Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Antonio DAlbore
Editor-In-Chief
Embedded Security News
A BSoC shall never transfer any biometric sample and biometric reference data to any external terminal.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 4
Milan - Italy
Template-On-Card (TOC)
Enrolment Matching
Fingerprint Fingerprint
Acquisition Acquisition
Potential
Template Stored in Man-in-the-Middle
Secure Element Attach
Fingerprint Fingerprint
Acquisition Acquisition
Template Biometric
Creation Terminal
Potential Potential
Man-in-the-Middle Man-in-the-Middle
Attach Attach
Transfer to Transfer to
Smart Card Smart Card
Fingerprint Fingerprint
acquisition acquisition
In-Card In-Card
template template
creation creation
Authenticate
Reference
template
Measurement
Extract
Query
Template Adaptive
Pre- Feature Template Compare
Capture Score
Processing Extraction Creation Matching
decision
Enrolment
Authentication
Inlay
Micro module
Fingerprint sensor
Sensor Bezel
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 11
Milan - Italy
Anatomy of a BSC: Card Body
Card body
Construction
Moulded
card body - Ok for prototyping / small volumes
- Can be manual labour intensive
Cold Lamination - Popular in Taiwan / South Korea
Non-Moulded - Not necessarily cheaper than HL
card body
Antenna
Buzzer
SE Contacts Pad
Power Button
MCU / ASIC
FPS Contacts Pad
RF IC
Flexible PCB Inlay size is 1 2 mm (0.04 - 0.07 in) smaller than card W / H Secure Flash
Some BSC Integrators deliver inlays with FPS already embedded
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 13
Milan - Italy
Anatomy of a BSC: Operative Strategies
Card body Power is supplied to SE only after successful fingerprint
Construction verification. No successful verification = no ATR.
IC Power Supply
Card body The terminal check APP status. Default APP state = Disabled.
Construction After successful fingerprint verification APP state = Enabled.
APP Status
No Battery
With Non Rechargeable Battery +
Chip Contact
Cavities punched out from Most popular method for Chip and FPS sensor cavity
Very precise
PVC sheet cavity making are created during injection
Operation performed after Require modification to chip Color change issue with PVC
Smooth and clean cavity
sheet printing cavity milling equipment / PETG
Swipe
Sensors Easy bonding to FPCB Problematic torsion/bending test
Area
Sensors Flexible are ideal for smart cards
Must be flexible enough to comply with dynamic torsional stress of ISO/IEC 10373-1
*
For bezel not embedded into sensor design
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 21
Milan - Italy
Anatomy of a BSC: Cross Section
Gap between card front surface and sensor active
surface:
Bezel should not
Reduce FPS wear & tear
extend over card
Avoid contact with plate during lamination*
surface to avoid
scratches
LED
Buzzer
Flexible LCD / e-paper
Ensure compliance with ISO/IEC 17839-1:2014 - Biometric System-on-Card --
Part 1: Core requirements
NFC
Bluetooth
Atmel 5577
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 26
Milan - Italy
Anatomy of a Fingerprint Card: Making of FPCB
FPCB SMD / COF Prelam / Packaging
Marking
*
Inlays Packing
*Flexible PCB often made of polyimide
Delivery also possible as prelam Sheets
Anisotropic
Micromodule Micromodule
Cards Gathering FPS Cavity Milling conductive epoxy
Cavity Milling Embedding
on contact pads
Retransfer
Sensor bezel / card thickness can potentially create interference / jam in personalization equipment
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 29
Milan - Italy
Fingerprint Cards Value Chain
Delivery
MCU / RF ICs
Sensor Sensor Inlays / Prelams
Supplier
Manufacturer Designer
Sensors
Inlay
Manufacturer APIs
BIOMETRIC CARD
Card
SOLUTION Dev. Tools Manufacturer
ASIC ASIC PROVIDER
Foundry Designer Test Tools
Biometric Enrolment SW
Engine Designer
IPs IP Licenses
The Biometric Card Solution Provider can design Biometric Engine, ASIC and Inlay in house.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 30
Milan - Italy
2014 2015 2017 2017
Key Trials / Pilots Sparebanken DIN
Norway
Danske Bank
Denmark
AirPlus
Germany
Bulbank Bank
Bulgaria
Zwipe + MasterCard Zwipe + MasterCard Kona I + FPC OT-Morpho + MasterCard
2016
Bundesdruckerei
Germany 2017
Woori Bank
South Korea
2017 Korea Smart ID
Pleinair Casino
France
MeReal Biometrics 2017
