biometric

TECHNOLOGY TODAY ISSN 0969-4765 June 2010 www.biometrics-today.com government Contents

FBI moves to next phase of News Biometrics set to boom in North America, Next Generation Identification says Frost & Sullivan 1 EBF announces biometrics research award he Next Generation Identification the RISC fingerprint database,” explains Mike for PhD students 2 T(NGI) project – a multimodal Moore, NGI programme director. “For the first Panasonic offers mobile capture device 2 biometric system for the US Federal time, the law enforcement community can use NEC opens excellence centre in India 3 Bureau of Investigation (FBI) – has web-based transactions in addition to the existing Sagem morphs into Morpho and launches moved into its second phase. data input mechanisms, to determine whether a new card technology 3 Increment 2 will develop a Repository for suspect is a wanted person within RISC.” New South Wales gathers biometric data Individuals of Special Concern (RISC). This is Forthcoming developments will include from driving licences 3 essentially a fingerprint database, managed by enhancing latent fingerprint matching accu- Biometric ID for job scheme that targets the FBI’s Criminal Justice Information Services racy, and introducing palm prints to the India's poor 4 (CJIS) division, which includes data on: wanted system. NGI is designed to accommodate New US research focuses on identifying persons; known or ‘appropriately suspected’ ter- new biometric modalities as they mature and and tracking terrorists 4 rorists; people on the Sex Offenders Registry; become important to law enforcement. Poland rolls out Europe’s first biometric and other ‘persons of special interest’. Earlier this year the NGI programme ATM machines 5 The NGI programme is led by Lockheed passed a Critical Design Review (CDR) and Smart Card Alliance reports on Martin and includes Accenture; BAE Systems completed final delivery of more than 800 immigration reform 12 Information Technology; Global Science & Advanced Technology Workstations. The new Gemalto personalises Turkish passports 12 Technology (GST); IBM; and Innovative machines replaced ageing Integrated Automated Management & Technology Services (IMTS). Fingerprint Identification System (IAFIS) work- Cross Match takes further action against Suprema 12 “This capability gives law enforcement users stations used by the FBI’s service providers and more speed and flexibility in how they search analysts.

market intelligence Features The body as password 6 Biometrics are set to become part of our Biometrics boom in North America everyday lives, says Peter Weinzierl of Siemens. he biometrics market in North research analyst at Frost & Sullivan. “Initiatives TAmerica is set for a period of by biometric vendors and continuous invest- healthy growth, says a new report from ments in R&D to offer highly accurate and Government biometrics: the ups Frost & Sullivan. It’s being driven by affordable products will considerably enhance and downs 8 major security programmes, including prospects for biometrics in the coming years.” Some low-profile government-led national ID projects and e-passports. The consumer market is also playing a sig- biometrics programmes are just getting quietly on with the job, says Steve Gold. Total revenues for the biometrics market came nificant part in boosting the size of the market. to $364.4m in 2009, says the report, which Consumer products provide a market in them- estimates that this will rise to $1.59bn by 2016. selves – with, for example, fingerprint scanners This is being helped by the recent maturing of and facial recognition systems becoming com- Regulars the technologies involved, with much higher mon on computers, digital cameras and other News in Brief 3 performance levels and accuracy rates. household products. Product News 4 “With the proliferation of crime due to the Frost & Sullivan points to advanced tech- Events Calendar 5 economic meltdown, the need for optimised nologies such as brain and DNA fingerprinting Company News 5 security was apparent across government organ- as providing the next big boost. Comment 12 isations, financial institutions, retail and health- care industries,” says Neelima Sagar, senior Continued on page 2...

ISSN 0969-4765/10 © 2010 Elsevier Ltd. All rights reserved. This journal and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Photocopying Single photocopies of single articles may be made for personal use as allowed by national copyright laws. Permission of the publisher and payment of a fee is required for all other photocopying, including multiple or systematic copying, copying for advertising or promotional purposes, resale, and all forms of document delivery. Special rates are available for educational institutions that wish to make photocopies for non-profit edu- cational classroom use. news

...Continued from front page drawn from universities around Europe, the European Commission and industry. Editorial Office: It’s not all plain sailing, says the report. The The winner will receive a commemorative Elsevier Ltd The Boulevard biometrics industry has suffered like many others medal and a E2,000 honorarium. Langford Lane in the global financial slowdown. And a signifi- A separate jury – comprised of specialists Kidlington Oxford OX5 1GB, UK cant part of its business is wrapped up with large from the business and public sector – will judge Fax: +44 (0) 1865 843973 government projects. These typically have long the business potential of the proposed papers, Email: [email protected] Website: www.biometrics-today.com sales cycles that have only become longer as gov- looking at their novelty, applicability and busi- ernment spending has been delayed. The report ness potential. The winner will receive the EBF Publisher: Laurence Zipson points out, however, that few projects involving European Biometric Industry Research Award E-mail: [email protected] E biometrics have actually been cancelled. 2010 and a 750 honorarium. Editor: Steve Mansfield-Devine The industry needs to address privacy concerns “This unique dedicated biometrics award Tel: +44 (0) 20 3286 7828 in both public and private sector projects. What’s run by the EBF is an excellent method of needed, the report concludes, is more awareness- encouraging and recognising the achievements Production Support Manager: Lin Lucas Email: [email protected] raising both inside and outside the industry. of young researchers in biometrics in Europe,” In fact, it’s lack of awareness of the technol- says Kalbe. “This promotes high-level research Subscription Information An annual subscription to Biometric Technology Today includes ogy, its applications and potential that has in biometrics, which positions Europe as a key 10 printed issues and online access for up to 5 users. been the major factor holding it back, says the innovator with regards to research in this flour- Prices: report: biometrics vendors and systems integra- ishing technology.” E998 for all European countries & Iran US$1080 for all countries except Europe and Japan tors need to push the message about what the For more information, go to: ¥132 700 for Japan technology is capable of – and its potential www.eubiometricsforum.com (Prices valid until 31 December 2010) cost savings, even for those already using it. To subscribe send payment to the address above. Tel: +44 (0)1865 843687/Fax: +44 (0)1865 834971 Customer retention is a problem, so the indus- products Email: [email protected], try needs more reference sites and high-profile or via www.biometrics-today.com. success stories. Subscriptions run for 12 months, from the date payment is Panasonic offers received. Periodicals postage is paid at Rahway, NJ 07065, Although there has already been considerable USA. Postmaster send all USA address corrections to: Biometric consolidation in the market, the report suggests Technology Today, 365 Blair Road, Avenel, NJ 07001, USA mobile capture device that small firms in this sector need to form

