Budny, 10:00 R13 ETHICAL ISSUES WITH BIOMETRICS Morgan Austin (mea82@pitt.edu) INTRODUCTION: ‘BIOMETICS’: SAFETY AND SECURITY Scenario As an engineer at a biometrics company, I will have to determine if the company’s processes are ethically correct. One scenario I may face is the company’s use of “cheap labor” to search through and sort out biometric data. “Cheap labor” could include convicted felons, who may use the data in inappropriate manners. I would need to refer to our codes of conduct and investigate this case to ensure the risk of data misuse is very small. Biometrics Biometrics is a science of recognition. Merriam Webster defines Biometrics as “the measurement and analysis of unique physical or behavioral characteristics especially as a means of verifying personal identity” [1]. Humans, including infants, use this everyday to identify each other. Simple examples of biometrics include voice detection and face recognition. Biometrics is rapidly finding its place in the field of security [2]. As the field of biometrics expands, various ethically charged scenarios are arising. As an engineer, I expect to be faced with both the positive and potentially negative aspects of biometrics. According to the Code of Ethics for Engineers, my job is to “hold paramount for the safety, health, and welfare of the public” [3]. When faced with an ethical scenario, I will refer back to the Code of Ethics for Engineers. Along with the Code of Ethics for Engineers, I will refer to the Biomedical Engineering Society Code of Ethics. Many people have issues with biometrics, largely due to privacy infringement concerns. Concerned people are represented in many areas of everyday life. For example, just about every child’s dream is to travel to Disney World, but parents are questioning taking their children there because of the new fingerprinting system that Disney is implementing [4]. The fingerprinting that Disney has in place is an example of biometrics that makes it easier for guests to come and go into the/from the parks. However parents wonder if their children’s fingerprints might fall into the wrong hands or be used for other unknown purposes. With Disney’s new fingerprinting system, people no longer need to identify themselves through “token based” and “knowledge based” approaches. “Token based” and “knowledge based” identification is something you have and something you know, respectively. An example of the “token based” approach is a passport. A “knowledge based” University of Pittsburgh, Swanson School of Engineering 1 2013-10-29 approach is something like a password [5]. This Disney example highlights both the positive aspects of biometrics, ease of use, and the negative aspects, potential misuse of information. Explanation of Scenario Ear detection is a common form of a biometric device. The first operation in ear detection is segmentation. Segmentation involves determining the position of an ear in an image. The next process is normalization and enhancement. This step is used to improve the fidelity of the image. Also, some images may go through photometric of geometric alterations to facilitate feature extraction. Next, the ear undergoes feature extraction. The extracted data is reduced to a mathematical model using vectors. The mathematical model is sent to a database, and the people sorting the data, the potentially “cheap labor”, decide if it matches the data already in the computers [6]. As a for-profit, our company is trying to make money, but our job is also to protect people. My job will be to decide whether or not this is use of “cheap labor” is ethical. In order to do this I will refer to the Code of Ethics for Engineers, as well as the Biomedical Engineering Society Code of Ethics and apply them to this situation. In considering the above scenario, I was influenced by a real instance of data privacy. Anton Alterman from the Department of Philosophy at Baruch College describes “a direct marketing company… using state prison inmates to process computer tapes containing detailed personal information on more than 90 percent of American households” [7]. The company was caught when “a woman began receiving threats from a convicted rapist who had viewed her file” [7]. This story influenced the above scenario, which I will further discuss in following sections. CANONS AND CODES OF ETHICS Code of Ethics for Engineers A code that all engineers must adhere to when dealing with an ethical issue is the Code of Ethics for Engineers, also known as NSPE. In general, an engineer must, “1. Hold paramount the safety, health, and welfare of the public 2. Perform services only in areas of their competence. 3. Issue public statements only in an objective and truthful manner. 4. Act for each employer or client as faithful agents or trustees. 