Sei sulla pagina 1di 66

The Rise of Biometric Cards

state of the art and future challenges for card manufacturers

Antonio DAlbore
Editor-In-Chief
Embedded Security News

5-6 October 2017


Milan - Italy
Agenda
Fingerprint Consumer Acceptance Timeline Key Trials / Pilots
What is a Biometric Smart Card? Key Companies
Template-On-Card The Offer
Match-On-Card Global BSC Shipment Forecast Y2017-2020
Biometric System-on-Card Global BSC ASP Forecast Y2017-2020
Biometric Card Applications Normative References
Anatomy of a BSC Fingerprint Cards Acceptance Factors
Fingerprint Card Key Manufacturing Steps Fingerprint Cards Potential Blocking/Risk Factors
Fingerprint Card Personalization The Future
Fingerprint Cards Value Chain Q&A

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 2
Milan - Italy
Fingerprint Consumer Acceptance Timeline

1998 2000 2011 2012 2013


Siemens and Sagem launch MC Apple file Patent Apple buys Apple launch iPhone
Triodata develop 959 ID, phone with Devices and AuthenTec for 5S
phone prototype STM fingerprint Methods for $356M
with fingerprint sensor Providing Access to
sensor. Internal
Components
(US20120258773A1)

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 3
Milan - Italy
What is a Biometric Smart Card?
A Biometric Smart Card (BSC), Fingerprint Card or
Biometric System-on-Card (BSoC) is a Smart Card where:

Biometric sample capture (enrolment /


verification)
Minutiae Template extraction
Template storage
Templates matching

is performed within the card.

A BSoC shall never transfer any biometric sample and biometric reference data to any external terminal.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 4
Milan - Italy
Template-On-Card (TOC)
Enrolment Matching

Fingerprint Fingerprint
Acquisition Acquisition

Template Biometric Match


Creation Terminal Result
Potential
Man-in-the-Middle
Attach
Transfer to Transfer to
Smart Card Matching
System

Potential
Template Stored in Man-in-the-Middle
Secure Element Attach

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 5
Milan - Italy
Match-On-Card (MOC)
Enrolment Matching

Fingerprint Fingerprint
Acquisition Acquisition

Template Biometric
Creation Terminal
Potential Potential
Man-in-the-Middle Man-in-the-Middle
Attach Attach
Transfer to Transfer to
Smart Card Smart Card

Template Stored in Match


Secure Element Result

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 6
Milan - Italy
Biometric-System-on-Card (BSoC) (1/2)
Enrolment Matching

Fingerprint Fingerprint
acquisition acquisition

In-Card In-Card
template template
creation creation

Template stored in In-Card


Secure Element templates
or Secure Flash matching
Match result

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 7
Milan - Italy
Biometric-System-on-Card (BSoC) (2/2)

Authenticate

Reference
template
Measurement
Extract
Query
Template Adaptive
Pre- Feature Template Compare
Capture Score
Processing Extraction Creation Matching
decision

Enrolment
Authentication

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 8
Milan - Italy
Biometric Card Applications
Identity Verification Enabler of three-factors
Proof of life (3FA) authentication
Government Ration/Subsidy Card
Driving License
Loyalty / Membership Something I have
Secure Access CARD
Door entry
System Login
Online transaction
Online Gaming
Something I know
Online Voting PIN
Healthcare & Insurance
Government Healthcare cards
Health Insurance Cards
Financial
Something I am
Debit / Credit Cards FINGERPRINT
eCommerce
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 9
Milan - Italy
Anatomy of a Biometric Smart Card (BSC)

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 10
Milan - Italy
Anatomy of a BSC: the components
Back Side Overlay

Back Side Layer

Inlay

Front Side Layer

Front Side Overlay

Micro module

Fingerprint sensor

Sensor Bezel
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 11
Milan - Italy
Anatomy of a BSC: Card Body

- Industrys choice for mass production


Non-Moulded - Use existing production process
Hot Lamination
card body - Additional step for FPS cavity making

Card body
Construction
Moulded
card body - Ok for prototyping / small volumes
- Can be manual labour intensive
Cold Lamination - Popular in Taiwan / South Korea
Non-Moulded - Not necessarily cheaper than HL
card body

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 12
Milan - Italy
Anatomy of a BSC: The Inlay
Battery / SC Display Driver IC

Status LEDs Display

Antenna
Buzzer
SE Contacts Pad
Power Button
MCU / ASIC
FPS Contacts Pad
RF IC

Passive Components FPS Controller IC

Flexible PCB Inlay size is 1 2 mm (0.04 - 0.07 in) smaller than card W / H Secure Flash
Some BSC Integrators deliver inlays with FPS already embedded
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 13
Milan - Italy
Anatomy of a BSC: Operative Strategies
Card body Power is supplied to SE only after successful fingerprint
Construction verification. No successful verification = no ATR.
IC Power Supply

Card body The terminal check APP status. Default APP state = Disabled.
Construction After successful fingerprint verification APP state = Enabled.
APP Status