This newsletter and the individual contributions contained in it are more strategic alliances and larger firms should anasonic’s new Person protected under copyright by Elsevier Ltd, and the following terms and get on the acquisition trail. PIdentification Mini Dock (PIMD) conditions apply to their use: “Strategic alliances and acquisitions will lead Permissions may be sought directly from Elsevier Global Rights combines a fingerprint scanner with Department, PO Box 800, Oxford OX5 1DX, UK; phone: +44 1865 to deployment of multimodal technology,” says OCR and RFID readers. It’s targeted at 843830, fax: +44 1865 853333, email: [email protected]. You Sagar. “This multi-factor authentication will may also contact Global Rights directly through Elsevier’s home page mobile border control, policy and secu- (www.elsevier.com), selecting first ‘Support & contact’, then ‘Copyright provide stronger security by collectively over- rity force applications. & permission’. In the USA, users may clear permissions and make coming the limitations of individual technolo- payments through the Copyright Clearance Center, Inc., 222 Rosewood Developed by Panasonic and Desko, it also Drive, Danvers, MA 01923, USA; phone: +1 978 750 8400, fax: +1 978 gies and contributing to the long-term growth uses components from Dermalog and HID 750 4744, and in the UK through the Copyright Licensing Agency Rapid of the biometrics market.” Clearance Service (CLARCS), 90 Tottenham Court Road, London W1P Global and is delivered in a rugged case that 0LP, UK; phone: +44 (0)20 7631 5555; fax: +44 (0)20 7631 5500. Other complies with MIL-STD specifications. countries may have a local reprographic rights agency for payments. Derivative Works research Subscribers may reproduce tables of contents or prepare lists of arti- cles including abstracts for internal circulation within their institutions. Permission of the Publisher is required for resale or distribution outside EBF announces the institution. Permission of the Publisher is required for all other derivative works, including compilations and translations. Electronic Storage or Usage biometric research Permission of the Publisher is required to store or use electronically any material contained in this journal, including any article or part of award for students an article. Except as outlined above, no part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or he European Biometrics Forum (EBF) otherwise, without prior written permission of the Publisher. Address has decided to repeat its award permissions requests to: Elsevier Science Global Rights Department, at T the mail, fax and email addresses noted above. aimed at PhD students working on Notice No responsibility is assumed by the Publisher for any injury and/ biometrics projects. The EBF European or damage to persons or property as a matter of products liability, Biometric Research Award 2010, to be negligence or otherwise, or from any use or operation of any meth- presented at the EBF Research Seminar ods, products, instructions or ideas contained in the material herein. Panasonic’s biometric module is designed to work Because of rapid advan­ces in the medical sciences, in particular, inde- in Brussels in autumn, will be the fifth pendent verification of diagnoses and drug dosages should be made. with the company’s Toughbook CF-U1 portable PC. Although all advertising material is expected to conform to ethical time this honour has been awarded. (medical) standards, inclusion in this publication does not constitute a Senior PhD students have until 20 August guarantee or endorsement of the quality or value of such product or of the claims made of it by its manufacturer. to enter a paper focusing on some aspect of The OCR ID document reader is capable biometrics. They will also be asked to give a pres- of checking two- and three-line passports and 02265 entation. The entries will be judged by a panel ID documents to ICAO 9303 standard. The Pre-press/Printed by chaired by Gustav Kalbe, acting head of Unit RFID reader, designed for checking e-passports, Mayfield Press (Oxford) Ltd. Trust & Security in ICT Research, European biometric ID cards and so on, supports BAC Commission – DG INFSO and with members and EAC documents and complies with ICAO

2 Biometric Technology Today June 2010 news

9303, ISO 14443 and ISO 15693 standards. The Ideal Citiz product can include finger- The fingerprint scanner can provide live scans print, risi and facial recognition data. It has with both side-to-side and back-and-forth swip- been designed to meet a wide range of security NEWS IN BRIEF ing, and is able to distinguish live fingers from standards, including the CEN15480/IAS ECC A new report from Ovum, ‘Commercial dead or fake. specification, EAL5+ Common Criteria secu- voice biometrics in 2010’, suggests that voice The system is designed to be used with rity certification and ICAO EAC standards for biometrics aren’t living up to expectations. Panasonic’s Toughbook CF-U1 ruggedised PC travel documents. While there’s been significant investment in device. This allows immediate processing of According to the company, its fingerprint ID contact centres, mainly to cut costs, voice data, or the system can use an optional wireless technology came first in testing by the National biometric systems haven’t featured as much as WAN connection to compare the data with a Institute of Standards & Technology (NIST). they might in these projects. This is in spite of central database. The Proprietary Fingerprint Template (PFT) the technology having matured to the point Panasonic has also produced a version with- evaluation programme has been running since where it is reliable and effective. out the fingerprint scanner. Both versions will 2003 and tests the performance of vendor-sup- The US ‘Green card’ – or Permanent Resident become available in September. plied systems and their compatibility with US Card, to give it its official name – is green again Government projects such as US-VISIT. (it wasn’t green for years), and now incorporates india a laser-engraved fingerprint and RFID chip for australia more secure authentication. Biometrics are also NEC opens excellence encoded in an optical media strip. New South Wales centre in India The Clear trusted traveller scheme will be back gathers biometric data in operation at Denver airport in the autumn. EC is beefing up its biometrics This follows the reviving of the scheme by capabilities with the opening of ccording to a report in Australian Alclear, which acquired the business earlier N this year. It’s estimated that about 22,000 the first NEC Biometrics Excellence newspaper The Daily Telegraph, A regular users of the airport enrolled in the Clear Centre – in Bangalore, India. the State Government of New South programme when it was owned by Verified This is the company’s seventh R&D centre, Wales has been quietly amassing Identity Pass, before it went bust in June 2009. but the first to focus on biometrics. Its location biometric data on citizens via their is a reflection of the many large biometrics pro- driving licences. The New Zealand Government has just grammes underway in India, most of them linked The Roads and Traffic Authority (RTA) approved a NZ$60m budget to sort out the in some way to the Aadhaar (UID) project. began compiling biometric recognition data computer systems of the country’s immigra- “The public safety market in India has huge from facial images last December and this data tion department. Among the improvements potential and the setting up of this biometric will be shared with other government agencies, sought is the ability to capture and store biometric information on migrants. centre is indicative of our commitment to the according to a statement by minister David India market,” says Koji Oda, managing direc- Borger. He says: “The RTA already provides The exponential growth of the biometrics tor, NEC India. “We foresee greater adoption information to the police, and will co-operate market is showing no signs of slowing of biometric solutions in India, particularly in with other state or federal law enforcement down, says the ‘Global Biometric market civic amenities and various social schemes.” agencies.” Outlook 2010-2014’ report from Research The centre, which will initially employ 50 The article says federal agency CrimTrac has & Markets. Growing acceptance and declin- people, will provide a hub for NEC’s multimo- asked for access to the RTA database of drivers’ ing costs of the technology are resulting in its dal biometrics activities, which include auto- facial images. finding more applications. As a result, we can expect a CAGR of more than 22% in value mated fingerprint identification and face recog- Dr Carolyn Semmler from the University of nition solutions, and will give support to NEC’s terms for the global biometrics market over Adelaide has claimed that the successful match biometrics marketing efforts worldwide. the next few years, the report forecasts. rate is only around 90%. She also claims that CrimTrac is interested in these kinds of data- Data Center Canada, which operates a industry base because it wants to link them to smart number of datacentre facilities for large enter- CCTV cameras to track individuals. CrimTrac prises, is installing physical access control Sagem becomes has officially embarked on a project to develop systems from BioTime to improve security. a national facial recognition system. The new systems, which employ biometrics, Morpho and launches Meanwhile, also in Australia: PIN codes and card-based tokens, will control entry to both the buildings and individual The state of Queensland is now trialling a new card technology • server cages in collocation facilities. new driving licence that uses biometric facial agem Sécurité now goes by the technology from Unisys Australia – which is The New York City Department of Health Sname Morpho, a brand that will acting as prime contractor for the project – and and Mental Hygiene is to use Verifi biometric encompass all of parent company the Sealys electronic driving licence solution authentication systems from Zvetco Safran’s security businesses. from Gemalto. Biometrics as part of a project that will allow The company has also launched a new The system uses a 16-point analysis of the face it to issue electronic death certificates. The fingerprint readers will be used to authenticate match-on-card technology capable of coping with the data stored on a chip in the card itself. users logging in to the department’s intranet with multimodal biometrics, which it is pitch- Unisys is supplying facial recognition software by system from mortuaries, hospitals, extended ing as an all-in-one solution for ID, travel Cognitec that will be used by authorities – for care facilities and other government agencies. documents, digital signatures and e-services. example, at licence renewals – to match drivers

