- Email: [email protected]
Apple files patents for vascular biometrics and multimodal TV remote
NEWS designed to prevent fraud. The government is now issuing rations to all eligible cardholders without biometric check. UÊ/
iÊ iVÌÊ ÃÃÊvÊ*>ÃÌ>Ê *®Ê
>ÃÊÃ
>Ài`ÊÌ
iÊÀiÃÕÌÃÊvÊÌÃÊvÀÃÌÊ«ÌÊ«ÀiVÌÊ using biometrics to authenticate voters. The system is reported to have failed to identify 54% of the voters during a by-election held in August.
borders
Border authorities expand biometric checks
A
uthorities across the world are implementing biometric technology at the borders: UÊ1-Ê ÕÃÌÃÊ>`Ê À`iÀÊ*ÀÌiVÌÊ *®Ê has announced that it intends to conduct a test to collect biometric and biographic information from certain aliens who are departing the US on selected flights from up to ten identified US airports. UÊ/ iÊ âiV ÊLÀ`iÀÊ«ViÊ>ÀiÊiÝ«>`}ÊÌ iÊ
>ÃÞ"Ê«ÀiVÌÊ>ÌÊ*À>}Õi½ÃÊ6?V>ÛÊ>ÛiÊ>À«ÀÌÊ by an additional ten eGates. secunet has won the vÜÊÀ`iÀÊÊVÕVÌÊÜÌ Ê âiV Ê«>ÀÌner Vitkovice IT Solutions (VITSOL). UÊ/ iÊ>>V>Ê}ÛiÀiÌÊÃÊ>``}Ê>Ê biometric facial recognition system to its «>ÃëÀÌÊÃÃÕ>ViÊ>`ÊVÌÀÊÃÞÃÌiÊ* -®]Ê reports Security Document World. Canadian Bank Note Company originally implemented Ì iÊ* -ÊÃÞÃÌiÊÊÓää£ÊÌÊ«ÀÛ`iÊiiVÌÀVÊ functionality and machine-readable passports. The supplier has now been awarded a contract valued at $1.38m to procure a facial recogniÌÊÃÞÃÌiÊÕ«}À>`iÊÌÊ* -° UÊ-}>«Ài½ÃÊ >}ÊÀ«À̽ÃÊiÜÊ/iÀ>Ê 4, scheduled to commence operations in 2017, will use facial recognition technology to supplement FAST, automating processing and checks from departure check-in to aircraft boarding. UÊ/ iÊ,iViÌ>Êi`iÀ>Ê À>â>Ê >Ì>Ê Tax Collection Agency) is to implement NEC NeoFace Watch facial recognition technology for 14 international airports throughout Brazil.
Neil Costigan, CEO at behavioural biometrics supplier BehavioSec, says, “The iÞL>À`Ê*ÀÛ>VÞÊ>««]Ê`iÛi«i`ÊLÞÊÃiVÕÀÌÞÊ researchers Paul Moore and Per Thorsheim has sparked a great deal of conversation in the security industry. With roots in academia ourselves, we welcome people testing and exploring our software – in fact, that’s one of the reasons why we felt so strongly about making a live proof of concept demo available on our website. However, it is misleading to say that the app is able to ‘defeat’ a behavioural biometrics system, because it doesn’t ‘break in’. It’s like someone refusing to put their finger on a fingerprint Ài>`iÀÊqÊÌÊÕÃÌÊܽÌÊiÌÊÌ iÊ}>Ê>VViÃÃÊÌÊ>ÞÊ system protected by behavioural biometrics. He adds, “Our opinion is that users should have a range of authentication methods available to them. If they choose to opt out of behavioural LiÌÀVÃÊ>ÃÊ>ÊÛiÀvV>ÌÊÌiV µÕiÊvÀÊÜ >ÌiÛiÀÊÀi>î]ÊÌ iÊÌ iÞÊÜÊëÞÊLiÊÀiµÕÀi`Ê to use an alternative – likely more complex and inconvenient method, such as a keypad calculator or out of band SMS. That’s what this is about however – opting out. We are confident that our system worked as intended.”
