Iris recognition explained

Iris recognition is an automated method of biometric identification that uses mathematical pattern-recognition techniques on video images of one or both of the irises of an individual's eyes, whose complex patterns are unique, stable, and can be seen from some distance. The discriminating powers of all biometric technologies depend on the amount of entropy[1] they are able to encode and use in matching. Iris recognition is exceptional in this regard, enabling the avoidance of "collisions" (False Matches) even in cross-comparisons across massive populations.[2] Its major limitation is that image acquisition from distances greater than a meter or two, or without cooperation, can be very difficult. However, the technology is in development and iris recognition can be accomplished from even up to 10 meters away or in a live camera feed.[3]

Retinal scanning is a different, ocular-based biometric technology that uses the unique patterns on a person's retina blood vessels and is often confused with iris recognition. Iris recognition uses video camera technology with subtle near infrared illumination to acquire images of the detail-rich, intricate structures of the iris which are visible externally. Digital templates encoded from these patterns by mathematical and statistical algorithms allow the identification of an individual or someone pretending to be that individual.[4] Databases of enrolled templates are searched by matcher engines at speeds measured in the millions of templates per second per (single-core) CPU, and with remarkably low false match rates.

At least 1.5 billion people around the world (including 1.29 billion citizens of India, in the UIDAI / Aadhaar programme as updated on 30 November) have been enrolled in iris recognition systems for national ID, e-government services, benefits distribution, security, and convenience purposes such as passport-free automated border-crossings.[5] [6] [7] [8] [9] [10] [11] [12] A key advantage of iris recognition, besides its speed of matching and its extreme resistance to false matches, is the stability[13] of the iris as an internal and protected, yet externally visible organ of the eye.

In 2023, Pakistan's National Database & Registration Authority (NADRA) has launched IRIS for citizen registration/ Civic Management during registration at its offices for the National ID Card. After its initial stage, the eye-recognition verification access will be available for LEAs, banking sectors, etc.

History

Although John Daugman developed and in the 1990s patented the first actual algorithms to perform iris recognition, published the first papers about it and gave the first live demonstrations, the concept behind this invention has a much longer history and today it benefits from many other active scientific contributors. In a 1953 clinical textbook, F.H. Adler[14] wrote: "In fact, the markings of the iris are so distinctive that it has been proposed to use photographs as a means of identification, instead of fingerprints." Adler referred to comments by the British ophthalmologist J.H. Doggart,[15] who in 1949 had written that: "Just as every human being has different fingerprints, so does the minute architecture of the iris exhibit variations in every subject examined. [Its features] represent a series of variable factors whose conceivable permutations and combinations are almost infinite." Later in the 1980s, two American ophthalmologists, L. Flom and Aran Safir managed to patent Adler's and Doggart's conjecture that the iris could serve as a human identifier, but they had no actual algorithm or implementation to perform it and so their patent remained conjecture. The roots of this conjecture stretch back even further: in 1892 the Frenchman A. Bertillon had documented nuances in "Tableau de l'iris humain". Divination of all sorts of things based on iris patterns goes back to ancient Egypt, to Chaldea in Babylonia, and to ancient Greece, as documented in stone inscriptions, painted ceramic artefacts, and the writings of Hippocrates. (Iris divination persists today, as "iridology.")

The core theoretical idea in Daugman's algorithms is that the failure of a test of statistical independence can be a very strong basis for pattern recognition, if there is sufficiently high entropy (enough degrees-of-freedom of random variation) among samples from different classes. In 1994 he patented this basis for iris recognition and its underlying computer vision algorithms for image processing, feature extraction, and matching, and published them in a paper.[16] These algorithms became widely licensed through a series of companies: IriScan (a start-up founded by Flom, Safir, and Daugman), Iridian, Sarnoff, Sensar, LG-Iris, Panasonic, Oki, BI2, IrisGuard, Unisys, Sagem, Enschede, Securimetrics and L-1, now owned by French company Morpho.