3 June 2010 Biometric Technology Today news

against images stored in Queensland Transport’s data collected under this plan will be shared database. Enrolment systems are being provided with UIDAI. PRODUCT NEWS by Daon. The system will integrate with current web- The contract was originally given to Unisys based systems that track attendance. According C-true has a new model in its C-Entry line of facial recognition access control systems. in April 2009 and the project to fully convert to a senior ministry official, the new biometrics The DH-2 offers wireless networking, support to the new licences is expected to take another cards and supporting IT systems, “will cover for a wide range of input devices multimode four years. the entire MGNREGA process right from the RFID, multifactor authentication, built-in • Australia’s passport service is to get over registration, demand of work, issue of receipt, illumination, and a GUI system displayed AUS$100m to upgrade its IT, which will allocation of work up to payment of wages. via a touchscreen. As well as access control, include a biometric visa system. Within the This will help us reduce the delays and ensure the company is aiming the product at time next year, visa applicants from 10 countries will timely payments.” and attendance, two-way communication and be required to provide fingerprint and facial • The State Bank of Hyderabad (SBH) says self-service applications. It’s compatible with images. The Australian Government will not that by the end of July it expects to issue over C-True’s BioGate management server. only match these against its own databases but 1.4m biometric smart cards, which are used by The new MaxIdentity Suite from MaxID Corp also those of other governments. customers for cash withdrawal and other serv- comprises a range of ready-to-use software • The South Australian Government is ices requiring ID authentication. The project applications to verify identity and government- considering the deployment of biometric is being managed by Tata Consultancy Services issued credentials including smart cards such ID systems across all 14 prisons run by its with HCL Technologies and Coromandel as PIV, PIV-I, CAC, TWIC as well as Seafarer Department for Correctional Services. A trial Infotech. ID cards, driving licences and e-passports. is planned for the Adelaide Remand Centre: if Customers can opt to license the software con- that’s successful, further trials will be mounted homeland security ventionally or via a Software as a Service (SaaS) at two prisons. The aim is to provide secure model. It’s expected to become available in the ID verification for all those entering, leaving summer, following ICE certification. or moving around the facilities – staff, inmates New research focuses Evidian has incorporated BIO-key biometrics and visitors. on terrorists software into its enterprise single-sign-on solu- Separate systems are envisaged for enrol- tion. The system allows users to log into systems ment, entry to the facilities and exit. Dual iris xperts at the Renaissance using a single fingerprint scan, with no addi- scans, facial recognition and hand scanning are EComputing Institute (RENCI) – a tional passwords or tokens. The solution has all under consideration. Data will be shared collaboration involving the University already been sold to two pharmaceutical com- between facilities and may be stored for up to of North Carolina at Chapel Hill, panies with a combined total of 15,000 users. 25 years. Duke University and North Carolina The Matrix M5, a mobile phone designed The project is following the example set by State University – is working with specifically for the African and Middle East New South Wales, which has been using iris Cambridge Intelligent Systems (CIS) on markets, will incorporate the ATW310 fin- scanning and fingerprinting to identify visitors improving the biometric systems used gerprint sensor supplied by AuthenTec. The at its 32 prisons. to track and identify suspected terror- phone uses a fingerprint swipe to unlock the ists as they enter and leave the US. phone and provide access to certain features, india CIS, based in Raleigh, North Carolina, including the contact list and SMS messaging. specialises in intelligent image analysis Accsys, a South African firm that supplies Biometric ID for job technologies. The project with RENCI is payroll, HR and access control solutions, is funded by the Institute for Homeland Security teaming up with neaMetrics which distrib- guarantee scheme Solutions (IHSS), a collaboration based in the utes the SupreMOBILE biometric timeclock state’s Research Triangle and involving RTI system. Together, they plan to offer a portable, ndia’s Aadhaar (UID) project has International, local universities and the North fingerprint-based time and attendance system. Ispawned another spin-off, with plans Carolina Military Foundation. to issue biometric ID cards for people IHSS is providing $200,000 in funding to Accu-Time Systems (ATS) is now incor- in rural areas receiving help under a RENCI and CIS to research next-generation porating Lumidigm’s Mercury Multispectral job creation scheme. biometric systems that can reliably identify fingerprint reader in its Maximus time and attendance system. ATS says the new technol- The Mahatma Gandhi National Rural people of interest under challenging, real- ogy allows fingerprint-based solutions to be Employment Guarantee Act (MGNREGA) is a world conditions. deployed where they were previously unusable government scheme that guarantees a minimum “Biometric technologies currently used by due to environmental conditions. of 100 days work to adults willing to provide the DHS and others operate very well with unskilled labour on public projects. But there stationary, co-operative subjects in a controlled Schlage has unveiled a new time and attendance have been concerns over so-called ‘fund leak- environment,” says Charles Schmitt, director terminal, the GT-400 HandPunch. It uses hand ages’, fake muster rolls and delays in making of RENCI’s informatics division and principal geometry for authentication, has a large LCD payments – with the latter particularly damag- investigator for the project. “Fingerprint, iris, screen, programmable soft keys and runs on Linux. ing to the poorer members of rural societies for and face recognition all have very high recogni- Microsoft has added facial recognition features to whom the scheme was conceived. tion rates under these conditions, but the big its Windows Live Photo. The facial recognition India’s rural development ministry plans to unsolved problem is how to identify people tool automatically finds and tags people in your issue biometric ID cards that are compatible in surveillance-like video. Identifying a per- photo albums. with the standards developed by the Unique son who is moving, unco-operative or a long Identification Authority of India (UIDAI). The distance from the surveillance system is a very

