A thank you to our sponsors and ... - Biometrics Institute...the global biometrics industry including users, suppliers, academics, regulators and privacy advocates ... “What does

© Biometrics Institute 2018 www.biometricsinstitute.org 1

A thank you to our sponsors and exhibitors

Gold Sponsor

Silver Sponsors Exhibitors

Platinum Sponsor


About the Biometrics Institute

Independent and impartial international membership organisation

Multi-stakeholder community of over 240 organisations, 30 countries,

1,000 individuals

Mission: Promote the responsible and ethical use of biometrics

Connects, informs, guides and leads through good-practices


Biometrics Institute Members & Key Stakeholders

Users:

• US Department of Homeland Security

• Facebook – USA

• Mastercard – UK

• The Royal Bank of Scotland Group – UK

• Defence Australia

• Federal Bureau of Investigation (FBI) – USA

• Canada Immigration

• Sberbank (Russia)

• UK Home Office

• British Airways

• Ministry for Immigration and Integration (Denmark)

• Dutch Ministry of the Interior

• Danish Prison and Probation Service

• Roads and Maritime Services Australia

• Federal Ministry for Information Security (BSI), Germany

• Lufthansa

• Department of Immigration and Border Protection Australia

• Immigration New Zealand

• Visa – UK

• Prime Minister's Office – Israel

• Rabobank (Netherlands)

Suppliers:

• Gemalto

• IDEMIA

• Leidos

• secunet Security Networks AG – Germany

• Griaule Biometrics – Brazil

• Aware, Inc.

• Cognitec Systems GmbH

• Biomatica, Mexico

• Unisys

• Worldreach

• SITA

• Yitu

Academia:

• Universidad Carlos III Madrid – Spain

• Cornell University (USA)

• University of Cambridge - Simprints (UK)

• University of NSW (Australia)

• Center on Privacy & Technology - Georgetown University Law Center (USA)

Agreements of Collaboration:

• United Nations Counter-Terrorism Executive Directorate (UNCTED)

• International Organization for Migration (IOM)

Over 248 member

organisations from

30 countries

Membership Breakdown

User

Members

Supplier

Members

University &

Research

Subscribers

Board of the Biometrics Institute

Juergen Pampus, Director,

Biometrics Institute.

Co-founder and VP Sales

& Marketing, Cognitec

Systems - Germany

Isabelle Moeller, Chief Executive

Laura Compton, Chief Operating Officer

Nicky Tivnen, Member Services Manager, Europe & USA

Michelle Whitfeld, Business Development Manager, Europe & USA

Emilia Bromiley, Member & Events Coordinator, Europe & USA (7 January)

Carolyn Allen, Project & Communication Coordinator

Alex Petersen, Manager, ANZ

Christine Rogers, Operations Manager, ANZ

Biometrics Institute Team (Management & Secretariat)

User

Supplier

Andrew Rice, Chairman &

Director, Biometrics

Institute.

Assistant Secretary

Identity Security Branch,

Department of Home

Affairs - AustraliaUser

Glen Wimbury, Director,


He is working with HMRC –UK

Brett Feldon, Director,


General Manager,

Speech, Probe –Australia

Supplier

George Rodrigues, Director,


Manager Identity Services,

Compliance Risk &

Intelligence Services Group,

Immigration New Zealand

User

Andy Foote, Deputy

Chairman & Director,


Vice President

Innovation Group, Wells

Fargo’s Innovation Group – USA

User

Richard Agostinelli,


Institute.

CEO, Crossmatch - USA

Supplier

Hans de Moel, Director,

Biometrics Institute

Hans is working for the

Royal Netherlands

Marechaussee (KMar),

part of the Dutch Ministry

of Defence

User


Biometrics Institute Expert & Sector Groups

Privacy & Policy Expert Group (PEG)

Security & Integrity Expert Group (BSIEG)

Digital Identity Expert Group (DIGI)

Technology Innovation Expert Group (TIEG)

CONTENT EXPERT GROUPS

Role:

Guidance and correlation of information to members

Advisory CouncilFormer Office Holders, Heads of Groups and

any others by invitation of the Board

Academic, Research & Innovation Group (ARIG)

SECTOR USER GROUPS

Borders & Major Travel Programmes Group (BUG)

Law enforcement (in formation)

Social Impact (in discussion)



Connector

To act as a connector for

the global biometrics

industry including users,

suppliers, academics,

regulators and privacy advocates

Knowledge Transfer

To facilitate knowledge-transfer

to members, prospects,

key stakeholders and the public

Thought-leadership

To develop thought-leadership

for the responsible use of

biometrics, using the input

of experts

The mission of the Biometrics Institute is

to promote the responsible (and ethical) use of biometrics

as an independent and impartial international forum for

biometric users and other interested parties.

