La Biometria entra nell`e-government 6th. Convegno, CNIPA

Possible Experiences and Visions in Possible Experiences and Visions in Biometrics as a Contribution for Europe by a Biometrics as a Contribution for Europe by a

German Federal Public Administration AgencyGerman Federal Public Administration Agency

La Biometria entra nell`e-government

6th. Convegno, CNIPA

Federal Office for Information Security (BSI), Germany

Head of Unit „Key Technologies“

Ciclo di convegni di studio CNIPA

Rome, 23. November 2004

Dipl. Mathematician Klaus Keus

Klaus Keus 23.11.2004 Folie 2

BSI-Biometric projects in the context

of internal / homeland security

Main Background:

In the ‚Anti-Terrorism Act II‘ as of Jan. 09 2002 it is now allowed to integrate biometric data in the German Identification Card (Personalausweis) and in the passport (Reisepass) as well as in ID-doc`s for aliens

The following Biometrics are mentioned in the law: Hand Face Finger


October 25, 2004, EU decision on biometric passports

25 interior ministers in Luxemburg After technical details are agreed

upon: 18 months for inclusion of face

image in contactless chip on european passports

Further 18 months for inclusion of finger print

Germany will produce biometric passports before the end of 2005


Relevance of biometrics in Germany (1)

Increased activities of international terrorism requires new mechanisms to guarantee and even increase the security level of inhabitants

Benefit of biometrics for internal security: to check of claimed identities, to reveal secretely kept identities, Examples: credit card misuse, false personal documents,

forged visa.

Strategy: Dialogue with security agencies like BSI and BKA (Federal Criminal

Police Office) to realize possibilities to increase security with the means of biometrics

Targetted & sensible implementation of biometrics in order to increase the security level in Germany


Relevance of biometrics in Germany (2)

Possible applications:

Secure documents for foreigners (visa, residence certifications) Border control of persons entering the country Secure identification of personal documents (ID-cards & passports) Access control to sensitive areas (official identification card for

public servants)

Crucial: high security & performance, approved level of trust

European & international cooperation

Support of standardization to secure national & international operability


Projects in the context of internal security

Choice of specific biometric characteristic and technical details requires further legislation!

=> Different Projects set up together with the BKA in order to make recommendations on the ground of large-scale trials

some of the main current BSI-projects:

BioFace

BioRechInt

BioFinger

BioP

ILSE


BioFace

Objectives: Investigation of Facial Recognition Systems: are FRS sufficient for gov. use?

I: Establishing Image Data Bases and classification of images; approx. 200.000 images; 116 images for identification used; verification with 50.000 images cross-matching

II: test of 3 algorithms, identification and verification; Field Trial with 4 algorithms with 20 persons; access control via identification/watch-list-scenario (august 2002-april 2003)

III: Interferences of reference data; rotation of head; mimic; graphic (e.g. resolution) and photographic (e.g. lighting) interference (july 2003-april 2004)

IV: Morphologic particularities (planned) V: 3-D-field trial (running) VI: Publically available gallery of 300 persons with approx. 70 different

images, analogue to phase III


BioFinger

Objectives: Set up of a fingerprint database BioFinger I

Influence of different fingerprint sensors/algorithms on template; 11 sensors, 7 algorithms; Finding: crucial influence of used sensor for success of recognition; best performer: optical sensors

Are fingerprint usable for 10 years, regarding the sensors? Tendency: EER increases by factor 1,6 to 2 when using ten year old fingerprint

Development of a General Fingerprint - is CBEFF usable? Finding: CBEFF not usable due to too much differences in templates.

BioFinger II Improvement of the performance when using more than one

fingerprint?; using same data as BioFinger I, same algorithms and sensors


BioRechInt

Objectives: Current status report on international biometrics applications with set of criteria to assess;Establishing large database with applications, products and test/validation results

Schedule: National report finished 2002 International in 2003, continuation throughout 2004

underway


BioP - Study

BioP I

Investigation of the performanceof face rec. systems

for the planned implementation in personal documents

Nov. 2002 - Dec. 2003

BioP II

Investigation of the performance of different biometrics identification systems

Nov. 2003 - Nov. 2004

BioBiometrics in PPersonal DocumentsBioP


BioP I - Results

Facial Recognition is in principle able to perform the task set by ICAO.Facial Recognition is in principle able to perform the task set by ICAO.

