Transcript Titel des Vortrages (Arial 32)

La Biometria entra nell`e-government
6th. Convegno, CNIPA
Possible Experiences and Visions in
Biometrics as a Contribution for Europe by a
German Federal Public Administration Agency
Dipl. Mathematician Klaus Keus
Federal Office for Information Security (BSI), Germany
Head of Unit „Key Technologies“
Ciclo di convegni di studio CNIPA
Rome, 23. November 2004
BSI-Biometric projects in the context
of internal / homeland security

Main Background:
In the ‚Anti-Terrorism Act II‘ as of Jan. 09 2002 it is now allowed to
integrate biometric data in the German Identification Card
(Personalausweis) and in the passport (Reisepass) as well as in
ID-doc`s for aliens

The following Biometrics are mentioned in the law:

Hand

Face

Finger
Klaus Keus
23.11.2004
Folie 2
October 25, 2004, EU decision on
biometric passports





Klaus Keus
23.11.2004
25 interior ministers in Luxemburg
After technical details are agreed
upon:
18 months for inclusion of face
image in contactless chip on
european passports
Further 18 months for inclusion of
finger print
Germany will produce biometric
passports before the end of 2005
Folie 3
Relevance of biometrics in Germany (1)


Increased activities of international terrorism requires new
mechanisms to guarantee and even increase the security level of
inhabitants
Benefit of biometrics for internal security:

to check of claimed identities,

to reveal secretely kept identities,


Examples: credit card misuse, false personal documents,
forged visa.
Strategy:


Dialogue with security agencies like BSI and BKA (Federal Criminal
Police Office) to realize possibilities to increase security with the means
of biometrics
Targetted & sensible implementation of biometrics in order to increase
the security level in Germany
Klaus Keus
23.11.2004
Folie 4
Relevance of biometrics in Germany (2)

Possible applications:

Secure documents for foreigners (visa, residence certifications)

Border control of persons entering the country

Secure identification of personal documents (ID-cards & passports)

Access control to sensitive areas (official identification card for
public servants)

Crucial: high security & performance, approved level of trust

European & international cooperation

Support of standardization to secure national & international
operability
Klaus Keus
23.11.2004
Folie 5
Projects in the context of
internal security
 Choice
of specific biometric characteristic and technical
details requires further legislation!
=> Different Projects set up together with the BKA in order to make
recommendations on the ground of large-scale trials
some of the main current BSI-projects:
BioFace
BioRechInt
BioFinger
BioP
ILSE
Klaus Keus
23.11.2004
Folie 6
BioFace
 Objectives:
Investigation of Facial Recognition Systems:
are FRS sufficient for gov. use?



I: Establishing Image Data Bases and classification of images; approx.
200.000 images; 116 images for identification used; verification with
50.000 images cross-matching
II: test of 3 algorithms, identification and verification; Field Trial with 4
algorithms with 20 persons; access control via identification/watch-listscenario (august 2002-april 2003)
III: Interferences of reference data; rotation of head; mimic; graphic (e.g.
resolution) and photographic (e.g. lighting) interference (july 2003-april
2004)

IV: Morphologic particularities (planned)

V: 3-D-field trial (running)

VI: Publically available gallery of 300 persons with approx. 70 different
images, analogue to phase III
Klaus Keus
23.11.2004
Folie 7
BioFinger
 Objectives:


Set up of a fingerprint database
BioFinger I

Influence of different fingerprint sensors/algorithms on template;
11 sensors, 7 algorithms;
Finding: crucial influence of used sensor for success of recognition;
best performer: optical sensors

Are fingerprint usable for 10 years, regarding the sensors?
Tendency: EER increases by factor 1,6 to 2 when using ten year
old fingerprint

Development of a General Fingerprint - is CBEFF usable?
Finding: CBEFF not usable due to too much differences in
templates.
BioFinger II

Klaus Keus
Improvement of the performance when using more than one
fingerprint?; using same data as BioFinger I, same algorithms and
sensors
23.11.2004
Folie 8
BioRechInt
 Objectives:
Current status report on international
biometrics applications with set of criteria to assess;
Establishing large database with applications, products
and test/validation results
 Schedule:

National report finished 2002

International in 2003, continuation throughout 2004
underway
Klaus Keus
23.11.2004
Folie 9
BioP - Study
Biometrics in Personal Documents
BioP
BioP I
BioP II
Investigation of the performance
of face rec. systems
for the planned implementation
in personal documents
Investigation of the performance
of different biometrics
identification systems
Nov. 2002 - Dec. 2003
Nov. 2003 - Nov. 2004
Klaus Keus
23.11.2004
Folie 10
BioP I - Results

Facial Recognition is in principle able to perform the task set by ICAO.