5. Avoid deceptive acts. 6. Conduct themselves honorably, responsibly, ethically, and lawfully so as to enhance the honor, reputation, and usefulness of the profession” [3]. Morgan Austin These six canons are further explained in the NSPE. When dealing with my particular scenario of using “cheap labor”, all six of the canons are applicable. Each of these refers back to an issue in my scenario. The first canon describes that engineers must protect the public. When used correctly, biometrics helps to safeguard the public. Safety in biometrics goes back to when we were infants and we felt the comfort, or safety, from recognizing faces and voices. People long for a widespread version of this feeling. Knowing that criminals will get charged for their crimes, so they cannot repeat them, is very important in society [2]. However, inappropriate use of “cheap labor” can place people in danger [3]. The second canon of performing services only in areas of competency, although not directly related to my specific scenario, is important, none-the-less. If my company were to work in areas outside our expertise, we would be more likely to not adequately safeguard against the misuse of cheap labor [3]. The third canon from the code is that I must issue public statements in a truthful manner. As my company develops new biometric systems we will make public announcements about the system. I will need to be truthful in my statements if I believe there are valid issues with our use of “cheap labor” [3]. The fourth canon states that I must act for each employer as a faithful trustee. If I were to share information about the “cheap labor” without first resolving my concerns with my boss, that would be against the code. Referring back to the code of ethics, I must, “disclose all known or potential conflicts of interest that could influence or appear to influence their judgment or the quality of their services” [3]. The fifth canon from the Code of Ethics for Engineers is that all engineers must avoid deceptive acts. A deceptive act is one that is perceptually misleading. My company is attempting to create security in the nation with the biometric system. However, if using “cheap labor” is creating safety issues that are deliberately being withheld, this would be a deceptive and unethical practice. [3]. Overall, engineers, including myself, must be responsible, lawful, honorable, and ethical. The sixth canon is an overview of all of the other five. It takes precedent. According to these guidelines, I need to make a responsible decision of whether or not what my company is doing with “cheap labor” is ethical. In order to make my decision, I will also refer to the Biomedical Engineering Society Code of Ethics [3]. One canon that is very applicable in my scenario is that the engineer must “consider the larger consequences of their work in regard to cost and availability” [9]. My company’s use of “cheap labor” is potentially dangerous, but it is saving money and making biometrics more accessible to everyone. I would need to balance the risks and benefits. OTHER ASPECTS TO CONSIDER Privacy According to Ionic Vakalis, privacy is “ the context of personal data protection and the law applied refers capturing, storing, and processing personal data” [10]. For an average person privacy is simply, “the right to be left alone, to be anonymous, not to be tracked, and to protect personal information” [10]. While considering the ethical issues of my company using “cheap labor”, it is also important to consider the ethical issues of biometrics in general. Chi-shing Chen from the National ChengChi University writes that “the more privacy is invaded the less privacy is protected” [11]. Biometrics generally encroaches on people’s privacy. Referring back to the Code of Ethics for Engineers, canon 1, which states that engineers must adhere to the welfare of the public, I am swayed to believe that biometrics has a significant potential of misuse that can approach being unethical unless strong safeguards are put in place. Personal Beliefs in Reference to Safety When used responsibly, biometrics can create a better world; with less crime, more safety, and less illegal immigration. One reason I personally find biometrics important is my experience with the terrorist attack on 9/11. My mom was supposed to be near the Pentagon the day the planes crashed, but she was sick, so she could not go. Many people died when one of the planes slammed into the Pentagon. Along with the Pentagon, the Twin Towers were also attacked. According to the New York Magazine, 2753 people were killed that day [12]. All of those people lost their lives because we did not have high enough security in our airports. Also I believe we could have avoided that horrible incident if we’d had a proper biometric system in place. While the potential for misuse is real, great things in regards to safety can come from biometrics; I believe that it would be unethical to disregard biometrics as a whole. Biomedical Engineering Society Code of Ethics Profit Tamil Nadu defines bioengineering as “ the application of engineering principles and techniques to the medical field” [8]. We use bioengineering when creating new systems of biometrics, such as 3D biometrics. The ear detection system was made with the help of bioengineers. While considering both codes of ethics, privacy, and my personal beliefs, it is also very important to consider profit. The company is running a business that needs to turn out a profit. In order to make a profit, my company will have to 2 Morgan Austin simply decide if something is “morally good” based on one source. Engineers must do research, consult many sources, and immerse themselves in the scenario to come up with a viable decision. Although I still do not have a concrete conclusion on whether or not what my company is doing is ethical, I have become much more aware of all of the specific canons related to engineering. Also, I am much more comfortable going through the process of determining if something is ethical. In all, this process is very