Terminal checks for a 2 ATR to occur within a predefined


Card bodyATR
ATR
number of clock cycles. If Fingerprint verification after the first
Construction
ATR fails, then the second ATR is not sent.
Double ATR

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 14
Milan - Italy
Anatomy of a BSC: Power Supply (1/2)
With Battery Without Battery

No Battery
With Non Rechargeable Battery +
Chip Contact

With Rechargeable Battery No Battery


+ +
Chip Contact Energy Harvesting

With Rechargeable Battery No Battery


+ +
Energy Harvesting Supercapacitor (SC)

In some contexts SC are considered


With Replaceable Battery
Rechargeable Batteries

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 15
Milan - Italy
Anatomy of a BSC: Power Supply (2/2)
Flat, printed Lithium Ion batteries are easy to implement but can create issues:
Card heating
Transport issues (Air, Courier)
In some countries, treated as Dangerous Goods
In some countries, subject to certification
Supercapacitors (SC) often used in Energy Harvesting BSC for short-term energy
storage.
BSC without battery requires card reader / NFC reader for enrolment.
Replaceable batteries used in Non-ISO card (thickness) for Access Control applications.

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 16
Milan - Italy
Anatomy of a BSC: FPS Cavity Making
Sheet Punching Mechanical Milling Laser Milling Injection Moulding

Cavities punched out from Most popular method for Chip and FPS sensor cavity
Very precise
PVC sheet cavity making are created during injection

Operation performed after Require modification to chip Color change issue with PVC
Smooth and clean cavity
sheet printing cavity milling equipment / PETG

Requires precise alignment Suitable for mass


Good results on PC No debris removal
of lamination sandwich production

Suitable for mass Technique under Complex industrialization


production development for mass production

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 17
Milan - Italy
Anatomy of a BSC: Swipe vs Area Sensors
Generate large Image Unreliable in many applications

Small footprint Significant learning curve

Swipe
Sensors Easy bonding to FPCB Problematic torsion/bending test

Accurate Subject to scratches

Easy to use Large footprint

Area
Sensors Flexible are ideal for smart cards

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 18
Milan - Italy
Anatomy of a BSC: Key Sensor Makers

Datang Microelectronics Elan Microelectronics Fingerprint Cards Flexenable

IDEX Infinity Electronic Biotech Innolux Next Biometrics

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 19
Milan - Italy
Anatomy of a BSC: Area Sensors
Average thickness ~ 0,3 mm (0.011 in)
Full fingerprint scan ~ 1 sec
1.8 3.3 V operations
Resolution 500 dpi (sensors with lower resolution compensate with larger active area)
Output 8 bit, 256 grey scale values
Wakeup upon touch (few ms wait)
Read fingerprint from any angle
Protective coating to increase durability
ESD Protection 15 kV (IEC 61000-4-2)
Durability 1 M touches
Some models include Bezel into their design
For mass production shall be delivered in Super 35 mm Tape format

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 20
Milan - Italy
Anatomy of a BSC: Bezel
Bezel, when present, have Operative and Aesthetic functions:
Operative Aesthetic

ESD protection Cover sensor cavity walls

Electrically drive the fingertip during the


Cover sensor bonding pads
sensing process

Help keep sensor in place


*
Protect sensor from environment

Must be flexible enough to comply with dynamic torsional stress of ISO/IEC 10373-1

*
For bezel not embedded into sensor design
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 21
Milan - Italy
Anatomy of a BSC: Cross Section
Gap between card front surface and sensor active
surface:
Bezel should not
Reduce FPS wear & tear
extend over card
Avoid contact with plate during lamination*
surface to avoid
scratches

Fingerprint Area Sensor Card body


FPS Bezel
* For sensors mounted on Inlay before lamination
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 22
Milan - Italy
Anatomy of a BSC: MCU / ASIC
ARM Cortex M4, 32bit RISC de facto standard as general purpose MCU
Perform Template Match when this is not done by SE
Coordinate/control BSC components
Most BSC makers are designing their own ASIC:
Integrate FPS IC + MCU + Flash + RF IC.
Cheaper when manufactured in volume.
Easier to integrate (less components).
Will drive inlay cost down.
Can be done only when product with generic MCU
reach maturity.
Time-to-Market 18-24 months.

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 23
Milan - Italy
Anatomy of a BSC: RF IC
The RF IC perform multiple tasks:
Harvest power from RFID excitation field
Voltage Regulator
Clock Generator / Clock Regulator
Reset Generator
Anti-collision mechanism
Distribute power supply to both SE + BSC MCU/ASIC + FPS
When present, charge Rechargeable Battery or
Supercapacitor

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 24
Milan - Italy
Anatomy of a BSC: Led / Buzzer / LCD
Other elements that can be present on a Biometric Card:

LED
Buzzer
Flexible LCD / e-paper
Ensure compliance with ISO/IEC 17839-1:2014 - Biometric System-on-Card --
Part 1: Core requirements

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 25
Milan - Italy
BSC Contactless Interfaces / Transponders ICs
ISO 14443 Type A, B, C

