners and pays $5,738 each year for software licensing."

Parents are concerned about the cost and ACLU have voiced their concerns regarding children surrendering their privacy at a younger and younger age. A CLU and parents across states in the USA, have helped convince schools officials in Boulder, Colo, and in Taunton, Mass. to abandon plans to use biometrics in schools.

Parents, such as Joy Robinson-Van Gilder and Patti Crossman, have been paramount in these changes of school board attitudes towards the casual biometric fingerprinting of children in schools.

"One person leading the campaign against this technology in Boulder was Joe Pezzillo, 38, a computer software developer involved with the technology.

He said that just because the finger isn’t dipped in ink and placed on paper doesn’t change the fact that it is a fingerprint.

“The fact of the matter is there is a unique identifier to identify your child whether it is stored as a number or a picture of the fingerprint,”

“You cannot change a fingerprint. It will uniquely identify the child for the rest of their life.”
"

Monday, August 13, 2007

Gloucestershire County Council rethinking recent UK Government guidelines

Despite the UK Government recently issuing guidance for schools using biometric systems Gloucestershire County Council are deciding whether to issue their own guidance to schools in their area.

With a total of 8,400 children already fingerprinted in the Gloucestershire area, some just four years old, members of all political parties in the county council have created draft guidelines to help schools decide whether to use fingerprinting.

This article reports that Gloucestershire County Council, "...strongly recommends schools should consider the implications of the biometric data before making a decision.Liberal democrats at Gloucestershire County Council have welcomed the draft guidelines, but say they should go further.

Lib Deb leader councillor Jeremy Hilton, said:

"Using biometric technology in schools introduces a number of serious and unnecessary risks.

"Personally I would encourage schools not to introduce fingerprinting."

Jackie Hall, lead cabinet member for children and young people, will decide whether to endorse the [government] guidelines in September.

Saturday, August 11, 2007

Dubai to issue guidance to schools

From Gulfnews.com - "Educationists and pupils in Dubai feel that schools should not be allowed to fingerprint students even though it would make some tasks much easier in the educational institutions. Senior officials are expected to issue guidelines to install fingerprint scanners and collect biometric data from children as young as five."

The guidance is to be issued as "they were responding to a report from the UK that schools are seeking government's permission to fingerprint pupils"

Laws should determine that, not a government. Sadly our UK laws are woefully out of date where this technology is concerned and very open ended.

Schools seemingly got the go ahead here in the UK when the non-statutory guidance was issued by the government last month, via BECTA's website.

How many children?

Trying to get a figure of children with their biometric fingerprints on school databases is hard to estimate as the data on percentages varies according to statements from LEA's, manufacturers and Freedom of Information (FOI) requests.

But from this article Labour councillor Denise Headley uncovered 15 of Edmonton Green borough’s 92 schools using the "controversial biometric identification system".

In the same article Andy O'Brien, Managing Director of Micro Librarian Systems, states that 30% of schools use the fingerprint scanner. Is that Edmonton Green schools or just all schools? - because the figure from Edmonton Green is not 30%.

Working on 23%, which is just about in between the above figures and is also the percentage of schools using biometric databases in Suffolk from a recent FOI request, the following figures apply:

UK school population: Approx 9.5 million children.

England: 8,200,000
Wales: 494,181
Scotland: 743,561

23% of the total is 2,170,680 children.

So I think it it fair to say that over 2 million UK children have their biometric data on schools PC's. Maybe more.

I'd be very surprised if there are 2 million+ consenting parents to this.

Resources:
http://www.scotland.gov.uk/Resource/Doc/933/0044805.pdf
http://www.dfes.gov.uk/rsgateway/DB/SFR/s000682/SFR38-2006.pdf
http://new.wales.gov.uk/docrepos/40382/40382313/statistics/schools/1152752/key-edu-2006-e.pdf?lang=en link broken, see http://wales.gov.uk/docs/statistics/2011/110126sb72011en.pdf

Thursday, August 09, 2007

Leave Them Kids Alone statement

David Clouter of Leave Them Kids Alone has posted via the OurKingdom blog:

"School systems store fingerprint templates, the lifelong key to a person’s identity. Within 10 years these will be used to authenticate bank accounts and passports. World-renowned security experts argue that schools cannot possibly hold these securely and Microsoft identity Architect Kim Cameron has said that “It is absolutely premature to begin using conventional biometrics in schools”."

The Leave Them Kids Alone website is a great resource for parents to check out what is happening in the UK, USA or internationally regarding schools digitally fingerprinting children with or without parental consent or knowledge.

Sunday, August 05, 2007

Schools 'soft targets' for ICT theives

According to this article, figures published by the Metropolitan Police (Crime in London schools 2000-2004) show the number of burglaries at schools at 7,500 for the period.

"The problem, in part, is that schools are typically ‘soft’ targets. The problem is being further compounded, with respect to burglaries, as the government’s drive to put more computers, projectors, whiteboards and general ICT technology in schools, makes them very desirable targets for thieves."

With these staggeringly high theft figures for schools, this is a point to consider if your child is going to be using a school biometric system.

Tuesday, July 31, 2007

Reverse-engineering digital fingerprints

One important point, that has been reiterated time and time again by biometric vendors, Jim Knight and the ICO, is that the biometric systems in schools cannot reverse-engineer a fingerprint.

