Multimodal Simultaneous Biometric Authentication + Random Challenge Response = for secure mobile payment

Transcription

1 Multimodal Simultaneous Biometric Authentication + Random Challenge Response = for secure mobile payment Highest security, easy use on all modern phones Adaptive Trust Level for big and small payments Leadership in mobile applications with biometrics Werner Blessing,

2 Cyber Crime: Phishing, Pharming, Skimming, MiM

3 Fingerprint Various features: Papillar lines (Courbes, Spirals,..) Form of lines Y-forms, Endings, Points, Centres The capture of the fingerprint can be optic or captive

4 Fingerprint Advantages Existing criminal data bank (AFIS) Long experience ICAO Standard - Option Simple to use Inconveniences Easy to falsify Physical contact Not useful for identificatio due to high data size

5 Face Recognition 2D Face Recognition Most camera qualities are sufficient Use of printed photos is possible 3D Face Recognition (A4Vision) Specific cameras Specific lighting Manufacturers file format High security

6 Face Recognition Advantages Existing criminal files Already in all travel documents It is an ICAO Standard Touchless Inconveniences Sensitive to light conditions Easy to falsify Short need of reenrollement File size

7 Iris Identification Iris Tränenflüssigkeit Lederhaut Aderhaut Hornhaut Muskel Pupille optische Nerven Retina A modified Video camera is used for iris identification.

8 Iris Identification Pits Freckles Corona 266 DOF* * Each Degree of Freedom (Freiheitsgrad) has thousands Variations

9 Iris Identification Advantages Long term stability Contactless Fast Identifikation Small data size (512 byte) Inconveniences No existing criminal data bank Large and expensive hardware Higher refusal within population (due to misunderstanding retina 007 )

10 Vene Recognition Comparison of the vain structure Recognition of the vain structure using near infra red lighting Live recognition with temperature sensor

11 Template 1 Template 2 Template 0

12 Computer Access Transaction Server Access Authentication Server Access

13 Failure Rates Biometric procedures und Systeme are qualified by four Different error rates 1. FAR (false acceptance ratio) Giving access to unauthorized persons 2. FRR (false rejection ratio) Refusing access to authorized persons 3. EER (equal error rate) Equity of the two above error rates 4. FER/FTE (failure to enroll rate) Persons that fail to be errolled

14 Failure rates By modifying the threshold the error rates do alter A comfortable system increases the risc of unauthorised acceptance (FAR is high), refuses however fer authorised persons (low FRR) A system with high security allows few unauthorised (FAR is low), but refuses a lot of authorised persons (FRR is high)

15 Face Voice Lip Movement ComBiom 4 numerals = 16 authentication processes

16 High Security (4 x Biometrics Multimodal / Random Password) Simple (read / contactless / Free Hands and Memory) Low Cost Hardware (WebCam)

17 Softbutton

18

19 Trust % Value 100 % Trust-Level Your individual/personal Trust Level: - Maximum Payment - Level of Credit at bank - Personal Setting = Maximum 100% = Adds 10% = Adds 5% 10 % 10 Min. 60 Min. Time

20 Diverse Applications: - Access Control - Home Electronic -Children -Home Staff -Internet -Home Media MAD = Mobile Authentication Device

21 Biometric Recognition on Entrance, with warning signal on No Match Immediate client identification for staff at the counter Permanent face control on PC; wrong user and the machine will switch off Biometric voice Recognition for Phone Banking Improved security and no change towards the clients

22 SmartID SmartPass SmartVisa SmartDrive SmartHealth SmartBadge

23 Start Checksum of 2500,00 = Checksum of = 27 ComBiom digits: Transfer Confirmed + Stop Login to server (sso ComBiom) Random challenge (4 x digits 2708) Response (4 x digits 2708) Transaction incl. modification trojan Content calculation = 4 digits Biometric Transaction Confirmation Different digits = refuse transaction Use Checksum, or different Procedure Alternating the different procedures

24

25 Logical and Physical Access for: Employees Phone Access Voice Recognition Server Access with ComBiom IT Access with ComBiom Management Info + Efficiency Increase Clients Phone Banking, with Voice Recognition e Banking, with ComBiom CONFIRMED e Banking, with BiTCo Mobile Banking with MobiComBiom Physical Access Control with Face Recognition

26 "all in one Software" No. Application Who Remarks 1 Physical Access all staff x x x all staff Templates on server or on smartcard 2 Physical Access Trading Room x x x Broker Templates on server or on smartcard 3 Logical Access for Brokerage Server x x Broker and Superior Highest Security and Comfort 4 Phone Authentication Broker or all staff x x Management +Travelling staff 5 Management Control for Brokerage x x x x Management Plus Random Challenge Response on phone Secures exceptional acceptances with strong Management Authentication 6 Logical Access lokal Computer x x x x all staff Highest Security and Comfort 7 8 Logical Access all staff Server and Internet Access x x x x x all staff Server based and or on card ComBiom or one mode individually Remote Logical Access from other branch, homeoffice or travelling x x x x x x all staff Highest Security and Comfort 9 Phone Banking x x Clients Plus Random Challenge Response 10 e-banking opening x x x x Clients Highest Security and Comfort 11 e-banking Transaction, Confirmation x x x Clients Cut out the Man in the Middle 12 Product Automatic Face Recognation at entrance CRM - at the counter x x x Clients Very handsome Marketing 13 Mobile Payment x x x x Clients 14 Mobile Banking x x x x Clients Highest Security and Comfort on Mobile Phone, plus "Trust Level" Highest Security and Comfort on Mobile Phone, plus "Trust Level"

27 Everybody goes for Biometric Authentication, when you chose, chose the best solution! Quelle: Frost & Sullivan, World Biometric Market, 2007

28

29