ethical issues with biometrics

advertisement
Budny, 10:00
R13
ETHICAL ISSUES WITH BIOMETRICS
Morgan Austin (mea82@pitt.edu)
INTRODUCTION: ‘BIOMETICS’: SAFETY
AND SECURITY
Scenario
As an engineer at a biometrics company, I will have to
determine if the company’s processes are ethically correct.
One scenario I may face is the company’s use of “cheap
labor” to search through and sort out biometric data. “Cheap
labor” could include convicted felons, who may use the data
in inappropriate manners. I would need to refer to our codes
of conduct and investigate this case to ensure the risk of data
misuse is very small.
Biometrics
Biometrics is a science of recognition. Merriam Webster
defines Biometrics as “the measurement and analysis of
unique physical or behavioral characteristics especially as a
means of verifying personal identity” [1]. Humans, including
infants, use this everyday to identify each other. Simple
examples of biometrics include voice detection and face
recognition. Biometrics is rapidly finding its place in the field
of security [2]. As the field of biometrics expands, various
ethically charged scenarios are arising.
As an engineer, I expect to be faced with both the positive
and potentially negative aspects of biometrics. According to
the Code of Ethics for Engineers, my job is to “hold
paramount for the safety, health, and welfare of the public”
[3]. When faced with an ethical scenario, I will refer back to
the Code of Ethics for Engineers. Along with the Code of
Ethics for Engineers, I will refer to the Biomedical
Engineering Society Code of Ethics.
Many people have issues with biometrics, largely due to
privacy infringement concerns. Concerned people are
represented in many areas of everyday life. For example, just
about every child’s dream is to travel to Disney World, but
parents are questioning taking their children there because of
the new fingerprinting system that Disney is implementing
[4]. The fingerprinting that Disney has in place is an example
of biometrics that makes it easier for guests to come and go
into the/from the parks. However parents wonder if their
children’s fingerprints might fall into the wrong hands or be
used for other unknown purposes.
With Disney’s new fingerprinting system, people no
longer need to identify themselves through “token based” and
“knowledge based” approaches. “Token based” and
“knowledge based” identification is something you have and
something you know, respectively. An example of the “token
based” approach is a passport. A “knowledge based”
University of Pittsburgh, Swanson School of Engineering 1
2013-10-29
approach is something like a password [5]. This Disney
example highlights both the positive aspects of biometrics,
ease of use, and the negative aspects, potential misuse of
information.
Explanation of Scenario
Ear detection is a common form of a biometric device.
The first operation in ear detection is segmentation.
Segmentation involves determining the position of an ear in
an image. The next process is normalization and
enhancement. This step is used to improve the fidelity of the
image. Also, some images may go through photometric of
geometric alterations to facilitate feature extraction. Next, the
ear undergoes feature extraction. The extracted data is
reduced to a mathematical model using vectors. The
mathematical model is sent to a database, and the people
sorting the data, the potentially “cheap labor”, decide if it
matches the data already in the computers [6].
As a for-profit, our company is trying to make money, but
our job is also to protect people. My job will be to decide
whether or not this is use of “cheap labor” is ethical. In order
to do this I will refer to the Code of Ethics for Engineers, as
well as the Biomedical Engineering Society Code of Ethics
and apply them to this situation.
In considering the above scenario, I was influenced by a
real instance of data privacy. Anton Alterman from the
Department of Philosophy at Baruch College describes “a
direct marketing company… using state prison inmates to
process computer tapes containing detailed personal
information on more than 90 percent of American
households” [7]. The company was caught when “a woman
began receiving threats from a convicted rapist who had
viewed her file” [7]. This story influenced the above scenario,
which I will further discuss in following sections.
CANONS AND CODES OF ETHICS
Code of Ethics for Engineers
A code that all engineers must adhere to when dealing with
an ethical issue is the Code of Ethics for Engineers, also
known as NSPE. In general, an engineer must, “1. Hold
paramount the safety, health, and welfare of the public 2.
Perform services only in areas of their competence. 3. Issue
public statements only in an objective and truthful manner. 4.
Act for each employer or client as faithful agents or trustees.
5. Avoid deceptive acts. 6. Conduct themselves honorably,
responsibly, ethically, and lawfully so as to enhance the
honor, reputation, and usefulness of the profession” [3].
Morgan Austin
These six canons are further explained in the NSPE.
When dealing with my particular scenario of using “cheap
labor”, all six of the canons are applicable. Each of these
refers back to an issue in my scenario.
The first canon describes that engineers must protect the
public. When used correctly, biometrics helps to safeguard
the public. Safety in biometrics goes back to when we were
infants and we felt the comfort, or safety, from recognizing
faces and voices. People long for a widespread version of this
feeling. Knowing that criminals will get charged for their
crimes, so they cannot repeat them, is very important in
society [2]. However, inappropriate use of “cheap labor” can
place people in danger [3].