Researchers can steal fingerprints from Android phones
R
esearchers have found a way to steal fingerprints from Android phones with biometric sensors such as the Samsung Galaxy S5 and the HTC One Max, reports The Register. Researchers have uncovered a flaw in HTC One Max in which fingerprints are stored as an image file (dbgraw.bmp) in an open ‘world readable’ folder. “Any unprivileged processes or apps can steal user’s fingerprints by reading this file,” the team says, adding that the images can be made into clear prints.” UÊ}iÀ«ÀÌÃÊ"Ê LiÊ iÛViÃ\ÊLÕÃ}Ê and Leaking’ may be viewed at http://tinyurl. com/BTT201509b
spoofing apple
Researchers set out to counter behavioural biometrics
R
esearchers Per Thorsheim and Paul Moore have been working on a Chrome browser plug-in, designed to counter behavioural biometrics by obscuring the digital trail left by behavioural biometrics.
EVENTS CALENDAR 7–9 October 2015 10th Annual Homeland Security Week (HSW) Arlington, Virginia, US The 10th Annual Homeland Security Week (HSW) will bring together homeland security leaders from both government and industry to discuss requirements, critical issues, and vulnerabilities within national security. Speakers include Michael Fisher, Joseph Demarest and Randolph Alles. More information: http://www.homelandsecurityweek.com.
13–15 October 2015 Biometrics 2015 Westminster, London, UK The three-day conference offers practical advice, tips and solutions for using biometric technology for managing identity and increasing efficiency within government and commercial applications. The exhibition on 14-15 October is a key source of advanced identity management and authentication solutions. More information: http://www.biometricsandidentity.com
16–18 November 2015 4th International Conference and Exhibition on Biometrics & Biostatistics 2015 Hilton San Antonio Airport, San Antonio, US OMICS Group is organising the 4th International Conference and Exhibition on Biometrics & Biostatistics. This conference will provide a new forum for broad areas defining security policies and user behaviour as well as social influence of biometric security. Also it will emphasise the recent advances and researches in the field of biostatistics and statistical methodology and clinical research.. More information: http://biometrics-biostatistics.conferenceseries.com
17–19 November 2015 Cartes Secure Connexions Paris-Nord Villepinte Exhibition Centre, Paris Cartes Secure Connexions brings together industries including payment, identification and mobility. More than 19,000 attendees from the financial, retail, government, identity and access, telecommunications and transportation sectors, coming from 175 countries, will converge in Paris to explore how digital society is evolving. This year, Cartes Secure Connexions will take place next to Milipol, the Worldwide Exhibition of Internal State Security. Cartes Secure Connexions attendees will be able to visit Milipol free of charge. More information: http://www.cartes.com
18 November 2015 Showcase Australia 2015
Apple files patents for vascular biometrics and multimodal TV remote
A
pple has file a number of patents for biometric technology. It has Continued on page 12...
Canberra, Australia The Biometrics Institute’s annual Canberra event will present the latest biometric applications and technologies in an informal environment with a strong focus on networking. Its one-day format allows the biometric community of users and suppliers to meet and share and exchange information and feedback. It presents an opportunity for the Biometrics Institute Supplier Members to showcase their applications, services and products to a forum of government end users. More information: http://www.biometricsinstitute. org/events.php/575/showcase-australia-2015
3 September 2015
Biometric Technology Today
NEWS/COMMENT ...Continued from page 3 filed a new patent in Europe for a biometric authentication system, possibly intended for the Apple Watch. The system is based on plethysmography, reports MobileID World, and uses light sensors to detect changes in the user’s blood flow, improving current vascular biometric measurement methods. Apple is also reported to have patented a TV remote that would receive data associated with at least one biometric detected by a sensor of a remote control device, including fingerprint, retinal scan, facial image, and/or any other biometric to provide a personalised entertainment experience for different users.
