- Email: [email protected]
NIST releases draft digital identity guidelines
TECHNOLOGY
www.biometrics-today.com
ISSN 0969-4765 March 2017
government
NIST releases draft digital identity guidelines
T
he US National Institute of Standards and Technology (NIST) has released draft ‘Digital Identity Guidelines’ for comment. The guidelines provide technical requirements for Federal agencies implementing digital identity services and cover remote authentication of users such as employees, contractors, or private individuals interacting with government IT systems over open networks. NIST says they reflect what it has learned about industry innovation, new threats and an evolving landscape of federal digital services from an already extensive consultation process. The guidelines are intended to support the mitigation of the negative impacts induced by an authentication error by separating the elements of identity assurance into discrete, component parts. For non-federated systems, agencies will select two components, referred to as Identity Assurance Level
(IAL) and Authenticator Assurance Level (AAL). For federated systems, a third component, Federation Assurance Level (FAL), is included. The reason for this approach is stated: “The separation of these categories provides agencies flexibility in the identity solutions they choose and increases the ability to include privacy-enhancing techniques as fundamental elements of identity systems at any assurance level. For example, these guidelines support scenarios that will allow pseudonymous interactions even when strong, multi-factor authenticators are used.” NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal systems, but such standards and guidelines do not apply to national security systems without the approval of federal officials exercising policy authority over such systems. The document is available for public comment until the end of March at https://pages.nist.gov/800-63-3/
mobile
iPhone users to authenticate by touching anywhere on the screen?
A
new patent could allow iPhone users to authenticate their fingerprint by touching anywhere on the screen, reports Apple Insider. US Patent No 9,582,102 describes an ‘electronic device including finger biometric sensor carried by a touch display and related methods’. While the current Touch ID works using a capacitive sensor in home button, the patent suggests that future fingerprint scanning could be anywhere on the screen. This comes as Apple has acquired Israeli facial recognition startup firm RealFace in a deal
TODAY
biometric
reported to be worth $2m. RealFace offers the Pickeez app, designed to pick out the user’s best photos from a number of social media platforms. Apple has also acquired other Israeli facial recognition firms including Prime Sense and LinX. Some observers have suggested that this is all part of Apple’s preparation for a shift away from reliance on home button-based fingerprint recognition. The patent describes an electronic device that may ‘include a touch display that includes at least one display layer, and at least one transparent conductive layer thereon defining touch sensing pixels. The electronic device may also Continued on page 2...
Contents News NIST releases draft digital identity guidelines 1 iPhone users to authenticate by touching anywhere on the screen?
1
Israeli lawmakers limit use of national biometrics 2 Social media sentiment favours face and finger biometric payments
2
US judge greenlights Google privacy case
2
Researchers unveil wearable AI systems that can detect tone of conversation
2
UK rail network to consider biometric tech to smooth journeys
3
Irish authorities investigate €1.59m fraudulent overpayments uncovered by FR system 3 Robot police with onboard FR tech patrol streets in China3 BioID releases beta periocular solution
3
Crego and Kephart set up identity strategy consultancy 12 Nuance partners with BioCatch to deliver continuous web and mobile authentication 12 Facial recognition protects shop against masked raiders
12
Fingerprint Cards acquires iris tech supplier Delta ID
12
Features What’s driving fingerprinting in cars?
5
Sunil Thomas, Synaptics, argues that that use cases of biometric authentication in the car look set to differ, perhaps surprisingly, from those of the smartphone. From Scotland Yard to touchless authentication – fingerprinting makes its mark 7 Francis Mather, Veridium, traces the development of fingerprint biometrics. Selfie banking: is it a reality? 9 Biometric authentication is having a major impact in every area of banking, from access control systems to mobile banking reports Steve Cook, Daon.
