Over the years, biometric technology has proven to be a useful replacement for Personal Identification Numbers (PINs) and passwords irrespective of the market, the card technology, or the application. Advantages of using biometrics include security, speed, and user-acceptance. However, biometrics has long been burdened by concerns over privacy and security.
By Precise Biometrics AB
|
|
|
Match-on-Card technology takes biometric security and convenience one step further by performing the actual fingerprint match within the tamperproof environment of a smart card. (Photo by Precise Biometrics AB) |
Match-on-Card technology elevates biometrics from a mere PIN replacement to an integral part of a secure and privacy-enhancing smart card solution. Match-on-Card technology takes biometric security and convenience one step further by performing the actual fingerprint match within the tamper-proof environment of a smart card. Thus removing the uncertainty of matching on a network-connected device, an external server, or a database -- normally considered weak links in the security chain.
With Match-on-Card, the privacy and data integrity of the individual is secured, at the same time the technology offers interoperability and scalability. The technology of Match-on-Card biometrics can be integrated into high-security smart card-based systems used for logical access or physical access, travel, identification, and even for personal transactions, like bank card systems, without requiring alterations to the overlying security architecture.
ENHANCING THE ESTABLISHED SMART CARD MARKETS
Match-on-Card offers security, manageability, and scalability to the important and growing markets for biometrics associated with smart cards. In the near term, the markets will be predominately with ID cards for logical access and physical access driven by regulations and newly enacted standards.
Regulations as Market Drivers
Regulatory driven markets are especially apparent in the United States (US), where regulatory requirements like the Homeland Security Presidential Directive 12 (HSPD-12) Federal Information Processing Standards (FIPS) are being implemented by all Federal agencies. FIPS is a set of guidelines developed by the National Institute of Standards and Technology (NIST), aimed at improving the identification and authentication of Federal employees and contractors for access to facilities and information systems. Requirements under FIPS 201 have resulted in an increased interest in biometrics among US government agencies and agencies around the world.
Other US regulations, such as the Sarbanes-Oxley (SOX), Health Insurance Portability Accountability Act (HIPPA), and Gramm-Leach-Bliley Act (GLBA), place requirements on the private sector to increase security, accountability, and control of confidential records and are major drivers for the biometric and smart card markets in both public and private sectors.
Commercial Standards as Market Drivers
Not as immediate of a force as the regulatory drivers, the global introduction of Europay, MasterCard, and VISA (EMV) standards for secured smart card banking creates a vast market need for the privacy and security offered by Match-on-Card biometrics.
By linking a payment transaction to a unique physical feature of the rightful cardholder the bank reaches a high level of security and non-repudiation. For the end-user biometrics stands out as an easy and simple alternative to easily forgotten PINs or complicated passwords. With Match-on-Card that password or PIN replacement is not only more secure and convenient, but also offers the reassurance of allowing the cardholder own their biometric for greater privacy. Clearly, Match-on-Card would be a convenient and secure choice for replacing PINs and passwords.
In fact, using Match-on-Card can be a powerful tool for banks to create a distinctive advantage -- showing leadership in security and convenience of its customers. Match-on-card technology provides the advantages of security and data integrity while minimizing the requirements in infrastructure investment. Match-on-Card offers a high degree of interoperability and scalability. Although a case for replacing PINs with Match-on-Card biometrics is seemingly obvious, education is still need to show the return-on-investment by comparing implementation costs with the end user advantages of Match-on-Card biometrics.
NEW MARKETS FOR SMART CARDS
The fastest growing area of interest in biometrics for the smart card industry comes from new markets where PINs have no established position, and where historically biometrics (almost exclusively manually controlled) have been the means of cardholder verification. These markets include Identification (ID) cards, electronic passports, and transportation.
