- Email: [email protected]
Maturity of biometric modalities assessed
NEWS ePassports Editorial Office: Elsevier Ltd The Boulevard Langford Lane Kidlington Oxford OX5 1GB, UK Tel: +44 (0) 2920 560458 Fax: +44 (0) 1865 843933 Email: [email protected] Website: www.biometrics-today.com Editor: Mark Lockie Programme Editor: Steve Barrett Production Editor: Lin Lucas Subscription Information An annual subscription to Biometric Technology Today includes 10 printed issues and online access for up to 5 users. Prices: 991 for all European countries & Iran US$1072 for all countries except Europe and Japan ¥131 700 for Japan (Prices valid until 31 December 2009) To subscribe send payment to the address above. Tel: +44 (0)1865 843687/Fax: +44 (0)1865 834971 Email: [email protected], or via www.biometrics-today.com. Subscriptions run for 12 months, from the date payment is received. Periodicals postage is paid at Rahway, NJ 07065, USA. Postmaster send all USA address corrections to: Biometric Technology Today, 365 Blair Road, Avenel, NJ 07001, USA This newsletter and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Permissions may be sought directly from Elsevier Global Rights Department, PO Box 800, Oxford OX5 1DX, UK; phone: +44 1865 843830, fax: +44 1865 853333, email: [email protected]. You may also contact Global Rights directly through Elsevier’s home page (www.elsevier.com), selecting first ‘Support & contact’, then ‘Copyright & permission’. In the USA, users may clear permissions and make payments through the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, USA; phone: +1 978 750 8400, fax: +1 978 750 4744, and in the UK through the Copyright Licensing Agency Rapid Clearance Service (CLARCS), 90 Tottenham Court Road, London W1P 0LP, UK; phone: +44 (0)20 7631 5555; fax: +44 (0)20 7631 5500. Other countries may have a local reprographic rights agency for payments. Derivative Works Subscribers may reproduce tables of contents or prepare lists of articles including abstracts for internal circulation within their institutions. Permission of the Publisher is required for resale or distribution outside the institution. Permission of the Publisher is required for all other derivative works, including compilations and translations. Electronic Storage or Usage Permission of the Publisher is required to store or use electronically any material contained in this journal, including any article or part of an article. Except as outlined above, no part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without prior written permission of the Publisher. Address permissions requests to: Elsevier Science Global Rights Department, at the mail, fax and email addresses noted above. Notice No responsibility is assumed by the Publisher for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or ideas contained in the material herein. Because of rapid advances in the medical sciences, in particular, independent verification of diagnoses and drug dosages should be made. Although all advertising material is expected to conform to ethical (medical) standards, inclusion in this publication does not constitute a guarantee or endorsement of the quality or value of such product or of the claims made of it by its manufacturer.