The second canon of performing services only in areas of
competency, although not directly related to my specific
scenario, is important, none-the-less. If my company were to
work in areas outside our expertise, we would be more likely
to not adequately safeguard against the misuse of cheap labor
[3].
The third canon from the code is that I must issue public
statements in a truthful manner. As my company develops
new biometric systems we will make public announcements
about the system. I will need to be truthful in my statements
if I believe there are valid issues with our use of “cheap
labor” [3].
The fourth canon states that I must act for each employer
as a faithful trustee. If I were to share information about the
“cheap labor” without first resolving my concerns with my
boss, that would be against the code. Referring back to the
code of ethics, I must, “disclose all known or potential
conflicts of interest that could influence or appear to
influence their judgment or the quality of their services” [3].
The fifth canon from the Code of Ethics for Engineers is
that all engineers must avoid deceptive acts. A deceptive act
is one that is perceptually misleading. My company is
attempting to create security in the nation with the biometric
system. However, if using “cheap labor” is creating safety
issues that are deliberately being withheld, this would be a
deceptive and unethical practice. [3].
Overall, engineers, including myself, must be responsible,
lawful, honorable, and ethical. The sixth canon is an
overview of all of the other five. It takes precedent.
According to these guidelines, I need to make a responsible
decision of whether or not what my company is doing with
“cheap labor” is ethical.
In order to make my decision, I will also refer to the
Biomedical Engineering Society Code of Ethics [3].
One canon that is very applicable in my scenario is that
the engineer must “consider the larger consequences of their
work in regard to cost and availability” [9]. My company’s
use of “cheap labor” is potentially dangerous, but it is saving
money and making biometrics more accessible to everyone. I
would need to balance the risks and benefits.
OTHER ASPECTS TO CONSIDER
Privacy
According to Ionic Vakalis, privacy is “ the context of
personal data protection and the law applied refers capturing,
storing, and processing personal data” [10]. For an average
person privacy is simply, “the right to be left alone, to be
anonymous, not to be tracked, and to protect personal
information” [10].
While considering the ethical issues of my company using
“cheap labor”, it is also important to consider the ethical
issues of biometrics in general. Chi-shing Chen from the
National ChengChi University writes that “the more privacy
is invaded the less privacy is protected” [11]. Biometrics
generally encroaches on people’s privacy. Referring back to
the Code of Ethics for Engineers, canon 1, which states that
engineers must adhere to the welfare of the public, I am
swayed to believe that biometrics has a significant potential
of misuse that can approach being unethical unless strong
safeguards are put in place.
Personal Beliefs in Reference to Safety
When used responsibly, biometrics can create a better
world; with less crime, more safety, and less illegal
immigration.
One reason I personally find biometrics important is my
experience with the terrorist attack on 9/11. My mom was
supposed to be near the Pentagon the day the planes crashed,
but she was sick, so she could not go. Many people died
when one of the planes slammed into the Pentagon. Along
with the Pentagon, the Twin Towers were also attacked.
According to the New York Magazine, 2753 people were
killed that day [12]. All of those people lost their lives
because we did not have high enough security in our airports.
Also I believe we could have avoided that horrible incident if
we’d had a proper biometric system in place. While the
potential for misuse is real, great things in regards to safety
can come from biometrics; I believe that it would be
unethical to disregard biometrics as a whole.
Biomedical Engineering Society Code of Ethics
Profit
Tamil Nadu defines bioengineering as “ the application of
engineering principles and techniques to the medical field”
[8]. We use bioengineering when creating new systems of
biometrics, such as 3D biometrics. The ear detection system
was made with the help of bioengineers.
While considering both codes of ethics, privacy, and my
personal beliefs, it is also very important to consider profit.
The company is running a business that needs to turn out a
profit. In order to make a profit, my company will have to
2
Morgan Austin
simply decide if something is “morally good” based on one
source. Engineers must do research, consult many sources,
and immerse themselves in the scenario to come up with a
viable decision. Although I still do not have a concrete
conclusion on whether or not what my company is doing is
ethical, I have become much more aware of all of the specific
canons related to engineering. Also, I am much more
comfortable going through the process of determining if
something is ethical. In all, this process is very complex and
takes a lot of time.
make tough decisions, but I will work to make sure ethics are
not compromised.
Biometrics is a rapidly growing field; biometric
technologies have increased around 25% each year for the
past several years [5]. People want to feel safe and secure.
Biometrics promises to advance many areas such as national
security and forensics [13]. Joseph from Whither Biometrics
Committee National Research Council Pate believes that “a
holistic view that accounts for human interaction, and not
simply the combination of sensors and matchers, is needed”
[2]. Biometrics needs to progress from the current state of
simple detection to more complex systems such to reach its
full potential. People feel the need for enhanced security, and
the current systems are not completing the task.