microsoft
Windows 10 says Hello to finger and face biometrics
M
icrosoft has introduced a number of biometric authentication features as part of the Windows Hello features in its latest operating system Windows 10. Hello enables users of certain PCs to access their computer using facial recognition, as well as fingerprint biometrics. PCs need to have Intel’s RealSense 3D camera – a regular webcam will not produce an >}iÊÌ >ÌÊiÊV>ÊÕÃi°ÊÃÊvÊÕÞÊ>ÀÕ`Ê ten PCs were available with the camera and it is also possible to buy a standalone camera to attach to the PC. In addition, Synaptics, developer of human interface solutions, is collaborating with Microsoft on biometric fingerprint authentication and TouchPad technologies on Windows 10. Synaptics enables OEMs to develop Windows 10-ready fingerprint authentication that supports Fast ID Online (FIDO) for devices including smartphones, tablets, personal computers, computer mice, keyboards and docking stations. Fingerprint authentication Ì ÀÕ} Ê7`ÜÃÊiÊ>`ÊÃÕLÃiµÕiÌÊ>VViÃÃÊ to apps and online services through Microsoft Passport will enable strong authentication. Microsoft has also been granted a patent for a user authentication gesture method. The patent application states that Microsoft intends to integrate gesture recognition into its Windows smartphones, Surface hybrid tablet/notebook and its Surface Hub smart whiteboard. The patent may be viewed at http://tinyurl. com/BTT201509c
12
Biometric Technology Today
privacy
Police Scotland face facial recognition probe while EFF tracks police use of biometrics in US
UÊÊ>«>iÃiÊÀiÃi>ÀV iÀÃÊ>ÀiÊÌÊ>ÕV Ê>Ê privacy visor, which counters facial recognition technology.
iris recognition
A
watchdog is to examine Police Scotland’s use of facial recognition technology in a bid to identify images of people caught on CCTV, mobile phones or uniform-mounted cameras, according to Herald Scotland. In the US privacy body Electronic Frontier Foundation (EFF) and MuckRock have partnered in an effort to compile a central list that shows which police agencies throughout the US have mobile biometric identification devices.
½ÃÊ-ÌÀiiÌÊ iÛiÊ-ÕÀÛi>ViÊ*ÀiVÌÊÕÌiÃÊÌÃÊ work on domestic surveillance into one portal.
Iris recognition device shipments – including standalone devices as well as iris recognition components in mobile devices – will grow from 7.9m in 2015 to 55.6m annually by 2024. During that period, cumulative worldwide shipments will reach 262.8m, with a compound annual growth rate of 24%. Source: Tractica.
COMMENT Wearable devices have massive potential for biometric authentication and identification alongside the fitness and health tracking they were largely designed for. Wearables, from bracelets to bras, collect biometric measurements including heart rate and activity that could be used to identify the wearer. The financial sector continues to drive innovative implementations of wearable biometrics to address its perennial issues around secure payments and authenticating access to money. Authenticating the user during the login process and during payment or transaction confirmation was cited by 70% as the most important use case for biometrics in financial services, according to a Mobey Forum survey (see news page 1). One in five respondents to the survey (22%) already offer biometrics to their customers and 65% plan to offer services soon. More than half plan to launch fingerprint biometrics for their end users, with 21% focusing on voice recognition. The number of financial institutions introducing biometric authentication such as fingerprint or facial recognition to access banking apps on mobile devices is increasing rapidly with more implementations announced all the time (see news story page 1). Some are moving towards Üi>À>LiÃ°Ê >ÀiÀÊÌ ÃÊÞi>ÀÊ1 ÊL>Ê>v>ÝÊ began to trial the Nymi device, which
