3rd ICAO MRTD Biometrics and Security Standard Symposium

Transcription

1 3rd ICAO MRTD Biometrics and Security Standard Symposium

2 WELCOME Secure Credentials on ID Cards Methods to combat duplication and fake IDs Digital Identification Solutions Group Gerd Schaefer, CEO

3 COMPANY INTRODUCTION Broad, strong Experience in the Identification & Security Business since the beginning of 1988, therefore 20 Years of Field Expertise. Previously the KODAK Headquarters for the Identification and Security Systems Division Business in the Eastern Hemisphere. Forefront Developers of Electronic Imaging & Digital Security Solutions. Headquartered in Germany, the company has subsidiaries in Dubai, Singapore, Beijing, Greenville, S.C. and Mexico.

4 COMPANY INTRODUCTION Market Segments Personal Identification and ID Management for Corporate Clients Airports and Airlines Nuclear Power & Research Facilities Governmental ID Cards (National ID, Military ID, Social Security, Drivers License, Car Registration, etc.) Machine Readable Travel Documents (ID Cards, MRP, e-passports, Visa)

5 REFERENCES Top Corporate References: Volkswagen AG Lufthansa BASF AG German Mail Airbus Industries Bayer AG Pfizer Pharmaceuticals Saudi Telecom Qantas Australian Airlines British Airport Authorities Spanish Football League ERG Transit Solutions United Parcel Service UPS Washington D.C. National & International Airport Government References: Oman Drivers License Oman Car Registration Indonesian Drivers License Indonesian Passport Project Spanish Air Force Italian Natl. ID Malaysian Police Officers ID Singapore Air Force Dubai Police, UAE Dubai Port & Customs, UAE Medical Card Project, UAE UAE Car Registration King Fahd Armed Forces, KSA Ministry of Foreign Affairs Passport Project, P.R. China

6 PRODUCT OVERVIEW PRODUCTS Same attractive price

7 COMPLETE PRODUCT OFFERINGS Application Software, Toolkit-, Encoding- and Driver-Solutions Biometric Enrollment & Image Acquisition Printing Solutions for ID Cards, MRP, Visas Certified Supplies & Foils, Cardware Project Management, Integration Services, Logistics and Support

8 EDIsecure SOFTWARE SOLUTIONS Server Components are Java code based and run on Windows 2000/XP Sun Solaris Unix/Linux Software Latest, platform independent development Workstation Components Windows 2000/XP Browser IE 5.5 or higher ActiveX Components for biometric Plug-Ins Input Any Twain or VFW compliant device Database Any ODBC (JDBC) compliant database Application Modular concept (Design, Retrieval Management) Web enabled Output Any generic MS-Windows printer driver Open System Architecture

9 EDIsecure PRINTING SOLUTIONS EDIsecure Passport Printer PP 300X 240 passports per hour In high-resolution/full color EDIsecure ID Card Printer Value Line Professional Line

10 SECURITY MEASURES Secure Secure Documents Documents Secure Secure Data Data Interchange Interchange && Storage Storage Authenticated Authenticated Personnel Personnel and and Secure Secure Infrastructure Infrastructure Secure Secure Workflow Workflow Process Process Card Card Management Management Software Software Secure Secure and and Reliable Reliable Personalization Personalization Hardware Hardware

11 SECURE DOCUMENTS Security features of credentials can be classified into three groups Examples of Security features Group 1 Simple visible Group 2 Visible using specific tools Group 3 Visible using special equipment or in labs Guilloches Rainbow Printing Microprint UV Ink Infrared printing Hidden Information Optical Variable Ink Metalized Hologram Translucent OVD

12 SECURITY PRE-PRINTING Guilloche Microprint Text printed with such small fonts that it is only readable with a strong magnifying glas and could be only pre-printed and could not be scanned or printed with an ID printer. Rainbow printing Ultra-fine lines or pattern that change gradually from one color to another. Requires specialized offset printing equipment available only in security printing facilities.

