TeleTrusT-WG 6 Biometrics

1. TeleTrusT-WG 6 Biometrics • PKI Forum • BWG Meeting June 20, 2001 • Munich, Germany • Dr. Jürgen Pampus, Cognitec AG • Co-chair of WG6

2. Cognitec AG Face recognition is our business • The facial recognition software FaceVACS has already been used by customers since years • Our algorithm developers are refining and extending the basic recognition software • Our software engineers turn this basic software into reliable and stable products for practical use • FaceVACS-Entry • FaceVACS-Logon • FaceVACS-SDK Face recognition for your webcam available for download! www.cognitec-ag.de

3. TeleTrusT Assoc. • TeleTrusT: Non-profit organization of research organizations, developers and manufacturers of security products, government agencies, and test institutes: interdisciplinary • Founded in 1989, politically & economically independent • Aim: promote the security of information and communication technology in an open systems environment / promotion of trustworthiness of IT-Systems • Activities: • Working Groups like WG 6, Project Groups like BioTrusT • Co-operation with international organizations • Accompanies legislative processes, comments amendments like the new electronic signature act --> successful implementation of biometrics as possible technology in electronic signatures

4. 114 TeleTrusT members

5. TeleTrusT Messages • Information security is mandatory and ‚feasible‘ • Cryptography und biometrics are basic technologies • Integration into applications (workflow) is the success factor

6. TeleTrusT Working Groups TeleTrusT working groups collect suggestions and experience from experts and translate and publish them into reports and result documents Legal Aspects (WG1) Security Architecture / Chip Card Security (WG2) Applications in Health Care Management (WG3) Open E-Commerce Security (WG4) Promotions (WG5) Biometric Identification Systems (WG6) Public Key Infrastructure (WG7) MailTrusT (WG8)

7. TeleTrusT WG6 Biometrics • Started in 1996 • 4 meetings per year, 1 public workshop per year • 40 to 50 participants (vendors, users, research, government), open to guests • Information exchange • Common understanding of biometrics issues • Public information (reports, workshops, exhibitions) • Joint projects

8. TeleTrusT WG 6 Biometrics • Aims and Strategy • Development and Promotion of trustworthy biometric systems and application in a real world environment • Exchange of experiences and information • International co-operation (e.g. IBIA, BioAPI consortium, Biometric Consortium) • Reports: Evaluation criteria, Criteria catalogue • Project BioTrusT: practical study of biometrics issues in a banking environment, related to e-commerce

9. BioTrusT - The Idea Many Different Biometric Systems Ready to Go but there are still several unanswered questions like • will they answer requests of every-day-liability? • which security-level is to be realized in which implementation in real-world environment? • will customers accept and use them? • How can we get representative large volume field tests with representative findings on social-cultural issues? • can they be used to improve accountability of e-commerce? • are there standards for interoperability? • will biometrics be able to realize the demands of data-and consumer-protection advocates? • which criteria should be used to classify a biometric system? • ...

10. BioTrusT – The framework Usage issues Security issues Operation issues Data protection issues Consumer protection issues Biometrics Economic issues Marketing issues Technical issues Legal issues

11. BioTrusT – The Objectives Support E - Commerce in Germany • Proof of Confidentiality of Applications • Acceptance by the User Scientific Research • Understanding the full scope of Biometric Systems in Use • Development of Interfaces and Standards • Evaluation of the Acceptance by the User • Evaluation of Data Protection and Security Requirements • Evaluation Consumer Protection Requirements Lower the market-entrance barrier for (German) Biometric Systems • Technical Evaluation of Biometric Systems • Drive for Innovation

12. BioTrusT - Phases Phase 4 e-commerce homebanking Phase 3 ATM - Security Test Phase 2 PC Access - Security Test Phase 1 Access Control - Robustness Test Phase 0 Stargate - Demonstration and Development Platform 2000 2002 2003 2001

13. BioTrusT: The vendors’ part • Provide products (mostly free of charge) • Support installation and operation • Input feedback into product development • Open up and adapt interfaces • Implement standards • Application interfaces • Sensor interfaces • Smart card interfaces • Biometric personalisation • Project management

14. BioTrusT: Vendors’ benefits • Joint standardisation effort • The goal: open systems • Definition of product-independent system features (e.g. security of data storage and data transmission) • Results of ‘real-life’ user tests • Feedback concerning data protection and consumer protection • Feedback to product development • Recognition accuracy • System security • Man-machine interface • Standardisation • Joint marketing communication (BioTrusT homepage, public workshops, trade shows, conferences, publications)

15. Biometrics and PKI • PKI Note on Biometrics is an excellent basis for further discussions • PKI needs strong authentication • Biometrics needs strong security systems • Biometrics, PKI and tokens (e.g. smart cards) have to team in order to build complete security products for the customer

16. Biometrics and PKI Possible steps to go • Discussion group for interested parties from both sides (collect opinions) • Joint working group between PKI Forum – TeleTrusT WG6 and WG7 (find the business case) • Case study / project involving both technologies (demonstrate the customers’ benefits)

17. TeleTrusT WG 6 Biometrics Thank You • http://www.teletrust.de • http://biotrust.de • albrecht@agv.de • pampus@cognitec-ag.de