With various improvements over the years, these algorithms remain today the basis of all significant public deployments of iris recognition, and they are consistently top performers in NIST tests (implementations submitted by L-1, MorphoTrust and Morpho, for whom Daugman serves as Chief Scientist for Iris Recognition). But research on many aspects of this technology and on alternative methods has exploded, and today there is a rapidly growing academic literature on optics, photonics, sensors, biology, genetics, ergonomics, interfaces, decision theory, coding, compression, protocol, security, mathematical and hardware aspects of this technology.

Most flagship deployments of these algorithms have been at airports, in lieu of passport presentation, and for security screening using watch-lists. In the early years of this century, major deployments began at Amsterdam's Schiphol Airport and at ten UK airport terminals allowing frequent travellers to present their iris instead of their passport, in a programme called IRIS: Iris Recognition Immigration System. Similar systems exist along the US / Canada border, and many others. In the United Arab Emirates, all 32 air, land, and seaports deploy these algorithms to screen all persons entering the UAE requiring a visa. Because a large watch-list compiled among GCC States is exhaustively searched each time, the number of iris cross-comparisons climbed to 62 trillion in 10 years. The Government of India has enrolled the iris codes (as well as fingerprints) of more than 1.2 billion citizens in the UIDAI (Unique Identification Authority of India) programme for national ID and fraud prevention in entitlements distribution.[5] In a different type of application, iris is one of three biometric identification technologies internationally standardised since 2006 by ICAO for use in e-passports (the other two are fingerprint and face recognition).[17]

Visible vs near infrared imaging

Iris melanin, also known as chromophore, mainly consists of two distinct heterogeneous macromolecules, called eumelanin (brown–black) and pheomelanin (yellow–reddish),[18] [19] whose absorbance at longer wavelengths in the NIR spectrum is negligible. At shorter wavelengths within the VW spectrum, however, these chromophores are excited and can yield rich patterns. Hosseini, et al.[20] provide a comparison between these two imaging modalities. An alternative feature extraction method to encode VW iris images was also introduced, which may offer an alternative approach for multi-modal biometric systems.

Operating principle

First the system has to localize the inner and outer boundaries of the iris (pupil and limbus) in an image of an eye. Further subroutines detect and exclude eyelids, eyelashes, and specular reflections that often occlude parts of the iris. The set of pixels containing only the iris, normalized by a rubber-sheet model to compensate for pupil dilation or constriction, is then analyzed to extract a bit pattern encoding the information needed to compare two iris images.

In the case of Daugman's algorithms, a Gabor wavelet transform is used. The result is a set of complex numbers that carry local amplitude and phase information about the iris pattern. In Daugman's algorithms, most amplitude information is discarded, and the 2048 bits representing an iris pattern consist of phase information (complex sign bits of the Gabor wavelet projections). Discarding the amplitude information ensures that the template remains largely unaffected by changes in illumination or camera gain, and contributes to the long-term usability of the biometric template.

For identification (one-to-many template matching) or verification (one-to-one template matching),[21] a template created by imaging an iris is compared to stored templates in a database. If the Hamming distance is below the decision threshold, a positive identification has effectively been made because of the statistical extreme improbability that two different persons could agree by chance ("collide") in so many bits, given the high entropy of iris templates.

Advantages

The iris of the eye has been described as the ideal part of the human body for biometric identification for several reasons:

It is an internal organ that is well protected against damage and wear by a highly transparent and sensitive membrane (the cornea). This distinguishes it from fingerprints, which can be difficult to recognize after years of certain types of manual labor. The iris is mostly flat, and its geometric configuration is only controlled by two complementary muscles (the sphincter pupillae and dilator pupillae) that control the diameter of the pupil. This makes the iris shape far more predictable than, for instance, that of the face.