13 SECURITY PRE-PRINTING Iriodin Full card or partial card size pre-print printed in silk-screen print technology. There is metalized pigments in the transparent color, which gives the impression of metalized effect. Optically variable inks (OVI) Color-shifting inks reflect various wavelengths in white light differently, depending on the angle of incidence to the surface. An unaided eye will observe this effect as a change of color change while the viewing angle is changed. A color copier or scanner can copy a document only at one fixed angle relative to the card s surface. Infrared Pre-printing Infrared color available in two wave different wave lengths. Print technology is offset, similar to UV pre-print. Colors yellow or red. Visual only with infrared-light source lamps, that cover the required wave lengths. Iridisent Copy protection color which could be printed over the full card size or partially. Print technology is silk-screen pre-print. Card could not be copied or reproduced with common copiers.

14 ELECTRONIC SECURITY Alternatives & options to enhance card security Electronic Guilloche Electronically generated guilloche and printed with the Retransfer printer. Can be adjusted to customer wishes. Shadow Image Electronically generated, reduced density copy of the person s photo is printed during personalization as background behind the text information. Difficult to alter person s data without destroying the person s image. Example: Electronic Guilloche Overlapping Objects Objects such as a signature or a stamp will be overlapped over other fields such as the person s photo to avoid alteration. Simulation of the known stamping and signing of authorized persons

15 ELECTRONIC SECURITY Alternatives & options to enhance card security Invisible Personal Information (IPI) IPI encodes personal data into the photo. This personal data is invisible to the naked eye but the officials may verify authenticity with a simple decoding lens.

16 EDIsecure SECURITY ERASE K-Panel K-Panel after Security Erase

17 EDIsecure SECURITY ERASE Printed Card K-Panel K-Panel after Security Erase

18 EDIsecure UV INK PRINTING Visible Invisible Card UV Ink (wax transfer) Card UV Ink (dye-sublimation, 256 step graduation)

19 EDIsecure UV INK PRINTING Color ink UV ink Printed Printed card card - UV - light daylight UV Dye-Sublimation UV ink ribbon

20 EDIsecure UV INK PRINTING Attractive security feature for corporate & government clients who do want to increase their credential security

21 EDIsecure UV INK PRINTING Driver provides for application independent positioning of the photo and all black text CMS Software Suite will provide for more comprehensive UV Options (Logos, single fields) Printer prints an invisible Machine-Code in order to identify the printer on which a faked card had been issued Controlled distribution process!!!

22 SURFACE DATA PROTECTION Why to use surface protection To protect the personalized data from compromise and validate authenticity To extend the life of the document - complex and expensive credentials require longer life cycles To add additional overt & covert security/authentication features

23 SURFACE DATA PROTECTION Holograms versus OVD s Holograms are dimensional pictures made on a stationary laser table utilizing a single laser emission. This is a commonly available technology. OVD s are complex, pixilated images that are created e.g. by millions of pulse laser emissions. Only certain manufacturers can do this. OVD s are bright any illumination is O.K. They do not interfere with data playback. Simulation is exceptionally difficult. HRI is an acronym for High Refractive Index. The HRI layer maintains enough transparency to allow the data to be visible and reflects enough light to authenticate the OVD.

24 SURFACE DATA PROTECTION The Anatomy of Optical Variable Devices Microprint UV Ink Infrared printing Hidden Information Kinetic Background Micro text (140mu) Flip Micro text (250mu) Kinetic Guilloche High Resolution

25 SURFACE DATA PROTECTION How to make an OVD even more secure? The COVID Security System: COVID is a complex security system of polymeric material that contains an HRI OVD image as well as a selection of unique security technologies unrelated to the visible, embossed OVD microstructure. UV Inks IR Pigment Flip Ink High Resolution Guilloche Artwork Image Seen in White Light SecureText Pixel Encryption At 200X COVID is a registered trademark of ITW COVID

26 MACHINE READABILITY & ENCODING Contact Chip Memory / Processor Contactless Chip Mifare, DESFire, HID iclass, Legic, Magnetic Stripe HiCo, LoCo Barcodes Standard, PDF417, Datastrip ColorCode