02265 Printed by Mayfield Press (Oxford) Ltd.
2
Biometric Technology Today
MEPs agree new biometric rules for passports
M
EPs in the European Parliament have agreed that children under twelve should no longer have their fingerprints included on passports issued in the European Union, but they should have their own passports, so as to combat trafficking in children. Countries which already collect children’s fingerprints will be allowed to continue to do so for the next four years, as long as the children are six years old. Biometric passports including fingerprints will be introduced in the whole EU (plus Iceland, Norway and Switzerland) on 29 June, although some countries have already begun issuing fingerprint-based ePassports – notably Germany which started collecting fingerprint in March 2007. The EP was voting on plans to amend a 2004 regulation laying down biometric features to be included in passports and other travel documents, including the holder’s fingerprints. The Civil Liberties adopted unanimously the compromise reached by rapporteur Carlos COELHO (EPP, PT) with Council last year. In the aftermath of the events of 11 September 2001, the Commission was asked by Member States to take immediate action to improve document security. The EU decided, therefore, to integrate biometrics in European passports. These identifiers comprise a facial image and fingerprints, making it possible to combat fraud and falsification more effectively. The regulation, already adopted, which will come into force in June, establishes technical specifications such as: • additional security features notably with a view to combating counterfeiting and falsification; • the storage medium and its security; • common quality requirements for the facial image and the fingerprints. However, during pilot projects carried out in some Member States it was found that children’s fingerprints are not of sufficient quality, especially those of the youngest children, which can change greatly as they grow older. In its draft text, the European Commission therefore suggested to introduce an exemption for
children under twelve. A similar exemption was agreed for people deemed physically unable to give fingerprints. The rapporteur and Council presidency agreed that fingerprints should not be taken from children under the age of 12. However, countries already taking fingerprints from children under that age, but not below six, can continue to do so for four years. In cases where it is impossible to take fingerprints, Member states may deliver a temporary passport having a validity of twelve months or less. To combat trafficking in children, the draft legislation also proposed introducing the principle of ‘one person, one passport’: until now a passport issued to a parent has often also covered the children by adding their names – but the microchip contains only the parent’s biometric data. The Regulation does not provide a legal base for setting up or maintaining databases for storage of these data in Member States. The UK is excluded from participation in this Regulation as it is a development of the Schengen acquis in which the UK does not take part. However, the UK Government said it supports the inclusion of fingerprints in passports and travel documents as a means of providing better identification. The UK has stated its intention to keep in step with the Regulation to ensure that UK passports are not seen as ‘second class’ compared with those issued by other Member States.
technology
Maturity of biometric modalities assessed
T
he FBI Biometric Center of Excellence (BCOE) has announced the results of an independent assessment of biometric technology by The MITRE Corporation. This technology assessment is a major component of a comprehensive study entitled the State-of-the-Art Biometrics Excellence Roadmap (SABER). SABER is designed to gauges the technical maturity of biometric modalities and evaluates the potential for expanding the FBI’s Certified Products List as these modalities mature. The technology assessments are comprised of complete reviews of the state-of-the-art in biometric modalities and are presented in three volumes. From fingerprints to vascular
January 2009
NEWS recognition and from applications to vulnerabilities, the technology assessments examine the current state of biometric technologies. Completed in June 2008 the ten month assessment involved an extensive survey of the market and industry, biometric technologies, current products, systems, independent performance evaluations, standards, and an overview of select research activities. Assistant Director, Thomas E. Bush, III, FBI Criminal Justice Information Services Division commented: “When the BCOE funded the SABER Technology Assessment, we recognized its tremendous potential not only in helping to strategically prioritize the FBI’s biometric research and funding activities, but also to promote the use of biometric technology for the benefit of our government, academic, and industry partners through a comprehensive analysis of current biometric capabilities.” The SABER Technology Assessment is available online at www.biometriccoe.gov This report was released as Btt was going to press – we shall provide more detailed coverage in an upcoming issue.
