Fed Data-Mining Research Lives On

(CBS/AP)  The government is still financing research to create powerful tools that could mine millions of public and private records for information about terrorists despite an uproar last year over fears it might ensnare innocent Americans.

Congress eliminated a Pentagon office developing the terrorist tracking technology because of the outcry over privacy implications. But some of those projects from retired Adm. John Poindexter's Total Information Awareness effort were transferred to U.S. intelligence offices, congressional, federal and research officials told The Associated Press.

In addition, Congress left undisturbed a separate but similar $64 million research program run by a little-known office called the Advanced Research and Development Activity (ARDA) that has used some of the same researchers as Poindexter's program.

"The whole congressional action looks like a shell game," said Steve Aftergood of the Federation of American Scientists, which tracks work by U.S. intelligence agencies. "There may be enough of a difference for them to claim TIA was terminated while for all practical purposes the identical work is continuing."

Poindexter's goal was to predict terrorist attacks by looking for telltale patterns of activity in passport applications, visas, work permits, driver's licenses, car rentals, airline ticket purchases and arrests, as well as credit transactions and education, medical and housing records.

"It entailed surveillance of all kinds of ordinary Americans, not terrorists, and all kinds of ordinary transactions, from credit card purchases to health care transactions," Aftergood told CBS Radio News.

But the research created a political uproar because such reviews of millions of transactions could put innocent Americans under suspicion. One of Poindexter's own researchers, David D. Jensen at the University of Massachusetts, has acknowledged that "high numbers of false positives can result."

Disturbed by the privacy implications, Congress last fall closed Poindexter's office, part of the Defense Advanced Research Projects Agency, and barred the agency from continuing nearly all his research. Poindexter quit government, claiming his work was misunderstood.

But the work didn't die.

In killing Poindexter's office, Congress agreed to continue paying to develop highly specialized software to gather foreign intelligence on terrorists.

In a classified section summarized publicly, Congress gave money to the "National Foreign Intelligence Program," without openly identifying which intelligence agency would do the work.

It said the research could only be carried out overseas or against non-U.S. citizens in this country, not against Americans on U.S. soil.

Congressional officials declined to say which Poindexter programs were killed and which were transferred, but people with direct knowledge of contracts told AP that the surviving programs included some of 18 data-mining projects known as Evidence Extraction and Link Discovery in Poindexter's research.

Poindexter's office described that research as "technology not only for 'connecting the dots' that enable the U.S. to predict and pre-empt attacks, but also for deciding which dots to connect." It was among the government's most controversial research programs.

Ted Senator, who managed that research for Poindexter, told government contractors that mining data to identify terrorists "is much harder than simply finding needles in a haystack."

"Our task is akin to finding dangerous groups of needles hidden in stacks of needle pieces," he said. "We must track all the needle pieces all of the time."

At the University of Southern California, Professor Craig Knoblauch said he developed software that automatically extracted information from travel Web sites and telephone books and tracked changes over time.

Privacy advocates feared that if such powerful tools were developed without limits from Congress, government agents could use them on any database.

Sen. Ron Wyden, D-Ore., who fought to restrict Poindexter's office, is trying to force the executive branch to tell Congress about all its data-mining projects. He recently pleaded with a Pentagon advisory panel to propose rules on reviewing data that Congress could turn into laws.

The Poindexter and ARDA projects are vastly more powerful than other data-mining projects, like the Department of Homeland Security's CAPPS II program to classify air travelers or the six-state, Matrix anti-crime system funded by the Justice Department. They use commercial data-mining technology that Poindexter's office said would "take decades" to build "the new databases we need to combat terrorism."

Aftergood said there is a line in information-gathering between protecting people and invading their privacy.

"In order for us to decided where that line should be drawn, we need to have the public debate. That debate is not advanced by taking the whole issue behind closed doors," he said. "It may well be that this technology does have a useful application to the war on terrorism, but it's essential that it be subjected to oversight including some degree of public oversight."