Requirements for German Documents (and all MRTDs) Integrating digital storage media New photo guidelines according to ICAO

Requirements for Facial Recognition Systems Improvement of Fake Resistance Optimizing the Algorithms, tuning towards image files vs. Templates Robustness against ageing (research required)

Requirements for the Environment use facial recognition only in human assisted

border control controlled lighting


BioP II

Objectives:

Based on the knowledge of the other projects on three biometrics including

Performance

Security

Usability and acceptance.

Large-scale fieldtest at Frankfurt Airport to examine the usability of face, finger and iris-recognition biometrics for a large user group (~2000).

Taking into account ICAO-recommendations (e.g. images, RFID-chips, LDS)

Schedule: Nov. 2003 - Nov. 2004


Analysis

Comparison of 3 different biometrics Comparison of 2 different fingerprint systems Comparison of different reference data (images ICAO vs.

proprietary template) Evaluation of performance

● FTE, FRR, FAR● Illustration

● Genuine-imposter-frequency diagrams● FAR-FRR-diagrams● ROC-curves

Fake-Resistance● life-recognition● zero-effort-attempts

ICAO-recommendations: LDS and images


First Trends

General High complexity of a large field-trial in terms of technical,

administrative and legal aspects Communication with users and transparency crucial Communication with data protection officer and working council

most relevant; high strategic relevance for companies

Details Enrolment most relevant

Quality of the reference data and constant lightning conditions

Usability depending on system design and configuration Sensor, time, feedback (transparency)

Acceptance dependent on personal favourites


Interface BioP II ILSE

BioP IIBiometrics in Personaldocuments

ILSEICAO LDS and Security Evaluation

ICAO-conformedData structures


Goal• Design and implementation of an interoperable

e-Passport solution● Analysis and concretion of the corresponding

ICAO documents

Methodology • Study the ICAO documents and try to use them

for an implementation• Identify inconsistencies, inexactness and flaws • Report the results to the standardization body

Project ILSE“ICAO LDS and Security Evaluation”


Results• Essential contributions to the recent ICAO specifications

● LDS Report v1.7● PKI Report v1.0

• Interoperable e-Passport samples from Bundesdruckerei and Giesecke & Devrient

• “Golden Reader Tool” implemented by secunet

The “Essen Group”• Joint approach between NL, UK and D targeted on next

generation e-Passports● First meeting on 26.01.2004 in Essen● Participants from official institutions and companies

• Definition of common reference data “Silver Data Set”• Interoperable e-Passport samples among NL, UK and D

based on the “Silver Data Set”• Presentation of the results during the international

e-Passport testing in Morgantown, USA (07/2004)

ILSEResults and Cooperations


BSI Lab for Biometrics: Main Task Areas

Vulnerability Analysis• Verification / Identification as „other“ person• Enrolment under new, changed Identity • „Denial of Service“

Useability of biometric systems

Analysis of Performance• FAR• FRR• impact of special environment and operational conditions


Reports for Projects in Biometrics

• Report BioP I available now (German / Engl.): http://www.bsi.bund.de/literat/studien/biop/index.htm• Report BioP II available: 1. Q 2005

• Report BioFace I/II available now German / Engl.): http://www.bsi.bund.de/literat/studien/bioface/index.htm• Report BioFace III available 1. Q. 2005 (German / Engl.)

• Report BioFinger I available now (German, Engl.in preparation): http://www.bsi.bund.de/literat/studien/biofinger/index.htm• Report BioFinger II available: 2. Q. 2005


Contact

Bundesamt für Sicherheit in der Informationstechnik (BSI)

Dipl. Math. Klaus KeusHead of Unit „Key Technologies“

Godesberger Allee 185-18953175 Bonn

Tel: +49 (0)1888-9582-141Fax: +49 (0)[email protected]

www.bsi.bund.de

Thank you very much for your attention