jlw_fasttrack

7/27/2019 jlw_fasttrack

1/12

1

The Basics of Biometric

AuthenticationDr. James L. Wayman

7/27/2019 jlw_fasttrack

2/12

2

Proposed ISO/IECDefinition

Biometrics is the automatic recognition ofindividuals based on biological and behaviouraltraits

If a person is recognized, a record for thatperson can be returned. That record is theidentity.

Validity of the data in the record isindependent of the biometric data

The connection to informational privacy

If a person is not recognized, a flag notrecognized can be returned

7/27/2019 jlw_fasttrack

3/12

3

A Variety ofApplications

Prevent multiple users of a single identity Recognition is good

e-Passport

Prevent multiple identities of a single userNon-recognition is good

EURODAC

UAE Programs can do both

National ID card

But biometrics does not validate the data in the record Biometrics cannot substitute for identity management

7/27/2019 jlw_fasttrack

4/12

4

U.K. Leadership inHuman ID

Grew (1641), Londonderry (1691)

The need for continuity of recognition of humans over time

1853 Penal Servitude Act (Parole)

1869 Habitual Criminals Act (Perversity of perpetrator)

Galton, Faulds, Hershel, Henry (1888+) Watson (1953)

NPL and AEA (1970s)

Jefferys (1985) AfB (1992)

Daugman (1994)

BWG (1999)

SC27/37

7/27/2019 jlw_fasttrack

5/12

5

The Major Technologies

Face Fingerprint

Hand/finger geometry Iris

Voice

7/27/2019 jlw_fasttrack

6/12

6

The Varieties of theHuman Condition

OfficeWorker

Adult over 55 Child CollegeStudent

OfficeWorker

+ 6 weeks

7/27/2019 jlw_fasttrack

7/12

7

Errors, Accessibility

and Public Systems

Humans are problem prone! The analogy to public transportation

Provision for those with special requirements

Luggage, prams

Wheelchairs

Provision for assistance Confused non-Londoners

Provision for security

Gate jumping

7/27/2019 jlw_fasttrack

8/12

8

Successes

National Law Enforcement

NAFIS

Border Crossing

BAA trial

SmartGate Schipol Privium

Large-scale Access Control

Disney World

Local Access Control Barlinnie Prison

Benefits Management

EURODAC/IND

US State Department Consular Consolidated Database

7/27/2019 jlw_fasttrack

9/12

9

Difficulties

Inadequate provision for human problems

1990 Barcelona World Games

Cost/benefit uncertainties

INSPASS

US State Welfare Programs Security failures

Schipol Travel Pass (1992)

Legacy record management

Argentina National ID

Integration

IAFIS/IDENT

No commercial acceptance

Intellitrak, Innoventry

7/27/2019 jlw_fasttrack

10/12

10

Distinguishing Known

from Unknown

Does relate to professional criminals INTERPOL exchange of fingerprint data

Border crossing presents unique opportunity fordetection

EURODAC search for professional asylum

seekers

National uses against professional benefit

seekers

7/27/2019 jlw_fasttrack

11/12

7/27/2019 jlw_fasttrack

12/12

12

Conclusions

Biometrics can distinguish between unknown andunknown people

Biometrics can indirectly point to other information

(which may or may not be correct, up to date, etc.) The connection to privacy

Biometrics can be used to tighten border processes

Border crossing represents a unique opportunity to search

for criminals

Biometrics has only indirect application to terrorism

Systems must account for the human factor