The iris has a fine texture that—like fingerprints—is determined randomly during embryonic gestation. Like the fingerprint, it is very hard (if not impossible) to prove that the iris is unique. However, there are so many factors that go into the formation of these textures (the iris and fingerprint) that the chance of false matches for either is extremely low. Even genetically identical individuals (and the left and right eyes of the same individual) have completely independent iris textures. An iris scan is similar to taking a photograph and can be performed from about 10 cm to a few meters away. There is no need for the person being identified to touch any equipment that has recently been touched by a stranger, thereby eliminating an objection that has been raised in some cultures against fingerprint scanners, where a finger has to touch a surface, or retinal scanning, where the eye must be brought very close to an eyepiece (like looking into a microscope).[22]

The commercially deployed iris-recognition algorithm, John Daugman's IrisCode, has an unprecedented false match rate (better than 10−11 if a Hamming distance threshold of 0.26 is used, meaning that up to 26% of the bits in two IrisCodes are allowed to disagree due to imaging noise, reflections, etc., while still declaring them to be a match).[23] While there are some medical and surgical procedures that can affect the colour and overall shape of the iris, the fine texture remains remarkably stable over many decades. Some iris identifications have succeeded over a period of about 30 years.

Iris recognition works with clear contact lenses, eyeglasses, and non-mirrored sunglasses. The early Sensar technology worked by first finding the face, then the eyes, and then took the Iris images. This was all done using infrared lighting. It is possible to identify someone uniquely in a dark room while they were wearing sunglasses.

Mathematically, iris recognition based upon the original Daugman patents or other similar or related patents define the strongest biometric in the world. Iris recognition will uniquely identify anyone, and easily discerns between identical twins. If a human can verify the process by which the iris images are obtained (at a customs station, entering or even walking by an embassy, as a desktop 2nd factor for authentication, etc.) or through the use of live eye detection (which varies lighting to trigger slight dilation of the pupil and variations across a quick scan which may take several image snapshots) then the integrity of the identification are extremely high.

Shortcomings

Many commercial iris scanners can be easily fooled by a high quality image of an iris or face in place of the real thing.[24] The scanners are often tough to adjust and can become bothersome for multiple people of different heights to use in succession. The accuracy of scanners can be affected by changes in lighting. Iris scanners are significantly more expensive than some other forms of biometrics, as well as password and proximity card security systems.

Iris recognition is very difficult to perform at a distance larger than a few meters and if the person to be identified is not cooperating by holding the head still and looking into the camera. However, several academic institutions and biometric vendors are developing products that claim to be able to identify subjects at distances of up to 10 meters ("Standoff Iris" or "Iris at a Distance" as well as Princeton Identity's "Iris on the Move" for persons walking at speeds up to 1 meter/sec).[22] [25]

As with other photographic biometric technologies, iris recognition is susceptible to poor image quality, with associated failure to enroll rates. As with other identification infrastructure (national residents databases, ID cards, etc.), civil rights activists have voiced concerns that iris-recognition technology might help governments to track individuals beyond their will. Researchers have tricked iris scanners using images generated from digital codes of stored irises. Criminals could exploit this flaw to steal the identities of others.[26]

The first study on surgical patients involved modern cataract surgery and showed that it can change iris texture in such a way that iris pattern recognition is no longer feasible or the probability of falsely rejected subjects is increased.[27]

Security considerations

As with most other biometric identification technology, an important consideration is live-tissue verification. The reliability of any biometric identification depends on ensuring that the signal acquired and compared has actually been recorded from a live body part of the person to be identified and is not a manufactured template. Besides a person's physical characteristics, which includes the eyes, one's voice and handwriting too, are not protected by the Fourth Amendment even though they are all constantly exposed.[28] Many commercially available iris-recognition systems are easily fooled by presenting a high-quality photograph of a face instead of a real face,[29] [30] which makes such devices unsuitable for unsupervised applications, such as door access-control systems. However, this is not the case with all iris recognition algorithms. The problem of live-tissue verification is less of a concern in supervised applications (e.g., immigration control), where a human operator supervises the process of taking the picture.

Methods that have been suggested to provide some defence against the use of fake eyes and irises include changing ambient lighting during the identification (switching on a bright lamp), such that the pupillary reflex can be verified and the iris image be recorded at several different pupil diameters; analysing the 2D spatial frequency spectrum of the iris image for the peaks caused by the printer dither patterns found on commercially available fake-iris contact lenses; analysing the temporal frequency spectrum of the image for the peaks caused by computer displays.