4 Biometric Technology Today June 2010 news challenging problem – one that homeland secu- biometric identification modes. As part of this rity officials are extremely interested in solving.” work, RENCI and CIS will create a reference Land-based border crossings are among the most biometric architecture for use at border crossings COMPANY NEWS difficult environments for biometric identification and will evaluate leading video identification Biometric Intelligence & Identification systems. Ideally, the DHS wants the ability to iden- technologies to determine the gap between cur- Technologies (BI2) has won a contract from tify people crossing the borders in cars and on foot rent capabilities and the DHS’s needs. the Massachusetts Sheriff’s Association to sup- without having to stop every individual or car. ply facial recognition systems to all 14 of the “To do that, you need a robust, multi-modal, immigration state’s sheriff’s departments as well as a number video-based biometric system,” Schmitt says. of police departments. The plan is to use “ It has to be video-based because it has to be these systems – supplied by Animetrics – to opportunistic; you never know when you’ll get First biometric ATMs identify ‘persons of interest’. The departments a good look at someone’s face or iris.” roll out in Poland can also opt to use BI2’s multimodal Mobile During phase one of the project, RENCI and Offender Recognition and Identification System (MORIS). This works on the Apple CIS will define the requirements for a land-border- olish bank BPS has claimed a first iPhone and uses facial, iris and fingerprint exit biometric system, evaluate a wide array of exist- Pin rolling out biometric ATMs. recognition to identify individuals. ing and near-future biometric technologies against Customers of the bank can now use those requirements, and develop an architecture their fingers rather than a bank card to Ideco has won contracts to supply biometric for deploying the best technologies in a robust identify themselves when making cash components and systems for a number of biometric system for day-to-day use by the DHS. withdrawals. government projects in South Africa. The The team will evaluate data capture challenges, “Our bank is the first in Europe to pro- company says it is also waiting for a decision including how close video cameras can be placed vide its clients with a new means to secure on a number of other tenders for biometric to subjects and at what angles; how people tend transactions to complement the secret code of readers. Ideco AFISwitch currently runs the country’s criminal records checking service. to cross the border (car, foot, motorcycle, public their banking card,” says BPS vice-president transit); environmental factors such as ambient Krzysztof Jagielski. The bank believes the BIO-key has reported Q1 revenues of noise, traffic congestion and numbers of vehicles technology provides better security than cards, $976,175, an increase of 81% over the same with tinted windows; and whether the site has which are vulnerable to skimming or theft. quarter in 2009. It made operating losses in the access to electricity and the Internet. The system uses a finger vein scanner from quarter, of $118,734, but these were better than From that data the team will produce a report Hitachi integrated in an ATM system devel- its $727,614 losses in Q1 2009. Gross margin to the DHS that outlines basic requirements oped by Wincor Nixdorf, which specialises in improved 14% and expenses fell by 13%. The for reliable video-based, multi-modal biometric banking and retail solutions. company has also just announced a deal for its identification systems and that evaluates specific Continued on page 12... TruDonor system with the Oklahoma Blood Institute.

Healthcare IT firm ScriptRX is integrating Events Calendar DigitalPersona’s U.are.U fingerprint recogni- tion systems into its kiosk solutions. ScriptRX 2 July 2010 Advancement (IDGA). Wellington, New Zealand More information: bit.ly/BTTevAIMDOD provides touchscreen-based electronic medical NZ Member Meeting of the Biometrics record and discharge systems for emergency Institute 13-16 September rooms and urgent care centres. Hosted by Immigration New Zealand (Department Washington, DC, US of Labour), Eyede, NZ. General overview, current Identity Management for The Luxembourg passport authority has work and case studies and industry trend spot- Government ting. Free to members. Non-members welcome Planning for the operation, use, implementation and selected Speed Identity to supply biometric (NZD$220). interoperability of identity credentials. capture equipment for its e-passport service. More information: bit.ly/bttev-nzbio More information: bit.ly/bttevim4gov The Speed Capture equipment selected has been in use with Swedish police forces for 11-17 July 2010 21-23 September 2010 several years for capturing facial images, fin- Spokane, Washington, US Tampa, Florida, US 95th Annual IAI Educational Conference 2010 Biometric Consortium Conference & gerprints and digital signatures. The annual conference of the International Technology Expo Association for Identification (IAI) will include This is one of the largest biometrics events in the Another hospital has chosen the Imprivata over 100 lecture presentations and more than 100 world. It is supported by the National Institute of OneSign single sign-on solution, which uses Standards and Technology (NIST) and the National workshops. Presenters will focus on the trends fingerprint biometrics to ease access to com- and technologies that have the greatest impact Security Agency (NSA). The show is focused on on forensic identification professionals and their biometric technologies for defence, homeland puter systems. The Phoebe Putney Memorial organisations, and will provide hands-on work- security, identity management, border crossing and Hospital is using the system both at its main shops. electronic commerce. facility and three branch hospitals. More information: www.theiai.org/conference/2010 More information: www.biometrics.org 23 Aug 2010 19-21 October 2010 New hires: Databac now has a new sales and Washington, US (venue TBA) London, UK marketing manager in the shape of Alain Picard. 2nd Annual Identity Management for DoD Biometrics 2010 He will head up the UK sales team and be & Government conference The largest biometrics event in Europe and visited responsible for growing Databac’s business in This conference aims to investigate different by a global audience, this diverse conference and the European ID solutions market. And AOptix exhibition covers all aspects of biometrics, with a biometric data collection techniques as a signifi- has hired Dale Bastian as vice president of cant tool for national security, peacekeeping, and cutting-edge programme and large exhibition of stability operations all over the world. Organised all the leading players. biometric sales. He was previously executive VP by The Institute for Defense and Government More information: www.biometrics2010.com of worldwide sales at 2Wire Corporation.

5 June 2010 Biometric Technology Today feature The body as password Peter Weinzierl, head of Siemens IT Solutions and Services Biometrics Centre, Graz, Austria Peter Weinzierl

Innovative solutions for security and compliance head up the priority lists of many public sector and private companies today. At the same time, the trend 2009-2014, published by the prestigious towards greater acceptance of biometric systems is likely to grow, as they increas- International Biometrics Group (IBG), the iris ingly become part of our everyday lives. Therefore it is not surprising that scan, which is the most accurate and secure the International Biometrics Group (IBG) is forecasting that revenues in the method currently in existence, now accounts biometrics market will rise from $3.4 billion last year to $9.4 billion by 2014. for 8.3 per cent of the market. And the trend is rising. Annual sales are expected to reach $500 There are many reasons to use biometrics: to and fingerprint recognition opens up new pos- million by 2012. protect sensitive data or comply with regula- sibilities for rapid, unique identification. The reason for this increase is that iris scan tions, for example, or simply to make computer systems have been optimised in recent years or building access control systems easier to use. “The demand for multimodal in terms of ease of use. Sophisticated systems In government and other public sector biometric systems is driven, guide the iris camera to the eyes of the user, administration – and in the private sector as above all, by the spread of resulting in rapid, highly accurate identifica- well – huge outlay is required in terms of docu- tion. Iris scans will be used increasingly in mentation in order to comply with the statuto- travel documents that meet companies that develop chemical, biological or ry requirements of legislation such as EuroSOX the requirements of the pharmaceutical products – anyone who wants or HIPAA; so this is one area where biometrics International Civil Aviation to gain access to a clean-room is usually wear- can aid the process of ensuring compliance. Organisation” ing a protective suit, which means that only the Moreover, biometric identification docu- eyes are visible. ments that use facial recognition and finger- Driven by the growth in the public-sector printing are being used in more and more security segment, facial recognition technology, “What works with night club countries throughout the world. As a result in particular, is currently making huge advances. bouncers the world over of this trend, the applications and benefits of There seems to be a strong trend toward non- also works in the world of biometrics will continue to grow. In the pri- intrusive systems – systems behind one-way vate sector, for example, we’re seeing increased mirrors, for example – that can follow the face biometrics: the right look deployment in areas such as online banking and when it is in motion. The advantage is that you is the best and most secure shopping. That’s because ID documents can no longer have to look straight at the camera to way to open doors” often be used for a wide variety of purposes. ensure good recognition. Additionally, camera systems with moving capture mechanisms provide much better recog- Security that gets under Biometric option nition results for crowded scenes. A fixed-view your skin Some 30-40 per cent of invitations to tender wide-angle camera is used to view the complete for IT infrastructure projects in the private scene and detect people’s faces across a large According to the IBG, hand vein recognition sector already include at least an option for a area. It feeds this information to a telephoto also has great potential – in particular, for use in biometric system. In contexts where security is camera that tracks single faces in high resolu- access control applications in the private sector. an issue – at airports, for example – it goes up tion to create the best available input data for This method is expected to gain a market share to 50 per cent – so the markets are growing. the face recognition algorithms. Such new con- of up to 10 per cent this year. Vein scanners will Fingerprint recognition will probably remain cepts can overcome a number of the limitations the most important technology, followed by that beset traditional face recognition and open facial recognition. At the moment these are the the field for new applications. only methods that are standardised for applica- tions in the public sector, such as biometric identification cards and passports. The demand Opening doors with for multimodal biometric systems is driven, just a look above all, by the spread of travel documents that meet the requirements of the International What works with night club bouncers Civil Aviation Organisation (ICAO) and thus the world over also works in the world of use both facial biometrics and fingerprint rec- biometrics: the right look is the best and Hand vein scanning is becoming increasingly popular, even among companies that say ognition in accordance with statutory require- most secure way to open doors. According to they want fingerprint systems. ments. The combination of facial biometrics the Biometrics Market and Industry Report

