Standards for Biometrics Dr Pushkin Kachroo Introduction Standards

Standards for Biometrics Dr. Pushkin Kachroo

Introduction • Standards needed for interoperability • At all levels of the system – hardware level (using one company’s fingerprint scanner with other parts from other vendors) – Application level, database level, etc.

Layers Sensors Feature Extractor Device driver Application Matcher Template format API

API • Application Programming Interface • Ongoing active work…. • Examples: – Bio. API – SVAPI – Bio. API for Java Card – BAPI

Bio. API • Bio. API: – Most popular – For any biometric – Allows applications to manage • • Enrollment on client/server Verification on client/server Identification on client/server Biometric signal acquisition on a client

Bio. API…contd. • …defines at the highest level • Biometric Service Provider (BSP) • Three Steps to BSP – Capture, Process, and Match • Data returned to the application: Biometric Identification Record (BIR) • Three classes of functions in the API – Enrollment, verification, and identification

Bio. API Registry • Bio. API components post information about themselves in the Bio. API Module Registry during installation • Applications can check the registry for BSPs installed and their functionalities • Device Specific parameters and status also in the registry

SVAPI • API for Speaker Verification • has merged with Bio. API

Bio. API for Java Card • Java Card: – Java Card technology provides a secure environment for applications that run on smart cards and other devices with very limited memory and processing capabilities. – Multiple applications can be deployed on a single card, and new ones can be added to it even after it has been issued to the end user. – Applications written in the Java programming language can be executed securely on cards from different vendors. – http: //java. sun. com/products/javacard/ • Bio. API for Java Card: for security and maximum functionality… – Secure template matching , limiting attempts

BAPI • The Biometric Application Programming Interface (BAPI) defines a standard software protocol and application programming interface (API) for communication between software applications and biometric devices. BAPI is designed to bring standards and compatibility to the biometric hardware and software markets. • Microsoft bought it for integration • http: //www. iosoftware. com/pages/Products/Biometric%20 API/index. asp

Databases • For impartial evaluation of biometric systems, there is a need for large public databases. • NIST: National Institute of Standards and Technologies (http: //www. nist. gov/) – Leader – Fingerprints, mugshots, voice samples • Face recognition, many universities • Speaker recognition, also academic institutions • Iris: No known large databases present

Certification • Certified products and solutions generally don’t exist yet, except finger printing. • FBI fingerprint scanners • WSQ specification for Wavelet Scalar Quantization • Common Criteria (for ISO generic security requirements)

Legislation • USA Patriot Act: Tools for strengthening law enforcement • Aviation Security using Emerging Technologies • Enhanced Border Security and Visa Reform Act • Govt. Paperwork Elimination Act • Health Insurance Portability and Accountability Act • State Level: Driver’s license related, also privacy issues with biometric data