M Breedt and MS Olivier, "Using a Central Data Repository for Biometric Authentication in Passport systems," in Proceedings of the Fourth Annual Information Security South Africa Conference (ISSA2004), Midrand, South Africa, June/July 2004 (Published electronically)
Passports and visas are currently undergoing a rapid change due to legislation being passed by authorities such as the US requirement that they should have machine readable biometrics embedded within them. What the governments are trying to accomplish is to positively link individuals to these identity documents. But if an impostor is capable of forging a passport, complete with embedded biometric, the document could still pass the biometric authentication step. To prevent the system from being compromised in this manner, a central repository of biometric templates could be incorporated. Then the system could compare its 'live' biometric reading with the remote repository, rather than relying solely on the authenticity of the biometric embedded within the identity document.
Using a central repository raises certain questions. Firstly, how will the system know which repository to query? How can the system be sure the passport is not fraudulent and referring queries to a fake repository? How will the repository know it is communicating with a valid port system and not just wasting time with fraudulent queries performing a denial of service attack?
This paper proposes a model for the construction of a passport system that employs a set of national repositories for biometric identification that addresses these issues.
Biometric, Passport, PKI
@INPROCEEDINGS(biopass,
AUTHOR={Morn\'e Breedt and Martin S Olivier},
TITLE={Using a central data repository for biometric authentication
in passport systems},
BOOKTITLE={Proceedings of the Fourth Annual Information Security South Africa
Conference (ISSA2004)},
ADDRESS={Midrand, South Africa},
MONTH={June/July},
YEAR={2004},
NOTE={Published electronically} )
The full text may be downloaded from http://mo.co.za/open/biopass.pdf (PDF, 61K).
[Publications]
[Home]
Page maintained by
Martin Olivier
Last update: 25 August 2004