Requirements for German Documents (and all MRTDs)



Integrating digital storage media

New photo guidelines according to ICAO
Requirements for Facial Recognition Systems

Improvement of Fake Resistance

Optimizing the Algorithms, tuning towards image files vs. Templates

Robustness against ageing (research required)
Requirements for the Environment


use facial recognition only in human assisted
border control
controlled lighting
Klaus Keus
23.11.2004
Folie 11
BioP II
 Objectives:

Based on the knowledge of the other projects
on three biometrics including
 Performance
 Security
 Usability and acceptance.

Large-scale fieldtest at Frankfurt Airport to examine the usability
of face, finger and iris-recognition biometrics for a large user
group (~2000).

Taking into account ICAO-recommendations (e.g. images, RFIDchips, LDS)

Schedule: Nov. 2003 - Nov. 2004
Klaus Keus
23.11.2004
Folie 12
Analysis

Comparison of 3 different biometrics

Comparison of 2 different fingerprint systems

Comparison of different reference data (images ICAO vs.
proprietary template)

Evaluation of performance
●
FTE, FRR, FAR
●
Illustration
Genuine-imposter-frequency diagrams
●
FAR-FRR-diagrams
●
ROC-curves
Fake-Resistance


●
●
life-recognition
●
zero-effort-attempts
ICAO-recommendations: LDS and images
Klaus Keus
23.11.2004
Folie 13
First Trends


General

High complexity of a large field-trial in terms of technical,
administrative and legal aspects

Communication with users and transparency crucial

Communication with data protection officer and working
council most relevant; high strategic relevance for companies
Details

Enrolment most relevant


Usability depending on system design and configuration


Quality of the reference data and constant lightning conditions
Sensor, time, feedback (transparency)
Acceptance dependent on personal favourites
Klaus Keus
23.11.2004
Folie 14
Interface BioP II
ILSE
BioP II
Biometrics in Personaldocuments
ICAO-conformed
Data structures
ILSE
ICAO LDS and Security Evaluation
Klaus Keus
23.11.2004
Folie 15
Project ILSE
“ICAO LDS and Security Evaluation”
Goal
• Design and implementation of an interoperable
e-Passport solution
● Analysis and concretion of the corresponding
ICAO documents
Methodology
• Study the ICAO documents and try to use them
for an implementation
• Identify inconsistencies, inexactness and flaws
• Report the results to the standardization body
Klaus Keus
23.11.2004
Folie 16
ILSE
Results and Cooperations
Results
•
Essential contributions to the recent ICAO specifications
●
●
•
•
LDS Report v1.7
PKI Report v1.0
Interoperable e-Passport samples from Bundesdruckerei
and Giesecke & Devrient
“Golden Reader Tool” implemented by secunet
The “Essen Group”
•
Joint approach between NL, UK and D targeted on next
generation e-Passports
●
●
•
•
•
Klaus Keus
First meeting on 26.01.2004 in Essen
Participants from official institutions and companies
Definition of common reference data “Silver Data Set”
Interoperable e-Passport samples among NL, UK and D
based on the “Silver Data Set”
Presentation of the results during the international
e-Passport testing in Morgantown, USA (07/2004)
23.11.2004
Folie 17
BSI Lab for Biometrics:
Main Task Areas
Vulnerability Analysis
• Verification / Identification as „other“ person
• Enrolment under new, changed Identity
• „Denial of Service“
Useability of biometric systems
Analysis of Performance
• FAR
• FRR
• impact of special environment and operational conditions
Klaus Keus
23.11.2004
Folie 18
Reports for Projects in Biometrics
• Report BioFace I/II available now German / Engl.):
http://www.bsi.bund.de/literat/studien/bioface/index.htm
• Report BioFace III available 1. Q. 2005 (German / Engl.)
• Report BioFinger I available now (German, Engl.in preparation):
http://www.bsi.bund.de/literat/studien/biofinger/index.htm
• Report BioFinger II available: 2. Q. 2005
• Report BioP I available now (German / Engl.):
http://www.bsi.bund.de/literat/studien/biop/index.htm
• Report BioP II available: 1. Q 2005
Klaus Keus
23.11.2004
Folie 19
Contact
Thank you very much Bundesamt für Sicherheit in der
for your attention Informationstechnik (BSI)
Dipl. Math. Klaus Keus
Head of Unit „Key Technologies“
Godesberger Allee 185-189
53175 Bonn
Tel: +49 (0)1888-9582-141
Fax: +49 (0)1888-9582-90-141
[email protected]
www.bsi.bund.de
Klaus Keus
23.11.2004
Folie 20