Einsatz von Fingerabdrücken im Europäischen Visumverfahren. Bundesverwaltungsamt (BVA) Bundesamt für Sicherheit in der Informationstechnik (BSI)

Transcription

1 Einsatz von Fingerabdrücken im Europäischen Visumverfahren Bundesverwaltungsamt (BVA) Bundesamt für Sicherheit in der Informationstechnik (BSI)

2 Agenda EU Visa Information System (VIS) Experiences from Pilot Projects (BioDEVII, National VIS Pilot) Technical Guideline Biometrics (TR-03121) Seite: 2

3 Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation) Council Decision 2008/633/JHA of 23 June 2008 concerning access for consultation of the Visa Information System (VIS) by designated authorities of Member States and by Europol for the purposes of the prevention, detection and investigation of terrorist offences and of other serious criminal offences European Visa Informationsystem (VIS) Goal: Visa Application Check Against illegal migration & Visa-Shopping Against terrorism and organised crime New for Germany (and most EU MS): usage of fingerprints VIS start of operations: 11.October 2011 (current schedule) Seite: 3

4 The German VISA Workflow with VIS Federal Foreign Office Visa Application EU VIS Border Police Border Control Territory Control Border Visa Federal Office of Administration (BVA) ABHn BAMF Police Secr. Service Search ID Check Extension Shortening etc. Seite: 4

5 Agenda EU Visa Information System (VIS) Experiences from Pilot Projects (BioDEVII, National VIS Pilot) Technical Guideline Biometrics (TR-03121) Seite: 5

6 BioDEVII ( ): European Pilot Project (8 participating member states) Enrolment, Verification and Identification with focus on fingerprints Organizational consequences for consulates and border posts Interoperability & compliance with international standards Main Experiences in the field of fingerprint enrolment / quality of biometrics Pilot Projects Customers BVA = Mini VIS AFIS Hosting AFIS Dactyloscopic Service Evaluation, Statistics Specification Biometric Software Solutions Seite: 6

7 Pilot Projects National VIS Border Pilot ( ): Implementation and simulation of biometric border checks in the VIS context Improvement of software implementation Analysis of organisational requirements (process, time constraints, placement of scanner, cleaning of devices etc.) Simulation of identity frauds, fake finger attacks Cooperative project with German Border Police (BPol) Federal Office of Administration (BVA) Federal Office for Information Security (BSI) Secunet (Contractor) Seite: 7

8 Biometric Enrolment Seite: 8

9 Fingerprints Capturing in Consular Post Here: Ulan Bator, Mongolia Seite: 9

10 Enrolment Solution Phase 1 Pragmatic Enrolment approach Easy to use client Quality Control with NFIQ Good: 1, 2, 3 Bad: 4, 5 Operator tries to capture best fingerprints Training by Federal Foreign Office and Federal Office of Administration Few Acquisition Guides, Training Material Seite: 10

11 Conclusion Phase 1 BioDEVII Phase 1: ~ fingerprints 2 German consular posts Quality assessment: EU / Morpho Softwarekit USK 4. Rejection Rate: ~ 75% do NOT match minimum requirement for VIS Damascus ~ 69% Ulan Bator ~ 82% BioDEVII Phase 2: Improvement of software Improvement of workflow Usage of Enhancers Improved Training material Seite: 11

12 Rejection rate Rejection Rate Phase 2 Sagem Kit4 rejection rate 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% Damascus Ulan Bator Phase 1 69% 82% Phase 2 25% 43% Phase 1 Phase 2 Significant decrease of Kit4 rejection rate in Phase 2 (up to one third) Seite: 12

13 Rejection rate Rejection Rate after lowering Central Threshold at EU level Sagem Kit4 (New Central) rejection rate 18% 16% 14% 12% 10% 8% 6% 4% 2% 0% Damascus Ulan Bator Phase 1 16% 15% Phase 2 3% 3% Phase 1 Phase 2 Much lower rejection rate for new Central Kit4 Seite: 13

14 Time to enrol (sec.) Resulting Enrolment Duration Development of the average time to enrol Damascus Ulan Bator 50 0 Oct 07 Dec 07 Feb 08 Apr 08 Jun 08 Aug 08 Oct 08 Dec 08 Feb 09 Apr 09 Jun 09 Aug 09 Month Seite: 14

