Princeton Identity CEO: Iris recognition technology is winning biometric battle

Samsung will launch its latest phone, the Galaxy S9, at the Mobile World Congress in Barcelona later this month.

The phone, which is meant to compare and compete with Appleā€™s iPhone X, will feature all of the latest upgrades. It also will include a feature from a New Jersey-based company that continues to make the Galaxy line unique: the ability to unlock your phone simply by using your eyes.

How will Mark Clifton, founder and CEO of Princeton Identity, celebrate another launch of his technology that will bring millions in revenue?

By working in a small office and creative studio in a commercial office strip mall in Hamilton Township, a few miles away from the state capital.

Iris recognition authentication in a phone? Thatā€™s old news for Clifton and Princeton Identity.

Its technology was in the previous two versions of the phone. And, as Clifton will tell you, there have not been many updates in the technology since it appeared in 2016.

Donā€™t be confused: Clifton is thrilled by the use of the feature in the phone. He said the ever-growing use of biometric recognition is good for the growth of the company and the industry.

In fact, he credits Appleā€™s introduction of fingerprint technology in 2013 as a milestone moment for biometrics, even while saying it has proven to be inferior to iris recognition authentication.

ā€œItā€™s been a long time for biometrics to get to where it is today,ā€ he said. ā€œItā€™s taken something like Apple adding the fingerprint on the phone to actually get the breakthrough to happen.

ā€œThat was kind of the seminal moment for biometrics. When Apple added that, people said, ā€˜Fingerprints arenā€™t just for the FBI anymore. I can use biometrics for other things because it actually is pretty convenient.ā€™ā€

Convenience is just one half of the benefit, Clifton said.

ā€œWe are the convergence of convenience and security,ā€ he said.

Because of that, Clifton feels the use of biometrics ā€” particularly the use of iris recognition authentication ā€” is on the verge of an explosion of use in all aspects of business and society around the globe.

Iris recognition authentication can be used (and often already is being used) to gain access to an office building or job site (or even punch in on a modern-day time clock), go through customs at a border crossing (especially in airports), start a car, access medical records or financial data, or purchase just about anything at any time without having to reach for your wallet.

For all its potential improvements, iris recognition authentication also is pushing the world to more of a Big Brother society. In India, thatā€™s a good thing, as it has proven to be an effective means of identification of its more than 1 billion population. In China, may be less so, as some fear it is being used to track the movement of its citizens.

But all of these uses are why Clifton is excited about the future of his industry.

And they are why he wonā€™t be in Barcelona on Feb. 25 for the latest Galaxy launch.

Clifton will be Jersey, working on what he feels is the next big thing: even more uses for iris recognition authentication.

###

Iris recognition authentication is far superior to any other type of biometric recognition.

At least, thatā€™s been Cliftonā€™s feeling since he started at SRI International in 2008 (it spun off Princeton Identity in 2016). Clifton feels high rates of false readings for both the fingerprint technology and facial recognition have proven the superiority of iris recognition beyond a doubt.

Iris recognition authentication, he said, is superior because itā€™s far more precise.

ā€œI could enroll you at age 3 and I could recognize you at age 50, no problem,ā€ he said. ā€œYour iris doesnā€™t change. Your fingerprints change, your face changes, your weight changes, everything else changes, your iris doesnā€™t. Itā€™s stable.ā€

The reason? Your iris is far more intricate and complex (in other words, unique) than you realize.

Eighty percent of the world has brown eyes, but they are all different, Clifton said.

ā€œThe iris has an immense amount of information,ā€ he said. ā€œThe iris is the color of the eye; itā€™s a muscle, formed very early. It has 250 points per eye of identification.

ā€œStatistically, we talk about false accepts and false rejects. Thatā€™s the measure people use in biometrics. So, on a false accept basis, if I was just recognizing one eye, the chance of getting a false accept is about 1 in 1.4 million. And if I do both eyes, itā€™s 1 in 1.4 trillion. Itā€™s like DNA.

ā€œIdentical twins? No problem, I can tell them apart even though their DNA is identical. Each eye is unique, and each person is unique.ā€

Clifton said it canā€™t be copied, too.

A scenario where a villain puts in a false eye to gain access to your identity? Clifton said that can only take place in the movies.

And itā€™s not because the iris is so complicated that it canā€™t be copied. But, rather, unlike your fingerprint or your face, your iris has a life of its own.

ā€œItā€™s a muscle,ā€ he said. ā€œAs soon as there is no blood flow, it changes and itā€™s not going to be the same.

ā€œIf you expire, your iris is no good just a few hours after that. No one can steal your iris.ā€

###

While its use in phones brought notoriety and acceptance, Clifton said the next big area of use for iris recognition authentication is in access control.

