Hosted by: June 23-26, 2003 New York City Mobile & Handheld Readers The Need for Mobile & Handheld Readers in Today's Biometric Projects Speaker: Gregory McConnell, Partner

Hosted by: June 23-26, 2003 New York City 2 Presentation Plan 1.0Intro: Mobile biometric readers. Why? and Why Now? 2.0Applications of these handheld & Mobile biometric devices 3.0Basic functionalities of the devices 4.0Specific features and functionalities 5.0Which biometric methods are suitable for Mobile & Handheld applications? 6.0What do they look like? 6.1How much do they cost? 7.0Projects around the world who need or use Mobile & Handheld biometric readers.

Hosted by: June 23-26, 2003 New York City Introduction: Mobile & Handheld biometric readers. Why? and Why Now? With 9-11, vulnerabilities in our ID and travel documents systems are exposed. We want more security. Gone from using biometrics to protect very few and specific things/places (servers, rooms, files, etc) to authenticate a relatively small number of people. …to trying to authenticate masses of people, over large territories, in the multitude of places we may find them. In this new context: –People don’t always come to the authentication point (door,desk/PC) –The technology has to go out to them –Away from the door, the desk/PC, to the car, the boat, the gate, etc.

Hosted by: June 23-26, 2003 New York City Applications Travel documents check (fast-track passes, visa, foreign vs. domestic passport, etc): – Land boarder control (up-stream verification, from vehicle to vehicle, pre-clearance – Maritime ports (ID V&A on board the ship, in port or out at sea). – Airports (fast-track frequent or domestic travelers through customs)

Hosted by: June 23-26, 2003 New York City Applications Physical Access & Employee ID –Gate access control Airport Tarmak Military base Power plant Construction site, other restricted access area –Manned (Guard/clerk) ID check & patrol Fed. or State Gov. building access Airport restricted area access and patrol Vessel crew ID V&A and/or Time and Attendance Etc.

Hosted by: June 23-26, 2003 New York City Applications National ID (Permanent Resident, Green Card, etc) –Border entry check –Plane pre-boarding check –Proof of legal age: Voting, purchase of Alcohol or tobacco, etc Drivers License –Police verification and authentication of license/driver Healthcare card (Nominative attribution of benefits) –Card authentication in emergency rooms (Canada, France, Germany, Sweden, etc.)

Hosted by: June 23-26, 2003 New York City Basic functionalities of the devices Read credentials off a ID/Travel document or access token (not necessary if Identity profiles are stored on a server or in the reading device itself) Verify the validity of the document/token and it’s “issuing authority” Authentication of the owner of the document/token (person presenting it) through biometrics Display result of authentication + ID credentials

Hosted by: June 23-26, 2003 New York City Specific features and functionalities Validation of Origin –Digital signature (digital certificates) Verification of Data Integrity –Digital signature (DSA, DSS, RSA) Establishing Trusted Communication between the card and the reader –SAM (Security Access Module) Perform any other actions with data from card –Log transaction for later download –Send transaction or ID back to a server (Wireless) –Print transaction or related action (Find, ticket, pass, etc)

Hosted by: June 23-26, 2003 New York City Which biometric methods are suitable?

Hosted by: June 23-26, 2003 New York City Mobile/Handheld or not? Iris Scan Large size of reader is prohibitive (No reader available) Facial Scan Size (small camera) is not prohibitive Sub-optimal lighting, background noise (images/people), and cosmetics people where outdoors may cause a problem. Doesn’t require the individual’s cooperation (good for remote/mobile surveillance, not for handheld). Hand Geometry Large size device, not fit for Mobile & Handheld applications

Hosted by: June 23-26, 2003 New York City Mobile/Handheld or not? Voice recognition Fits Mobile Wireless applications (authentication with server) Environmental noise and changes (outdoors) affect accuracy Signature verification Has been integrated in handheld & Mobile devices For signature capture, not V&A May be issues with token storage

Hosted by: June 23-26, 2003 New York City Mobile/Handheld or not? Fingerprint sensing –Compact readers (particularly capacitive, thermal and digital linear sensors) –Fits Mobile & Handheld devices –In many cases weatherized (mostly Optical) –Biometric sleeves/hubs available as add-on to PDA (fits into Compact Flash card slot) –A few (3) companies currently manufacture and ship handheld mobile readers (both capacitive and optical)

Hosted by: June 23-26, 2003 New York City What do they look like? Optical fingerprint reading Contact smart card reader Optional 2D barcode card reader Alpha-numeric keypad Monochrome Graphical LCD OS: Proprietary What does it cost? MSRP: $3,000

Hosted by: June 23-26, 2003 New York City What do they look like? Capacitive fingerprint reading Contact smart card reader Alpha-numeric keypad Color Graphical LCD OS: Windows CE Optional Bluetooth and GSM modules What does it cost? MSRP: $2,500

Hosted by: June 23-26, 2003 New York City What do they look like? Capacitive fingerprint reading Contactless smart card reader: ISO ISO Optional: 2D barcode reader Navigational keypad Monochrome Graphical LCD OS: Proprietary Optional: Bluetooth connection What does it cost? MSRP: $1,025

Hosted by: June 23-26, 2003 New York City What do they look like? Capacitive fingerprint reading Contact smart card reader Navigational keypad + programmable function keys Touch Screen Graphical color LCD OS: Windows CE Ruggedized Optional: Bluetooth, GSM, desktop and car dockings. What does it cost? MSRP: $1,900

Hosted by: June 23-26, 2003 New York City Projects with Mobile & Handheld biometric readers USA Project: Common Access Card (CAC) Solicitor: The U.S DoD Project: Transportation Worker Identification Credential (TWIC) Solicitor: Transportation Security Administration (TSA) Project: Borders E&E Solicitor: Homeland Security/TSA

Hosted by: June 23-26, 2003 New York City Projects with Mobile & Handheld biometric readers Canada Project: Restricted Area Pass System Solicitor: Canadian Air Transport Security Administration (CATSA) Project: Permanent Resident Card Solicitor: Canadian Customs & Revenue Agency (CCRA) Project: NEXUS Solicitor: CCRA / Citizenship & Immigration Canada (CIC) Potential Project: Canadian National ID Card Solicitor: CIC

Hosted by: June 23-26, 2003 New York City Projects with Mobile & Handheld biometric readers World Project: Saudi National ID Card (CAFIS) Solicitor: Saudi Ministry of Interior Project: Colombian National ID Solicitor: Colombian Fed. Gov. Project: National ID Card of El Salvador (DUI) Solicitor: El Salvador Fed. Gov. Etc.