- Email: [email protected]
German politician has fingerprints stolen – UK next
NEWS ...continued from front page Editorial Office: Elsevier Ltd The Boulevard Langford Lane Kidlington Oxford OX5 1GB, UK Tel: +44 (0) 2920 560458 Fax: +44 (0) 1865 843971 E-mail: [email protected] Website: www.biometrics-today.com Editor: Mark Lockie Programme Editor: Steve Barrett Production Editor: Alan Stubley Subscription Information An annual subscription to Biometric Technology Today includes 10 printed issues and online access for up to 5 users. Prices: 935 for all European countries & Iran US$1011 for all countries except Europe and Japan ¥124 200 for Japan (Prices valid until 31 December 2008) To subscribe send payment to the address above. Tel: +44 (0)1865 843687/Fax: +44 (0)1865 834971 E-mail: [email protected], or via www.biometrics-today.com. Subscriptions run for 12 months, from the date payment is received. Periodicals postage is paid at Rahway, NJ 07065, USA. Postmaster send all USA address corrections to: Biometric Technology Today, 365 Blair Road, Avenel, NJ 07001, USA
8. Technically the scheme’s systems should be closely aligned to those of the banks (both initially and in the future) so as to utilise their investment, de-risk the scheme’s development, and assist convergence to common standards across the ID assurance systems and processes deployed internationally by banks and other national ID card schemes. 9. To engage consumers’ hearts and minds on the scale required, enrolment and any tokens should be provided free of charge. 10. The market should play a role in delivering a universal ID assurance scheme. This will improve the ease with which consumers can use the scheme and minimise costs. Crosby commented that the Government may not regard its ID cards scheme as the best way to stimulate the creation of the universal ID assurance system as envisaged in his report. However, even if this is the case, Crosby strongly recommended: •
This newsletter and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Permissions may be sought directly from Elsevier Global Rights Department, PO Box 800, Oxford OX5 1DX, UK; phone: +44 1865 843830, fax: +44 1865 853333, e-mail: [email protected]. You may also contact Global Rights directly through Elsevier’s home page (www.elsevier.com), selecting first ‘Support & contact’, then ‘Copyright & permission’. In the USA, users may clear permissions and make payments through the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, USA; phone: +1 978 750 8400, fax: +1 978 750 4744, and in the UK through the Copyright Licensing Agency Rapid Clearance Service (CLARCS), 90 Tottenham Court Road, London W1P 0LP, UK; phone: +44 (0)20 7631 5555; fax: +44 (0)20 7631 5500. Other countries may have a local reprographic rights agency for payments. Derivative Works Subscribers may reproduce tables of contents or prepare lists of articles including abstracts for internal circulation within their institutions. Permission of the Publisher is required for resale or distribution outside the institution. Permission of the Publisher is required for all other derivative works, including compilations and translations. Electronic Storage or Usage Permission of the Publisher is required to store or use electronically any material contained in this journal, including any article or part of an article. Except as outlined above, no part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without prior written permission of the Publisher. Address permissions requests to: Elsevier Science Global Rights Department, at the mail, fax and e-mail addresses noted above. Notice No responsibility is assumed by the Publisher for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or ideas contained in the material herein. Because of rapid advances in the medical sciences, in particular, independent verification of diagnoses and drug dosages should be made. Although all advertising material is expected to conform to ethical (medical) standards, inclusion in this publication does not constitute a guarantee or endorsement of the quality or value of such product or of the claims made of it by its manufacturer.
02265 Printed by Mayfield Press (Oxford) Ltd.
2
Biometric Technology Today
•
Working with the private sector, Government should take all necessary action to ensure that, as soon as possible, consumers have access to a “one stop” agency for the swift repair of compromised identities across the public and private sectors; and Government should commit to the development work across public sector databases necessary to ensure that all employers can quickly and confidently satisfy “right to work” and related regulations for all their employees.
To conclude Crosby said: “In the absence of a universal ID assurance system, I believe consumers will have to grapple with an increasingly complex array of identity assurance processes of uncertain quality. As a result, the UK will fail to secure the economic and social advantage achievable at the forefront of ID assurance systems and processes. In a competitive world, any failure to secure advantage quickly becomes tantamount to locking in disadvantage. In other words, the opportunities inherent in ID assurance will not have been grasped but the challenges will remain.”
fingerprint
German politician has fingerprints stolen − UK next
A
publicity stunt by UK privacy campaigners has promised £1000 to anyone who can capture clean
fingerprints of either Gordon Brown, the UK Prime Minister, or indeed Home Secretary Jacqui Smith. The unusual, and mildly irresponsible challenge was set by No2ID and Privacy International, and follows in the footsteps of the German Chaos Computer Club, which recently published the fingerprints of German Interior Minister Wolfgang Schäuble along with a film showing methods of copying and reproducing fingerprint. The German hacker group captured the Minister’s fingerprints as part of a protest against plans to use biometric data in ePassports – where Germany is already implementing fingerprint and facial data. Going even further it then put a plastic foil copy of the fingerprint into its magazine, Die Datenschleuder, which has a claimed circulation of 4000 copies. The CCC obtained the prints from a supporter of the group’s activities, who obtained a glass used by the minister during a panel discussion. The group now wants to steal biometric data from German Chancellor Angela Merkel and the Prime Minister of Bavaria, Guenther Beckstein. Back in Britain, both No2ID’s and Privacy International’s publicity stunts have involved drawing up spoof ‘Wanted’ posters, in a bid to raise awareness and scaremonger among politicians and the general public. The organisations say they want to highlight the dubious nature of biometric data collection and the intention to “undermine the right to ownership of and control over their own biometric data”. Clearly the sum of £1000 is not enough to attract serious profiteers, but, in any case, the reward has to be donated to a charity of the winner’s choice.