And itā€™s not just logging into your computer at work (though it can be done ā€” and without the constant annoyance of changing a password that can be hacked or stolen).

Itā€™s getting into your building or workplace ā€” and moving around in that workspace, Clifton said.

ā€œOur first market is access control,ā€ he said. ā€œAnd, basically, we got into that market because that was the market that was rapidly adopting biometrics.

ā€œFingerprints and facial recognition systems werenā€™t really working well, and people were realizing that cards were not very secure.ā€

Iris authentication recognition is proving to be better, Clifton said.

ā€œWe have systems down in South American oilfields, where they were trying to use facial recognition for access,ā€ he said. ā€œBut the guys get dirty on the platforms; it didnā€™t work. So, they used our stuff and it worked. Theyā€™re pretty happy.ā€

And, at big sites like these, controlling access helps control payroll, Clifton said.

ā€œWe have an installation at a Middle East construction company,ā€ he said. ā€œThey have 50,000 employees at 35 different sites. Employees were punching in and they knew they were getting ripped off in payroll. A friend would punch them in or somebodyā€™s cousin would show up for him and heā€™s not qualified.

ā€œThey installed our system for clocking in and clocking out. Itā€™s just time and attendance. Itā€™s been going for more than three years. Itā€™s getting heavily used at 35 different sites. They have hard hats, they get dirty, but it works. And they know they donā€™t get paid unless they register, so they do it.

ā€œOnce they get it ā€” and it takes less than five minutes to train ā€” it becomes very efficient. In the first year, they reduced their payroll 10 percent. All payroll fraud was immediately eliminated.ā€

Ease of use is great. As is payroll savings. But Clifton said it wasnā€™t until the cost to implement an iris recognition authentication program dropped considerably that Princeton Identity could build a successful business plan.

Clifton said the cost to install and use iris technology is comparable to that of the more common pass card entry systems.

A system that reads the iris goes for about $2,000 a unit, while the PC server that records and stores the information may be double that.

As with any business-to-business product, there are volume discounts, but, as a starting point, Clifton said a facility that requires eight readers (think of both external and internal doors) plus the server technology could be outfitted for approximately $20,000.

More savings, Clifton said, come over time because companies are no longer required to buy replacement pass cards ā€” something that could cost anywhere from $5 to $50 per card, depending on what is stored on them.

Clifton said Princeton Identity worked with a global client that was replacing up to 100,000 access cards a year.

ā€œCards are not very secure,ā€ he said. ā€œYou can give it to someone else, you can lose it, so someone else can use it. And thereā€™s a recurring cost because of loss. With biometrics, thereā€™s no recurring cost.ā€

Setup, Clifton said, is easy. And can be done in a morning.

People can be registered in approximately 30 seconds, thought it depends on how much information a company wanted to capture.

Clifton said Princeton Identity can set a system to need an authentication of one eye or both. And from there, it can add facial and even fingerprinting (yes, it does all of that, too).

But even with the most complex needs ā€” Clifton said Princeton Identity is working at a military base in Georgia that required all five points of authentication ā€” registering individuals can be done quickly.

ā€œWe did 14 Marines in 11 minutes,ā€ he said.

###

Access control is not just about personnel and payroll.

Tracking who is coming and going also supports anti-terrorism programs ā€” whether it be at an oilfield or in an airport, Clifton said.

Thatā€™s why border points of entry, especially airports, are another huge growth area for Princeton Identity, he said.

Princeton Identity operates in multiple airports around the world, including Dubai, where it has an office for personnel.

ā€œYou go through e-gates,ā€ he said. ā€œIf youā€™re registered, you can use your passport. You put your passport in and it recognizes you. It captures your face and iris and it matches you against the database.ā€

Clifton understands there is a concern for identity theft at registration, but he said that concern is no greater than identity theft by obtaining a passport.

ā€œThere are people there that are going to do vetting of the person,ā€ he said. ā€œWhen you originally register, there is somebody there to vet that you are that person. Itā€™s like a driverā€™s license, where you have to put in your six pieces of identification. You have to do that, but after the initial stage, youā€™re done.ā€

Clifton said airports need to move to this system to combat their biggest problem: They have too many travelers in a space that cannot be expanded.

ā€œAirportsā€™ biggest issue is that the number of travelers are going up,ā€ he said. ā€œThe infrastructure is not scaling at the same rate. So, they have got to make the existing infrastructure handle more people. How do you do that? You canā€™t throw more people at the problem, you have to use technology to solve that problem.ā€

And, he said, solving the problem doesnā€™t mean compromising security. Clifton feels biometrics increases security. For proof, he points to his biggest airport client.

