Increased Security, while protecting Privacy ? True or False ? Christer Bergman, President and CEO, Precise Biometrics

I will talk about... Precise Biometrics (very brief) Biometrics..? Smart Card & Smart ID Card Fingerprint matching on card ”Increased Security, while protecting Privacy? True or False?

This is Precise Biometrics World leading security solutions based on fingerprint Holds world’s first patent within “Match-on-Card” Founded in 1997 in Lund, Sweden Offices in Lund (40), Stockholm (2) and Washington DC (6) Listed on the Stockholm Stock Exchange O-list since 2000

What we do We create fingerprint-based security solutions for companies, organizations, authorities and private individuals that replaces PIN:s, passwords and keys.

Biometrics....?

Trends that fuel the need for biometrics Market trends: –Globalization –Mobility and flexibility –Digitalization Technology enablers: –Internet –Wireless –e-business and smart cards All driving a cumbersome growth of PIN-codes and passwords

Problems Concern that sensitive data is accessed by unauthorized users e-business without trust – who’s at the other end of the Internet? Passwords, PIN-codes, keys, etc are a hassle => security is often cheated, or upheld at high admin cost

Solutions Confidentiality – encryption Authentication – digital certificates Non-repudiation – digital signatures Convenience + personal security – biometrics Digital identity management, smart cards and biometrics enables security and convenience by making the digital identity personal

Why biometrics? Uniquely linked to a person, who is present Secure and convenient –“No more passwords” (or “Post-It” stickers…) –Convenient = it will be used –Cannot be borrowed, stolen or forgotten Saves money –Less fraud –Less cost for password administration

What is biometrics?

Market share by technology

What biometrics, and how ? Surveillance vs. Access to a service Identification vs. Authentication 1-to-many vs. 1-to-1 Enrollment & Verification Fingerprint Image vs. Biometric Template Traditional Feature (Minutia) Matching More advanced pattern or hybrid matching Match-on-Server, Match-on-PC or Match-on Card Security or Privacy or Both ?!

What is Smart Card ?

Smart Cards - A small computer and a crytographic token Contains and handles sensitive data transactions / e-cash / identity / health profiles secret codes and keys biometric templates Performs cryptographic computations for authentication / digital signatures confidentiality by encryption key management protocols biometric match-on-card

Smart ID Card = Smart Card + ID Card Johnson, Jane Marie Social Security NumberDate of Birth JAN09 Issue DateExpiration Date 1999SEP032003SEP01 Pay GradeGeneva Conv. Cat. LTCOLVI Rank A1 Geneva Conventions Identification Card Active Duty U.S. Navy DMDC

Privacy or Security

Factors affecting privacy in ID systems Amount of data Sensitivity of data Low High Very High Privacy concerns

Unique security solutions PIN, Password Something You Know Solutions Relative Security Level Something You Have + Something You Know + Something You Are + Something You Have + Something You Know + Something You Have + Something You Are + Biometric ID Card + Something You Have Key or Card

Fingerprint matching on card

Match-On-Card technology Fingerprint matching on smart cards and SIM / WIM cards Brings biometrics and PKI together Make digital signatures and encryption of e- mails or documents more secure and convenient Makes it possible to replace PIN:s with fingerprints and to store and match the fingerprint on a smart card instead of a less secure computer

PKI & Fingerprint Match On Card Secure INTERNET PKI with PIN-codes PKI with Biometrics Secure INTERNET

Match-On-Card CaptureEnrollment Verification PC Hard Drive Network Server Smart Card Reference Storage UNSECURE Not Scalable

Match-On-Card Verification PC Hard Drive Network Server UNSECURE Not Scalable Smart Card Matching to reference template Reference template is exposed during verificationReference template is exposed during verification Card independentCard independent Sensor independentSensor independent Compatible with DoD Common Access CardCompatible with DoD Common Access Card Available for Java Card and MultosAvailable for Java Card and Multos Reference Storage Best practices require template to be encrypted and signedBest practices require template to be encrypted and signed —Secret shared by all workstations

Why Match-on-Card? Scalability The matching is performed locally on the card – the system scalability doesn’t have any limit – the matching is fast and independent of open networks Security Two factor authentication – demanding both a valid smart card, where fragments of your fingerprint are securely stored – and your fingerprint Privacy The template never leaves the secure environment – it cannot be copied or stolen – the privacy issue is radically resolved

How it works Match-on-Card™

Privacy and Security !

Thank you! Increased Security, while protecting Privacy ? True !