Biometrics Institute Members:

Global multi-stakeholder community

To be the independent globally trusted voice for the biometrics community


Biometrics Institute Achievements 2017-18

Thought-leadership and Good-practice Guidance

We were the penholder in the production of the ‘United Nations Compendium of

Recommended Practices for the Responsible Use and Sharing of Biometrics in Counter-

Terrorism’.

We released the ‘Understanding Biometrics’ implementation guide to members.

We produced the ‘Academic Research & Innovation Expert Group Reading List’ and the “How to address biometric vulnerabilities – a baseline assessment guide”.

Converted the Trust Mark Project into a Privacy Impact Assessment (PIA) Model Template

which was presented to members at workshops in Sydney and London.

Grown the Institute’s brand and mission through awareness campaigns (blogs, press releases).

Grown the role of Expert and Sector Groups to harness their ability to contribute to the

development of guiding material for members.

Two papers awaiting final approval: “What does liveness really mean” and “How to read face

recognition test results in surveillance applications”.

Draft “Ethical Principles for Biometrics” under internal review.


Knowledge transfer: information & education

We organised educational Workshops, Training Courses and webinars around the globe.

We ran a GDPR seminar in Brussels in April 2018 attended by over 50 members.

Due to the popularity of this topic, we then organised a Virtual Meeting: In Conversation with

the PEG on GDPR and Biometrics which was oversubscribed (60 listeners).

We delivered on Good-practices for Biometrics to the Organization for Security and Co-

operation in Europe (OSCE) members in Vienna in November 2018.

We held a Virtual Meeting: Good-practices for Biometrics for 160 IOM (UN Migration Agency)

mission representatives from 38 countries.

We delivered a Privacy Impact Assessment (PIA) Model Template workshop in Sydney

and London.

We issues regular Tweets, Blog and press releases with updates on industry and Institute

developments.

UN CTED meeting NYC June 2017



Connector role

We signed a Memorandum of Understanding with the UN Migration Agency (IOM) to promote

the responsible use of biometrics in response to challenges around security, safe transport for

migrants and refugees and international cross border mobility.

We signed an Arrangement on Cooperation with United Nations Counter-Terrorism Executive

Directorate (CTED) to work together to promote the responsible use, storing and sharing of

biometric data in countering-terrorism.

We participated in several external conferences such as the KNOW conference in DC in March

2018, an Identity event in Paris in September 2018 and the Data Protection Summit in Brussels in

October 2018.

We continue working towards closer collaboration with international organisations such as ICAO

Trip, IOM, Interpol, ISO, UNDP, UNCTED and UNHCR currently exploring an Observer status to

formalise those relationships.

We organised an extensive programme of events including training courses, networking meetings

and conferences around the world. The Biometrics Congress in London attracted over 250

attendees.

We presented an Introduction to the Biometrics Institute to the United Nations Security Council

in New York City in June 2018.



The current environment …


A focus on security and convenience ….


And some challenges ….


61%

39%

34%

32%

27%

26%

24%

23%

22%

21%

21%

21%

16%

11%

8%

7%

7%

3%

1%

Privacy/data protection concerns

Poor knowledge of biometrics amongst decision makers

Data sharing concerns

Misinformation about biometrics

Opposition from privacy advocates

Concerns over spoofing

Legislation

Public resistance

Lack of interoperability

Concerns over reliablity

Cost

Lack of standards

Implementation Issues

Opposition from government/politicians

Long Implementation Cycle

Government secrecy

Lack of funding for research

Other

None/no restraints

Which of these factors do you think restrain the market for biometrics to the

greatest extent? Please select up to four factors

BASE: all respondents (279)

