生物计量系统“不可靠”

Biometric（生物计量的） systems -- designed to automatically recognize individuals based on biological and behavioral traits such as fingerprints¹, palm prints, or voice or face recognition -- are "inherently fallible（不可靠的） ," says a new report by the National Research Council, and no single trait has been identified that is stable and distinctive² across all groups. To strengthen the science and improve system effectiveness, additional research is needed at virtually all levels of design and operation. "For nearly 50 years, the promise of biometrics（生物统计学） has outpaced the application of the technology," said Joseph N. Pato, chair of the committee that wrote the report and distinguished³ technologist at Hewlett-Packard's HP Laboratories, Palo Alto, Calif. "While some biometric systems can be effective for specific tasks, they are not nearly as infallible（绝对可靠的） as their depiction⁴ in popular culture might suggest. Bolstering⁵ the science is essential to gain a complete understanding of the strengths and limitations of these systems."

Biometric systems are increasingly used to regulate access to facilities, information, and other rights or benefits, but questions persist about their effectiveness as security or surveillance mechanisms⁶. The systems provide "probabilistic results," meaning that confidence in results must be tempered by an understanding of the inherent uncertainty⁷ in any given system, the report says. It notes that when the likelihood of an imposter（骗子） is rare, even systems with very accurate sensors⁸ and matching capabilities⁹ can have a high false-alarm rate. This could become costly¹⁰ or even dangerous in systems designed to provide heightened security; for example, operators could become lax（松懈的） about dealing¹¹ with potential threats.

The report identifies numerous sources of uncertainty in the systems that need to be considered in system design and operation. For example, biometric characteristics may vary over an individual's lifetime due to age, stress, disease, or other factors. Technical issues regarding calibration（校准，刻度） of sensors, degradation¹² of data, and security breaches¹³ also contribute to variability in these systems.

Biometric systems need to be designed and evaluated relative to their specific intended purposes and the contexts in which they are being used, the report says. Systems-level considerations are critical to the successful deployment¹⁴ of biometric technologies. Effectiveness depends as much on factors such as the competence¹⁵ of human operators as it does on the underlying¹⁶ technology, engineering, and testing regimes. Well-articulated processes for managing and correcting problems should be in place.

The report notes that careful consideration is needed when using biometric recognition as a component¹⁷ of an overall security system. The merits（优点，功绩） and risks of biometric recognition relative to other identification and authentication¹⁸（证明，鉴定） technologies should be considered. Any biometric system selected for security purposes should undergo thorough threat assessments¹⁹ to determine its vulnerabilities to deliberate（仔细考虑，商议） attacks. Trustworthiness of the biometric recognition process cannot rely on secrecy²⁰ of data, since an individual's biometric traits can be publicly known or accessed. In addition, secondary screening procedures that are used in the event of a system failure should be just as well-designed as primary systems, the report says.

The report identifies several features that a biometric system should contain. Systems should be designed to anticipate and plan for errors, even if they are expected to be infrequent. Additional research is needed in all aspects of design and operation, from studying the distribution of biometric traits in given populations to understanding how people interact with the technologies. In addition, social, legal, and cultural factors can affect whether these systems are effective and accepted, the report says.