ā€œI always tell people in Dubai, they live in a really bad neighborhood, so they want to make it simple and seamless, but they want to have really high security,ā€ he said. ā€œThey canā€™t have any screwups. They are trying to be a beacon in the Middle East in regard to how it is supposed to be, and they are really sensitive in how they look.ā€

Airports, he said, get another benefit from the program. More revenue.

The faster travelers can get through customs or security checkpoints, the more money they can spend at duty-free shops and the increasingly growing number of food and retail options.

The reason for such growth, Clifton said, is simple.

ā€œIā€™ve had airport experts tell me the biggest money maker is in shopping,ā€ he said. ā€œThey hope to break even on everything else but make a profit on shopping. Getting people through gates faster helps them do that.

ā€œFor all these airports, itā€™s the only way they make a profit. The duty-free zones. Dubai made $2.5 billion last year duty free. Incheon (in South Korea) was close to $1 billion. They donā€™t want you standing in a security line. They want you shopping.ā€

If youā€™re thinking this can be an economic boon for Newark Liberty International Airport, think again. Or, at least, put that thought on hold.

Clifton said airports in the U.S. are way behind in the use of this technology (and he said some experiments with facial recognition have proven to be a failure).

Clifton said Princeton Identity has not talked with Newark airport officials, but he said any such talks would start with the Department of Homeland Security. Talks regarding Newark Liberty have not taken place with DHS either, he said.

ā€œThe U.S. is a third-world country when it comes to airports,ā€ he said. ā€œYou go to Dubai, you go to Schiphol (in Amsterdam), any of these other airports, and theyā€™re organized so much more efficiently. As a taxpayer, it makes me crazy; youā€™re paying for their ineptitude. Youā€™re paying for new restaurants instead of improving the flow.

ā€œCongress put in the requirement for the visa exit program back in the mid-90s to add biometrics. Theyā€™re just doing it now, 20 years later. Thatā€™s the progress of the U.S. government.ā€

###

While Clifton will not make the launch of the latest Samsung phone in Barcelona, heā€™ll have plenty of opportunities to travel the globe to talk about iris recognition authentication and its impact on business (and society) throughout the world.

In March, heā€™ll be the keynote speaker at the first Global Iris Recognition Summit in Beijing. Itā€™s one of approximately a dozen trips heā€™ll make outside of the United States.

For now, the adoption of iris recognition authentication is happening more quickly outside of the country.

ā€œTheyā€™re coming to us,ā€ Clifton said. ā€œTheyā€™ve heard about our technology.

ā€œEurope is looking at this. How do you move people seamlessly through gates and things like that without having all of the disruptions you typically have with biometrics?

ā€œWeā€™ve been contacted by the U.N., the government of Turkey. They have 2.8 million refugees from Syria. How do they keep track of all these people? These people didnā€™t come with papers.

ā€œWe just got contacted by a Scandinavian country which is very interested in seamless access control.

ā€œI see the Middle East and Asia adopting quickly. Theyā€™re going to biometrics. I see Africa coming along because they want to get to a cashless society. Nigeria has a whole program.

ā€œIndia wants to get there, and to do that, you need to be able to authenticate people. When you have national ID programs, like India and China, that are going to require iris, those applications are just going to explode.ā€

Clifton, however, said Princeton Identity is building up its national sales, too.

The company has 39 employees worldwide. Thatā€™s up nine from the year before. And Clifton said they hope to add a half-dozen more by the end of the year.

And while the development is done in New Jersey ā€” and the manufacturing, Clifton proudly boasts, is done in New Jersey and Connecticut ā€” the next wave of employee expansion will be throughout the U.S.

ā€œIā€™ve just hired a VP of sales and marketing and his target, his mission is to reach the midsize companies from 100 to 1,000 employees,ā€ Clifton said. ā€œWeā€™re setting up regional sales teams. Iā€™ve got three regional sales managers.

ā€œThey will go out strictly on a commission basis and touch 300-400 customers and makes sales in the physical security space. Weā€™re setting up those networks. Thatā€™s really our next initiative in the access control space.ā€

Princeton Identity had revenues of just under $10 million in 2017, a number Clifton hopes to double in 2018.

Clifton wouldnā€™t disclose his New Jersey customers, except to say Princeton Identity serves two of the Top 10 data centers in the state and some of the stateā€™s global players.

Clifton thinks retail is the next big growth area.

ā€œI think you could start to see it in the retail industry in the next two years,ā€ he said. ā€œAt least in pilots. Weā€™re talking to some really big retailers.

ā€œRetailers hate banks because they think they are getting ripped off. Thatā€™s the most fundamental truth. If a retailer can come up with a system thatā€™s going to reduce the fraud and force banks to reduce their rates, itā€™s going to continue to drive innovation.ā€

Banks and credit card companies are looking to move into the space, too, he said.

Clifton said they know they need to keep up with technology ā€” especially technology that helps reduce fraud and increases convenience.