NFC

Bluetooth

HID 125 kHz / HID iClass

Mifare Classic / DESFire EV1


Popular on BSoC Access Cards
Legic Advant

Atmel 5577
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 26
Milan - Italy
Anatomy of a Fingerprint Card: Making of FPCB
FPCB SMD / COF Prelam / Packaging

Copper Plating Solder Paste Placement on Template

Laser Drill Mount Prelam sheets making

Line Formatting Reflow Sheets Packing

AOI & PSR Bonding


Inlays Packing
Gold Plating Sensor mount on Inlay

Marking

*
Inlays Packing
*Flexible PCB often made of polyimide
Delivery also possible as prelam Sheets

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 27
Milan - Italy
Fingerprint Card Key Manufacturing Steps

Sheet FPS Cavity Sheets


Sheets Printing Layers Collation Sheet Punching
Punching Lamination

Anisotropic
Micromodule Micromodule
Cards Gathering FPS Cavity Milling conductive epoxy
Cavity Milling Embedding
on contact pads

cavity walls FPS embedded


coated with FPS Embedding Bezel Placement before lamination
adhesive epoxy
FPS embedded
after lamination
Single steps when bezel is integrated into FPS design
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 28
Milan - Italy
Fingerprint Card Personalization

Laser engraving Direct-To-Card Emboss

Inkjet Overlay Front Indent

Rear Indent Overlaminate

Retransfer

Sensor bezel / card thickness can potentially create interference / jam in personalization equipment
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 29
Milan - Italy
Fingerprint Cards Value Chain
Delivery
MCU / RF ICs
Sensor Sensor Inlays / Prelams
Supplier
Manufacturer Designer
Sensors
Inlay
Manufacturer APIs
BIOMETRIC CARD
Card
SOLUTION Dev. Tools Manufacturer
ASIC ASIC PROVIDER
Foundry Designer Test Tools

Biometric Enrolment SW
Engine Designer
IPs IP Licenses

The Biometric Card Solution Provider can design Biometric Engine, ASIC and Inlay in house.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 30
Milan - Italy
2014 2015 2017 2017
Key Trials / Pilots Sparebanken DIN
Norway
Danske Bank
Denmark
AirPlus
Germany
Bulbank Bank
Bulgaria
Zwipe + MasterCard Zwipe + MasterCard Kona I + FPC OT-Morpho + MasterCard

2016
Bundesdruckerei
Germany 2017
Woori Bank
South Korea
2017 Korea Smart ID
Pleinair Casino
France
MeReal Biometrics 2017
Instanbul Municipality
Applications Turkey
Korea Smart ID
Online
Authentication

2017
Access Control Absa Bank
South Africa
OT-Morpho + MasterCard
Payment 2015 2017
2017
United Nations Battistolli Pick n Pay
Switzerland Italy South Africa
Identification Card-Tech + Ingenico OT-Morpho + MasterCard
KSID + Elan + Jinco

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 31
Milan - Italy
Key Companies: CardLab ApS
Founded HQ Type CEO WEB

2003 Denmark Private Frank Sandelv Cardlab.com

Strong IP Portfolio focusing on Powered Smart Cards


Partnership with QuardLock for development of a OTP BSoC
50K funding by EU under Horizon 2020 project
Own development of minutiae algorithm
Trials in USA and UAE
Hot laminated products under industrialisation (Thailand), expected launch Q1/Y2018
Key Products:
Non-rechargeable battery dual interface BSC inlay and cards
Non-rechargeable battery contactless NFC BSC inlay and cards
Inlays with multiple items: fps + display + dynamic magstripe + led
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 32
Milan - Italy
Key Companies: Card-Tech S.r.l.
Founded HQ Type CEO WEB

2006 Italy Private Fabrizio Borracci card-tech.it

PinKey Smart, BSoC with swipe sensors, launched Cartes Y2014


Holds patents on In-Card biometric verification
Manufacturing partnership with top-tier card vendor
Partnership with IDEX for sensors, sensor embedded on inlay
No bezel
Template Matching on smart card chip
Key Products:
Contact BSC inlay
Dual Interface Energy Harvesting BSC inlay (under development)

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 33
Milan - Italy
Key Companies: Datang Microelectronics
Founded HQ Type CEO WEB

1996 China Private Yanhui Yang () dtm.com.cn

Belonging to Datang Telecom Technology, a State owned 3.3B$ industrial group


China largest design house + foundry for Smart Card ICs
In-house development + production of Capacitive Area and Swipe sensors
In-house development + production of MCU + RF Chip
In-House development + production of flexible BSC inlays
China strongest company in smart card-related development
Key Products:
Contact BSC with rechargeable battery
Dual Interface BSC with rechargeable battery
Access Control BSC (rechargeable battery)
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 34
Milan - Italy
Key Companies: Jinco Universal Co. Ltd.
Founded HQ Type CEO WEB