ePassport
ePassport status: 65+ countries now issuing
M
ore than 65 countries are now issuing one form or another of electronic passports, with numerous more in the pipeline for 2009 and beyond. The earliest ePassport issued was in Malaysia in March 1998 (see table below). Although this was not an ICAO-standard document, it was trailblazing in many regards. Since 2004 there has been a steady flow of countries joining the ranks of ePassport issuers, with the latest being Taiwan, which began its issuance of chip-based passports on 30 December. The table below documents the countries which have issued ePassports and the official dates (where possible). While it is clear that the initial rump of ePassport rollouts is approaching completion, there are numerous countries still to convert to the new technology, creating excellent opportunities for industry suppliers. Countries issuing ePassports 1 2 3 4 5
Malaysia (1998.3.1) Dominican Republic (2004.5.1) Pakistan (2004.10.25) Belgium (2004.11.24) Thailand (2005.5.26)
January 2009
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
Monaco (2005.7.18) Sweden (2005.10.3) Norway (2005.10.3) Australia (2005.10.24) Germany (2005.11.1) New Zealand (2005.11.4) UK (2006.3.6) Japan (2006.3.20) France (2006.4.12) Singapore (2006.4.29) Iceland (2006.5.23) Austria (2006.6.16) Portugal (2006.7.31) Denmark (2006.8.1) USA (2006.8.14) Spain (2006.8.14) Finland (2006.8.21) Holland (2006.8.26) Greece (2006.8.26) Lithuania (2006.8.28) Luxembourg (2006.8.28) Slovenia (2006.8.28) Poland (2006.8.28) Hungary (2006.8.29) Czech Republic (2006.9.1) Russia (2006.9.1) Andorra (2006.9.1) Switzerland (2006.9.4) San Marino (2006.10.12) Ireland (2006.10.16) Liechstenstein (2006.10.26) Italy (2006.10.26) Somalia (2007.1.21) Hong Kong (2007.2.5) Brunei (2007.2.17) Cambodia (2007.3.6) Macedonia (2007.4.2) Estonia (2007.5.22) Ukraine (2007.6.1) Iran (2007.7.1) Venezuela (2007.7.1) Maldives (2007.7.26) Nigeria (2007.8.17) Latvia (2007.11.20) Bahamas (2007.12.5) Senegal (Dec 2007) Republic of Moldova (2008.1.1) Slovakia (2008.1.15) South Korea (2008.3.11) Qatar (2008.4.20) Montenegro (2008.5) India (2008.6.25) Serbia (2008.7.7) Turkmenistan (2008.7.10) Ivory Coast (2008.7.30) Malta (2008.10.8) Sudan (November 2008) Republic of China (Taiwan) (2008.12.29) Romania (2008.12.31) Turkey – exact date unknown
APPLICATION NEWS • PeopleKey, an Australian biometric access control company, has announced an expansion of its business with the Banco de Previsión Social (BPS) in Uruguay. BPS, the social security institute of Uruguay, relies on a network of PeopleKey biometric readers to positively identify more than 3000 employees daily and keep track of each employee’s hours worked. The PeopleKey solution is expected to offer BPS a high level of security at their facilities, while reducing the administrative costs associated with employee payroll. The solution will be installed and maintained by PeopleKey’s local partner, SecureTech A&M. • The US Coast Guard has selected Datastrip to provide handheld biometric terminals for its Transportation Worker Identification Credential program. The US$2.3 million contract calls for up to 300 handheld terminals equipped with Codebench’s TWICCheck and PIVCheck software. The DSV2+TURBO devices will be used by the Coast Guard to read the biometric data on TWIC cards for ID verification at US ports. DSV2+TURBO devices are also being used in another Coast Guard initiative called Biometrics at Sea. This program is a field-test type of validation testing currently in place in the Mona Passage between the Dominican Republic and Puerto Rico. It allows the Coast Guard to identify illegal immigrants intercepted in transit. • A performing arts school in the UK will shortly begin testing automated facial recognition to identify students who arrive late. St. Neots Community College, a school for 11- to 19year-olds, will capture infrared photos of sixth graders and store the images in an encrypted form that will then be used to recognize them as they arrive. Northampton-based Aurora claims that its product, Clockface+, can verify a person’s identity in 1.5 seconds and shows greater accuracy than a human. • Brunei’s Department of Immigration and National Registration, Ministry of Home Affairs has officially launched a fingerprint-enabled Auto-Gate solution at the arrival hall in Brunei International Airport. Passengers’ fingerprints are to be checked against those stored within their biometric passport or national identity card. The next immigration post to receive the gates, according to local reports, will be the Muara Ferry Terminal. This is expected sometime later this year.
