Biometrics

1
Biometrics updates on ISO and ICAO

• Asbjørn Hovstø
• Porvoo7
• Reykjavik, Iceland
• 27th May 2005

2
Chicago Convention Mandate

• Contracting States prevent unnecessary delays
  by facilitating border clearance formalities and
  that they adopt internationally standard customs
  and immigration procedures
• (Articles 22 and 23).
•  

3
MachineReadablePassport

• Standardization.  
• Document security. 
• Global interoperability.  
• Benefits to the document holder
• (2003 ICAO biometric blueprint)

4
MRPs Progress- MRTD from 26-06-2005 VisaWaiver
188
88
15
5
Cooperation

• ISO
• SC17/WG3
• SC37
• Airport Council International (ACI)
• IATA
• Simplifying Passenger Travel (SPT)
• INTERPOL

6
ICAO NTWG

• Incorporation of new technologies into travel
  documents and visa
• Meet approximately 3-4 times per year
• Chaired by Gary McDonald (Canada)
• gmcdonal_at_ppt.gc.ca

7
Vision

• Goals
• Improve document security
• Machine authentication
• Positive ID of individuals
• Secure document issuing processes
• Improve facilitation
• Minimize time spent on inspection of legitimate
  travelers
• Segmentation of low-high risk travelers
• Minimize waiting times for traveler

8
ICAO Doc 9303
Part 2 - Visa
Part 1 - Passport
Migrate to 6.edition ISO/SC17 WG3 ISO/IEC 7501
Part 3 - Official Travel Document
9
Biometric Blueprint

• Choice of biometric and storage technology
  most compatible with the requirements for
  machine-assisted identity confirmation with MRTDs
  
• Facial recognition
• Fingerprint
• Iris-scan
• Contactless IC
• Logical data structure
• PKI Digital Signatures

10
Deliverables

• Technical reports
• Logical data structure
• Machine-assisted identity confirmation
  biometrics
• Encryption and PKI
• Electronic visas

11
Logical Data Structure
12
Global Interoperability

• Biometrics cannot stand alone
• Common data storage device
• Common data structure
• Common method of securing the data

13
PKI Digital Signatures
14
Authentication protocols

• Passive authentication (M)
• Access Control
• Less-sensitive data (MRZ, facial image) Basic
  Access Control
• Sensitive data (fingerprint, ext) Extended
  Access Control
• Active Authentication
• Prevents cloning by using chip-individ. keypair

15
MRTD Web Sitewww.icao.int/mrtd
16
Data Storage

• Review of data storage technologies started in
  1997
• Limitation of paper
• Detailed review of IC cards
• ICAO Doc 9303, Part 3
• Contactless RF chip embedded in traditional paper
  books
• ISO 14443 standards apply

17
Conclusions

• Doc 9303 forwarded to ICAO TAG 15
• Annexes A-E of PKI-report normative
• Country signing CA certificate securely
• Actual keypairs generated securely
• CRL distribution
• Protocol for bilateral exchange protocol

18
Issues

• LDS PKI harmonized development
• Authenticity of individual biometrics
• Extended access control EU develop
• On-card access control
• Resolve difference with SC37/CBEFF
• Address e-Visas

19
Thank you

• Asbjørn Hovstø asbjorn.hovsto_at_ergo.no
• Delegate to
• ISO/IEC JTC1/SC17 WG3
• ISO/IEC JTC1/SC37
• ICAO/NTWG