6 Biometric Technology Today June 2010 feature thus make hand geometry recognition obsolete: Identifying users from their typing is suitable, Flexible access rules ensure that only those thanks to infrared technology, vein recognition is above all, for applications that require text input, people who are authorised can gain access much more accurate and secure. such as online banking portals. Bank customers – based on biometric characteristics from fin- At the Siemens Biometrics Centre, we have still have to enter a password, login and transac- gerprint or hand vein recognition or on iden- seen how this new technology is becoming tion number but are also identified biometrically tification tokens (smartcards or USB tokens). increasingly popular. When a company wants from their typing patterns. The procedure is thus The biometric data is captured in ID Center, to introduce a biometric system, the decision- doubly secure. It is also suitable for the digital converted into biometric reference patterns and makers think first of fingerprint technology, signing of documents or emails. Another advan- assigned to user accounts. The application’s and that’s what they initially inquire about. tage is that no additional hardware – such as a security rules can be adapted for any software However, in the initial phase it often becomes scanner – is required, and the user doesn’t even application that is supported. The customer clear that hand vein recognition is more suit- notice the biometric check. And for online iden- decides which combination of biometrics, able for certain applications – for example, tification, the software often only needs to be smartcard and passwords is required for access because it is more hygienic or easier to use. The installed in a single location – on the bank’s web to the application. technology really wins companies over in the server, for example. proof-of-concept phase, thanks to its ease of handling and recognition rates. “Typing recognition systems Efficient processes for Currently, developers are working on further used to be rather unreliable the public sector optimising the speed of the solutions. In the because, unlike other foreseeable future, we can expect to see speed The public sector is still the most important increasing by a factor of 10, thus allowing com- biometric characteristics, market for biometrics. On the one hand, infor- plex one-to-many (1:N) identifications to be typing behaviour can vary mation security and compliance have a high carried out even more quickly. from day to day” priority, particularly for public administration. However, at around four times the price of And public agencies are constantly striving to conventional fingerprint recognition technology, streamline their procedures. So it’s all the better universal deployment of hand vein recognition Biometric security across when both of these requirements can be met on every desktop is generally not financially fea- organisations using a biometric access system. On the other sible – although it is a viable option for shared hand, the main focus in this sector is currently desktops. Today almost every company is interlinked with on introducing biometric ID cards and the In many companies – for example, in the its suppliers, service providers or business part- associated equipment for applications such as financial services or healthcare industries – it is ners. In addition, economic pressures have led border checkpoints. therefore advisable to use a mixture of meth- to frequent mergers and acquisitions. There is ods: vein scans in contexts where regulations therefore a demand for systems that can be used “Information security and covering hygiene or operations are particularly across different companies. compliance have a high strict, and fingerprint technology elsewhere. In In order to establish a uniform security this scenario it is reasonable to use a solution standard not just within a company or at a priority, and public agencies that offers a combination of different methods specific site but one that applies across different are constantly striving to in a single system. In other words, despite the organisations, the Siemens Biometrics Centre streamline their procedures. different patterns used, the devices reference keeps increasing the ways in which its solutions So it’s all the better when the same database structures and the end users can be deployed. One example of this is the ID both of these requirements experience the same user guidance and look- Center, a central authentication service provid- and-feel independent of the technology used. ing secure access control for IT systems and can be met using a biometric buildings. For the first time, biometrics can be access system” offered as a model for managing companies. If Rediscovery of an an IT service provider runs the software at its A key trend, for example, is towards implement- underestimated method data centre, it can now offer access control or ing fully automatic border control or eGates. PC login services to multiple clients. These allow checks to be carried out within An entirely different technology, which has As the data of the different clients are kept seconds. After your passport is scanned, you been a niche application up to now, holds great entirely separate, it is possible to run this solu- enter an enclosed cabin where your face can be potential for the future. Unlike the other meth- tion for a number of different organisations checked. If the patterns match, the eGate opens ods, rather than recognising a physical feature, on the same server system. Siemens has added it works on the basis of a specific action: typ- client-management functions to the administra- ing. Typing recognition systems used to be rath- tion tools. Large companies can now use this er unreliable because, unlike other biometric to map their corporate structures (sites, depart- characteristics, typing behaviour can vary from ments, etc) within the ID Center solution. This day to day, depending on the user’s mood, permits rapid, reliable identification based on state of health, etc. However, researchers have a single biometric characteristic even for very now discovered more stable characteristics. The large numbers of users. The solution handles software checks not just the intervals between synchronisation with the door scanners over a keystrokes but also, for example, the use of the network connection, providing physical access shift key and the overlap when the next key is control to buildings. But the same information Border controls are among the most important applications for biometrics in the public sector. hit while the previous one is still held down. is also used for access to IT systems.

7 June 2010 Biometric Technology Today feature and you can cross the border. These eGates will ments in terms of data protection and patient makes life far easier for doctors as well as nurs- simplify the work of border officials and let peo- security. Most hospital staff in the US already ing staff. ple cross borders more quickly. clock in biometrically, and numerous hospitals Mobile checks are another area for the use in Europe are now upgrading their infrastruc- “Most hospital staff in the US of biometrics in the public sector. When the ture. For example, the Barmherzige Brüder hos- already clock in biometrically, police stop vehicles, they can compare and pital chain in Austria uses a biometrics solution verify drivers’ fingerprints using a PDA or lap- for access to the hospital information system and numerous hospitals in top. A scanner integrated in the PDA captures (HIS). The system uses personalised access to Europe are now upgrading the fingerprint, which is then displayed on the guarantee full auditability and thus comply their infrastructure” device. The software checks and optimises the with regulations governing data privacy. quality of the image. A digital camera – often In 2007, Siemens IT Solutions and Services Mobile medical carts with laptops and connected to the PDA via Bluetooth – takes a integrated its ID Center software with an exist- mouse stations now replace paper and pencil picture of the print. The pattern is then com- ing Citrix-based hospital information system. during ward rounds and care activities, since pared with the stored biometric data. The solution involved the deployment of ID documentation has gone completely digital. mice that have built-in fingerprint sensors. Today, any changes a doctor or nurse makes “Mobile checks are another Users register once by recording two finger- to patient data in the hospital information area for the use of biometrics prints on the sensor. The server-based solution system can easily be traced and uniquely in the public sector” stores the encrypted biometric profiles of hos- assigned to their author. This makes it easy pital staff in a secure central database and, at for Barmherzige Brüder to meet current system logon, compares them with fingerprints requirements for compliance and data security. The fingerprints for comparison are stored scanned by the ID mouse. The system also Moreover, staff now take greater care to pro- offline or, for example, in a central database archives the encrypted log of access data on tect their workstations when they leave them that can be accessed online by the device. Barmherzige Brüder’s central data centre server. for a short time. The solution might, for example, connect to the European Schengen Information System “Biometric systems are also About the author or Eurodac, the European Dactyloscopy fin- taking off in healthcare. gerprint database maintained by the EC to Demand is being driven, above Peter Weinzierl (Dipl. Ing.) has been head identify asylum seekers. The high-performance of the Biometrics Centre of Siemens IT biometric matching system in the Siemens all, by statutory provisions and Solutions and Services in Graz, Austria since Homeland Security Suite allows blacklist com- more rigorous requirements in 2008. Founded in 2005, the Biometrics parisons to be carried out in real time based on terms of data protection and Centre is a focus for Siemens’ world- fingerprint and facial scans. patient security” wide expertise in biometric technologies. Weinzierl first started to take biometric From this point, users can use the HIS with- technologies from the lab and transform them Biometric security for out entering a username and password, simply into commercial products in 2000, when he both medications and via biometric authentication. To log on and was a product manager in Siemens’ devel- unlock the screen saver on subsequent occa- opment unit for Security & Recognition medical personnel sions, or access specially protected data, users Technologies. He was also involved in creat- Biometric systems are also taking off in health- simply tap the sensor and are logged on in a ing the first versions of Siemens ID Center care. Demand is being driven, above all, by matter of seconds. With an average of 30 to authentication platform, now used in over statutory provisions and more rigorous require- 40 logon processes per employee per day, this 60 hospitals worldwide. Government biometrics: the ups and downs