Regulars Events Calendar
3
News in Brief
4
Product News
4
Company News
4
Comment 12
ISSN 0969-4765/17 © 2017 Elsevier Ltd. All rights reserved. This journal and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Photocopying Single photocopies of single articles may be made for personal use as allowed by national copyright laws. Permission of the publisher and payment of a fee is required for all other photocopying, including multiple or systematic copying, copying for advertising or promotional purposes, resale, and all forms of document delivery. Special rates are available for educational institutions that wish to make photocopies for non-profit educational classroom use.
www.biometrics-today.com
ISSN 0969-4765 March 2017
government
NIST releases draft digital identity guidelines
T
he US National Institute of Standards and Technology (NIST) has released draft ‘Digital Identity Guidelines’ for comment. The guidelines provide technical requirements for Federal agencies implementing digital identity services and cover remote authentication of users such as employees, contractors, or private individuals interacting with government IT systems over open networks. NIST says they reflect what it has learned about industry innovation, new threats and an evolving landscape of federal digital services from an already extensive consultation process. The guidelines are intended to support the mitigation of the negative impacts induced by an authentication error by separating the elements of identity assurance into discrete, component parts. For non-federated systems, agencies will select two components, referred to as Identity Assurance Level
(IAL) and Authenticator Assurance Level (AAL). For federated systems, a third component, Federation Assurance Level (FAL), is included. The reason for this approach is stated: “The separation of these categories provides agencies flexibility in the identity solutions they choose and increases the ability to include privacy-enhancing techniques as fundamental elements of identity systems at any assurance level. For example, these guidelines support scenarios that will allow pseudonymous interactions even when strong, multi-factor authenticators are used.” NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal systems, but such standards and guidelines do not apply to national security systems without the approval of federal officials exercising policy authority over such systems. The document is available for public comment until the end of March at https://pages.nist.gov/800-63-3/
mobile
iPhone users to authenticate by touching anywhere on the screen?
A
new patent could allow iPhone users to authenticate their fingerprint by touching anywhere on the screen, reports Apple Insider. US Patent No 9,582,102 describes an ‘electronic device including finger biometric sensor carried by a touch display and related methods’. While the current Touch ID works using a capacitive sensor in home button, the patent suggests that future fingerprint scanning could be anywhere on the screen. This comes as Apple has acquired Israeli facial recognition startup firm RealFace in a deal
TODAY
biometric
reported to be worth $2m. RealFace offers the Pickeez app, designed to pick out the user’s best photos from a number of social media platforms. Apple has also acquired other Israeli facial recognition firms including Prime Sense and LinX. Some observers have suggested that this is all part of Apple’s preparation for a shift away from reliance on home button-based fingerprint recognition. The patent describes an electronic device that may ‘include a touch display that includes at least one display layer, and at least one transparent conductive layer thereon defining touch sensing pixels. The electronic device may also Continued on page 2...
Contents News NIST releases draft digital identity guidelines 1 iPhone users to authenticate by touching anywhere on the screen?
1
Israeli lawmakers limit use of national biometrics 2 Social media sentiment favours face and finger biometric payments
2
US judge greenlights Google privacy case
2
Researchers unveil wearable AI systems that can detect tone of conversation
2
UK rail network to consider biometric tech to smooth journeys
3
Irish authorities investigate €1.59m fraudulent overpayments uncovered by FR system 3 Robot police with onboard FR tech patrol streets in China3 BioID releases beta periocular solution
3
Crego and Kephart set up identity strategy consultancy 12 Nuance partners with BioCatch to deliver continuous web and mobile authentication 12 Facial recognition protects shop against masked raiders
12
Fingerprint Cards acquires iris tech supplier Delta ID
12
Features What’s driving fingerprinting in cars?
5
Sunil Thomas, Synaptics, argues that that use cases of biometric authentication in the car look set to differ, perhaps surprisingly, from those of the smartphone. From Scotland Yard to touchless authentication – fingerprinting makes its mark 7 Francis Mather, Veridium, traces the development of fingerprint biometrics. Selfie banking: is it a reality? 9 Biometric authentication is having a major impact in every area of banking, from access control systems to mobile banking reports Steve Cook, Daon.
Regulars Events Calendar
3
News in Brief
4
Product News
4
Company News
4
Comment 12
ISSN 0969-4765/17 © 2017 Elsevier Ltd. All rights reserved. This journal and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Photocopying Single photocopies of single articles may be made for personal use as allowed by national copyright laws. Permission of the publisher and payment of a fee is required for all other photocopying, including multiple or systematic copying, copying for advertising or promotional purposes, resale, and all forms of document delivery. Special rates are available for educational institutions that wish to make photocopies for non-profit educational classroom use.