130 likes | 253 Vues
Standards for Biometrics. Dr. Pushkin Kachroo. Introduction. Standards needed for interoperability At all levels of the system hardware level (using one company’s fingerprint scanner with other parts from other vendors) Application level, database level, etc. Layers. Application. Sensors.
E N D
Standards for Biometrics Dr. Pushkin Kachroo
Introduction • Standards needed for interoperability • At all levels of the system • hardware level (using one company’s fingerprint scanner with other parts from other vendors) • Application level, database level, etc.
Layers Application Sensors Feature Extractor Matcher Device driver Template format API
API • Application Programming Interface • Ongoing active work…. • Examples: • BioAPI • SVAPI • BioAPI for Java Card • BAPI
BioAPI • BioAPI: • Most popular • For any biometric • Allows applications to manage • Enrollment on client/server • Verification on client/server • Identification on client/server • Biometric signal acquisition on a client
BioAPI…contd. • …defines at the highest level • Biometric Service Provider (BSP) • Three Steps to BSP • Capture, Process, and Match • Data returned to the application: Biometric Identification Record (BIR) • Three classes of functions in the API • Enrollment, verification, and identification
BioAPI Registry • BioAPI components post information about themselves in the BioAPI Module Registry during installation • Applications can check the registry for BSPs installed and their functionalities • Device Specific parameters and status also in the registry
SVAPI • API for Speaker Verification • has merged with BioAPI
BioAPI for Java Card • Java Card: • Java Card technology provides a secure environment for applications that run on smart cards and other devices with very limited memory and processing capabilities. • Multiple applications can be deployed on a single card, and new ones can be added to it even after it has been issued to the end user. • Applications written in the Java programming language can be executed securely on cards from different vendors. • http://java.sun.com/products/javacard/ • BioAPI for Java Card: for security and maximum functionality… • Secure template matching , limiting attempts
BAPI • The Biometric Application Programming Interface (BAPI) defines a standard software protocol and application programming interface (API) for communication between software applications and biometric devices. BAPI is designed to bring standards and compatibility to the biometric hardware and software markets. • Microsoft bought it for integration • http://www.iosoftware.com/pages/Products/Biometric%20API/index.asp
Databases • For impartial evaluation of biometric systems, there is a need for large public databases. • NIST: National Institute of Standards and Technologies (http://www.nist.gov/) • Leader • Fingerprints, mugshots, voice samples • Face recognition, many universities • Speaker recognition, also academic institutions • Iris: No known large databases present
Certification • Certified products and solutions generally don’t exist yet, except finger printing. • FBI fingerprint scanners • WSQ specification for Wavelet Scalar Quantization • Common Criteria (for ISO generic security requirements)
Legislation • USA Patriot Act: Tools for strengthening law enforcement • Aviation Security using Emerging Technologies • Enhanced Border Security and Visa Reform Act • Govt. Paperwork Elimination Act • Health Insurance Portability and Accountability Act • State Level: Driver’s license related, also privacy issues with biometric data