Citizen Biometric Authentication based on e-document verification. e-government perspective. Mindshare Ruslans Arzaniks Head of Development

Transcription

1 Citizen Biometric Authentication based on e-document verification. e-government perspective. Mindshare 2017 Ruslans Arzaniks Head of Development

2 About us WHO WE ARE X Infotech is a global provider of software solutions for digital identity documents and smart cards. WHAT WE DO We help governments, local document producers and banks to implement eid and financial/social cards programs, providing the complete IT infrastructure and empowering them to take full and autonomous control of their projects and businesses. OUR MARKETS Government electronic Identity, electronic payment/smart cards, electronic Healthcare cards, Border Control solutions. OUR CUSTOMERS Governments (ministries and federal units), Banks and Financial institutions.

3 Quick facts 15 years of deep market expertise Customers in 45+ countries 100 experts in the team Electronic passports and cards: 25+ successful projects Payment cards: 200+ successful projects

4 Projects completed HEADQUARTERED IN EUROPE 100% SUCCESSFUL PROJECTS IN 45+ COUNTRIES

5 Government Projects Electronic Identity Documents eid card for Ghana (ongoing) Residence Permit Card in Ireland (2016) Passport Card in Ireland (2015) Border Control Solution for Tunisia (2015) Biometric Enrolment Solution for Lithuanian Police (2015) eid Card in Moldova (2014) EAC, SAC epassport in Liechtenstein (2014) epassport in Ireland (2013) Payment card with Biometric ID App for South Sudan (2013) BAC/EAC epassport in South East Asia (2013) eid Card in South East Asia ( ) eid Card in Latvia (2012) Scholar Card in Latvia (2012)

6 Government Projects PKI solution for Electronic Identity Documents PKI solutions for epassport in Peru (2016) PKI solution for eid card & epassport in Uruguay (2015) Diplomatic passports European Union laissez-passer (2015) ECOWAS laissez-passer in Nigeria (2015) Social Cards Social card project in Kenya-Huduma card (2016) The Hunger Safety Net Programme (2012) Orphans and vulnerable children project in Kenya (2012) Egypt social card (2009)

7 e-government, Biometrics and Identity Ecosystem

8 e-government + Identity 1. e-government is an economic growth booster, and bridges the gap between government and citizens. 2. Identity Ecosystem is a secure option for citizens to get instantly authenticated and interact with Authorities and banks through electronic devices.

9 Strong e-government ecosystem e-government solution is not just a trend it s a cruicial factor to drive country s development in today s world. 1. Strong e-government system = implementation of strong identity system + implementation of secure verification system. 2. Electronic identity and biometric verification systems are paramount for e-government. 3. The starting point for any e-government system is robust electronic identity documents.

10 Strong e-government ecosystem Next step is to create a secure and robust system of remote verification and identification of citizens to provide access to publicly available services. Authentication/verification system must be UIfriendly, convenient and easy to use on the enduser side. Even if a technology behind the system is industry proven, exceptionally scalable and sophisticated, it will be accepted by the market only when it s user-friendly.

11 eid documents to access e-government 1. e-id card or an e-passport can be used as a key to access various doors or ecosystems within e- Government. 2. e-id cards don t require multiple applications. The primary functions are identification and authentication, and can be integrated with external systems/portals for secure authentication and electronic transactions. 3. Main requirement to e-id documents for authentication high quality and integrated secure components to avoid fraud.

12 Types of e-government Systems Population registry Civil and criminal biometric databases Document issuing system and registry Border control system Healthcare system Public transport system Social security system (including subsidy distribution and management) Education (including remote education) Work / job market Real estate and vehicle registries (and its management) Company register Driver registry

13 Implementing e-government Benefits for Authorities 1. Security becomes paramount 2. Transparent Government 3. Reducing Corruption Implementation of e-government together with a strong Identity Ecosystem positively impacts: Convenience for citizens. Self-service approach. Time and money for citizen communication with government. Reduction on governmental spending on administration. Economical growth. Attractive investment landscape. Country stability, tourism and other businesses.

14 Biometric Authentication to access services

15 Form-factors of Authentication Something I know Login Name PIN/Password Phone Number Something I have Document Smartphone Tablet PKI token ID token с Verification Identification Authentication Something I am Face Finger Iris Voice

16 Complexity of Authentication Process Problems faced when selecting a solution for online authentication usability security security usability When solving these problems, "quality - reliability" must not be compromised. The goal is to find the ideal (optimal) combination of software platforms and authentication form-factors to ensure user convenience and the maximum reliability. usability security

17 Type Advantage Disadvantage PIN / Password Short, simple, easy to Low level of security remember Phone Number Easy to remember Low level of security Token, Code Calculator Average-level of security It is necessary to receive a token or a code card at the bank upon request and carry it with you Electronic signature High-level of security PIN must be stored and the driver must be downloaded, according to the latest version of the OS Document (ID, identity card) High-level of security Not always supported for remote authentication Fingerprints combined with a document or electronic signature verification Face recognition combined with a document or electronic signature verification Highest-level of security, always with you Highest-level of security, always with you Application and/or the driver must be downloaded Application and/or the driver must be downloaded

18 Suggested authentication options based on X Infotech solutions Type Password + PIN Phone Number (or ) + PIN ОТР (One Time Password, one-time passwords) using SMS Electronic signature + Face recognition Comments Minimum level of security Minimum level of security Weak level of security High level of security, maximum protection You still need to remember the PIN for the e-signature as well as download the card drivers on the computer whenever a new version of the OS is released. Electronic document verification using RFID technology and a tablet/phone + Face recognition High level of security, maximum protection There is no need to remember the PIN-code. Nothing is required except that you connect to the Internet, have an NFCenabled mobile device (running Android OS), and have your electronic document.

19 edocument & Biometric Verification edocument & Biometric Verification is integrated with X Infotech Authorization Server, X Infotech Integration Services and X Infotech Identity Management - central face\fingerprint verification service and biometric database. The vendor-independent solution permits clients to deploy authentication products for: Authorization Server + Identity Management + Integration Services WEB/Desktop application Mobile application Liveness detection App supports live photo/video capture with automatic quality validation and photo/video compression. Liveness detection ensures that the client is a live person, not a photo or video. The feature can be turned on/off in application settings.

20 Solution Functionality Web interface X Infotech Solution, IDMS Identity Management (IDMS) is a Biometric registry which serves as an integration layer between AFIS/ABIS engines and service systems, and can perform 1:1 or 1:N matching. Authentication Android smartphone, NFC X Infotech Solution, Authorization Server Add a user and rights AUTHORIZATION X Infotech Integration services External SERVICE SUPPLIER Authorization server supports three factor authentication knowledge, possession, inherence.

21 Authentication with Smartphone 1. Authentication User identifies himself with smartphone and a public service web page 2. Authorization User is authorized and can use the services

22 Authentication with Smartphone Select authentication method DOCUMENT FACE RECOGNITION

23 Authentication with Smartphone

24 Authentication with Smartphone

25 Authentication with Smartphone Document-based Authentication Document-based Authentication with Face matching

26 Thank you! Ruslans Arzaniks Head of Development