52%

57%

60%

2016 2017 2018

% believing Privacy/Data Protection concerns

restrain the market for Biometrics


Microsoft President says 2024 could become 1984 without biometrics regulation (9 Nov 18)

“…technology could soon give governments the ability to track everyone everywhere, and log all actions, with “profound potential ramifications for even just the fundamental civil liberties on which democratic societies rely.”https://www.biometricupdate.com/201811/microsoft-president-says-2024-could-become-

1984-without-biometrics-regulation

Delivering digital ID

The internet was designed to enable machines to talk to other machines. It was not

designed to enable the secure identification of the person using those machines. In

the absence of a ubiquitous digital identity framework, the identification processes

used for different services on the internet have evolved independently. This has

resulted in fragmented and inconsistent solutions with variable levels of security

and usability. This is a problem and the time has come to fix it. Regulation such as

PSD2 and GDPR show that regulators recognise this. With the focus of PSD2 being

on the banking community, banks are in a unique position to take advantage of the

infrastructure they are building for compliance. This provides them with an

opportunity to reinforce their consumer relevance and open up new streams of

revenue. Banking is not the only industry that could solve this problem but they do

have high levels of consumer trust and that is a key advantage.

https://www.chyp.com/wp-content/uploads/2018/10/fs-wp-delivering-digital-

id.pdf

What kind of world do we want to live in?

Apple CEO Tim Cooke talked about ethics and you can hear his speech

here. https://www.pscp.tv/w/1vAxREQYDggJl

“Never in the history of humanity have we allowed a

machine to autonomously decide who should live and

who should die, in a fraction of a second, without real-

time supervision. We are going to cross that bridge

any time now,” the team said in its analysis.“Before we allow our cars to make ethical decisions, we need to have a global conversation to express our

preferences to the companies that will design moral

algorithms, and to the policymakers that will regulate

them.” https://thefinanser.com/2018/11/ai-good-

people-program.html/

Industry challenges….

https://www.biometricupdate.com/201811/microsoft-president-says-2024-could-become-1984-without-biometrics-regulation

https://www.chyp.com/wp-content/uploads/2018/10/fs-wp-delivering-digital-id.pdf

https://www.pscp.tv/w/1vAxREQYDggJl

https://thefinanser.com/2018/11/ai-good-people-program.html/


Why are we here….

Biometrics and Human Rights

Update on Digital ID in Australia and New Zealand

Digital ID – what’s keeping us up at night?

Fraud and Identity Crime

How to Secure personal ID?


Housekeeping

Mobile phone

Please set to silent

Questions welcome

Raise hand and wait for the microphone before speaking. Introduce yourself (name and organisation).

Speaker presentations

Will be placed on the event website after the event for attendees to access (if speakers agree)

Media

Media is NOT in attendance. Chatham House rule applies

Amenities and Emergency procedure

Twitter: #biometricsshowcase

Wifi:

Network name: DomaConference Password: @DomaHotels



Phone: +44 207 581 4827

Email: [email protected]

Web: www.biometricsinstitute.org

Connect with us

LinkedIn

@BiometricsInsti

http://www.linkedin.com/groups?gid=3689119&trk=hb_side_g


Lead

Represent

Inform

Connect

As a member …… Stay Connected• Expand your international network of contacts

• Connect with the whole industry: users,

suppliers and academics

• Share information with the industry about

best-practice and innovation

• Network at a broad range of high-quality

events

• Develop and strengthen partnerships

… Stay Informed• Biometrics Institute best-practice Privacy

Guidelines

• Biometrics Institute Vulnerability FAQ Paper

• Expert briefings and events

• Education and training

• Annual Industry Survey

• Online Resources

• E-newsletter

• Supplier Directory

• Blog with industry updates and insights

• Expert and Sector groups

… be represented by the Institute• We are independent, impartial and international

• Professional work ethics and high-quality

administration

• We provide the independent collective voice that

is shaping the industry

• Align your organisation to a strong brand with

more than 15 years of industry experience

… Lead the debate with us • Promote priority themes and key messages

• Provide a platform for dialogue to shape the

debate on the responsible use of biometrics

Conferences

Board and Expert Groups

Biometrics Institute Blog www.biometricsinstitute.org



Independent and impartial international membership organisation

Multi-stakeholder community of over 240 organisations, 30 countries,

1,000 individuals

Mission: Promote the responsible and ethical use of biometrics

Connects, informs, guides and leads through good-practices


Biometrics Institute Members & Key Stakeholders

Users:

