© Biometrics Institute 2018 www.biometricsinstitute.org 1
Biometrics Institute US ConferenceWashington DC26 March 2019Isabelle Moeller
Biometrics Institute
@BiometricsInsti
© Biometrics Institute 2018 www.biometricsinstitute.org 2
Andrew Niccols movie “Anon” (2018): https://www.youtube.com/watch?v=cKdSaLt6w7s
© Biometrics Institute 2018 www.biometricsinstitute.org 3
About the Biometrics Institute
Independent and impartial international membership organisation
Multi-stakeholder community of over 240 organisations, 30 countries,
1,000 individuals
Mission: Promote the responsible and ethical use of biometrics
Connects, informs, guides and leads through good-practices
© Biometrics Institute 2018 www.biometricsinstitute.org 4
About the Biometrics Institute
Connector
To act as a connector for
the global biometrics
industry including users,
suppliers, academics,
regulators and privacy advocates
Knowledge Transfer
To facilitate knowledge-transfer
to members, prospects,
key stakeholders and the public
Thought-leadership
To develop thought-leadership
for the responsible use of
biometrics, using the input
of experts
The mission of the Biometrics Institute is
to promote the responsible and ethical use of biometrics and
biometric analytics as an independent and impartial international forum for
biometric users and other interested parties.
Biometrics Institute Members:
Global multi-stakeholder community
To be the independent globally trusted voice for the biometrics community
© Biometrics Institute 2018 www.biometricsinstitute.org 5
Board of the Biometrics Institute
Jill Fitzroy, Director,
Biometrics Institute.
Director, Service Strategy,
VicRoads – Australia
Isabelle Moeller, Chief Executive
Laura Compton, Chief Operating Officer
Michelle Whitfeld, Relationship Manager, Europe & USA
Carolyn Allen, Project & Committee Manager, Europe & USA
Emilia Bromiley, Member & Events Coordinator, Europe & USA
Nicky Tivnen, Operations Manager, Europe & USA
Alex Petersen, Manager, ANZ
Christine Rogers, Operations Manager, ANZ
Biometrics Institute Team (Management & Secretariat)
User
Andrew Rice, Chairman &
Director, Biometrics
Institute.
Assistant Secretary
Identity Security Branch,
Department of Home
Affairs - Australia
John Kendall, Director,
Biometrics Institute.
Border and National
Security Program Director,
Unisys Global
Public Sector – USA
Brett Feldon, Director,
Biometrics Institute.
General Manager,
Speech, Probe –
Australia
Supplier
George Rodrigues, Director,
Biometrics Institute.
Manager Identity Services,
Compliance Risk &
Intelligence Services Group,
Immigration New Zealand
User
Andy Foote, Deputy
Chairman & Director,
Biometrics Institute.
Vice President
Innovation Group, Wells
Fargo’s Innovation
Group – USA
User
Raoul Cooper, Director,
Biometrics Institute.
Senior Design Manager,
Digital Airport, British
Airways – UK
User
Hans de Moel, Director,
Biometrics Institute
Royal Netherlands
Marechaussee (KMar),
part of the Dutch Ministry
of Defence
User
User
Supplier
© Biometrics Institute 2018 www.biometricsinstitute.org 6
Biometrics Institute Members & Key Stakeholders
• US Department of Homeland Security
• Facebook – USA
• Mastercard – UK
• The Royal Bank of Scotland Group – UK
• Defence Australia
• Federal Bureau of Investigation (FBI) – USA
• Canada Immigration
• Sberbank (Russia)
• UK Home Office
• British Airways
• Ministry for Immigration and Integration (Denmark)
• Dutch Ministry of the Interior
• Roads and Maritime Services Australia
• Federal Ministry for Information Security (BSI), Germany
• Lufthansa
• Department of Immigration and Border Protection Australia
• Immigration New Zealand
• Visa – UK
• Prime Minister's Office – Israel
• Rabobank (Netherlands)
Agreements of Collaboration:
• United Nations Counter-Terrorism Executive Directorate (UNCTED)
• International Organization for Migration (IOM)
Over 248 member
organisations from
31 countries
Membership Breakdown