2005 Taiwan Private Ted Lin () Jinco.com.tw

Asias strongest OEM/ODM of customized powered smart cards / inlays


Partnership with Korea Smart ID (KSID) for Card Production
Partnership with Elan Microelectronics for sensors
Strong promotion in South Korea / China / Taiwan / South East Asia
Specific patents on BSoC
Working on retina recognition smart card (patented)
Key Products:
Contactless BSC with rechargeable battery
Dual Interface, energy harvesting BSC
Dual Interface, rechargeable battery BSC with dynamic magstripe and display
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 35
Milan - Italy
Key Companies: Mereal Biometrics Ltd.
Founded HQ Type CEO WEB

2009 Hong Kong Private Philippe Blot merealbiometrics.com

Investment by French Groupe Partouche (Casino, Hotel, Events)


Co-founded by Philippe Blot (UINT CEO)
Patented Acoustic / RFID OTP transmission to terminal
Sales & Marketing base in Hong Kong
UINT Limoges (France) engineering & manufacturing plant
Current production capacity ~250K cards / month
Key Products:
Dual Interface, rechargeable battery BSC with Swipe Sensor
Dual Interface, rechargeable battery BSC with Area Sensor from FPC
Contactless Portable Charger
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 36
Milan - Italy
Key Companies: MoriX Co., Ltd.
Founded HQ Type CEO WEB

2005 Japan Private Morihiko Kubota morix-ic.com


()
Partnership with Toshiba Solutions Corp.
Selling Cards & Fingerprint Sensors
In-house Fingerprint Matching algorithm development
COF Sensor Co-developed with ASD: 508 dpi, 9.4 x 11 mm active area
NFC BSC under development
Key Products:
BSC contact with non-rechargeable battery
BSC contact with display and non-rechargeable battery
Fingerprint Sensor module

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 37
Milan - Italy
Key Companies: Tactilis Pte
Founded HQ Type CEO WEB

2014 Singapore Private Michael Gardiner tactilisltd.com

Firm founded by industry seasoned professionals


Privately funded
Exclusive, patented manufacturing process
Fully equipped plant in Penang, Malaysia
Offering BSC Inlays & complete cards
Supporting a tier-one card vendor
Integrate secure flash up to 4GB
Low profile communication strategy
Key Products:
Dual interface, energy harvesting, BSC with large area sensor card + inlay
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 38
Milan - Italy
Key Companies: Zwipe AS
Founded HQ Type CEO WEB

2009 Norway Private Kim Kristian Humborstad zwipe.no

Strongest IP Portfolio for Biometric solutions with >50 patents


Kuang-Chi Group partner for China JV and 20.1% stake
First company to have trials with MasterCard
Inlay-based solution tailored for card manufacturers
Sensor agnostic solution, currently delivering FPC FPS
Ongoing development of custom ASIC to reduce components + costs
Key Products:
Access Control BSC (non-ISO, replaceable battery)
Contactless Energy harvesting BSC (ID)
Dual Interface Energy Harvesting BSC inlay (Payment)
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 39
Milan - Italy
The Offer: Whom is Offering What
Rechargeable
Rechargeable No Battery
Non- Battery No Battery
Battery + Replaceable
Rechargeable + +
+ Energy Battery
Battery Energy Chip Contact
Chip Contact Harvesting
Harvesting

CardLab
Card Tech
Datang Microelectronics
Jinco Universal
MeReal Biometrics
Morix

Tactilis
Zwipe

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 40
Milan - Italy
The Offer: Tier 1 Company Developments

Idemia

Korea Smart ID (KSID)


G+D
Gemalto

Ongoing First among top card Not aware of any So far, KSID is the
Industrialization in vendors to have development company with the
France & Germany completed Could continue largest quantity of
R&D / plants industrialization development of Biometric Cards
Marketing activity BSC in production Bundesdruckerei produced
started Leverage Morpho GoID! fibre Key Customers:
Expected Launch expertise in composite card if UN
Q1/2018 biometric migrated to Veridos Instanbul
Active joint portfolio Municipality
promotion with Woori Bank
MasterCard
In-house inlay
production, no OEM
sell
Current solution with
non-rechargeable
battery

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 41
Milan - Italy
Global BSC Shipment Forecast Y2017-2020
400 400

300
250
Million of cards

200

100
90
18
0
2017 2018 2019 2020
Source: ABI Research, Fingerprint Cards, Gartner, HIS, Nilson Report, Precise Biometrics, Statista, Carnegie Research, Strategy Analytics, Swedbank, Antonio DAlbore estimates.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 42
Milan - Italy
Global BSC ASP Forecast Y2017-2020 (K pieces)
$20
$18
$16
$14
$12 Clamshell BSC
$10
$8
Battery BSC
$6 No battery BSC
$4
$2
$-
2017 2018 2019 2020

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 43
Milan - Italy
Normative References
Standards developed by Technical Committee ISO/IEC JTC 1/SC 17
Cards and personal identification

The current area of work for JTC 1/SC 17 consists of:


Identification and related documents
Cards, and
Security devices associated with their use in inter-industry
applications and international interchange

Details at https://www.iso.org/committee/45144.html

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 44
Milan - Italy
Normative References
ISO/IEC 17839-1:2014 - Biometric System-on-Card
Part 1: Core requirements
Type S1 conventional Type S2 (ID-T) ticker NEW FORMAT

