Biometrics standards put a new face on security

2002-07-18

Emerging technologies are putting a new face on security and identification products and systems - a new face that could be yours.

In the modern world-especially since the events of September 11-security requires reliable, tamperproof ways of identifying people. One of the most effective ways of doing that is through high-technology machine-readable identification cards.

Most of us have several such cards already. We use them in the form of bank and credit cards to purchase goods or access financial services, or as security cards that control entry to buildings. As convenient these cards are they're not all that secure. Features such as personal identification numbers (PINs) and signatures don't always adequately guard against fraud.

Biometric technology-identification through the automated recognition of faces, finger imaging or the pattern of blood vessels in the eye-has gained momentum as a solution to security issues. More traditional means of identification rely on something a person has (a card) or something he or she knows (a PIN or passcode). Biometric mechanisms provide an additional level of security, because they help to verify who the person is.

Canada is playing an important role in the development of international standards for biometric technology that could some day lead to its use in passports and travel documents around the world.

Worldwide compatibility

Through the Standards Council of Canada, Canadians are participating in the work of committees developing biometrics standards under the auspices of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Most of this work is taking place in the subcommittee on personal identification cards and related devices of the ISO and IEC's joint technical committee on information technology (ISO/IEC JTC 1/SC 17).

Since 1999, SC 17 has been working on a variety of biometrics related issues, including:

• how to use the technology for personal identification;
• how to store biometric data on identification cards with chips ("smart cards");
• how to adopt existing standards from outside ISO and IEC; and
• specific requirements for cards and card-reading devices.

The committee's work is helping to ensure that biometrics technology will be applied throughout the world in a consistent and effective fashion.

Securing border crossings

For example, several SC 17 working groups are developing standards to allow consistent use of biometric technology at border crossings throughout the world. This is expected to significantly enhance travel safety and provide countries with better control of their borders.

Joel Shaw, convenor of the working group on machine-readable travel documents (WG3), says the goal of the work is to strengthen security at borders by positively identifying travellers. Increased concern over terrorism has made countries involved in the effort, including Canada, the United States, Australia, New Zealand, Germany and the Netherlands, more ready than ever to work together to ensure developments have a global application.

The process is complex and challenging. The evolution from the traditional passport to one with biometric features has to be done so that all countries can eventually use the required machinery and will be willing to participate.

"The working group task force has been at the table in all the discussion regarding biometric technologies," says Mr. Shaw. "Governments have established requirements and the ISO/IEC working group must create standards to meet those needs."

Face recognition

One technology that could easily be merged with existing border security, once it can be made to work reliably, is facial recognition. This would involve using technology to supplement or replace the current practice of using a passport photo.

"What we're doing at this point is creating standards to design machinery to assist what they are doing today," explains Mr. Shaw. His group is now finalizing technical reports that will contain specifications in areas such as commonality of the data structure. Mr. Shaw says the first application of the technology will be "look-out systems" which will attempt to verify that the person arriving at a border crossing really is the one described in his or her personal travel documents.

On the road to better driving permits

Another promising area for biometrics is for international driving permits (IDPs). Authorities such as the United Nations are concerned that the current paper IDP is easy to forge. SC 17's working group on driver's licenses and related documents is creating guidelines for a machine-readable IDP card that would incorporate biometric data, and would conform to both international and local requirements.

Biometrics promises to significantly change the way that we verify that people are who they claim to be. "Ultimately," says Joel Shaw, "we will be creating a whole new way of identifying people. It will all come back to you, the individual."

"Biometrics is an emerging solution to security issues for machine-readable technologies. Standards will play an important role in support of innovation to develop new personal identification processes that protect the individual and our global community."

Back