Steve Gold, freelance journalist Steve Gold

There are some very high-profile government biometrics programmes – such as The UK’s new coalition Government lived up India’s Aadhaar (UID) scheme – and some contentious and problematic ones, to its campaign promises by almost immediately including the UK’s now-defunct ID card project. Certainly, no government pro- cancelling the previous administration’s plans gramme, whatever its ambitions and benefits, exists in isolation from political for national ID cards. However, this is far from pressures and policies. However, there are many that are simply and quietly being the end for government biometrics pro- getting on with the job – and successfully at that. grammes in the UK.

8 Biometric Technology Today June 2010 feature

Border control the option of extending the contract twice for a Since last summer, IBM has also been period of up to a year each time. working with its partner, Atos Origin, on the The technology remains in active use in border To make life easier for applicants, the Post project, as well as sourcing biometric services control. Since the end of November 2009, for Office implemented a relatively modest £8.00 and software from Sagem Securité. And, despite example, all overseas nationals arriving in the charge for applicants using local post office the obvious scaling down of the programme, UK have had their fingerprints scanned. This facilities, rather than a UKBA office, to enrol IBM says that the experience it and its partners scheme has been a success from a technical per- in the fingerprint programme. During the have gained will stand the company in good spective, says the UK Border Agency (UKBA). trial, a total of 17 post offices were involved in stead for its biometric programmes for other The scheme’s primary purpose is to verify the trial, including branches in London’s Old governments around the world. that the person entering the UK is the same Street, Battersea, Camden and Earl’s Court, as person that applied for the visa, entry clear- well Oxford, Redditch, Romsey and Aberdeen. ance or identity card for foreign nationals. The Post Office had ambitious plans for the The Belgian perspective Previously, says UKBA, border staff used a trial, expecting to handle around 50,000 appli- Although plans to use biometrics on a large scale variety of methods, mainly photo-based ID – cations through its pilot locations in the first at border entry – and, eventually, exit – points which could more readily be forged. But the stage, which was due to run through until the are still at a very early stage in the UK, Belgium biometric scheme now allows staff to verify the summer of 2010. seems to be much further down the road. identities of arrivals with greater certainty. So how successful was the trial scheme? By Last September, Zetes – an international Previous plans for a phased introduction of the time of the ID card scheme’s cancella- specialist in automatic goods and people more advanced biometric passports have been tion, around 15,000 people in the North West identification technology – was appointed thrown – with the national ID card scheme – into England had paid £30 each for them. by the Belgian Federal Public Service (FPS) the political dustbin. However, contracts let by The termination of the ID card scheme, the Foreign Affairs department to supply the the Identity and Passport Service (IPS) with IBM destruction of the National Identity Register equipment, biometric software and technical and SCS are continuing, albeit at a lower scale. database that was intended to support it and support for the registration of the biometric More than anything, the start-stop nature of the scrapping of Sir John Pilling’s post as data of people applying for visas and pass- the UK Government’s biometric programmes Identity Commissioner all require primary leg- ports. Currently these systems are being illustrates the fact that, no matter however islation but, at the time of writing, this seemed installed at Belgian embassies, consulates and valid or invalid the argument for introducing certain to pass. The cards will then no longer border crossing points and, says the company, biometrics in the public sector, such pro- be valid as travel documents, or as much else. have been received well by the non-technical grammes remain susceptible to political change. However, a separate ID card scheme for non- staff handling the enrolments. EU foreign nationals looking to live in the UK According to Zetes, its biometric platform will continue. And the UK will continue with consists of live enrolment, which allows peo- ID track record its basic biometric passports. ple to register applicants’ photos, fingerprints The track record for phase one of the UK’s and digital signatures (for passports) all at national ID card scheme – which is now being the same time. The firm says that, in order wound down – was impressive, especially given Identity contracts to meet the ICAO international standards on the fact that there were strong disincentives to That’s good news for two of the main contrac- photos for travel documents, it has developed obtaining a card. The ID card was not manda- tors to IPS for these biometric programmes – booths specially for the purpose, as well as tory, cost money and offered limited benefits. IBM and CSC. Back in May 2009, IBM signed software that automatically detects non- And throughout much of the scheme’s short a seven-year biometrics contract with IPS, compliant photos. lifetime there was growing public awareness – although the scale of the contract is clearly now The contract with the Belgian FPS Foreign thanks to widespread media coverage – that a up for amendment. Under the contract, IBM Affairs department covers the delivery of new non-Labour Government would most like- had been working with the agency to develop 144 stations, to be installed steadily as 2010 ly shut down the scheme altogether. But what the core element of the Government’s scheme progresses. By the end of the year, the plan is to was achieved may prove of interest to future to upgrade all its passports to biometric status. have biometric platforms installed at 120 con- governments, as it seems unlikely that the idea Since the summer of last year, IBM has also sulates and 13 border posts. of national ID cards will go away forever. been working with the IPS to supply a replace- At the time of the soft launch of the national ment for the UKBA’s Immigration and Asylum ID card scheme last year, around 1,100 peo- Fingerprint System (IAFS), which holds ple in Manchester and London – as well as biometrics collected from visa applicants. airside workers at Manchester and London John Granger, general manager of IBM City Airports – applied for cards. Following Global Business Services, says that, at a time on from this, last December saw the Labour when the world is becoming increasingly inter- Government launching an official tendering connected, both through personal travel and process for the technology involved in the issue electronically, these new systems are part of of identity cards and biometric passports. These building a smarter and safer planet where iden- include recording customers’ biometrics – facial tifying ourselves when we travel is easier and images and fingerprints – supporting online more convenient. applications; collecting documents; the secure According to Granger, as the prime contractor transfer of data; and collecting the required for the scheme, IBM has been integrating and payments. The tender was originally for a six- operating the platform, the bulk of which has Alain Wirtz, CEO, Zetes. year contract for supplying the technology, with been built with IBM hardware and software.