Dimensions ID-1 as ISO/IEC 7810 Card is 2.5 mm (0.098 in) thick

2.5 mm thick card cannot be inserted in card slot by


Torsion and bending as ISO/IEC 7816-1
mistake

Contact interface as specified in ISO/IEC 7816-3 Width / height as an ISO/IEC 7810 card

USB interface as specified in ISO/IEC 7816-12 Need not conform to ISO/IEC 7816-1 flexibility

Contactless interface as specified in ISO/IEC 14443 Supports only ISO/IEC 14443 contactless interface

Regardless of S1 or S2, a BSC must have some form of feedback mechanism such as LCD display, LED or buzzer
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 45
Milan - Italy
Normative References
ISO/IEC 17839-1:2014 - Biometric System-on-Card
Part 1: Core requirements

The minimum size of an area sensor shall be 169mm2


(13 13 mm or 0.512 0.512 in)

In the case of a swipe sensor, the effective area of fingerprint


capture is bigger than the sensor size. A swipe sensor shall
have a minimum width of 13 mm (0.512 in)

Allows fingerprint sensor, voice microphone, camera for facial image, signature input pad

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 46
Milan - Italy
Normative References
ISO/IEC 17839-3:2016 - Biometric System-on-Card --
Part 3: Logical information interchange mechanism

ISO/IEC 17839-3:2016 covers:


Commands and data structures
Internal Enrollment and External Enrollment
Initiation of verification
Status feedback
Processing time management and extension
Capability discovery mechanism

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 47
Milan - Italy
Normative References
Other ISO TS / TR

ISO/IEC 24787:2010 - On-card biometric comparison


ISO/IEC TR 30117:2014 - Guide to on-card biometric comparison
standards and applications
ISO/IEC 18584:2015 - Conformance test requirements for on-
card biometric comparison applications

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 48
Milan - Italy
Normative References
Focus on EMV 2nd Generation Specifications

EMV 2nd Generation Specifications in progress:


Biometric Terminal effective from Jan 1, 2018
Biometric Card in progress, next meeting Paris Nov. 2017
EMV 3-D Secure 2.0
Specifies use of multiple options for step-up authentication, including biometrics

Visa, MasterCard and Amex have updated their Payment Applet specs
allowing Fingerprint Verification to be used as PIN alternative.

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 49
Milan - Italy
Normative References
Payment service (PSD2) Directive (EU) 2015/2366
It provides the legal foundation for the further development of a better integrated internal
market for electronic payments within the EU.
It puts in place comprehensive rules for payment services with the goal of making
international payments (within the EU) as easy, efficient and secure as payments within a
single country.
Requires Strong Customer Authentication, using at least two independent elements
categorized as:
KNOWLEDGE POSSESSION INHERENCE

Something I know Something I have Something I am


PIN CARD FINGERPRINT

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 50
Milan - Italy
Normative References
ICAO Doc Series 9303 Machine Readable Travel Documents

ICAO Doc 9303 Part 9: Deployment of Biometric Identification and Electronic Storage
of Data in eMRTDs
ICAO Doc 9303 Part 10: Logical Data Structure (LDS) for Storage of Biometrics and
Other Data in the Contactless Integrated Circuit (IC)

Focus on storage / format / interoperability of biometric data into eMRTD.


No references to BSoC.

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 51
Milan - Italy
Fingerprint Cards Acceptance Factors
CONSUMERS INDUSTRY

Familiarity with smart cards Need to reduce Card-Present Fraud


Familiarity with smartphones Improve Identification / Verification processes
Increasing acceptance for new technologies Growing focus on Safety/Security of physical assets
Slow acceptance of mobile payments Minor or no infrastructure upgrade cost
Rising immigration control & MRTD verification

LEGAL HEALTH

Compliant with most regional / national legal Risk of infection transmission with standalone
frameworks demanding biometric data not to be Fingerprint scanner (rotavirus, norovirus, hepatitis
stored in public DB. A virus, respiratory syncytial virus, rhinovirus,
EU GDPR effective May 2018 prohibits processing influenza virus, Shigella dysenteriae,
of Biometric Data Enterohemorrhagic Escherichia coli, etc.)

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 52
Milan - Italy
Fingerprint Cards Potential Blocking/Risk Factors
Rejection due to personal reasons.
Cultural incompatibility.
Absence of respective biometric feature.
Insufficient characteristics of the respective biometric feature.
Abnormal characteristic of the respective biometric feature.
Criminal organizations might develop techniques to fool fingerprint sensor (liveness
detector, blood detector, etc.).
Because Biometric features are static, stolen (capture, cloned, forged) biometric cannot
be revoked or changed.
Challenge to get product working in Hot / Dry / Dirty environment.
Competing mobile payment technology may impact the smart card market.
5-6 October 2017
The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 53
Milan - Italy
The Future
Vein sensing capability
Blood flow / heartbeat detection
FPS IC + RF IC + MCU integrated into Smart Card Chip
FPS under conductive plastic
Contactless fingerprint
Behavioural biometric
DNA scanner

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 54
Milan - Italy
55
Thanks!