This does not seem to be the case according to Kim Cameron's recent weblog, Architect of Identity and Access in the Connected Systems Division at Microsoft, entitled "Paper argues biometric templates can be reversed". It shows that reverse-engineering a digital fingerprint may just be possible. He cites this paper "Can images be generated from biometric templates" by Andy Adler, University of Ottawa, 2003.

Also see these Research discussions at West Virginia University from 2005 "We show that minutiae information can reveal substantial details such as the orientation field and the class of the associated fingerprint that can potentially be used to reconstruct the original fingerprint image."

Both of these papers are not too recent and since then one would presume that the technologies in this field have advanced.

However, even thought the possible reconstruction of a fingerprint seems relevant to the argument of biometric technology in schools, ownership and possible 'loss' of ones digital fingerprint is still very relevant... who has access to it, the systems it is on, how it can be used (or abused). These are the points that should be seriously considered by children (and parents) as they unwittingly give up their biometric data for systems in schools which are non essential for purchasing food or accessing library books.

Tuesday, July 24, 2007

UK non statutory guidelines issued....

Non statutory (non legally binding) guidelines were issued yesterday by the British Educational Communications and Technology Agency, BECTA, regarding biometrics in schools, nicely coinciding with the House of Commons Adjournment debate on the subject.

'Guidence on the use of Biometric systems in schools' from BECTA and 'The use of biometrics in schools' came from the Information Commissioner's office, ICO, yesterday.

Balanced points of view are required to make informed judgements.

From the BECTA advice: 6 ...Schools should also reassure parents and pupils that they will not pass the data on to any third parties.

But are parents and pupils aware that the UK Police can access school biometric databases without parental permission if a crime can be solved? See Q50 and Q51 and subsequent answers from David Smith, the Deputy Information Commissioner, at the House of Common Home Affairs Committee "A SURVEILLANCE SOCIETY?" (May 2007).

Police "fingerprint" databases are not just ink fingerprints on sheets of paper with people peering at them with magnifying glasses when a crime needs to be solved - Police now use algorithmic fingerprint databases (Automated Fingerprint Identification Systems - AFIS) as detailed in the above mentioned ICO document third paragraph, just like the ones used in schools. These algorithms, via M1, can be interchangeable between differing systems.

Quote from the front page of the ICO advice: "Fingerprints are not essential to the applications but unlike swipe cards they cannot be lost"

This from a primary school using thumb scans (top right, second column): "The only issues we’ve had have been caused by us changing our hardware and a burglary when our main computer was stolen. [The biometric provider] helped us to resolve them all," (Perhaps biometric data was 'lost' here?)

Non legal advice - nothing resolved.

House of Commons Adjournment Debate

There was a House of Commons Adjournment debate Monday 23rd July with Greg Mulholland, Lib Dem Shadow Education Spokesperson, leading the debate and Jim Knight, Labour Minister from the Department of children, schools and families, answering.

At long last debate time in parliament has been given over to the taking of children's biometric data without parental consent.

The debate can been seen here, it is the last item to be debated and can be found at 06.35.25 on the slider.

Luckily for Jim Knight, in order to answer Greg Mulhollands points and not to loose face, he had to have some advice from the ICO and BECTA - well and what do you know... after nearly a year of waiting for advice, the long awaited guidance from BECTA and the ICO just happened to be issued today.

Phew that was lucky for Jim Knight - what were the odds against that then?!!

Saturday, July 14, 2007

Illinios Act, USA, HB 1559

Act HB 1559 in Illinios, USA, regarding biometrics in schools should take effect 1st August 2007.
(If the above link is broken for HB1559 scroll down on the right column to 'Legal/Law' on this blog for the link)

Monday, July 09, 2007

Irish workers refuse to use biometric system

Workers at The Abbey Theatre in Dublin have refused to give up their personal biometric data for a biometric system that "concerns the health and safety of the Abbey’s 100 full-time staff working in the buildings at various times across the course of the morning, day and night."

How can giving up your personal biometric data improve your health and safety working in a theatre? The biometric system is in it's first phase with the second phase being rolled out monitoring time and attendance according to the Sunday Business Post.

If adult workers are not happy with using such systems - why is it used with children without gaining parental permission or even letting parents know?

There are obviously concerns amongst the adult population about the uses of such technology and the level of personal data we as adults wish to give up, yet as a society we are creating a "do as I say not as I do" situation with biometrics in schools and children's privacy rights.

Thursday, July 05, 2007

Back on the job!

Not posted for a while, the recent flooding has disrupted our city with a 5th of all homes affected, schools shut, council services not operating to the full, events cancelled then rescheduled... we had 4 inches of water come through out front room ceiling, came in through the outside brick pointing as the guttering didn't cope with the monsoon like rain, buckets and tarpaulin saved the day -
but we got off lightly in comparison to some.

So... back to work!

Schools using biometrics for lunch recently, Kirkley High School in Lowestoft, Norfolk:
“The cashless catering system gives us the ability to influence where they eat and what they eat." said Headteacher, John Clinton

Also Bristol City academy is to scan students' fingerprints to allow them to get their lunch. The £20,000 (!) scheme will be launched at the City Academy - the first to be built in the city - from September.

One parent, Clare Stephenson stated,"I am staggered that no consultation has been made with parents about this and it is being pushed through in time for the new school term,"