is worn on a user’s wrist to read and transmit an echocardiogram to their smartphone, used in VÕVÌÊÜÌ ÊÌ iÀÊ`Ü>`>LiÊL>}Ê >««°Ê ÀiÊÀiViÌÞÊ>ÊÕLiÀÊvÊ>ÀÊL>ÃÊ ÊÌ iÊ1 Ê >ÛiÊ>ÕVi`ÊÌ iÞÊ>ÀiÊÃÕ««ÀÌ}Ê Apple Pay via the Apple Watch. Customers using fingerprint biometric authentication to access their phone or Apple Watch via TouchID can now add their debit or credit card to the Passbook app for mobile payments. The race is on to identify the best way to collect accurate biometric measurements naturally from people going about their daily lives. Not everyone wants to wear an Apple Watch or other wristband devices that may not match the user’s fashion sense. Some are hailing ‘hearables’ as a real wearable >ÌiÀ>ÌÛiÊqÊ i>À}Ê>`ÊÃÕ`ÊÛ>ÌÀÊ>LÀ>]Ê for example, is developing devices that monitor fitness biometrics in the form of headphones (see feature page 5). Sony’s newly launched Smart B-Trainer headphones include voice coaching and multi-sensor capabilities including heart rate. It is likely that biometric tech will continue to be introduced to a wide variety of wearable devices for some time to come. Most wearable tech collecting biometrics needs to communicate that data to a mobile device such as a smartphone, reducing convenience and increasing potential for vulnerability. Removing the need for both wearable device and an associated mobile device may be a game changer. Tracey Caldwell
September 2015
borders
Border authorities expand biometric checks
A
uthorities across the world are implementing biometric technology at the borders: UÊ1-Ê ÕÃÌÃÊ>`Ê À`iÀÊ*ÀÌiVÌÊ *®Ê has announced that it intends to conduct a test to collect biometric and biographic information from certain aliens who are departing the US on selected flights from up to ten identified US airports. UÊ/ iÊ âiV ÊLÀ`iÀÊ«ViÊ>ÀiÊiÝ«>`}ÊÌ iÊ
>ÃÞ"Ê«ÀiVÌÊ>ÌÊ*À>}Õi½ÃÊ6?V>ÛÊ>ÛiÊ>À«ÀÌÊ by an additional ten eGates. secunet has won the vÜÊÀ`iÀÊÊVÕVÌÊÜÌ Ê âiV Ê«>ÀÌner Vitkovice IT Solutions (VITSOL). UÊ/ iÊ>>V>Ê}ÛiÀiÌÊÃÊ>``}Ê>Ê biometric facial recognition system to its «>ÃëÀÌÊÃÃÕ>ViÊ>`ÊVÌÀÊÃÞÃÌiÊ* -®]Ê reports Security Document World. Canadian Bank Note Company originally implemented Ì iÊ* -ÊÃÞÃÌiÊÊÓää£ÊÌÊ«ÀÛ`iÊiiVÌÀVÊ functionality and machine-readable passports. The supplier has now been awarded a contract valued at $1.38m to procure a facial recogniÌÊÃÞÃÌiÊÕ«}À>`iÊÌÊ* -° UÊ-}>«Ài½ÃÊ >}ÊÀ«À̽ÃÊiÜÊ/iÀ>Ê 4, scheduled to commence operations in 2017, will use facial recognition technology to supplement FAST, automating processing and checks from departure check-in to aircraft boarding. UÊ/ iÊ,iViÌ>Êi`iÀ>Ê À>â>Ê >Ì>Ê Tax Collection Agency) is to implement NEC NeoFace Watch facial recognition technology for 14 international airports throughout Brazil.
Neil Costigan, CEO at behavioural biometrics supplier BehavioSec, says, “The iÞL>À`Ê*ÀÛ>VÞÊ>««]Ê`iÛi«i`ÊLÞÊÃiVÕÀÌÞÊ researchers Paul Moore and Per Thorsheim has sparked a great deal of conversation in the security industry. With roots in academia ourselves, we welcome people testing and exploring our software – in fact, that’s one of the reasons why we felt so strongly about making a live proof of concept demo available on our website. However, it is misleading to say that the app is able to ‘defeat’ a behavioural biometrics system, because it doesn’t ‘break in’. It’s like someone refusing to put their finger on a fingerprint Ài>`iÀÊqÊÌÊÕÃÌÊܽÌÊiÌÊÌ iÊ}>Ê>VViÃÃÊÌÊ>ÞÊ system protected by behavioural biometrics. He adds, “Our opinion is that users should have a range of authentication methods available to them. If they choose to opt out of behavioural LiÌÀVÃÊ>ÃÊ>ÊÛiÀvV>ÌÊÌiV µÕiÊvÀÊÜ >ÌiÛiÀÊÀi>î]ÊÌ iÊÌ iÞÊÜÊëÞÊLiÊÀiµÕÀi`Ê to use an alternative – likely more complex and inconvenient method, such as a keypad calculator or out of band SMS. That’s what this is about however – opting out. We are confident that our system worked as intended.”
Researchers can steal fingerprints from Android phones
R
esearchers have found a way to steal fingerprints from Android phones with biometric sensors such as the Samsung Galaxy S5 and the HTC One Max, reports The Register. Researchers have uncovered a flaw in HTC One Max in which fingerprints are stored as an image file (dbgraw.bmp) in an open ‘world readable’ folder. “Any unprivileged processes or apps can steal user’s fingerprints by reading this file,” the team says, adding that the images can be made into clear prints.” UÊ}iÀ«ÀÌÃÊ"Ê LiÊ iÛViÃ\ÊLÕÃ}Ê and Leaking’ may be viewed at http://tinyurl. com/BTT201509b
spoofing apple
Researchers set out to counter behavioural biometrics
R
esearchers Per Thorsheim and Paul Moore have been working on a Chrome browser plug-in, designed to counter behavioural biometrics by obscuring the digital trail left by behavioural biometrics.