Instanbul Municipality
Applications Turkey
Korea Smart ID
Online
Authentication
2017
Access Control Absa Bank
South Africa
OT-Morpho + MasterCard
Payment 2015 2017
2017
United Nations Battistolli Pick n Pay
Switzerland Italy South Africa
Identification Card-Tech + Ingenico OT-Morpho + MasterCard
KSID + Elan + Jinco
CardLab
Card Tech
Datang Microelectronics
Jinco Universal
MeReal Biometrics
Morix
Tactilis
Zwipe
Idemia
Ongoing First among top card Not aware of any So far, KSID is the
Industrialization in vendors to have development company with the
France & Germany completed Could continue largest quantity of
R&D / plants industrialization development of Biometric Cards
Marketing activity BSC in production Bundesdruckerei produced
started Leverage Morpho GoID! fibre Key Customers:
Expected Launch expertise in composite card if UN
Q1/2018 biometric migrated to Veridos Instanbul
Active joint portfolio Municipality
promotion with Woori Bank
MasterCard
In-house inlay
production, no OEM
sell
Current solution with
non-rechargeable
battery
300
250
Million of cards
200
100
90
18
0
2017 2018 2019 2020
Source: ABI Research, Fingerprint Cards, Gartner, HIS, Nilson Report, Precise Biometrics, Statista, Carnegie Research, Strategy Analytics, Swedbank, Antonio DAlbore estimates.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 42
Milan - Italy
Global BSC ASP Forecast Y2017-2020 (K pieces)
$20
$18
$16
$14
$12 Clamshell BSC
$10
$8
Battery BSC
$6 No battery BSC
$4
$2
$-
2017 2018 2019 2020
Details at https://www.iso.org/committee/45144.html
Contact interface as specified in ISO/IEC 7816-3 Width / height as an ISO/IEC 7810 card
USB interface as specified in ISO/IEC 7816-12 Need not conform to ISO/IEC 7816-1 flexibility
Contactless interface as specified in ISO/IEC 14443 Supports only ISO/IEC 14443 contactless interface
Regardless of S1 or S2, a BSC must have some form of feedback mechanism such as LCD display, LED or buzzer
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 45
Milan - Italy
Normative References
ISO/IEC 17839-1:2014 - Biometric System-on-Card
Part 1: Core requirements
Allows fingerprint sensor, voice microphone, camera for facial image, signature input pad
Visa, MasterCard and Amex have updated their Payment Applet specs
allowing Fingerprint Verification to be used as PIN alternative.
ICAO Doc 9303 Part 9: Deployment of Biometric Identification and Electronic Storage
of Data in eMRTDs
ICAO Doc 9303 Part 10: Logical Data Structure (LDS) for Storage of Biometrics and
Other Data in the Contactless Integrated Circuit (IC)
LEGAL HEALTH
Compliant with most regional / national legal Risk of infection transmission with standalone
frameworks demanding biometric data not to be Fingerprint scanner (rotavirus, norovirus, hepatitis
stored in public DB. A virus, respiratory syncytial virus, rhinovirus,
EU GDPR effective May 2018 prohibits processing influenza virus, Shigella dysenteriae,
of Biometric Data Enterohemorrhagic Escherichia coli, etc.)
Antonio DAlbore
Editor-in-Chief
Embedded Security News
antonio.dalbore@embeddedsecuritynews.com
+39 392 5198737
@AndongESN
@embedded.sec.news
embeddedsecuritynews.com
56
References
- http://coe.int/en/web/conventions/full-list/-/conventions/treaty/005
- http://dhl.it/en/express/shipping/shipping_advice/lithium_batteries.html
- http://dmt.com.cn/product/aqkz/zwsb/529.html
- http://ec.europa.eu/justice/policies/privacy/docs/95-46-ce/dir1995-46_part1_en.pdf
- https://en.wikipedia.org/wiki/Biometrics
- https://en.wikipedia.org/wiki/Data_Protection_Directive
- https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
- https://en.wikipedia.org/wiki/Fingerprint_recognition
- https://en.wikipedia.org/wiki/Personally_identifiable_information
- https://en.wikipedia.org/wiki/Supercapacitor
- http://fingertec.com/download/tips/whitepaper-01.pdf
- http://www.gemalto.com/govt/biometrics/biometric-data
- http://heritage.org/homeland-security/report/biometric-technologies-security-legal-and-policy-implications
- http://horizon2020projects.com/special-reports/technical-information-card-fraud-identity-theft-protection-
technologies/
- http://iata.org/whatwedo/cargo/dgr/Pages/lithium-batteries.aspx
- https://www.icao.int/Meetings/a38/Documents/WP/wp094_en.pdf
- https://www.icao.int/publications/pages/publication.aspx?docnum=9303