User Members
Supplier Members
University & Research
Subscribers
Honorary
Australia
New
Zealand
UK
Rest EU
USA/
Canada
Asia
South
AmericaAfrica
COUNTRIES
© Biometrics Institute 2018 www.biometricsinstitute.org 7
Academic, Research & Innovation Group
Head of Group: Stephanie Schuckers
Borders & Major Travel Programmes User Group
Head of Group: Paul Cross
Biometrics Institute
Security & Integrity Expert Group
Head of Group: Ted DunstoneBSIEG
ARIG
Privacy & Policy Expert Group
Head of Group: Terry AulichPEG
Digital Identity Expert Group
Head of Group: Raoul CooperDIGI
BUG
Biometrics Institute
Expert & Sector Groups
© Biometrics Institute 2018 www.biometricsinstitute.org 8
Biometrics Institute Projects: Completed
• Penholder for United Nations Compendium
of Recommended Practices for the
Responsible Use and Sharing of Biometrics
in Counter-Terrorism
• Understanding Biometrics - Considerations
for Implementing a Biometric System
• Vulnerabilities
• Top 10 Vulnerability Questions
• Biometrics Vulnerability Checklist
• How to address biometric
vulnerabilities – a baseline assessment
guide
ü
ü
ü
ü
© Biometrics Institute 2018 www.biometricsinstitute.org 9
Biometrics Institute Projects: In Progress & Under Revision
What does Presentation Attack Detection
(PAD) and Liveness actually mean?BSIEG
PEGEthical Principles
Review of Privacy Guidelines PEG
Recommended Reading List ARIG
• A guide to asking the right questions
concerning PAD, and to better understand
biometric products
• Seven principles for our members to
observe around the ethical use of
biometrics and biometric analytics
• Revised every 2 years, the guidelines
address key privacy issues when
introducing biometrics
• Recommended reads aggregated by the
Institute’s Academic Research and
Innovation Expert Group
© Biometrics Institute 2018 www.biometricsinstitute.org 10
Biometrics Institute Projects: Under Consideration
Guide to Digital Onboarding DIGI
“Governance & Biometrics – post
Implementation – what now?”
Procurement Cheat Sheet
• Development of checklist or good practice
principles for onboarding digital identity
• Guidelines for good governance following
the implementation of a biometric system
• Checklist of considerations for those
involved in the procurement process
BSIEG
BSIEG
© Biometrics Institute 2018 www.biometricsinstitute.org 13
Ethical Principles for Biometrics
• Why?
Was brought to fruition following a near unanimous show of hands at our last year’s Joint-group meeting in October in London
Laws and regulation cannot keep pace with speed of technology developments
Serving humans: Just because we can, should we?
• Who?
Privacy Expert Group in consultation with key stakeholders representing a diverse group of people including government, privacy regulators, privacy advocates and biometric experts
• What next?
We need to join forces to make the world a safer place through the responsible & ethical use of biometrics
Call to action: Please promote these among your colleagues – as well as the copy you have on your chair, they are on our website for you to
share with your own networkswww.biometricsinstitute.org
© Biometrics Institute 2018 www.biometricsinstitute.org 14
UPCOMING EVENTS 2019
ID@ Borders & Future of Travel Conference – 11-12 April, Vienna
Asia-Pacific Conference – 22-23 May, Sydney
The Great Debate: Responsible & Ethical use of Biometrics – 6 June, Brussels
Biometrics Congress – 29-30 October, London
Showcase Australia – 20 November, Canberra
TRAINING COURSES & WORKSHOPS
Face Recognition Workshop – 21 May, Sydney
Privacy Impact Assessment Workshop – 24 May, Sydney
Biometrics Week Satellite Events – 28 October – 1 November, London
NEXT MEMBER MEETING
12 July, London
© Biometrics Institute 2018 www.biometricsinstitute.org 15
HousekeepingMobile phone
Please set to silent
Questions welcome
Raise hand and wait for the microphone before speaking. Introduce yourself (name and organisation).