EVENTS CALENDAR 7–9 October 2015 10th Annual Homeland Security Week (HSW) Arlington, Virginia, US The 10th Annual Homeland Security Week (HSW) will bring together homeland security leaders from both government and industry to discuss requirements, critical issues, and vulnerabilities within national security. Speakers include Michael Fisher, Joseph Demarest and Randolph Alles. More information: http://www.homelandsecurityweek.com.
13–15 October 2015 Biometrics 2015 Westminster, London, UK The three-day conference offers practical advice, tips and solutions for using biometric technology for managing identity and increasing efficiency within government and commercial applications. The exhibition on 14-15 October is a key source of advanced identity management and authentication solutions. More information: http://www.biometricsandidentity.com
16–18 November 2015 4th International Conference and Exhibition on Biometrics & Biostatistics 2015 Hilton San Antonio Airport, San Antonio, US OMICS Group is organising the 4th International Conference and Exhibition on Biometrics & Biostatistics. This conference will provide a new forum for broad areas defining security policies and user behaviour as well as social influence of biometric security. Also it will emphasise the recent advances and researches in the field of biostatistics and statistical methodology and clinical research.. More information: http://biometrics-biostatistics.conferenceseries.com
17–19 November 2015 Cartes Secure Connexions Paris-Nord Villepinte Exhibition Centre, Paris Cartes Secure Connexions brings together industries including payment, identification and mobility. More than 19,000 attendees from the financial, retail, government, identity and access, telecommunications and transportation sectors, coming from 175 countries, will converge in Paris to explore how digital society is evolving. This year, Cartes Secure Connexions will take place next to Milipol, the Worldwide Exhibition of Internal State Security. Cartes Secure Connexions attendees will be able to visit Milipol free of charge. More information: http://www.cartes.com
18 November 2015 Showcase Australia 2015
Apple files patents for vascular biometrics and multimodal TV remote
A
pple has file a number of patents for biometric technology. It has Continued on page 12...
Canberra, Australia The Biometrics Institute’s annual Canberra event will present the latest biometric applications and technologies in an informal environment with a strong focus on networking. Its one-day format allows the biometric community of users and suppliers to meet and share and exchange information and feedback. It presents an opportunity for the Biometrics Institute Supplier Members to showcase their applications, services and products to a forum of government end users. More information: http://www.biometricsinstitute. org/events.php/575/showcase-australia-2015
3 September 2015
Biometric Technology Today
NEWS/COMMENT ...Continued from page 3 filed a new patent in Europe for a biometric authentication system, possibly intended for the Apple Watch. The system is based on plethysmography, reports MobileID World, and uses light sensors to detect changes in the user’s blood flow, improving current vascular biometric measurement methods. Apple is also reported to have patented a TV remote that would receive data associated with at least one biometric detected by a sensor of a remote control device, including fingerprint, retinal scan, facial image, and/or any other biometric to provide a personalised entertainment experience for different users.
microsoft
Windows 10 says Hello to finger and face biometrics
M
icrosoft has introduced a number of biometric authentication features as part of the Windows Hello features in its latest operating system Windows 10. Hello enables users of certain PCs to access their computer using facial recognition, as well as fingerprint biometrics. PCs need to have Intel’s RealSense 3D camera – a regular webcam will not produce an >}iÊÌ >ÌÊiÊV>ÊÕÃi°ÊÃÊvÊÕÞÊ>ÀÕ`Ê ten PCs were available with the camera and it is also possible to buy a standalone camera to attach to the PC. In addition, Synaptics, developer of human interface solutions, is collaborating with Microsoft on biometric fingerprint authentication and TouchPad technologies on Windows 10. Synaptics enables OEMs to develop Windows 10-ready fingerprint authentication that supports Fast ID Online (FIDO) for devices including smartphones, tablets, personal computers, computer mice, keyboards and docking stations. Fingerprint authentication Ì ÀÕ} Ê7`ÜÃÊiÊ>`ÊÃÕLÃiµÕiÌÊ>VViÃÃÊ to apps and online services through Microsoft Passport will enable strong authentication. Microsoft has also been granted a patent for a user authentication gesture method. The patent application states that Microsoft intends to integrate gesture recognition into its Windows smartphones, Surface hybrid tablet/notebook and its Surface Hub smart whiteboard. The patent may be viewed at http://tinyurl. com/BTT201509c
12
Biometric Technology Today
privacy
Police Scotland face facial recognition probe while EFF tracks police use of biometrics in US
UÊÊ>«>iÃiÊÀiÃi>ÀV iÀÃÊ>ÀiÊÌÊ>ÕV Ê>Ê privacy visor, which counters facial recognition technology.