research
New research announced into revocable biometrics
V
ery timely research has been announced looking at the promising area of revocable biometric identities. Sagem Sécurité has been chosen to coordinate the European research project TURBINE (TrUsted Revocable Biometric IdeNtitiEs) within the scope of the European Union’s 7th Research & Development Framework Program. Lasting three years, the project aims to develop advanced digital identity solutions, combining automatic fingerprint recognition and innovative cryptographic techniques. Research efforts will focus on burying secret information inside a description of fingerprints,
April 2008
8. Technically the scheme’s systems should be closely aligned to those of the banks (both initially and in the future) so as to utilise their investment, de-risk the scheme’s development, and assist convergence to common standards across the ID assurance systems and processes deployed internationally by banks and other national ID card schemes. 9. To engage consumers’ hearts and minds on the scale required, enrolment and any tokens should be provided free of charge. 10. The market should play a role in delivering a universal ID assurance scheme. This will improve the ease with which consumers can use the scheme and minimise costs. Crosby commented that the Government may not regard its ID cards scheme as the best way to stimulate the creation of the universal ID assurance system as envisaged in his report. However, even if this is the case, Crosby strongly recommended: •
This newsletter and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Permissions may be sought directly from Elsevier Global Rights Department, PO Box 800, Oxford OX5 1DX, UK; phone: +44 1865 843830, fax: +44 1865 853333, e-mail: [email protected]. You may also contact Global Rights directly through Elsevier’s home page (www.elsevier.com), selecting first ‘Support & contact’, then ‘Copyright & permission’. In the USA, users may clear permissions and make payments through the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, USA; phone: +1 978 750 8400, fax: +1 978 750 4744, and in the UK through the Copyright Licensing Agency Rapid Clearance Service (CLARCS), 90 Tottenham Court Road, London W1P 0LP, UK; phone: +44 (0)20 7631 5555; fax: +44 (0)20 7631 5500. Other countries may have a local reprographic rights agency for payments. Derivative Works Subscribers may reproduce tables of contents or prepare lists of articles including abstracts for internal circulation within their institutions. Permission of the Publisher is required for resale or distribution outside the institution. Permission of the Publisher is required for all other derivative works, including compilations and translations. Electronic Storage or Usage Permission of the Publisher is required to store or use electronically any material contained in this journal, including any article or part of an article. Except as outlined above, no part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without prior written permission of the Publisher. Address permissions requests to: Elsevier Science Global Rights Department, at the mail, fax and e-mail addresses noted above. Notice No responsibility is assumed by the Publisher for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or ideas contained in the material herein. Because of rapid advances in the medical sciences, in particular, independent verification of diagnoses and drug dosages should be made. Although all advertising material is expected to conform to ethical (medical) standards, inclusion in this publication does not constitute a guarantee or endorsement of the quality or value of such product or of the claims made of it by its manufacturer.
02265 Printed by Mayfield Press (Oxford) Ltd.
2
Biometric Technology Today
•
Working with the private sector, Government should take all necessary action to ensure that, as soon as possible, consumers have access to a “one stop” agency for the swift repair of compromised identities across the public and private sectors; and Government should commit to the development work across public sector databases necessary to ensure that all employers can quickly and confidently satisfy “right to work” and related regulations for all their employees.
To conclude Crosby said: “In the absence of a universal ID assurance system, I believe consumers will have to grapple with an increasingly complex array of identity assurance processes of uncertain quality. As a result, the UK will fail to secure the economic and social advantage achievable at the forefront of ID assurance systems and processes. In a competitive world, any failure to secure advantage quickly becomes tantamount to locking in disadvantage. In other words, the opportunities inherent in ID assurance will not have been grasped but the challenges will remain.”
fingerprint
German politician has fingerprints stolen − UK next
A
publicity stunt by UK privacy campaigners has promised £1000 to anyone who can capture clean
fingerprints of either Gordon Brown, the UK Prime Minister, or indeed Home Secretary Jacqui Smith. The unusual, and mildly irresponsible challenge was set by No2ID and Privacy International, and follows in the footsteps of the German Chaos Computer Club, which recently published the fingerprints of German Interior Minister Wolfgang Schäuble along with a film showing methods of copying and reproducing fingerprint. The German hacker group captured the Minister’s fingerprints as part of a protest against plans to use biometric data in ePassports – where Germany is already implementing fingerprint and facial data. Going even further it then put a plastic foil copy of the fingerprint into its magazine, Die Datenschleuder, which has a claimed circulation of 4000 copies. The CCC obtained the prints from a supporter of the group’s activities, who obtained a glass used by the minister during a panel discussion. The group now wants to steal biometric data from German Chancellor Angela Merkel and the Prime Minister of Bavaria, Guenther Beckstein. Back in Britain, both No2ID’s and Privacy International’s publicity stunts have involved drawing up spoof ‘Wanted’ posters, in a bid to raise awareness and scaremonger among politicians and the general public. The organisations say they want to highlight the dubious nature of biometric data collection and the intention to “undermine the right to ownership of and control over their own biometric data”. Clearly the sum of £1000 is not enough to attract serious profiteers, but, in any case, the reward has to be donated to a charity of the winner’s choice.
research
New research announced into revocable biometrics
V
ery timely research has been announced looking at the promising area of revocable biometric identities. Sagem Sécurité has been chosen to coordinate the European research project TURBINE (TrUsted Revocable Biometric IdeNtitiEs) within the scope of the European Union’s 7th Research & Development Framework Program. Lasting three years, the project aims to develop advanced digital identity solutions, combining automatic fingerprint recognition and innovative cryptographic techniques. Research efforts will focus on burying secret information inside a description of fingerprints,
April 2008