15 Final German Solution Time Optimised Workflow Capturing all images in a row (3 / slap) Quality Control in the background, allowing parallelization of processes Cross matching with NIST Bozorth selects best fingerprint image (like epass) Uniqueness check Only Open Source Software Rejection Rate: still around 3% (good!) Duration reduced: Pure capture process: between 60 and 90 seconds for most cases (no re-capturing) minimum 15 sec of instructions (up to 60) Seite: 15

16 Data Quality Dactyloscopic Service Seite: 16

17 Dactyloscopic Service in BioDEVII Consulates Federal Office of Administration Border AFIS Seite: 17

18 Experiences BioDEVII 2 Persons in 1 ANSI/NIST file False Acceptance Ghost Images Bad Quality Seite: 18

19 Experiences BioDEVII Border: 2nd line Use Case: Identification No HIT Reason: Bad Quality Occurence: ~ 3% Consulates and Border Use Case: AFIS result questionable Reason: Incorrect Data (Ghost images etc.) Occurence: ~ 3% Seite: 19

20 Consulates and Border Use Case: Reason: Occurence: ~ 0.1% AFIS finds wrong people (False Acceptance) Bad Quality, Size of database Solution in BioDEVII: Support of dactyloscopic operator, distincting between technical and business incidents, being able to manually Verify the automated AFIS result. Open Issue: No Dactyloscopic Service for the EU VIS! Seite: 20

21 Border Control Seite: 21

22 Border BioDEVII Pilot (until March 2010) 1. position 2. position Verification 1st position here: Airport Tegel, Berlin If necessary, Identification und Usage of Dactyloscopic Service (2nd position) Seite: 22

23 Border Issues Implementation Hardware Stationed Devices (Airpotrt, Seaport) Mobile Devices Mobile border crossing ground Quick territory check Parameters: speed, size, security, price Software Border check 1st / primary More intensive Border check 2nd / secondary Visa Issuing ( Ausnahmesichtvermerke ) Mobile, territory check Parameters: speed, usuability, size of device, price Seite: 23

24 Border Issues Placement of devices (variants) Biometric border post 1st position / primary Berlin-Tegel: 2 border posts with provisional, temporary installation Lscan100 Berlin Schönefeld: 1 border post with cut-out for Lscan100 fix installation AFZ Heimerzheim: supporting plate Seite: 24

25 Sekunden Border Issues Time Additional time needed 1st position / primary Provided measurement: Starting after having found the visasticker in the passport, End: result received Searching the visasticker in passport will add another 10 seconds (estimated) Zeitbedarf 1. Grenzkontrolllinie Zeitbedarf Einzelfingersensor Zeitbedarf 4-Finger-Sensor Aufnahme der Fingerabdrücke 6,3 15 Kompletter Visa- Grenzkontrollprozess ,9 36,1 Seite: 25

26 Agenda EU Visa Information System (VIS) Experiences from Pilot Projects (BioDEVII, National VIS Pilot) Technical Guideline Biometrics (TR-03121) Seite: 26

27 VISA Enrolment profile: fingerprint process reuirements Based on composite records Several QA mechanisms possible Proposed QA is a 3-way cross matching of fingerprints re-capture of single fingers possible, if necessary Seite: 27

28 VISA Enrolment profile: Logging The guideline provides information on the coding of the biometric data itself plus additional data Data to collect (Function Module Logging) Quality values, HW/SW information, timing information, errors, demographic data Only Logging data provides information Analyse failures, increase of the rejection rate etc. Discover possible optimisations Monitoring system performance in quality and time Seite: 28

29 Technical Guideline Biometrics for Public Sector Applications Visit the Homepage of the Federal Office for Information Security Bundesamt für Sicherheit in der Informationstechnik - BSI TR Biometrics: TR (Version 2.2) German Identity Card & German Electronic Passport Verification epassport & Identity Card w. facial biometrics Application for Biometric Visa Basic and Extended Identity Check Biometric Visa Seite: 29

30 Thank you for your attention! Federal Office of Administration (BVA) Fares Rahmun Michael Mengel Federal Office for Information Security (BSI) Markus Nuppeney Oliver Bausinger Seite: 30