Other methods include using spectral analysis instead of merely monochromatic cameras to distinguish iris tissue from other material; observing the characteristic natural movement of an eyeball (measuring nystagmus, tracking eye while text is read, etc.); testing for retinal retroreflection (red-eye effect) or for reflections from the eye's four optical surfaces (front and back of both cornea and lens) to verify their presence, position and shape.[31] Another proposed method is to use 3D imaging (e.g., stereo cameras) to verify the position and shape of the iris relative to other eye features.

A 2004 report by the German Federal Office for Information Security noted that none of the iris-recognition systems commercially available at the time implemented any live-tissue verification technology. Like any pattern-recognition technology, live-tissue verifiers will have their own false-reject probability and will therefore further reduce the overall probability that a legitimate user is accepted by the sensor.

Privacy considerations

See main article: Visual privacy.

Deployed applications

Iris recognition in television and movies

See also

Further reading

External links

Notes and References

  1. Web site: Advances in Artificial Intelligence and Machine Learning, vol. 4, issue 2, pp 2152-2163 . cam.ac.uk.
  2. Web site: Understanding Biometric Entropy and Iris Capacity: Avoiding Identity Collisions on National Scales. cam.ac.uk. 12 August 2023.
  3. Web site: Choi . Tyler . 2022-06-13 . Iris recognition reaches the mainstream for identification, authentication Biometric Update . 2023-06-28 . www.biometricupdate.com . en-US.
  4. News: Zetter. Kim. Reverse-Engineered Irises Look So Real, They Fool Eye-Scanners. 25 July 2012. Wired Magazine. 2012-07-25.
  5. Web site: Apache Tomcat . 27 August 2013 . 28 June 2013 . https://web.archive.org/web/20130628070701/http://www.portal.uidai.gov.in/ . dead .
  6. Web site: UNHCR's new biometrics system helps verify 110,000 Myanmar refugees in Thailand | UNHCR UK.
  7. Web site: Blockchain could change the future of humanitarian aid. 3 January 2019.
  8. Web site: WFP Introduces Iris Scan Technology to Provide Food Assistance to Syrian Refugees in Zaatari | World Food Programme. 6 October 2016 .
  9. Web site: 'These changes show that WFP loves us.'. 20 March 2018.
  10. Web site: A Decade of Aadhaar: Lessons in implementing a foundational ID system | ORF.
  11. Web site: Biometrics on a mass scale.
  12. Daugman . John . 600 million citizens of India are now enrolled with biometric ID . SPIE Newsroom . SPIE-Intl Soc Optical Eng . 7 May 2014. 10.1117/2.1201405.005449.
  13. P. Grother, J. Matey, E. Tabassi, G. Quinn, and M. Chumakov, IREX VI: temporal stability of iris recognition accuracy, NIST Interagency Report 7948, pp. 1–3, 2013
  14. Adler, F.H., Physiology of the Eye (Chapter VI, page 143), Mosby (1953)
  15. Doggart, J.H., Ocular Signs in Slit-Lamp Microscopy, Kimpton (1949), page 27
  16. Daugman, J., "High confidence visual recognition of persons by a test of statistical independence", IEEE Transactions on Pattern Analysis and Machine Intelligence, 15 (11), pp 1148-1161 (1993)
  17. Web site: ICAO Document 9303: Machine Readable Travel Documents, Part 9: Deployment of Biometric Identification and Electronic Storage of Data in eMRTDs, 7th edition. 2015.
  18. Liu Y, Simon JD . Metal-ion interactions and the structural organization of Sepia eumelanin . Pigment Cell Res. . 18 . 1 . 42–8 . February 2005 . 15649151 . 10.1111/j.1600-0749.2004.00197.x .