Biometric Technology Today
3
02265 Printed by Mayfield Press (Oxford) Ltd.
2
Biometric Technology Today
MEPs agree new biometric rules for passports
M
EPs in the European Parliament have agreed that children under twelve should no longer have their fingerprints included on passports issued in the European Union, but they should have their own passports, so as to combat trafficking in children. Countries which already collect children’s fingerprints will be allowed to continue to do so for the next four years, as long as the children are six years old. Biometric passports including fingerprints will be introduced in the whole EU (plus Iceland, Norway and Switzerland) on 29 June, although some countries have already begun issuing fingerprint-based ePassports – notably Germany which started collecting fingerprint in March 2007. The EP was voting on plans to amend a 2004 regulation laying down biometric features to be included in passports and other travel documents, including the holder’s fingerprints. The Civil Liberties adopted unanimously the compromise reached by rapporteur Carlos COELHO (EPP, PT) with Council last year. In the aftermath of the events of 11 September 2001, the Commission was asked by Member States to take immediate action to improve document security. The EU decided, therefore, to integrate biometrics in European passports. These identifiers comprise a facial image and fingerprints, making it possible to combat fraud and falsification more effectively. The regulation, already adopted, which will come into force in June, establishes technical specifications such as: • additional security features notably with a view to combating counterfeiting and falsification; • the storage medium and its security; • common quality requirements for the facial image and the fingerprints. However, during pilot projects carried out in some Member States it was found that children’s fingerprints are not of sufficient quality, especially those of the youngest children, which can change greatly as they grow older. In its draft text, the European Commission therefore suggested to introduce an exemption for
children under twelve. A similar exemption was agreed for people deemed physically unable to give fingerprints. The rapporteur and Council presidency agreed that fingerprints should not be taken from children under the age of 12. However, countries already taking fingerprints from children under that age, but not below six, can continue to do so for four years. In cases where it is impossible to take fingerprints, Member states may deliver a temporary passport having a validity of twelve months or less. To combat trafficking in children, the draft legislation also proposed introducing the principle of ‘one person, one passport’: until now a passport issued to a parent has often also covered the children by adding their names – but the microchip contains only the parent’s biometric data. The Regulation does not provide a legal base for setting up or maintaining databases for storage of these data in Member States. The UK is excluded from participation in this Regulation as it is a development of the Schengen acquis in which the UK does not take part. However, the UK Government said it supports the inclusion of fingerprints in passports and travel documents as a means of providing better identification. The UK has stated its intention to keep in step with the Regulation to ensure that UK passports are not seen as ‘second class’ compared with those issued by other Member States.
technology
Maturity of biometric modalities assessed
T
he FBI Biometric Center of Excellence (BCOE) has announced the results of an independent assessment of biometric technology by The MITRE Corporation. This technology assessment is a major component of a comprehensive study entitled the State-of-the-Art Biometrics Excellence Roadmap (SABER). SABER is designed to gauges the technical maturity of biometric modalities and evaluates the potential for expanding the FBI’s Certified Products List as these modalities mature. The technology assessments are comprised of complete reviews of the state-of-the-art in biometric modalities and are presented in three volumes. From fingerprints to vascular
January 2009
NEWS recognition and from applications to vulnerabilities, the technology assessments examine the current state of biometric technologies. Completed in June 2008 the ten month assessment involved an extensive survey of the market and industry, biometric technologies, current products, systems, independent performance evaluations, standards, and an overview of select research activities. Assistant Director, Thomas E. Bush, III, FBI Criminal Justice Information Services Division commented: “When the BCOE funded the SABER Technology Assessment, we recognized its tremendous potential not only in helping to strategically prioritize the FBI’s biometric research and funding activities, but also to promote the use of biometric technology for the benefit of our government, academic, and industry partners through a comprehensive analysis of current biometric capabilities.” The SABER Technology Assessment is available online at www.biometriccoe.gov This report was released as Btt was going to press – we shall provide more detailed coverage in an upcoming issue.