• US Department of Homeland Security

• Facebook – USA

• Mastercard – UK

• The Royal Bank of Scotland Group – UK

• Defence Australia

• Federal Bureau of Investigation (FBI) – USA

• Canada Immigration

• Sberbank (Russia)

• UK Home Office

• British Airways

• Ministry for Immigration and Integration (Denmark)

• Dutch Ministry of the Interior

• Danish Prison and Probation Service

• Roads and Maritime Services Australia

• Federal Ministry for Information Security (BSI), Germany

• Lufthansa

• Department of Immigration and Border Protection Australia

• Immigration New Zealand

• Visa – UK

• Prime Minister's Office – Israel

• Rabobank (Netherlands)

Suppliers:

• Gemalto

• IDEMIA

• Leidos

• secunet Security Networks AG – Germany

• Griaule Biometrics – Brazil

• Aware, Inc.

• Cognitec Systems GmbH

• Biomatica, Mexico

• Unisys

• Worldreach

• SITA

• Yitu

Academia:

• Universidad Carlos III Madrid – Spain

• Cornell University (USA)

• University of Cambridge - Simprints (UK)

• University of NSW (Australia)

• Center on Privacy & Technology - Georgetown University Law Center (USA)

Agreements of Collaboration:

• United Nations Counter-Terrorism Executive Directorate (UNCTED)

• International Organization for Migration (IOM)

Over 248 member

organisations from

30 countries

Membership Breakdown

User

Members

Supplier

Members

University &

Research

Subscribers

Board of the Biometrics Institute

Juergen Pampus, Director,


Co-founder and VP Sales

& Marketing, Cognitec

Systems - Germany

Isabelle Moeller, Chief Executive

Laura Compton, COO (5 November)

Nicky Tivnen, Member Services Manager, Europe & USA

Michelle Whitfeld, Business Development Manager, Europe & USA

Emilia Bromiley, Member & Events Coordinator, Europe & USA (7 January)

Carolyn Allen, Project & Communication Coordinator

Alex Petersen, Manager, ANZ

Christine Rogers, Operations Manager, ANZ

Biometrics Institute Team (Management & Secretariat)

User

Supplier

Andrew Rice, Chairman &


Institute.

Assistant Secretary

Identity Security Branch,

Department of Home

Affairs - AustraliaUser

Glen Wimbury, Director,


He is working with HMRC –UK

Brett Feldon, Director,


General Manager,

Speech, Probe –Australia

Supplier

George Rodrigues, Director,


Manager Identity Services,

Compliance Risk &

Intelligence Services Group,

Immigration New Zealand

User

Andy Foote, Deputy

Chairman & Director,


Vice President

Innovation Group, Wells

Fargo’s Innovation Group – USA

User

Adam Hergert, Director,


Head of Information

Security Strategy &

Architecture at ANZ Bank -

Australia

Richard Agostinelli,


Institute.

CEO, Crossmatch - USA

UserSupplier

Hans de Moel, Director,


Hans is working for the

Royal Netherlands

Marechaussee (KMar),

part of the Dutch Ministry

of Defence

User


Biometrics Institute Expert & Sector Groups

Privacy & Policy Expert Group (PEG)

Security & Integrity Expert Group (BSIEG)

Digital Identity Expert Group (DIGI)

Technology Innovation Expert Group (TIEG)

CONTENT EXPERT GROUPS

Role:

Guidance and correlation of information to members

Advisory CouncilFormer Office Holders, Heads of Groups and

any others by invitation of the Board

Academic, Research & Innovation Group (ARIG)

SECTOR USER GROUPS

Borders & Major Travel Programmes Group (BUG)

Law enforcement (in formation)

Social Impact (in discussion)


Biometrics Institute Expert & Sector Group Members

Patrick Grother, National Institute of Standards and Technology (NIST)