  19. Meredith P, Sarna T . The physical and chemical properties of eumelanin . Pigment Cell Res. . 19 . 6 . 572–94 . December 2006 . 17083485 . 10.1111/j.1600-0749.2006.00345.x .
  20. Hosseini, M.S. . Araabi, B.N. . Soltanian-Zadeh, H. . Pigment Melanin: Pattern for Iris Recognition . IEEE Trans Instrum Meas . 59 . 4 . 792–804 . April 2010 . 10.1109/TIM.2009.2037996 . 0911.5462 . 2010ITIM...59..792H . 16646573 .
  21. Web site: MSite - Biometric Access Control for Construction Sites. www.msite.com.
  22. News: Biometric Trends: Will emerging modalities and mobile applications bring mass adoption?. Zach. Martin. SecureIDNews. 2011-03-23. 2013-07-14.
  23. "Probing the uniqueness and randomness of IrisCodes: Results from 200 billion iris pair comparisons." Proceedings of the IEEE, vol. 94 (11), 2006, pp. 1927-1935.
  24. Web site: Hacker Finds a Simple Way to Fool IRIS Biometric Security Systems . thehackernews.com. 2015-03-06 . 2017-03-17.
  25. News: Princeton Identity debuts a new walkthrough biometric scanner. Zack. Whittaker. TechCrunch. 2018-09-29. 2019-03-29.
  26. News: Iris scanners 'can be tricked'. BBC News. 2012-07-26.
  27. R. Roizenblatt, P. Schor et al. Iris recognition as a biometric method after cataract surgery. Biomed Eng Online. 2004; 3: 2
  28. Book: Hashemi. Soheil. Tann. Hokchhay. Buttafuoco. Francesco. Reda. Sherief. 2018 Design, Automation & Test in Europe Conference & Exhibition (DATE) . Approximate Computing for Biometric Security Systems: A Case Study on Iris Scanning . March 2018. 319–324 . en-US. IEEE. 10.23919/date.2018.8342029. 9783981926309. 5061011.
  29. Web site: Brewster . Thomas . Hacking Putin's Eyes: How To Bypass Biometrics The Cheap And Dirty Way With Google Images . 2023-06-28 . Forbes . en.
  30. Web site: Goodin . Dan . 2017-05-23 . Breaking the iris scanner locking Samsung's Galaxy S8 is laughably easy . 2023-06-28 . Ars Technica . en-us.
  31. Hsieh . Sheng-Hsun . Li . Yung-Hui . Wang . Wei . Tien . Chung-Hao . March 2018 . A Novel Anti-Spoofing Solution for Iris Recognition Toward Cosmetic Contact Lens Attack Using Spectral ICA Analysis . Sensors . en . 18 . 3 . 795 . 10.3390/s18030795 . 29509692 . 5876747 . 2018Senso..18..795H . 1424-8220 . free .
  32. Web site: Identification in the Twinkle of the Eye. europeanbusiness.gr.
  33. Web site: Behin Pajouhesh Eng. Co. - Behin IRIS (Automated IRIS-Based Identification System).
  34. Web site: 2002-04-16. Bank United Announces Results of First U.S. Iris Recognition ATM Consumer Survey. 2021-06-05. www.atmmarketplace.com. en.
  35. http://www.irisguard.com/
  36. http://innovation.unhcr.org/labs_post/cash-assistance/
  37. Web site: UNHCR Innovation Biometric Cash Assistance. innovation.unhcr.org. 2016-11-03.
  38. Web site: Aadhaar - Unique Identification. portal.uidai.gov.in. 2015-11-02. https://web.archive.org/web/20170604172010/https://portal.uidai.gov.in/uidwebportal/dashboard.do. 2017-06-04. dead.
  39. Web site: STQC Certificate granted suppliers.
  40. News: Police to begin iPhone iris scans amid privacy concerns . 2011-07-20 . Reuters . 2012-09-26 . 2012-09-18 . https://web.archive.org/web/20120918204431/http://www.reuters.com/article/2011/07/20/us-crime-identification-iris-idUSTRE76J4A120110720 . live .
  41. Web site: Biometric Identity Management System. UNHCR. 2015-11-02.