ePassport
ePassport status: 65+ countries now issuing
M
ore than 65 countries are now issuing one form or another of electronic passports, with numerous more in the pipeline for 2009 and beyond. The earliest ePassport issued was in Malaysia in March 1998 (see table below). Although this was not an ICAO-standard document, it was trailblazing in many regards. Since 2004 there has been a steady flow of countries joining the ranks of ePassport issuers, with the latest being Taiwan, which began its issuance of chip-based passports on 30 December. The table below documents the countries which have issued ePassports and the official dates (where possible). While it is clear that the initial rump of ePassport rollouts is approaching completion, there are numerous countries still to convert to the new technology, creating excellent opportunities for industry suppliers. Countries issuing ePassports 1 2 3 4 5
Malaysia (1998.3.1) Dominican Republic (2004.5.1) Pakistan (2004.10.25) Belgium (2004.11.24) Thailand (2005.5.26)
January 2009
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
Monaco (2005.7.18) Sweden (2005.10.3) Norway (2005.10.3) Australia (2005.10.24) Germany (2005.11.1) New Zealand (2005.11.4) UK (2006.3.6) Japan (2006.3.20) France (2006.4.12) Singapore (2006.4.29) Iceland (2006.5.23) Austria (2006.6.16) Portugal (2006.7.31) Denmark (2006.8.1) USA (2006.8.14) Spain (2006.8.14) Finland (2006.8.21) Holland (2006.8.26) Greece (2006.8.26) Lithuania (2006.8.28) Luxembourg (2006.8.28) Slovenia (2006.8.28) Poland (2006.8.28) Hungary (2006.8.29) Czech Republic (2006.9.1) Russia (2006.9.1) Andorra (2006.9.1) Switzerland (2006.9.4) San Marino (2006.10.12) Ireland (2006.10.16) Liechstenstein (2006.10.26) Italy (2006.10.26) Somalia (2007.1.21) Hong Kong (2007.2.5) Brunei (2007.2.17) Cambodia (2007.3.6) Macedonia (2007.4.2) Estonia (2007.5.22) Ukraine (2007.6.1) Iran (2007.7.1) Venezuela (2007.7.1) Maldives (2007.7.26) Nigeria (2007.8.17) Latvia (2007.11.20) Bahamas (2007.12.5) Senegal (Dec 2007) Republic of Moldova (2008.1.1) Slovakia (2008.1.15) South Korea (2008.3.11) Qatar (2008.4.20) Montenegro (2008.5) India (2008.6.25) Serbia (2008.7.7) Turkmenistan (2008.7.10) Ivory Coast (2008.7.30) Malta (2008.10.8) Sudan (November 2008) Republic of China (Taiwan) (2008.12.29) Romania (2008.12.31) Turkey – exact date unknown
APPLICATION NEWS • PeopleKey, an Australian biometric access control company, has announced an expansion of its business with the Banco de Previsión Social (BPS) in Uruguay. BPS, the social security institute of Uruguay, relies on a network of PeopleKey biometric readers to positively identify more than 3000 employees daily and keep track of each employee’s hours worked. The PeopleKey solution is expected to offer BPS a high level of security at their facilities, while reducing the administrative costs associated with employee payroll. The solution will be installed and maintained by PeopleKey’s local partner, SecureTech A&M. • The US Coast Guard has selected Datastrip to provide handheld biometric terminals for its Transportation Worker Identification Credential program. The US$2.3 million contract calls for up to 300 handheld terminals equipped with Codebench’s TWICCheck and PIVCheck software. The DSV2+TURBO devices will be used by the Coast Guard to read the biometric data on TWIC cards for ID verification at US ports. DSV2+TURBO devices are also being used in another Coast Guard initiative called Biometrics at Sea. This program is a field-test type of validation testing currently in place in the Mona Passage between the Dominican Republic and Puerto Rico. It allows the Coast Guard to identify illegal immigrants intercepted in transit. • A performing arts school in the UK will shortly begin testing automated facial recognition to identify students who arrive late. St. Neots Community College, a school for 11- to 19year-olds, will capture infrared photos of sixth graders and store the images in an encrypted form that will then be used to recognize them as they arrive. Northampton-based Aurora claims that its product, Clockface+, can verify a person’s identity in 1.5 seconds and shows greater accuracy than a human. • Brunei’s Department of Immigration and National Registration, Ministry of Home Affairs has officially launched a fingerprint-enabled Auto-Gate solution at the arrival hall in Brunei International Airport. Passengers’ fingerprints are to be checked against those stored within their biometric passport or national identity card. The next immigration post to receive the gates, according to local reports, will be the Muara Ferry Terminal. This is expected sometime later this year.
Biometric Technology Today
3