9 June 2010 Biometric Technology Today feature

Alain Wirtz, Zetes’ CEO, says the contract Information and Communication Technology) that the US and New Zealand are also plan- with the Belgian FPS Foreign Affairs depart- has set up the Hello system, which triggers an ning to come on board. ment is based on quite stringent criteria. automated set of calls to up to seven phone Although the UK Government has stayed “Identification requirements at European and numbers that are pre-defined by the parents of quiet about the exact terms of the agreement, international levels are becoming increasingly the child in the event that the child gets into any Canada’s Immigration Minister Jason Kenney stringent,” he says. trouble of any kind. and Public Safety Minister Peter Van Loan have The European Union’s stated aim is to The kids-ID card is also billed as offering called the arrangement a ‘landmark initiative’ include biometric data in passports and visas greater protection on the Internet, as its smart and say that it will improve all three countries’ issued by member countries and the ICAO is chip enables children to identify themselves in ability to identify foreign nationals who are laying down the standards that need to be met, chat rooms reserved exclusively for their use. seeking to enter the country and trying to hide with particular regard to the visual characteris- Wirtz says that the card can also be used for their past from authorities. tics of the photos. the library and the swimming pool, for regis- According to Kenney, the agreement allows Interestingly, the Zetes CEO says that his tering at school, and as a membership card in countries to check each other’s fingerprint data- research team have used know-how imple- sports clubs. He adds that, because it is based bases, but does not involve the creation of a cen- mented for other projects – in particular Biodev on tried and tested electronic ID technology, tralised biometric database. Under the interna- II and the Ivory Coast – to develop a solution the kids-ID system is well protected against tional checking programme, all enquiries are car- for Belgium that is both stable and flexible, and counterfeiting. In addition, since the child’s ried out anonymously and if a set of biometrics will meet the requirements of countries having home address is incorporated in the chip’s read/ – in this case someone’s fingerprints – does not to comply with these new standards. This, he write memory, it can easily be changed if the produce a match, the data is then destroyed. says, will help Belgium to offer more secure owner moves home. Kenney told journalists last October that documents so that it can fight fraud and iden- Wirtz says that the plan is for a kids-ID card the biometrics agreement with Australia and tity theft with increased efficiency. to be issued to up to 1.5 million children in the UK forms part of a broader government Belgium. “Belgium is a pioneer in the field of initiative to introduce biometrics into Canada’s population identification,” he says. “Following immigration and refugee screening system. Identifying children on from the eID and the electronic card for Zetes has also been working with the Belgian foreigners, we are very pleased to be associated Government to implement a secure identity with this new project. The electronic identity A consultant’s view card for children. Known as the kids-ID pro- card for 0-12 year-olds, although not obliga- While vendors and governments have been gramme, and dating back to the spring of tory, offers many advantages to parents caring extolling the use of biometrics as a means of 2009, the scheme is under the control of the about their children’s safety.” authenticating individuals, the actual implemen- Belgian Federal Public Service Interior and cen- tation of the technology at the sharp end is at a tres on the issue of a secure ID card to children stage where things can – and do – go wrong. aged under 12 in the country. Sharing data across Peter Wood, partner and chief of operations The decision to make the cards generally international borders with security and penetration testing specialist available to all under-12s in Belgium was First Base Technologies, says that the main issue announced in March 2009 by Minister of the Despite the fact that country-based biometric with implementing biometrics in government and Interior Guido De Padt and followed a suc- databases are still in their infancy, there is every allied agencies is the real-world implementation. cessful pilot project in Bornem, Koekelberg, indication that, provided the privacy and politi- Wood, who is also an ISACA conference Ottignies-Louvain-la-Neuve, Ostend, Lihge, cal issues can be satisfied, the governments of committee member, set up First Base in 1989 and Houthalen-Helchteren. different countries will start to share their data. as a vendor-independent consultancy in the Zetes says that the kids-ID card is much more As well as being a long-term, albeit unstated, field of penetration testing. Over the past than a secure identity card, as it incorporates a aim of the European Union, there are signs few years, he and his staff have been working number of functions that provide parents with that other countries have the same idea. steadily towards achieving Communications- greater protection for their children. For exam- Back in October 2009, the UK Government Electronics Security Group (CESG) Check ple, Belgium’s FEDICT (Federal Department of quietly announced an agreement with the status, a security certification that allows private Governments of Australia and Canada to check companies to work with government depart- each other’s fingerprint databases in order to ments on sensitive – and even classified – IT tackle immigration fraud. projects. The CESG is the UK Government’s Although the countries concerned have clear National Technical Authority for informa- links in the shape of their former Commonwealth tion assurance, and part of the Government status, Canada’s Privacy Commissioner has Communications Headquarters (GCHQ). expressed concern about the agreement. However, “The CESG Check programme is quite the UK Government has been at pains to stress wide-ranging and is a long way removed from that the agreement does not allow unfettered the self-certification programmes one sees in access to the relevant databases. the mainstream industry,” says Wood. The Canadian Privacy Commissioner’s “It effectively tests the management of a concern triggered a flurry of placatory security company, as well as the skill sets of the noises from both the UK and Australian employees, using an examination process.” Governments, but within a matter of days In achieving Check certification for himself, The Belgian kids-ID card scheme claims to offer the issue resurfaced after an Australian law- his company and staff, Wood says that he has more than just a means of identity. yer’s group raised its concerns, as it emerged covered many areas of security as diverse as

10 Biometric Technology Today June 2010 feature

plied often needs to be changed for something “I remember one instance of a major build- more up to the task. The main problem with ing society implementing iris scanning at its fingerprint software is how well the application headquarters as a high-profile demonstration of protects the hash.” how secure its operations were,” he says. The cryptographic hash function of which “After a trial of the technology, they realised he speaks is a deterministic procedure that there were problems and quietly dropped the takes an arbitrary block of data and returns a programme.” fixed-size bit string – (the cryptographic) hash It’s against this backdrop that Wood says that value. If the value is not protected, then an the government sector has a better understanding accidental or intentional change to the data than its private sector counterparts about the limi- will change the hash value and so reduce – or tations of biometric systems and how they are best even eliminate – the software’s ability to verify used in parallel with other security mechanisms. the data sets concerned. “My team are seeing a growing number of Peter Wood, First Base Technologies. As a result of this, Wood says that the high- government offices adopting biometrics as a end information security industry does not means of authenticating users, but not as a tech- penetration testing, social engineering and skills overly rely on biometrics as a means of verifying nology on its own,” he says. “At the moment, transfer. And, of course, biometrics technology. someone’s identity beyond all doubt. the technology is best implemented as part of There are, he says, two issues with implement- “It’s just another layer of security. The reality a layered approach to security, rather than as a ing biometrics in government departments such is that fingerprint scanning systems such as those standalone technology in its own right.” as border control and immigration, as well as in seen on most laptops are not thermal imaging- other public sector agencies. enabled, so they can be beaten if you know About the author “The first of these is the reliability of the how,” he says. fingerprint readers. Unless the hardware is up to According to Wood, it’s not just fingerprint Steve Gold has been a business journalist and the task, you’re in trouble,” he says. And then biometrics that are potentially problematic technology writer for 26 years. A qualified there is the software, which he says can vary to implement, because iris-scanning – such accountant and former auditor, he has specialised enormously in its capabilities. “If you look at as those schemes implemented at a growing in IT security, business matters, the Internet and some of the older IBM/Lenovo laptops, they number of airports around Europe, notably communications for most of that time. He is tech- have fingerprint scanners built in and, while Amsterdam Schiphol – can also generate false nical editor of Infosecurity and lectures regularly the hardware is excellent, the software sup- results, both positive and negative. on criminal psychology and cybercrime.