Speaker presentations
Will be placed on the event website after the event for attendees to access (if speakers agree)
Media
Media is NOT in attendance. Chatham House Rule applies. You can tweet but please seek approval from the speaker
if you wish to place a quote
Photography
We will be taking photos for our members’ newsletter and social media – please let us know if you do not want to
be in a photo
Amenities and Emergency procedure
Wifi
Code: 1830@JQAdams
Twitter: #BiometricsUS @BiometricsInsti
LinkedIn: https://www.linkedin.com/company/biometrics-institute
© Biometrics Institute 2018 www.biometricsinstitute.org 16
Biometrics Institute
Phone: +44 207 581 4827
Email: [email protected]
Web: www.biometricsinstitute.org
Connect with us
@BiometricsInsti
© Biometrics Institute 2018 www.biometricsinstitute.org 17
Lead
Represent
Inform
Connect
As a member …
… Stay Connected
• Expand your international network of contacts
• Connect with the whole industry: users,
suppliers and academics
• Share information with the industry about
best-practice and innovation
• Network at a broad range of high-quality
events
• Develop and strengthen partnerships
… Stay Informed
• Biometrics Institute best-practice Privacy
Guidelines
• Biometrics Institute Vulnerability FAQ Paper
• Expert briefings and events
• Education and training
• Annual Industry Survey
• Online Resources
• E-newsletter
• Supplier Directory
• Blog with industry updates and insights
• Expert and Sector groups
… be represented by the Institute
• We are independent, impartial and international
• Professional work ethics and high-quality
administration
• We provide the independent collective voice that
is shaping the industry
• Align your organisation to a strong brand with
more than 15 years of industry experience
… Lead the debate with us
• Promote priority themes and key messages
• Provide a platform for dialogue to shape the
debate on the responsible use of biometrics
Conferences
Board and Expert Groups
Biometrics Institute Blog www.biometricsinstitute.org
© Biometrics Institute 2018 www.biometricsinstitute.org 18
Biometrics Institute Privacy Guidelines
• First comprehensive, universal Privacy Guidelines for biometrics
• Input from many different sectors
• It includes 16 Principles such as
• Proportionality
• Informed consent
• Protection of Biometrics Data Collected
• Purpose
• Sharing of biometric data
• It is updated every two years
© Biometrics Institute 2018 www.biometricsinstitute.org 19
Biometrics Vulnerability Information
Top 10 Vulnerability Questions
Addresses frequently asked questions about biometric vulnerabilities such as:
1. Can my biometric be stolen / compromised?
2. How hard is it to steal a biometric?
3. What if my biometric gets stolen/ compromised?
4. Are biometrics a good alternative to passwords?
Biometrics Vulnerability Checklist
This list has been prepared by the Biometrics Institute Vulnerability Expert Group to help guide
members in addressing vulnerability assessments in biometrics. It addresses questions such as:
What are the common vulnerabilities for your technology (including biometrics)?
Do you have a risk management plan, and does it include the potential for biometric vulnerability?
How to address biometric vulnerabilities – a baseline assessment guide
A full assessment of biometric vulnerability, as with any security penetration assessment, is a
detailed process that best undertaken by an experienced practitioner. A baseline assessment of
vulnerability can be undertaken by leveraging existing security testing personnel. To assist in
this process this simple guide for a baseline assessment has been developed.
OnlineUS $300-900
© Biometrics Institute 2018 www.biometricsinstitute.org 20
Considerations for Implementing a Biometric System
Simple, accessible and usable resource when considering the use and appropriateness of a biometric system, particularly for first time users.
Contents
1. Summary—what this guide covers; biometrics as a specialist subject; broader user and business perspectives; the Biometrics Institute.
2. Business case—why use biometrics? How? Scope of the system? Intended benefits?
3. Privacy and security—why these factors are critical with a biometric system; Biometrics Institute guidelines on privacy; other obligations.
4. Modality and quality—what type of biometric? What are the options and reasons for decisions on which to choose?
5. Business model—the holistic understanding of how will the solution operate—who does what? How does the proposed system work with the rest of the organisation and its information technology?
6. Testing—how do you know your system is fit for purpose? Biometric accuracy? Performance? Can the system detect presentation attacks?
7. Requirements definition—defining the specification you will need to confirm what is required, and build, test and operate
the system, whether procured through an external contract or with an in-house team. This section provides some assistance in evaluating the complexity that may be involved in your proposed solution.
8. Conclusion
9. Annex—glossary; references and standards
“Understanding Biometrics” Reference Guide
“Very good initiative. I'm sure this will be helpful to many
that are considering to implement biometrics!”
© Biometrics Institute 2018 www.biometricsinstitute.org 21
Addresses the Security Council’s Resolution 2322
(December 2016) and 2396 (December 2017
Initiative of the UN Counter-Terrorism Implementation
Task Force (CTITF),
Released 29 June 2018
Practical guidance tool to help address developments
in biometrics in the context of counter-terrorism.
Compendium of Good and Recommended Practices on the
Responsible Use and Sharing of Biometrics in Identifying Terrorists