Antonio DAlbore
Editor-in-Chief
Embedded Security News
antonio.dalbore@embeddedsecuritynews.com
+39 392 5198737
@AndongESN
@embedded.sec.news
embeddedsecuritynews.com

56
References
- http://coe.int/en/web/conventions/full-list/-/conventions/treaty/005
- http://dhl.it/en/express/shipping/shipping_advice/lithium_batteries.html
- http://dmt.com.cn/product/aqkz/zwsb/529.html
- http://ec.europa.eu/justice/policies/privacy/docs/95-46-ce/dir1995-46_part1_en.pdf
- https://en.wikipedia.org/wiki/Biometrics
- https://en.wikipedia.org/wiki/Data_Protection_Directive
- https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
- https://en.wikipedia.org/wiki/Fingerprint_recognition
- https://en.wikipedia.org/wiki/Personally_identifiable_information
- https://en.wikipedia.org/wiki/Supercapacitor
- http://fingertec.com/download/tips/whitepaper-01.pdf
- http://www.gemalto.com/govt/biometrics/biometric-data
- http://heritage.org/homeland-security/report/biometric-technologies-security-legal-and-policy-implications
- http://horizon2020projects.com/special-reports/technical-information-card-fraud-identity-theft-protection-
technologies/
- http://iata.org/whatwedo/cargo/dgr/Pages/lithium-batteries.aspx
- https://www.icao.int/Meetings/a38/Documents/WP/wp094_en.pdf
- https://www.icao.int/publications/pages/publication.aspx?docnum=9303

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 57
Milan - Italy
References
- https://www.icao.int/publications/Documents/9303_p9_cons_en.pdf
- https://www.icao.int/publications/Documents/9303_p10_cons_en.pdf
- http://www.mainguet.org/
- https://ncbi.nlm.nih.gov/pubmed/19006507
- http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-122.pdf
- http://patentexaminer.org/wp-content/uploads/2011/09/SmartMetric.MC_.2.Complaint_small.pdf
- http://patentexaminer.org/wp-content/uploads/2011/09/SMME_v_MasterCard_1.pdf
- http://prba.org/wp-content/uploads/IATA-Lithium-Battery-Guidance-2017-1.pdf
- https://www.sec.gov/Archives/edgar/data/1301991/000114420415058083/v421136_ex10-8.htm
- https://scribd.com/doc/316791717/Special-Report-Biometrics-and-Border-Security
- https://uni-kassel.de/fb07/fileadmin/datas/fb07/5-Institute/IWR/Hornung/isse_2004_47-
57_biometric_identity_cards.pdf
- https://ups.com/media/news/en/ca/intl_lithium_battery_regulations.pdf
- https://www.youtube.com/watch?v=jw_4uaRNsBA&t=1228s
- https://www.youtube.com/watch?v=VESg5mPWk34&t=21s

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 58
Milan - Italy
References
Struif, B.: Use of Biometrics for User Verification in Electronic Signature Smartcards. In: Attali, S., Jensen, T. (eds.) E-smart 2001. LNCS,
vol. 2140, pp. 220227. Springer, Heidelberg (2001)
Murdoch, S.J., Drimer, S., Anderson, R., Bond, M.: Chip and PIN is broken. In: 2010 IEEE Symposium on Security and Privacy (2010)
Biometric Application Programming Interface (API) for Java Card, NIST/Biometric Consortium Biometric Interoperability, Assurance, and
Performance Working Group, version 1.1 (August 2002)
Henniger O., Nikolov D. (2013) Extending EMV Payment Smart Cards with Biometric On-Card Verification. In: Fischer-Hbner S., de Leeuw
E., Mitchell C. (eds) Policies and Research in Identity Management. IDMAN 2013. IFIP Advances in Information and Communication
Technology, vol 396. Springer, Berlin, Heidelberg
Privacy-preserving biometric authentication: challenges and directions, Elena Pagnin, Aikaterini Mitrokotsa Chalmers University of
Technology Gothenburg, Sweden (2017)
EMV integrated circuit card specications for payment systems Book3: Application specication, Version 4.2, June 2008.
Encyclopedia of Biometrics, Stan Z., Anil K. Jain, Springer Reference, ISBN: 978-3-642-27733-7
Anil K., Arun A. Ross Introduction to Biometrics, Springer, ISBN: 978-0387773254
Nicholas M. Orlans John D. Woodward Jr., Peter T. Higgins Biometrics, McGraw Hill Professional, ISBN: 978-0072222272