complex and takes a lot of time. make tough decisions, but I will work to make sure ethics are not compromised. Biometrics is a rapidly growing field; biometric technologies have increased around 25% each year for the past several years [5]. People want to feel safe and secure. Biometrics promises to advance many areas such as national security and forensics [13]. Joseph from Whither Biometrics Committee National Research Council Pate believes that “a holistic view that accounts for human interaction, and not simply the combination of sensors and matchers, is needed” [2]. Biometrics needs to progress from the current state of simple detection to more complex systems such to reach its full potential. People feel the need for enhanced security, and the current systems are not completing the task. Because biometrics is a growing field, and a lot a research is still required we are spending a lot of money trying to perfect the system. Using “cheap labor” helps us continue to turn out a profit and complete needed research. REFERENCES [1] (2013). “Definition of Biometrics.” Merriam-Webster. (Website). http://www.merriam-webster.com/dictionary/biometrics. [2] J. N. (2010). Biometric Recognition: Challenges and Opportunities. DC: Washington. (Print book). pp. 15-16 [3] (2007, July). “NSPE Code of Ethics for Engineers.” NSPE. (Online Article). http://www.nspe.org/Ethics/CodeofEthics/index.html [4] M. Thomas. (2007, May 22). “Finger Scanners at Disney: Just What Are They Scanning?” (Online Article). http://blogs.orlandosentinel.com/news_columnist_mikethoma s/2007/05/finger_scanners.html [5] D. Zhang, G. Lu. 3D Biometrics. New York: Springer. (Print book). pp. 19-33 [6] A. Abaza, A. Ross, C. Herbert. M. Harrison, M. Nixon. (2013). “A survey on Ear Biometrics.” ACM Digital Library. (Online article). http://dl.acm.org/citation.cfm?id=2431221 p. 22:1-22:6 [7] A. Alterman. (2003). “’A Piece of Yourself’: Ethical Issues in Biometric Identification.” Netherlands: Kluwer Academic Publishers. (Print Essay). pp. 139-150 [8] T. Nadu. (2012, April 22). “Biomedical Engineering.” Academic OneFile. (Online Article). http://go.galegroup.com/ps/i.do?action=interpret&id=GALE %7CA287331325&v=2.1&u=upitt_main&it=r&p=AONE&s w=w&authCount=1 [9] (2011, October 24). “Biomedical Engineering Society Code of Ethics.” Codes of Ethics Collection. (Website). http://ethics.iit.edu/ecodes/node/3243 [10] I. Vakalis. (2011). “Privacy and Biometric Passports.” The Scientific World Journal. (Online Article). http://go.galegroup.com/ps/i.do?id=GALE%7CA290112764 &v=2.1&u=upitt_main&it=r&p=AONE&sw=w&asid=1b7b3 dda31b3e28e47c664ce04373157 [11] H. Wechsler. (2012, January 1). “Biometric Security and Privacy Using Smart Identity Management and Interoperability: Validation and Vulnerabilities of Various Techniques.” (Print book). pp. 120-127 [12] (2012, September). “9/11 by the Numbers.” New York. (Online article). http://nymag.com/news/articles/wtc/1year/numbers.htm DECISION MAKING PROCESS As an engineer it is my duty to determine whether specific scenarios are ethical or not. There are several resources I may turn to in order to make my decision. However, according to the Bevier Librarians at the University of Pittsburgh, the most reliable and helpful source is the Code of Ethics for Engineers [14]. When coming to a conclusion about “cheap labor” being ethical or not I first consulted the Code of Ethics for Engineers. While consulting the code, I realized that I had very mixed feelings in accordance with individual canons. Because I did not come to a firm decision, I consulted the Biomedical Engineering Society Code of Ethics, which I also lacked in confirming a decision. Finally, I did more research and thought of other important aspects of “cheap labor” in biometrics. These other aspects included privacy, my personal thoughts on the matter, and profit. Using “cheap labor” has the potential to violate privacy rights, and therefore it is important to have strong protection in place. Personally, I think biometrics is very important for the safety of our nation, and it would be unethical to not continue research in biometrics. Finally, I considered that my business is trying to turn out a profit, and do research at the same time. Research in this field is very important, and it would not be possible without a profit or large grants. Without more information I will not be able to make a firm, educated decision in regards to the ethicality of “cheap labor” in biometrics. CONCLUSION: REFLECTION OF PROCESS Merriam Webster defines ethical as “following accepted rules of behavior: morally right and good” [15]. Determining whether something is ethical is a process. One does not 3 Morgan Austin [13] A. Lastra, H. Fuchs, G. Welch, A. Farasaie. (2010). “3D Scanning for Biometric Identification and Verification.” Institute for Homeland Security Solutions. (Online Brief). http://sites.duke.edu/ihss/files/2011/12/IHSS_ResearchBrief_Lastra.pdf [14] K. Ranklev. (2013, October 17). Lecture notes. Introduction to Engineering Analysis 1. University of Pittsburgh [15] (2013). “Definition of Ethical.” Merriam-Webster. (Online). http://www.merriam-webster.com/dictionary/ethical ACKNOWLEDGEMENTS I would like to acknowledge the writing instructors for giving great advice for the paper. Also, I would like to acknowledge the Bevier Librarians for helping all of the Engineering 0011 students during this rigorous writing process. 4