Growing Demand for Secure National IDs
Around the world there is a growing need for high-security national ID cards that incorporate the strength of automated biometric solutions. The addition of biometrics enables positive verification of identity -- proof that the person presenting the ID is who he or she claims to be. The requirements for such cards have propelled the smart card industry into a whole new security dimension. In the new high-security ID world, Match-on-Card has proven to be the superior technology by far in terms of economy, personal integrity, security and scalability. When the matching is performed on the smart card, as is the case with Match-on-Card, the individual’s privacy is protected. At the same time the solution provides interoperability and complete scalability making Match-on-Card extremely well-suited for use in large-scale projects. For these reasons Match-on-Card technology from Precise Biometrics was chosen for Thailand’s new national ID card.
Precise Biometrics in collaboration with a Thailand-based integrator and service partner, Smart Card Systems International Co., Ltd. (SSI), was awarded the contract for 12 million ID cards with Precise Match-on-Card™ by the Thailand government for its new national ID program. The first order also includes 36,000 fingerprint readers equipped with Precise BioCore. The smart cards constitute the first phase of the Thailand ID project. The three phased plan incorporates a smart card ID with biometrics to be used as a social security card, health card, e-Election card, government services access card, cash/credit/debit card, border pass card, and driver’s license. The plan implementation will take place over the next three years. The Thai authorities are planning to issue ID cards to all of Thailand’s citizens with a total of approximately 64 million ID cards with biometrics.
In the U.S. in the near future, regulatory requirements under the REAL ID Act, signed into law on May 5, 2005 could further support the need for Match-on-Card technology. As privacy advocates will square off with government official over the concerns that the law will result in a mammoth U.S. central database, Match-on-Card could provide the balanced need for a secure ID document without the privacy invasive impact.
International Travel Documentation with Security and Privacy
The International Civil Aviation Organisation’s (ICAO) mission is to promote understanding and security through supportive aviation standards. ICAO has lead in an effort to develop uniform standards for automatically confirming the identity of persons in transit. The ICAO process involves both establishing positive identification when issuing travel documents, i.e. passports, and verifying identity for border control purposes during travel. ICAO has identified automated biometrics as the primary means for enabling self-verification of an individual, and as the tool to identify, reveal, and prevent potential impostors. The ICAO requirement is for digital facial images in passports; however, many countries are looking to enhance security through the addition of fingerprint images. While there are limited objections to the addition of biometrics to travel documents, there is an ongoing debate as to how the biometric images should be protected in order to secure individual privacy.
Under the current ICAO plan contactless cards would be used to hold an individuals data and biometric images. Contactless cards have serious security and privacy implications, as anyone with the right equipment within a certain distance would be able to surreptitiously read the information stored on the card. Enhancing contactless cards with Match-on-Card technology -- where the matching takes place on the actual card, thereby safeguarding the information -- could eliminate the threats to privacy.
Simplifying Secured Travel
When travelling, security is key. Who is holding the ticket? Who is onboard the actual airplane, ship or train? These are difficult questions that must be addressed by the travel industry. In addition to the security requirement, transportation companies often struggle with long lines at the ticket sales and suffer from high administrative costs.
In the fast-paced and consumer-driven world of transportation, biometrics and smart cards can play a significant role in solving security and administration issues. Support for the simplification of ticketing and security is most evident when the public interest in the U.S. Registered Traveller program is examined. When pilot programs for Registered Traveller were launched in 2004 applicants flooded the participating airports and airlines to gain access to shorter lines.
An overall improvement of the travel environment is available through the adoption of Match-on-Card technology. Match-on-Card using a smart card and a fingerprint technology, has been shown to lessen time spent on administration by allowing passengers the ability to purchase tickets and check-in without requiring an attendant -- effectively eliminating the dreaded lines.
Match-on-Card creates a fully integrated biometrics solution for smart cards, which surpasses PINs and passwords in convenience, security, performance, and ease of use. The Match-on-Card technology was developed to meet the needs and demands of new markets and users of national ID and travel documents. Match-on-Card is becoming an integral part of high-security smart cards in many diverse markets.
For more information, please send your e-mails to swm@infothe.com.
ⓒ2007 www.SecurityWorldMag.com. All rights reserved.
|
