2. 2003 1 Increased Security, while protecting Privacy ? True or False ? Christer Bergman, President and CEO, Precise Biometrics

3. 2003 2 I will talk about... Precise Biometrics (very brief) Biometrics..? Smart Card & Smart ID Card Fingerprint matching on card ”Increased Security, while protecting Privacy? True or False?

4. 2003 3 This is Precise Biometrics World leading security solutions based on fingerprint Holds world’s first patent within “Match-on-Card” Founded in 1997 in Lund, Sweden Offices in Lund (40), Stockholm (2) and Washington DC (6) Listed on the Stockholm Stock Exchange O-list since 2000

5. 2003 4 What we do We create fingerprint-based security solutions for companies, organizations, authorities and private individuals that replaces PIN:s, passwords and keys.

6. 2003 5 Biometrics....?

7. 2003 6 Trends that fuel the need for biometrics Market trends: –Globalization –Mobility and flexibility –Digitalization Technology enablers: –Internet –Wireless –e-business and smart cards All driving a cumbersome growth of PIN-codes and passwords

8. 2003 7 Problems Concern that sensitive data is accessed by unauthorized users e-business without trust – who’s at the other end of the Internet? Passwords, PIN-codes, keys, etc are a hassle => security is often cheated, or upheld at high admin cost

9. 2003 8 Solutions Confidentiality – encryption Authentication – digital certificates Non-repudiation – digital signatures Convenience + personal security – biometrics Digital identity management, smart cards and biometrics enables security and convenience by making the digital identity personal

10. 2003 9 Why biometrics? Uniquely linked to a person, who is present Secure and convenient –“No more passwords” (or “Post-It” stickers…) –Convenient = it will be used –Cannot be borrowed, stolen or forgotten Saves money –Less fraud –Less cost for password administration

11. 2003 10 What is biometrics?

12. 2003 11 Market share by technology

13. 2003 12 What biometrics, and how ? Surveillance vs. Access to a service Identification vs. Authentication 1-to-many vs. 1-to-1 Enrollment & Verification Fingerprint Image vs. Biometric Template Traditional Feature (Minutia) Matching More advanced pattern or hybrid matching Match-on-Server, Match-on-PC or Match-on Card Security or Privacy or Both ?!

14. 2003 13 What is Smart Card ?

15. 2003 14 Smart Cards - A small computer and a crytographic token Contains and handles sensitive data transactions / e-cash / identity / health profiles secret codes and keys biometric templates Performs cryptographic computations for authentication / digital signatures confidentiality by encryption key management protocols biometric match-on-card

16. 2003 15 Smart ID Card = Smart Card + ID Card Johnson, Jane Marie Social Security NumberDate of Birth 742-76-00641969JAN09 Issue DateExpiration Date 1999SEP032003SEP01 Pay GradeGeneva Conv. Cat. LTCOLVI Rank A1 Geneva Conventions Identification Card Active Duty U.S. Navy DMDC

17. 2003 16 Privacy or Security

18. 2003 17 Factors affecting privacy in ID systems Amount of data Sensitivity of data Low High Very High Privacy concerns

19. 2003 18 Unique security solutions PIN, Password Something You Know Solutions Relative Security Level Something You Have + Something You Know + Something You Are + Something You Have + Something You Know + Something You Have + Something You Are + Biometric ID Card + Something You Have Key or Card

20. 2003 19 Fingerprint matching on card

21. 2003 20 Match-On-Card technology Fingerprint matching on smart cards and SIM / WIM cards Brings biometrics and PKI together Make digital signatures and encryption of e- mails or documents more secure and convenient Makes it possible to replace PIN:s with fingerprints and to store and match the fingerprint on a smart card instead of a less secure computer

22. 2003 21 PKI & Fingerprint Match On Card Secure INTERNET 45636437 PKI with PIN-codes PKI with Biometrics Secure INTERNET

23. 2003 22 Match-On-Card 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 CaptureEnrollment Verification 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 PC Hard Drive Network Server Smart Card Reference Storage UNSECURE Not Scalable

24. 2003 23 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 Match-On-Card Verification 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 010100100110101010010 110101110101101010011 101111010100100100011 100101010001010100100 PC Hard Drive Network Server UNSECURE Not Scalable Smart Card Matching to reference template Reference template is exposed during verificationReference template is exposed during verification Card independentCard independent Sensor independentSensor independent Compatible with DoD Common Access CardCompatible with DoD Common Access Card Available for Java Card and MultosAvailable for Java Card and Multos Reference Storage Best practices require template to be encrypted and signedBest practices require template to be encrypted and signed —Secret shared by all workstations

25. 2003 24 Why Match-on-Card? Scalability The matching is performed locally on the card – the system scalability doesn’t have any limit – the matching is fast and independent of open networks Security Two factor authentication – demanding both a valid smart card, where fragments of your fingerprint are securely stored – and your fingerprint Privacy The template never leaves the secure environment – it cannot be copied or stolen – the privacy issue is radically resolved

26. 2003 25 How it works Match-on-Card™

27. 2003 26 Privacy and Security !

28. 2003 27 Thank you! christer.bergman@precisebiometrics.com Increased Security, while protecting Privacy ? True !