Because biometrics is a growing field, and a lot a research
is still required we are spending a lot of money trying to
perfect the system. Using “cheap labor” helps us continue to
turn out a profit and complete needed research.
REFERENCES
[1] (2013). “Definition of Biometrics.” Merriam-Webster.
(Website).
http://www.merriam-webster.com/dictionary/biometrics.
[2] J. N. (2010). Biometric Recognition: Challenges and
Opportunities. DC: Washington. (Print book). pp. 15-16
[3] (2007, July). “NSPE Code of Ethics for Engineers.”
NSPE.
(Online
Article).
http://www.nspe.org/Ethics/CodeofEthics/index.html
[4] M. Thomas. (2007, May 22). “Finger Scanners at Disney:
Just What Are They Scanning?” (Online Article).
http://blogs.orlandosentinel.com/news_columnist_mikethoma
s/2007/05/finger_scanners.html
[5] D. Zhang, G. Lu. 3D Biometrics. New York: Springer.
(Print book). pp. 19-33
[6] A. Abaza, A. Ross, C. Herbert. M. Harrison, M. Nixon.
(2013). “A survey on Ear Biometrics.” ACM Digital Library.
(Online article). http://dl.acm.org/citation.cfm?id=2431221 p.
22:1-22:6
[7] A. Alterman. (2003). “’A Piece of Yourself’: Ethical
Issues in Biometric Identification.” Netherlands: Kluwer
Academic Publishers. (Print Essay). pp. 139-150
[8] T. Nadu. (2012, April 22). “Biomedical Engineering.”
Academic
OneFile.
(Online
Article).
http://go.galegroup.com/ps/i.do?action=interpret&id=GALE
%7CA287331325&v=2.1&u=upitt_main&it=r&p=AONE&s
w=w&authCount=1
[9] (2011, October 24). “Biomedical Engineering Society
Code of Ethics.” Codes of Ethics Collection. (Website).
http://ethics.iit.edu/ecodes/node/3243
[10] I. Vakalis. (2011). “Privacy and Biometric Passports.”
The Scientific World Journal. (Online Article).
http://go.galegroup.com/ps/i.do?id=GALE%7CA290112764
&v=2.1&u=upitt_main&it=r&p=AONE&sw=w&asid=1b7b3
dda31b3e28e47c664ce04373157
[11] H. Wechsler. (2012, January 1). “Biometric Security and
Privacy Using Smart Identity Management and
Interoperability: Validation and Vulnerabilities of Various
Techniques.” (Print book). pp. 120-127
[12] (2012, September). “9/11 by the Numbers.” New York.
(Online
article).
http://nymag.com/news/articles/wtc/1year/numbers.htm
DECISION MAKING PROCESS
As an engineer it is my duty to determine whether specific
scenarios are ethical or not. There are several resources I may
turn to in order to make my decision. However, according to
the Bevier Librarians at the University of Pittsburgh, the most
reliable and helpful source is the Code of Ethics for
Engineers [14].
When coming to a conclusion about “cheap labor” being
ethical or not I first consulted the Code of Ethics for
Engineers. While consulting the code, I realized that I had
very mixed feelings in accordance with individual canons.
Because I did not come to a firm decision, I consulted the
Biomedical Engineering Society Code of Ethics, which I also
lacked in confirming a decision. Finally, I did more research
and thought of other important aspects of “cheap labor” in
biometrics. These other aspects included privacy, my
personal thoughts on the matter, and profit. Using “cheap
labor” has the potential to violate privacy rights, and
therefore it is important to have strong protection in place.
Personally, I think biometrics is very important for the safety
of our nation, and it would be unethical to not continue
research in biometrics. Finally, I considered that my business
is trying to turn out a profit, and do research at the same time.
Research in this field is very important, and it would not be
possible without a profit or large grants.
Without more information I will not be able to make a
firm, educated decision in regards to the ethicality of “cheap
labor” in biometrics.
CONCLUSION: REFLECTION OF
PROCESS
Merriam Webster defines ethical as “following accepted
rules of behavior: morally right and good” [15]. Determining
whether something is ethical is a process. One does not
3
Morgan Austin
[13] A. Lastra, H. Fuchs, G. Welch, A. Farasaie. (2010). “3D
Scanning for Biometric Identification and Verification.”
Institute for Homeland Security Solutions. (Online Brief).
http://sites.duke.edu/ihss/files/2011/12/IHSS_ResearchBrief_Lastra.pdf
[14] K. Ranklev. (2013, October 17). Lecture notes.
Introduction to Engineering Analysis 1. University of
Pittsburgh
[15] (2013). “Definition of Ethical.” Merriam-Webster.
(Online). http://www.merriam-webster.com/dictionary/ethical
ACKNOWLEDGEMENTS
I would like to acknowledge the writing instructors for
giving great advice for the paper. Also, I would like to
acknowledge the Bevier Librarians for helping all of the
Engineering 0011 students during this rigorous writing
process.
4
Download