  42. Web site: Iris scans at Amsterdam Airport Schiphol. Amsterdam Airport Schiphol. 2013-07-14. 3 December 2013. https://web.archive.org/web/20131203033202/http://www.schiphol.nl/Travellers/AtSchiphol/Privium/Privium/IrisScans.htm. dead.
  43. Web site: Restricted area identity card . dead . https://web.archive.org/web/20120514201806/http://www.catsa-acsta.gc.ca/page.aspx?id=35&pname=IdentityCard_CarteIdentite&lang=en . May 14, 2012 .
  44. News: Backgrounder. Canadian Air Transport Security Authority (CATSA).
  45. Web site: Pascu . Luana . 2019-10-29 . Nexus kiosks at Canadian airports upgraded with facial recognition Biometric Update . 2023-07-18 . www.biometricupdate.com . en-US.
  46. Web site: CANPASS Air . 2010-11-17 . https://web.archive.org/web/20121227034014/http://www.cbsa-asfc.gc.ca/prog/canpass/canpassair-eng.html . 2012-12-27 . dead .
  47. Web site: IRIS . dead . https://web.archive.org/web/20080501055546/http://www.ukba.homeoffice.gov.uk/managingborders/technology/iris/ . May 1, 2008 .
  48. News: Manchester Airport eye scanners scrapped over delays . Manchester Evening News.
  49. News: Airport eye scanners to be reviewed . The Press Association, printed in The Independent . Wesley . Johnson . 16 February 2012 .
  50. Web site: How the Afghan Girl was Identified by Her Iris Patterns. John. Daugman. University of Cambridge. 2013-07-14.
  51. Web site: Google data center security. https://ghostarchive.org/varchive/youtube/20211221/cLory3qLoY8 . 2021-12-21 . live. . 2011-04-13. 2013-07-14.
  52. Book: Saylor, Michael . The Mobile Wave: How Mobile Intelligence Will Change Everything . registration . 2012 . Perseus Books/Vanguard Press . 978-1593157203 . 98 .
  53. News: Lance. Whitney. CNET. Iris recognition gadget eliminates passwords. https://archive.today/20120710212612/http://news.cnet.com/8301-1009_3-20062254-83.html?part=rss&subj=news&tag=2547-1_3-0-20. dead. 10 July 2012. 2011-05-12. 2011-05-12.
  54. News: SRI International Sarnoff launches iris biometric vehicle access control system. Biometric Update. 2013-04-10. 2013-07-15.
  55. News: Novant's new iris scan connects patients to records . dead . https://web.archive.org/web/20140407083831/http://www.charlotteobserver.com/2013/08/11/4227398/novants-new-iris-scan-connects.html . April 7, 2014 .
  56. Web site: Indian state selects iris based identity management solution by IriTech. BiometricUpdate. 2015-11-02. en. 2015-03-11.
  57. Web site: Fujitsu Releases ARROWS NX F-04G - Fujitsu Global.
  58. Web site: Seifert . Dan . 2016-08-02 . Samsung Galaxy Note 7 arrives August 19th with curved display, iris scanner . 2023-06-08 . The Verge . en-US.
  59. News: Gibbs . Samuel . 2016-08-03 . Samsung unveils Galaxy Note 7 phablet you can unlock with your eyes . en-GB . The Guardian . 2023-06-08 . 0261-3077.
  60. News: Sullivan . Mark . 2016-08-22 . Samsung's Galaxy Note 7 Iris Scanner Is A Welcome New Authentication Option . Fast Company .
  61. Web site: These changes show that WFP loves us.. World Food Programme Insight. 2018-07-19. en. 2018-03-19.
  62. Web site: Zain.
  63. Web site: Shakir . Umar . 2023-06-05 . Apple's Vision Pro headset uses iris scanning for logins with Optic ID . 2023-06-07 . The Verge . en-US.
  64. News: 'Minority Report' May Come to Real World With Iris Recognition. Chris. Dolmetsch. Bloomberg L.P.. 2011-02-01. 2013-07-14.
  65. Web site: Iris Recognition and "The Simpsons Movie". John. Daugman. University of Cambridge. 2013-07-15.