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 59
Milan - Italy
Specs
ISO/IEC 7816-4:2013 Identification cards Integrated circuit cards Part 4: Organization, security and commands for
interchange
ISO/IEC 7816-11:2014 Identification cards Integrated circuit cards Personal verification through biometric methods
ISO/IEC 9797-2:2011 Information technology Security techniques Message Authentication Codes (MACs) Part 2:
Mechanisms using a dedicated hash-function
ISO/IEC 17839-2:2015 Biometric System-on-Card: physical characteristics
ISO/IEC 18033-2:2006 Information technology Security techniques Encryption algorithms Part 2: Asymmetric ciphers
ISO/IEC 18033-3:2010 Information technology Security techniques Encryption algorithms Part 3: Block ciphers
ISO/IEC 19092:2008 -- Financial services -- Biometrics -- Security framework
ISO/IEC 19785-3 Information technology Common Biometric Exchange Formats Framework Patron format specifications
ISO/IEC 19794-1:2011 - Information technology -- Biometric data interchange formats -- Part 1: Framework
ISO/IEC 19794-2:2011 - Information technology - Biometric data interchange formats - Part 2: Finger minutiae data
ISO/IEC 19794-2:2011/Cor 1:2012 - XML encoding and clarification of defects
ISO/IEC 19794-2:2011/Amd 1:2013 - Conformance testing methodology and clarification of defects
ISO/IEC 19794-2:2011/Amd 2:2015 - Conformance testing methodology and clarification of defects
ISO/IEC 19794-3:2006 - Information technology -- Biometric data interchange formats -- Part 3: Finger pattern spectral data
ISO/IEC 19794-4:2011 - Information technology -- Biometric data interchange formats -- Part 4: Finger image data
ISO/IEC 19794-5:2011 - Information technology -- Biometric data interchange formats -- Part 5: Face image data
ISO/IEC 19794-6:2014 - Information technology -- Biometric data interchange formats -- Part 6: Iris image data
ISO/IEC 19794-7:2014 - Information technology -- Biometric data interchange formats -- Part 7: Signature/sign time series
data
ISO/IEC 19794-8:2011 -- Information technology -- Biometric data interchange formats -- Part 8: Finger pattern skeletal
data
ISO/IEC 19794-9:2011 -- Information technology -- Biometric data interchange formats -- Part 9: Vascular image data
ISO/IEC 19794-10:2007 -- Information technology -- Biometric data interchange formats -- Part 10: Hand geometry silhouette
data
EMV Specification Bulletin No. 185 - First Edition March 2017 - Biometric Terminal Specification

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 60
Milan - Italy
Patents (1/5)
CA 02581230 C Apparatus for fingerprint sensing and other measurements
CN 2010 20665177 (Non-contact intelligent electronic card comprising
fingerprint identification )
CN 2010 20671893 (Non-contact electronic smart card )
CN 2015 20355127 (Wisdom card fingerprint press device)
CN 2016 02176914 U Fingerprint identification smart card
DE 2016 10101609 A1 Authentifikationsvorrichtung, Authentifikationsdokument und Verfahren zur
Authentifizierung einer Person
DE 2016 10201976 B3 Vorrichtung und Verfahren zur Bearbeitung eines Substrats
GB 2012 00019750 D0 Enrolling fingerprints by combining image strips to obtain sufficient width
GB 2013 00004639 D0 Fingerprint sensor
GB 2015 00022870 D0 Biometric smartcard with multiple modes of operation
GB 2015 00008294 D0 Biometric enrolment authorisation
GB 2015 00008296 D0 Contactless biometric identification device allowing multiple configurations
GB 2016 00000892 D0 Low thickness biometric card
GB 2016 00003099 D0 One-time password device
GB 2016 00004138 D0 Apparatus for testing a battery-powered device
GB 2016 00009572 D0 Smartcard and method for controlling a smartcard
GB 2016 00014998 D0 Biometric smartcard for providing feedback to a user
GB 2017 00004847 D0 Callibration method
GB 2017 00006460 D0 Bionetric smartcard
IT 2006 UD00028 A1 Carta Elettronica Universale Personale
IT 2006 UD00046 A1 Metodo Per Realizzare Una Scheda Personale Sicura E Suo Processo Di Funzionamento
IT 2006 UD00075 A1 A method for making a secure personal card and its working process

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 61
Milan - Italy
Patents (2/5)
JP 2011 0105750 A ic card with fingerprint authentication
JP 2014 0529123 A Biometric authentication available smart card
JP 2016 0115098 A
(Smart card with fingerprint authentication and settlement method using the same)
KR 2014 0164109 B1 RF Smart Combi-card Of Fingerprint Type And Dealing Method Thereof
KR 2015 0056437 RF Smart Card Of Fingerprint Type With Battery
KR 2015 0180446 B2 Smart Card Integrated With Thermoelement And Fingerprint Verification Chip As Laminated
Structure
KR 2016 0064133 A Smart Card Comprising Fingerprint Detecting Device And Method For Driving The Same
KR 2016 0090633 A Smart Card And A Fingerprint Recognition System Using Thereof
KR 2016 0125877 A RF Smart Card of Fingerprint Type with Battery
KR 2016 0129832 B1 Fingerprint Smart Card Having A Prevention Function Forged Fingerprint
TW 2010 0009718 A Method of manufacturing secure personal card and manufacturing processes thereof
TW 2016 0029842 A Fingerprint press device for smart card
TW 2016 0202811 U Switch structure of electronic module

