Singapore's Automated Clearance using Biometrics

Transcription

1 Singapore's Automated Clearance using Biometrics Dr. Yau Wei Yun 1 & Ms. Koh Ting Ting 2 Institute for Infocomm Research, Singapore 1 Ministry of Home Affairs 2 Biometric Passports Meant for better border control & counter-terrorism. But need to consider. Cost -> affordable by majority. Usefulness -> widely accepted, multi-application. Convenience -> speed, privacy protection. Security -> impersonation, illegal migration, attack etc. 1

2 Vision: Seamless Travel Internet Experience: Acquire visa online. Integration with airlines, Boarding Pass and immigration clearances. Downstream integration as a tourist card with e-booking, e-voucher, hotels, car rental, entry to attractions, electronic payments etc. Promote travel Green Lanes Several countries contemplating trials using SPT concept termed Green Lane (VIP Gate). Evaluate user acceptance of providing biometrics in exchange for speedier clearance. Voluntary biometric passport add-ons. Legally simple. Winning public support. Auto-graduation to e-passport. Green Lanes : Minneapolis/St Paul International Airport (USA) Heathrow, Gatwick, Stansted, Manchester, Birmingham (UK) Charles de Gaulle, Orly Airports (France) Fraport (Frankfurt, Germany) Umea Airport (Sweden) Shipol Airport/Privium(Netherlands) Narita (Japan) + Incheon (Korea) e-airport 2

3 Singapore: Smart VIP Merger of physical people security & border control with virtual electronic security. Treated as supplementary e-document, considering: smart airport, airline boarding pass, airline security. health emergencies. electronic citizen identification, regional identification. Biometric passport, immigration and electronic VISA. cost and implementation, value-added activities. high security and privacy. Singapore: VIP-Gate An application for Smart VIP in Singapore Changi Airport launching a VIP-Gate trial in Departure Hall, Terminal 2 Target launch date is 1 Oct 2004 Facial recognition and Fingerprinting authentication One-to-one local matching Considering on-card fingerprint matching One-time pre-enrolment is necessary A dedicated lane for passengers for immigration clearance About 9000 SVIP cards will be issued in the trial FOC for trial participants, to be issued by Immigration & Checkpoints Authority (ICA) of Singapore. 3

4 VIP-Gate VIP-Gate Enrolment Trial participants to do one-time enrolment at ICA Access Card Center in Changi Airport where thumbprint and facial features are captured + other info. Enrolment is expected to take minutes Participants issued with Smart VIP card after enrolment is completed 4

5 VIPGate-Facial Recognition & Fingerprint Verification 1 st Gate always open Passenger Step 1: 1 st Gate will close upon detection of contactless card (Contactless card and finger print reader) Step 2: The gate will perform the card authentication. Step 5: The 2 nd Gate will open to let the passenger through. Step 4: When successfully authenticated, passenger can proceed to select seat and obtain the printed boarding pass. Step 3: Put his finger on reader and look into the camera. Passenger facial and finger print are captured and matched. Facial Biometrics: mandatory Issues: Compatibility with other cards: Seafarer s ID, EU card etc. Fusion with other biometrics. Evaluating live subject detector Can we add 3D facial verification (now or later)? 5

6 Current Status: Fingerprint Biometrics Working on fingerprint sensor/image capture normalisation issues, hardware compatibility issues etc. Did 3 sets of fingerprint biometric testing at Changi airport and MHA. Fingerprint Trial Fast Facts Fingerprint Verification ChangiStaff Apron Entrance 2 days, each lasts for 10 hours Total participants : 1165 More than 90% are male participants Mostly between years of age Majority are engineers, technicians, cargo handlers, cleaners from SIA company and its affiliated companies. Objectives: test ruggedness of sensor, discover bad fingers, dry and wet cases and speed, accuracy and enrolment challenges. 6

7 Fingerprint Trial Lessons Learnt Fingerprint Quality Bad fingerprint of the index fingers (we only collected index finger) Dirty hand, as they are technicians and workers from the cargo. Some have seriously damaged fingerprint. Some pressed too hard on the sensor (even after guiding them not to). Enrollment Enroll one time only; may have poor image quality not suitable for enrolment => more attempts and false rejection rate can be reduced significantly ON-CARD MATCHING Implemented on Java Card Transaction applet Coding Etc. Results Owner's Fingerprint Templates Smart Card Fingerprint Matching Firewall Requires only 500b RAM & 6Kb footprint. Achieved 2sec on Sharp s Java card (16bit) Fingerprint template Local Terminal (PC/PDA/ Handphone) Fingerprint Sensor 7

8 Interoperability Work Working on defining standards optimised for smart card strong biometrics, namely fingerprint and iris verification; i.e. on the interchange of very compressed fingerprint template via DIN V66400/ISO (about 161 bytes) and IrisKey (about 230 bytes). Presently, we are at 360 bytes Fingerprint On-Card Matching. Security Vulnerabilities Security mechanism: On-card matching to prevent eavesdropping, remote skimming of contactless card. Secure authentication Key diversification, secure messaging and anti transaction tearing to prevent substitution attack. Linking e-passport with e-visa 8

9 Conclusion Singapore desires to do a strong, meaningful and highly secure biometrics passport and yet support global interoperability. Many standard issues (including biometrics) still need to be refined for inter-operability. Singapore is doing its best to contribute. 9