Tsutomu Matsumoto, Yokohama National University, Japan

Stephanie Schuckers, CiTRE, USA

Alastair Treharne, Government Digital Services, Cabinet Office UK

Raoul Cooper, British Airways

Susan Thompson, Mastercard UK

Chris Allgrove, National Cyber Security Centre, UK

George Afarian, Australian Taxation Office

Jez Goldstone, Barclays, UK

Riekele Bijleveld, Rabobank

Brendan Crean, UK Home Office

Marvin Sim, ICA Singapore

Fares Rahmun, German Federal Office of Administration

Kenneth D. Gantt, DHS Office of Biometric Identity Management (OBIM)

Alf Erik Svensbraaten, The Norwegian Directorate of Immigration (UDI, Norway)

Senta Jehle, Immigration New Zealand

Sandra Leaton-Gray, University College London UCL Institute of Education, UK

Pam Dixon, World Privacy Forum, USA

Daniel Bachenheimer, Accenture, USA

Norberto Andrade, Facebook, USA

Naama Ben-Zvi Rivales, Dept of Prime Minister’s Office Israel


Biometrics Institute Privacy Guidelines

• First comprehensive, universal Privacy Guidelines for biometrics

• Input from many different sectors

• It includes 16 Principles such as

• Proportionality

• Informed consent

• Protection of Biometrics Data Collected

• Purpose

• Sharing of biometric data

• It is updated every two years


Addresses the Security Council’s Resolution 2322

(December 2016) and 2396 (December 2017

Initiative of the UN Counter-Terrorism Implementation

Task Force (CTITF),

Released 29 June 2018

Practical guidance tool to help address developments

in biometrics in the context of counter-terrorism.

Compendium of Good and Recommended Practices on the

Responsible Use and Sharing of Biometrics in Identifying Terrorists

http://unscr.com/en/resolutions/doc/2322

http://unscr.com/en/resolutions/doc/2396

https://www.un.org/sc/ctc/wp-content/uploads/2018/06/Compendium-biometrics-final-version-LATEST_18_JUNE_2018_optimized.pdf


Biometrics Vulnerability Information

Top 10 Vulnerability Questions

Addresses frequently asked questions about biometric vulnerabilities such as:

1. Can my biometric be stolen / compromised?

2. How hard is it to steal a biometric?

3. What if my biometric gets stolen/ compromised?

4. Are biometrics a good alternative to passwords?

Biometrics Vulnerability Checklist

This list has been prepared by the Biometrics Institute Vulnerability Expert Group to help guide

members in addressing vulnerability assessments in biometrics. It addresses questions such as:

What are the common vulnerabilities for your technology (including biometrics)?

Do you have a risk management plan, and does it include the potential for biometric vulnerability?

How to address biometric vulnerabilities – a baseline assessment guide

A full assessment of biometric vulnerability, as with any security penetration assessment, is a

detailed process that best undertaken by an experienced practitioner. A baseline assessment of

vulnerability can be undertaken by leveraging existing security testing personnel. To assist in

this process this simple guide for a baseline assessment has been developed.


Considerations for Implementing a Biometric System

Simple, accessible and usable resource when considering the use and appropriateness of a biometric system, particularly for first time users.

Contents

1. Summary—what this guide covers; biometrics as a specialist subject; broader user and business perspectives; the Biometrics Institute.

2. Business case—why use biometrics? How? Scope of the system? Intended benefits?

3. Privacy and security—why these factors are critical with a biometric system; Biometrics Institute guidelines on privacy; other obligations.

4. Modality and quality—what type of biometric? What are the options and reasons for decisions on which to choose?

5. Business model—the holistic understanding of how will the solution operate—who does what? How does the proposed system work with the rest of the organisation and its information technology?

6. Testing—how do you know your system is fit for purpose? Biometric accuracy? Performance? Can the system detect presentation attacks?

7. Requirements definition—defining the specification you will need to confirm what is required, and build, test and operate the system, whether procured through an external contract or with an in-house team. This section provides some assistance in evaluating the complexity that may be involved in your proposed solution.

8. Conclusion

9. Annex—glossary; references and standards

“Understanding Biometrics” Reference Guide

“Very good initiative. I'm sure this will be helpful to many that are considering to implement biometrics!”

Documents

A thank you to our sponsors and ... - Biometrics Institute...the global biometrics industry including users, suppliers, academics, regulators and privacy advocates ... “What does