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 62
Milan - Italy
Patents (3/5)
US 1983 4621190 A Card with an IC module
US 1999 6325285 B1 Smart card with integrated fingerprint reader
US 2004 0129787 A1 Secure biometric verification of identity
US 2005 0178827 A1 Flexible fingerprint sensor arrays
US 2005 0212657 A1 Identity verification system with self-authenticating card
US 2006 0000892 A1 Method for biometric security using a smartcard
US 2006 0000899 A1 Method and system for dna recognition biometrics on a smartcard
US 2006 0113381 A1 Batteryless contact fingerprint-enabled smartcard that enables contactless capability
US 2007 0223179 A1 Fingerprint recognition smart card
US 2007 0228154 A1 System and method for sensing biometric and non-biometric smart card devices
US 2008 0164325 A1 Universal Smart Card
US 2008 0054875 A1 Biometric sensor and sensor panel
US 2008 0040615 A1 Biometric embedded devicer
US 2009 0084858 A1 Method For Making A Secure Personal Card And Its Working Process
US 2012 0241524 A1 Activation and indication of an RF field on a device including a chip
US 2013 0036463 A1 Biometric-enabled smart card
US 2013 0320464 A1 Integrally molded die and bezel structure for fingerprint sensors and the like
US 2015 0049925 A1 Method of manufacturing an electronic card
US 2015 0286855 A1 Fingerprint matching algorithm
US 2015 0371077 A1 Fingerprint recognition for low computing power applications
US 2015 0379250 A1 Secure biometric verification of identity
US 2017 0161528 A1 Smart card systems comprising a card and a carrier
US 2017 0213097 A1 Flexible Card with Fingerprint Sensor
US 2017 0213122 A1 Document with Sensor Means

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 63
Milan - Italy
Patents (4/5)
US 2017 0228631 A1 Smartcard and method for controlling a smartcard
US 2017 0262692 A1 Capacitive Fingerprint sensing Device and Methon for Capturing a fingerprint using the
sensing device

USD 693874 S1 Electronic payment card with biometric verification means


USD 776664 S1 Smart card
USD 786355 S1 Smart card with a chip and finger-print sensor
USD 788847 S1 Smart card with a chip and finger-print sensor
USD 791772 S1 Smart card with a fingerprint sensor
WO 1998 052735 A1 Method of making smart cards
WO 2011 083241 A1 Multiple application chip card having biometric validation
WO 2006 080929 A1 Method of making a memory card by injection molding
WO 2013 155040 A1 Smart connect devices for the interconnectivity of data cards with computing devices to
enable the performance of various functions upon authentication by a user's fingerprint
and/or a user's photograph
WO 2013 160011 A1 Method of manufacturing an electronic card
WO 2016 016129 A1 Multi-layer composite for a security and/or value document and method for producing same
WO 2016 055660 A1 Contactless Biometric Identification Device Allowing Multiple Configurations
WO 2016 055661 A1 Biometric enrolment authorisation
WO 2016 055662 A1 Power load management
WO 2016 055663 A1 Power harvesting in a passive rfid device
WO 2016 055665 A1 Self-contained fingerprint identification device

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 64
Milan - Italy
Patents (5/5)
WO 2016 160816 A1 Smart data cards that enable the performance of various functions upon
activation/authentication by a user's fingerprint, oncard pin number entry, and/or by
facial recognition of the user, or by facial recognition of a user alone, including an
automated changing security number that is displayed on a screen on a card's surface
following an authenticated biometric match
WO 2016 190678 A1 Smart Card Including Fingerprint Detection Device And Driving Method Therefor
WO 2017 017085 A1 Smart card with main application and persistence application
WO 2017 025479 A1 Security protected passive rfid device
WO 2017 025481 A1 Power optimization
WO 2017 064097 A1 Multiple finger fingerprint authentication device
WO 2017 081268 A1 Value or security document made of a fiber composite material, and method for producing
the value or security document
WO 2017 089216 A1 Identification document and method for identifying an individual
WO 2017 093514 A1 Fingerprint card
WO 2017 093516 A1 Biometric card
WO 2017 102699 A1 Id token having a protected microcontroller
WO 2017 102984 A1 Device
WO 2017 109173 A1 Biometric device

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 65
Milan - Italy
Acronyms
2FA Two-Factors Authentication
3FA Three-Factors Authentication
ASIC Application-specific integrated circuit
AOC Authentication On Card
ASP Average Selling Price
BSC Biometric Smart Card
BSoC Biometric System on Cards
CBEFF Common Biometric Exchange File Format
COF Chip On Film
FPC Fingerprint Card
FPCB Flexible Printed Circuit Board
FPS Fingerprint Sensor
JV Joint Venture
MOC Match-on-Card
MCU Micro Controller Unit
NFC Near field communication
OTP One Time Password
PC Polycarbonate
PETG Polyethylene terephthalate
PII Personally Identifiable Information
PSD2 Payment Service Directive
PVC Polyvinyl chloride
RFID Radio-frequency identification
SC Supercapacitor
SE Secure Element
SW Software
TOC Template-On-Card

5-6 October 2017


The Rise of Biometric Cards | state of the art and future challenges for card manufacturers | by Antonio DAlbore | Embedded Security News 66
Milan - Italy

Potrebbero piacerti anche