Saturday, June 09, 2007

The New York Times

June 10, 2007
Novelties

The Door Key That Can’t Be Misplaced

IT’S a common juggling act on the doorstep: rummaging for the house keys with one hand while balancing a bag of groceries with the other. Now a manufacturer is aiming to streamline household entry with a deadbolt lock that reduces the need to fish for keys. Instead, the lock opens with the swipe of a finger.

The lock is a scanner that stores the fingerprints of authorized users. If your print matches the stored ones, the bolt slides open smartly with a crisp, satisfying clack, welcoming you home the biometric way.

The lock looks nothing like the bulky commercial scanners that read entry cards in building lobbies. It is small, close to the size of a standard lock, and comes in upscale finishes like antique bronze and silvery nickel, suitable for home décor. The sensor is hidden in a teardrop-shaped overhang below the keyhole.

The lock, called SmartScan, is made by Kwikset of Lake Forest, Calif. ($199). The device is powered by four AA batteries and requires no wiring. It works by emitting radio waves that detect distances between the ridges and valleys of a finger just below the surface of the skin, said Michael Maridakis, the chief electronic engineer for the hardware and home improvement group of Black & Decker, which owns the Kwikset brand.

Because the scanner reads subdermally, it is not affected by dirt or oil on the fingertips. “It will even work for fingers that have minor cuts and scratches,” Mr. Maridakis said.

He said the lock’s batteries would last about a year if you used it about 20 times a day. The deadbolt also works with standard keys that accompany it.

The SmartScan can also be programmed to grant temporary access — for someone to enter your home from 8 to 10 a.m. on a particular day, for instance, to take the dog for a walk. The lock holds about 50 different fingerprints.

Before installing the lock, I looked into the security of biometric locks, especially after reading about the research of Stephanie Schuckers, an associate professor of electrical and computer engineering at Clarkson University in Potsdam, N.Y. She has fooled other biometric locks with devices like fake fingers made from Play-Doh and gelatin. An episode of the television show “MythBusters,” too, showed ways to get past other biometric locks.

Professor Schuckers, it turns out, is not worried about the security of residential biometric fingerprint locks. “The risk is no greater than someone taking your keys and making a copy,” she said. “In fact, it’s a lot harder to fool the system with a fake finger.”

Over all, she said, biometric locks tend to improve residential security. “Keys get lost, but you always have your fingerprint with you,” she said.

Bruce Schneier, founder and chief technical officer of the security company BT Counterpane in Mountain View, Calif., says that while biometric locks may not be appropriate for guarding Air Force One, they are suitable for use in homes.

“Honestly, who’s going to get a photo of your fingerprint to trick the scanner?” he said. “If I had a photo of your key, I could fool your lock. I can also get a rock and throw it in your window.”

Biometric door locks have an advantage, he said, because they store information locally, not centrally, where it might be hacked. “The fingerprint reader says, ‘Yes, it’s you,’ ” he said, just as other such readers can do for applications like authorizing owners of cellphones and computers. “It’s a great idea,” he said. “I’m amazed there aren’t more of them.”

Reassured, I did a test run. A friend set up the lock in a room inside my house, taking out the existing door knobs and latch, sliding the new deadbolt into the hole and screwing in the housing for the biometric controls. The process took about 20 minutes.

From the outside, the deadbolt looked much like any other, except for the overhang below the keyhole. The assembly on the back of the door, though, was different: it held the four batteries, an L.C.D. display screen and a keypad used to program the lock.

After the deadbolt direction was set, using the keypad and following the instructions on the L.C.D. screen, I “enrolled” my fingerprint by swiping it three times across the sensor. Once registered, I opened and closed the bolt several times successfully. (To close the lock, you tap the sensor three times.) Pleased with my quick progress, I went to bed.

Pride goeth before a fall. When I returned the next morning, my memory of the exact motions I’d used to open the door had evaporated. I swiped and swiped, but the door wouldn’t budge. Many speeds and angles can be used in swiping a finger, I gradually realized, and I could no longer recapture the technique I’d used the night before.

Humbled, I started from scratch, but this time I paid close attention to the positioning of my swipe, and followed the advice of the instructions and frequently asked questions in the manual: I placed my thumb on the cylinder as a pivot to control speed and angle, and noted where my thumb was. I put the first joint of my finger under the teardrop, and noticed where that first joint was (facing up).

Once I had recorded the first fingerprint, I enrolled the same finger again so the scanner would have a choice. I also lowered the default “high” security setting, which requires 20 matching points in the fingerprints, to “normal,” which requires 15.

Then I tried again, and all entries and exits proceeded smoothly.

My difficulties were not surprising, said Professor Schuckers, who says that biometric devices, like any other new technology, require training. “You have to learn how to run the lock just as you had to learn how to run your cellphone,” she said. Standard locks are easy to use because people have already put in time to learn them. “We are all trained how to use keys, from when we are young,” she said.

IT has been two weeks since my lock was installed, and it continues to work, although I worry that I will lose my touch, like a shortstop who can no longer throw reliably to first base, or the person who’s swiped an I.D. or subway card through a turnstile for years, but suddenly faces a “please swipe again” display.

So far, though, the only problem is that the lock occasionally won’t close when I tap it. When that happens, I wiggle the mechanism a few times and start again, and all is well. That tip, by the way, is also in the frequently asked questions, which I now read respectfully.