1. High Reliability Biometric Identification Systems Working Group Day 1 Summary March 7, 2005 Larry Hornak, Fabian Monrose, Douglas Reynolds, Ruby Lee, Ingrid Verbauwhede

2. Biometrics Group: Preliminaries What is the state of the practice in the financial industry? Where is the imminent need? Classes of fraudulent behavior biometrics may address? Results of “The Use of Technology to Combat Identity Theft” DoT Feb 2005 On-line financial transaction from PC Credit card transactions ATM transactions

3. 2-factor authentication now the target suggested by the government. ID theft – Customers are frightened – significant motivator for industry. If there is a compelling security need to bind person to action then Biometrics is the technology Whether it is used is a matter of convenience, performance, cost, utility, vulnerability, acceptability… What is “performance” of other processes (PINS, passwords) Biometrics Group: Preliminaries

4. Authentication – process precedes and enables flow of knowledge of the transaction. Pattern matching based on the nature of the transaction, after the fact, can make it real time, and if so with what FAR and FRR. Biometrics needs: 1:1 transactions, longer term 1:Many to verify legitimacy of identities undertaking the 1:1 transactions. Leverage activities of other government agencies. Biometrics Group: Preliminaries

5. Identity Management: Authentication and Fixing? Identity Fixing Process (1:N Large) Financial Service “Enrollment” Identity Authorities??? – Database Financial, others Customer Enrolled Customer Transaction Request Identity Authentication Process (1:1) Financial Auth. Authority – Local/Dist. Database Authorized Transaction

6. Questions to be Addressed Related to the topical area 1.What are the most important basic research questions? 2.What is the current State-of-the-Art? 3.What are the very hard problems requiring sustained long-term research, and what mid- term (2-3 yrs) or short term (1-2 yrs) achievements are possible?

7. Research Needs (1) Bullets 1-3 collectively, to be revisited tomorrow: 1.Effective modeling, simulation and design of core biometric systems to improve performance and reduce vulnerability to attack. 2.Traditional models fail to capture the motivate adversary/skilled forger – How to test under these conditions. 3.How to integrate more convenient and usable biometrics into the hardware/software architecture of secure devices and services.

8. Research Needs (2) Bullets 1-3 collectively, to be revisited tomorrow: 4.How to protect (hardware/software) and store biometric material in a cost effective manner for personal hardware devices 5.Interdisciplinary studies - both quantitative and qualitative – to provide for informed policy decisions and underpin design for acceptance is crucial.

9. Questions to be Addressed Other topics to be addressed on Day 2: 4.What other areas of work are directly related and relevant to success? 5.What areas of research are no longer sustainable/viable approaches? 6.What other vexing problems exist that you believe have not been addressed by the six topics?