iris recognition
A
watchdog is to examine Police Scotland’s use of facial recognition technology in a bid to identify images of people caught on CCTV, mobile phones or uniform-mounted cameras, according to Herald Scotland. In the US privacy body Electronic Frontier Foundation (EFF) and MuckRock have partnered in an effort to compile a central list that shows which police agencies throughout the US have mobile biometric identification devices.
½ÃÊ-ÌÀiiÌÊ iÛiÊ-ÕÀÛi>ViÊ*ÀiVÌÊÕÌiÃÊÌÃÊ work on domestic surveillance into one portal.
Iris recognition device shipments – including standalone devices as well as iris recognition components in mobile devices – will grow from 7.9m in 2015 to 55.6m annually by 2024. During that period, cumulative worldwide shipments will reach 262.8m, with a compound annual growth rate of 24%. Source: Tractica.
COMMENT Wearable devices have massive potential for biometric authentication and identification alongside the fitness and health tracking they were largely designed for. Wearables, from bracelets to bras, collect biometric measurements including heart rate and activity that could be used to identify the wearer. The financial sector continues to drive innovative implementations of wearable biometrics to address its perennial issues around secure payments and authenticating access to money. Authenticating the user during the login process and during payment or transaction confirmation was cited by 70% as the most important use case for biometrics in financial services, according to a Mobey Forum survey (see news page 1). One in five respondents to the survey (22%) already offer biometrics to their customers and 65% plan to offer services soon. More than half plan to launch fingerprint biometrics for their end users, with 21% focusing on voice recognition. The number of financial institutions introducing biometric authentication such as fingerprint or facial recognition to access banking apps on mobile devices is increasing rapidly with more implementations announced all the time (see news story page 1). Some are moving towards Üi>À>LiÃ°Ê >ÀiÀÊÌ ÃÊÞi>ÀÊ1 ÊL>Ê>v>ÝÊ began to trial the Nymi device, which
is worn on a user’s wrist to read and transmit an echocardiogram to their smartphone, used in VÕVÌÊÜÌ ÊÌ iÀÊ`Ü>`>LiÊL>}Ê >««°Ê ÀiÊÀiViÌÞÊ>ÊÕLiÀÊvÊ>ÀÊL>ÃÊ ÊÌ iÊ1 Ê >ÛiÊ>ÕVi`ÊÌ iÞÊ>ÀiÊÃÕ««ÀÌ}Ê Apple Pay via the Apple Watch. Customers using fingerprint biometric authentication to access their phone or Apple Watch via TouchID can now add their debit or credit card to the Passbook app for mobile payments. The race is on to identify the best way to collect accurate biometric measurements naturally from people going about their daily lives. Not everyone wants to wear an Apple Watch or other wristband devices that may not match the user’s fashion sense. Some are hailing ‘hearables’ as a real wearable >ÌiÀ>ÌÛiÊqÊ i>À}Ê>`ÊÃÕ`ÊÛ>ÌÀÊ>LÀ>]Ê for example, is developing devices that monitor fitness biometrics in the form of headphones (see feature page 5). Sony’s newly launched Smart B-Trainer headphones include voice coaching and multi-sensor capabilities including heart rate. It is likely that biometric tech will continue to be introduced to a wide variety of wearable devices for some time to come. Most wearable tech collecting biometrics needs to communicate that data to a mobile device such as a smartphone, reducing convenience and increasing potential for vulnerability. Removing the need for both wearable device and an associated mobile device may be a game changer. Tracey Caldwell
September 2015