27 MACHINE READABILITY & ENCODING Optical Encoding Technologies (LaserCard, OptiChip) Up to 32 Kilobytes of unalterable data Available in smart chip module size or larger Can be inserted into the card body with existing milling and embedding devices Combines optical security with data storage Ultra micro text graphics and guilloche pattern Laser written, embedded holographic security feature Laser written OptiChip serial number to be combined with the ID card number Fully automatic personalization + = Card Printing Inline-Encoding Final OptiChip Card

28 MACHINE READABILITY & ENCODING Secure Documents with ColorCode + + = ColorCode Storage and Decoding Visa (data area 19 x 72 mm) Max. Data capacity (Kilobytes) Scan resolution (dpi) Decoding time (seconds per document) ~1 sec ~1 sec ~1 sec ~1-2sec ICAO ID Card / Passport (21.6 x 86mm) Max. Data capacity (Kilobytes) Scan resolution (dpi) Decoding time (seconds per document)

29 MACHINE READABILITY & ENCODING Digital Invisible Information (D-IPI) Digital IPI encodes binary data into the photo. For verification a special device (reader) is required. Normal vs. Digital IPI Verification of normal - lens-readable - IPI is simple and fast. Digital information can be encrypted by the customer, what provides higher level of security.

30 MACHINE READABILITY & ENCODING Credential Personalization with D-IPI & Chip Image D-IPI Generation Personal data BETHLIE HAMM BH Generate MAC 28D4 705B F520 A35F 1CC A90B 503A Message Authentication Code

31 MACHINE READABILITY & ENCODING Verification of D-IPI & Chip D-IPI Reader 28D4 705B F520 A35F 1CC A90B 503A RFID or MAC Compare/ Verify Data Chip Reader 28D4 705B F520 A35F 1CC A90B 503A

32 SECURE CREDENTIALS Invisible Personal Information (IPI) software allows you to encode information inside the photograph Preprinted UV Ink allows you to add secure text that is invisible to the naked eye Preprinted micro-text allows you to add a secure line of info to your card design Custom or generic holographic patch or thermal film laminate adds both visual & physical security to the final card print

33 BIOMETRICS & ENCODING Example: The combination of a modern passport reader with a biometric identification system.

34 INDONESIAN BIOMETRIC PASSPORT Back Up Tape Matching Servers Application Servers Database Servers Admin Console Kantor Imigrasi BIS Payment cum Registration Station Screening Workstation AFIS Satellite dish Capture Station Kantor Pusat Gigabyte / Fast Ethernet Switch Firewall Transceiver Database Servers Router Router PPS Registration Station Firewall Application Servers Transceiver Fast Ethernet Switch Print Station Storage Server Satellite dish Local Buffer Server Admin console Fully ICAO compliant 8-10,000 passports per day 2,000,000 passports per year Citizen focused approach, Central database Sophisticated exchange of data Life image & fingerprint capture Online countrywide fingerprint duplicates check Online countrywide watch-list and blacklist check 3 days from application until collection of passport VIP service within 4 hours

35 PROOF OF IDENTITY AFIS System for online countrywide check for fingerprint duplicates

36 WORKFLOW & LIFE CYCLE MANAGEMENT

37 THE IDEAL TECHNOLOGY COMBINATION Security Pre-Printing (Rainbow printing, Microprint, UV, OCR/Barcode, etc.) Electronic Personalization (Electr. Guilloche, IPI, Overlapping Objects, Shadow Image, etc.) Long lasting Credential Bodies (PET/PC) Surface Data Protection (HRI OVD/Patch or Sandwich Combination, COVID, etc.) Machine Readability e.g. from Chips or 2D or Color Barcodes and use of Biometrics The Customers Dream : Solution providers should offer secure, economical, user friendly and scalable personalization systems for centralistic and decentralized credential issuance

38 CONCLUSIONS Choose a project-partner with a successful track record, a partner who knows how things work. Digital Identification Solutions Group

39 Vielen Dank! Thank You! Muchas gracias! Спасибо!!شكرا ありがとう! 谢谢! Terima kasih!