Going to the polls in Togo

Togo, a French-speaking country in West tity was established through the use of identity Africa, has a population of 5.7 million people, documents or testimonials. with a density of just 95 people per square During the enrolment process, Zetes’ People kilometre. Registration Solution – which was developed In 2007, it held an election. A contract for the Congo project – compared the finger- issued by the Togolese Government was award- prints of the citizen to those of all other people ed to Zetes in 2007 and required the Belgian enrolled at the enrolment station concerned. firm to be responsible for registering the demo- Using this approach, Zetes says that citizens graphic and biometric information of each could only be enrolled once at each station. Zetes’ mobile biometrics kits being used for voter citizen applying for a secure voter card. At the registration. When the verification process was successful, a end of the enrolment process, voters were given secure voter card with a 2D barcode was issued cards with their biometric data, which included During the initial phase of the project, the to the citizen. The collected enrolment data then a photograph and two fingerprints. project staff set up the central database in Lomi, was consolidated on the servers of the national The Commission Electorale Nationale provided technical support and organised training central site in Lomi, after being relayed by Independante (CENI) was Zetes’ partner for seminars in the 38 prefectures. In total, more than CD-ROM from the various enrolment stations. the project, and was responsible for the organ- 50 local technicians and over 5,000 operators were Any duplicates caused by the registration isation of the census and the elections. trained on how to use the enrolment solution. of the same person at two different centres As well as providing the platform for enroll- The electronic and biometric registration were then detected through the biometric ing the population, Zetes provided the IT kits used for the electoral census in Togo were data, which was processed at Zetes’ Belgian systems for the centralisation of the enrol- made available by the Democratic Republic of headquarters. ment data, the removal of double registrations Congo, whose elections Zetes had facilitated To ensure the privacy of the Togolese through the use of an Automated Fingerprint some two years earlier. The enrolment kits citizens, only the fingerprint template and a Identification System (AFIS) system and the contained a PC, a camera, a fingerprint scan- unique identifier were sent to the AFIS sys- production of the electoral lists. The system ner and a printer. tem in Brussels. In this way, Zetes says it was administrators, content specialists and expert The demographic data, the photo and the impossible for the operators of the AFIS site technicians were all employees of an African prints of the two index fingers of each citizen to establish the identity of a person based on subcontractor. were then collected. Proof of the citizen’s iden- the information provided.

11 June 2010 Biometric Technology Today news/comment

...Continued from page 5 able to respond to the programme’s tight dead- Cross Match has now filed a complaint lines, which required the issuing of the first with the US International Trade Commission BPS is planning to install up to four of the e-passports on 1 June. (ITC) alleging infringement of four of its ATMs in Warsaw by the end of the year and a Turkey’s President, Abdullah Gül, was the patents by biometric scanners made and sold total of 200 across its 365 branches in Poland. country’s first citizen to receive a biometric by Korea-based Suprema, which manufac- * In the US, the First United bank has signed passport. His wife, Hayrünnisa, got the second tures products such as RealScan scanners a deal with Hawk Systems to install up to six one. Turkey has marked the switch to e-passports and Texas-based Mentalix, which distributes biometric ATMs in New York. This is a trial by changing the colour of the new documents: Suprema products. and, if successful, First United plans to use the diplomatic passports are now black, regular pass- Cross Match has asked the ITC to issue systems – which employ fingerprint scanning – ports have changed from blue to maroon. an exclusion order, preventing ‘infringing’ across its ATM network. Suprema products from being imported into patents the US, as well as seeking a cease and desist Smart Card Alliance order to stop the sale of any such products Cross Match seeks ban already in the country. reports on immigration This follows the original patent infringement on Suprema products suit filed in February in the District Court in reform Tyler, Texas. This case is ongoing. he patent dispute between Cross Suprema signed a deal with Mentalix in he Smart Card Alliance – the multi- TMatch and two other companies, January 2010 to supply fingerprint scanners to Tindustry group that promotes Suprema and Mentalix, continues. the US Census Bureau. smartcard technology – has released a report, ‘Securing Identity and Enabling Employment Verification: How Do Immigration Reform and Citizen Comment Identification Align?’ which, predictably, The problem is that these issues are very concludes that secure ID is fundamental The cancellation of the subtle. For example, you might reasonably to successful immigration reform. national ID card scheme by the UK’s new coalition say that India’s massive adoption of biometric Not surprisingly, given that biometric ID Government was hardly ID will help give an official existence to vast cards are a key element in immigration reforms a surprise – in fact, it was numbers of people who simply do not currently currently being sought in the US, the report a campaign promise from have any documentary proof of their identity: includes a section on biometric options. This is a both parties. And this act is part of a cull of and through that, you can give them easy access very brief overview of the technologies available, biometrics-based projects. to government-supplied services that could but – perhaps significantly – it focuses on priva- The National Identity Register – the database significantly improve their lives. But to what cy issues and highlights how the use of biometric underpinning the scheme – will be destroyed. extent does that concept apply in the UK? templates protects a user’s personal information. The UK will not proceed with plans to move Countering those arguments are valid The report also asserts that: “An upgraded to second-generation biometric passports. The concerns about mission creep, the surveillance Social Security card incorporating biometric Government has pledged to put a stop to the society, the protection of personal data and identity credentials enables a true authentication use of biometric ID schemes in schools, unless who owns your identity – you or the state. process that will benefit workers, employers, and parents give consent. And it plans to put stricter These are important areas of social policy. government.” limits on the retention and use of DNA data. Biometrics has a part to play in all this, but A PDF version of the report is available for For the biometrics industry, the significance there are complex issues (ones not easily reduced download at: http://bit.ly/btt201006-smartcard of all this goes beyond lost business to sound bites) around the proportionate use e-passports opportunities. For while cutting costs is clearly of biometric data, what are the appropriate a key objective in all this, the Government’s technologies and what challenges do they actions are being presented as reversing the present (for example, encryption, public key Gemalto personalises erosion of civil liberties in the UK. And infrastructures and so on). there’s the possibility that, in the minds of UK Biometrics are often presented as a simple Turkey’s passports citizens, there will be a reinforcement of the solution – such as the taking of fingerprints. idea that biometric technology automatically There is no public awareness that there exists a emalto is providing the personalisa- means infringement of personal freedoms. range of biometric solutions, many of which can tion services for Turkey’s e-passport G You can’t escape the politics in all this. actually help to protect personal data and privacy. programme. The company has imple- It has been suggested, from more than one Perhaps government organisations need to mented its Coesys Issuance solution at quarter, that killing the ID card scheme is an put a better case for the use of biometrics. In two centres in the country – one at the easy target for a new government wanting to the meantime, the UK biometrics industry has Ministry of Foreign Affairs and the other score points with the public, be seen to be a difficult task on its hands. As the previous in the Turkish Police centre in Ankara. acting on campaign promises and looking to Government’s ID plans are ditched in the The personalisation service includes a certifi- save money. On the other hand, you could name of civil liberties, how do you stop people cate authority solution and associated integra- just as easily argue that the Government is associating the technology itself with its alleged tion services. Gemalto is also providing training living up to its promises to protect privacy misuse? to the staff operating the service. The company and other personal freedoms. Steve Mansfield-Devine already has a strong presence in Turkey and was

12 Biometric Technology Today June 2010