Privacy, expense keep eye scans, fingerprinting out of U.S. ATMs
Wednesday, October 12, 2005
They walk up to an ATM and press their thumbs on the screen. Out spits the cash.
New York? No. Chicago? No. The mountains and jungles of Colombia.
It's one of the few places in the world where banks are using fingerprint biometrics, which verify people's identities based on their unique physical characteristics.
Scanning fingerprints or irises to verify an ATM customer's identity has yet to penetrate the U.S. banking market because of concerns about expense and privacy.
Customers must be convinced that the technologies provide more benefit than the card-and-PIN system, which works well, said John Hall, spokesman for the American Bankers Association. The cards also serve functions beyond the ATMs, as debit cards and as advertising for the banks.
"Getting that wallet space is important," said Bill Spence, a biometric expert with Campbell, Calif.-based Recognition Systems Inc.
However, companies that make automated teller machines have found budding markets for the fingerprint technology in South America, where citizens already are accustomed to the use of fingerprints for general identification, such as ID cards they carry.
Diebold Inc. of North Canton, Ohio, has supplied fingerprint-capable ATMs to a bank in Chile that is using them in a pilot project. Last year Dayton, Ohio-based NCR Corp. installed 400 of them in Colombia.
BanCafe, Colombia's fifth-largest bank, bought the ATMs at the end of 2002 for added security for coffee growers and to get them to open accounts. The growers wouldn't need to carry ATM cards, which can be a lure for thieves.
Ricardo Prieto, who was vice president for system operations at BanCafe when the system was installed, said that at first ATMs failed to recognize fingerprints on the well-worn hands of some elderly customers and laborers such as construction workers.
He said the ATM imaging was improved, and the number of customers whose fingerprints couldn't be read fell from 30 percent to 8 percent.
About 230,000 of BanCafe's 1 million customers registered to use the fingerprint ATMs, which account for about 15 percent of the bank's total transactions.
Hard to duplicate
"Biometrics is certainly the most secure form of authentication," said Avivah Litan, an analyst with Gartner Inc., a Stamford, Conn.-based technology analysis firm. "It's the hardest to imitate and duplicate."
About 350 banks in North America are using Diebold's hand geometry systems to clear customers into vaults so they can open their safe-deposit boxes. At Zions First National Bank in Salt Lake City and South Carolina Federal Credit Union, users place their hands on a screen, which reads the width of the palm, length of the fingers and other points of the hand.
Last year, Suruga Bank Ltd. in Japan began using ATMs that allow customers to access their accounts by holding their palms up to machines that read the pattern of blood vessels.
Finger scans -- in which people are identified by multiple points on the finger rather than fingerprints -- are being used at grocery stores and by people renting lockers at some airports, train stations, theme parks and the Statue of Liberty.
Later this year, NCR plans to begin selling finger readers to stores for use by employees and customers who volunteer. The technology is designed to speed up checkout and to prevent theft. The scans verify which cashiers are operating the registers in case there is missing cash and the identity of managers who approve customer checks.
Systems that scan the iris of the eye are being used at airports in Canada and the Netherlands to check passengers going through customs and at border points in the United Arab Emirates to identify people trying to enter the country with fake work visas. Biometrics are also being used in U.S. airports as part of the "Registered Traveler" program for prescreened fliers.
Diebold has tested ATMs with iris scans, but banks have yet to adopt the scanning because the systems were expensive and the cameras too large for small ATMs. Users had to practically put their noses on the screen for the scan to work.
Iridian Technologies Inc., based in Moorestown, N.J., has developed a smaller camera that costs under $1,000 and can photograph the iris of a user 18 inches away, said CEO Frank Fitzsimmons.
Linda Campbell, 49, of Springfield, Ohio, said she probably would use a fingerprint ATM as long as she was sure that no one else could obtain her print.
But Connie Steele doesn't believe the technology would add that much more security to the card-and-PIN system.
"If I'm a thief and I've got the card, I still don't have your PIN number, so how could they use it?" said Steele, 57, of West Milton, Ohio.
Supporters of the technologies are confident that bank customers eventually will accept the new ATMs.
"The real holy grail in biometrics," said Jim Block, Diebold's director of global advanced technology, "is let's get rid of the PIN so no one has anything to steal anymore."