Clifton laughed when he talked about the process he had to go through when Princeton Identity went for its own financing.

ā€œAs a startup, you have to set up bank accounts,ā€ he said. ā€œWe were setting up some account and it required authentication. I was 30 minutes on the phone answering the dumbest questions, like the name of your first pet. It was just incredible. It was so arcane.

ā€œI was in the bank getting something notarized and they just needed my driverā€™s license. Are you kidding me? Ask any college kid, right now, you can get an ID, a driverā€™s license at whatever birthday you want, online.ā€

Clifton thinks iris recognition authentication is the solution to some many issues.

ā€œIt used to be convenience and security were diametrically opposed,ā€ he said. ā€œWeā€™ve lined them up. So, you can have security and it can be convenient. Thatā€™s the fundamental difference I think we bring to the table.ā€

Cool and convenient

If former Apple head Steve Jobs taught the business world one thing, itā€™s that products not only have to be convenient, they have to be cool.

Mark Clifton, the CEO of Princeton Identity, an iris authentication recognition company in Hamilton Township, agrees.

ā€œMillennials want convenience,ā€ he said. ā€œThink of retail. Whatā€™s more convenient than just using your eyes to pay for something.

ā€œWhy donā€™t people use Samsung pay? Itā€™s like three or four steps and thatā€™s too much. I can pull out my credit card and itā€™s faster. Whoā€™s going to win that battle? Whatever is easiest is what people will adopt.ā€

Then thereā€™s coolness. The St. Louis Cardinals baseball team is using Princeton Identity to help players gain access to their clubhouse.

ā€œThe guys come in and theyā€™re carrying a bunch of bags,ā€ Clifton said. ā€œThey donā€™t have to put them down, thatā€™s convenient. And they can open the door with their eyes, thatā€™s cool. They just look over and the door opens up.ā€

The company

Princeton Identity, based in Hamilton Township, is a spinoff of SRI International, a nonprofit, independent research center based in Menlo Park, California, that serves government and industry.

Mark Clifton, who joined SRI in 2008, helped Princeton Identity spin off into its own for-profit company in 2016. His task throughout has been to make iris recognition authentication a profitable biometric company.

ā€œThis technology has been worked on through research funding by the federal government from the late ā€™90s to the 2000s,ā€ he said. ā€œWhen I got to SRI in 2008, this technology filled probably half of (an average-sized) room, required six or seven cameras and cost a quarter of a million dollars.

ā€œI thought, thereā€™s something here, but I have to get it down to something practical. Iā€™ve got to get the cost down and the size down. The technology of the cameras. Iā€™ve got to use professional video cameras, almost TV cameras. And you also have to be able to be easy to use. Weā€™ve really tried to make it easy, fast superior accuracy and security, but also get the cost down to where itā€™s acceptable for the average industry.ā€

At the same time, SRI became the biometric company of choice for Samsung, which wanted to join forces.

ā€œSamsung said, ā€˜We want to invest in you guys,ā€™ā€ Clifton said. ā€œSRI is a not-for-profit. It took over a year to convince management to work a deal and basically convert the license over to Princeton Identity and then cut our deal. The venture group at Samsung funded our spinout. It was obviously pushed by the mobile group here.

ā€œThey have a percentage of stock. They are a major shareholder, but they are not in control. SRI has a piece, Samsung has a piece and the employees have a piece. We still work with Samsung, they are still promoting us.ā€

How it works

Princeton Identity can recognize your iris as you walk (or even run) by a scanner, according to CEO Mark Clifton.

These scanners can pick up your iris through sunglasses or even contacts. And even do it outside on a sunny day when you are squinting.

ā€œOur patent, in really fundamental terms, is a flash photographer of the iris,ā€ Clifton said. ā€œWe do something that we call ā€˜strobingā€™ and we synch that with the camera. On the phone, you see a little red light, thatā€™s actually flashing, itā€™s just flashing fast. Itā€™s synched in with a camera and that will do a recognition.Ā  Fundamentally, the light blasts and the camera captures.

ā€œEighty percent of the worldā€™s population has brown eyes. If you used visible photography, or cameras, on brown eyes, you donā€™t see enough differences to get the information out. Itā€™s a red light, but itā€™s really not that visible. Itā€™s right on the edge of visible light, so you donā€™t really know whatā€™s happening. Itā€™s not like somebody is flashing white light in your eyes, so it doesnā€™t cause a reaction.ā€

Thereā€™s only one thing that can stop recognition, Clifton said. Text neck.

If people attempt to go through a scanner while looking straight down at their phone it may not be able to pick up their eyes.

Conversation Starter

To learn more about Princeton Identity, contact Bob McKee, VP of sales and marketing at Bob.McKee@princetonidentity.com or call 609-256-6994.