Lorenz November 6, 2009 ITechLaw 2009 European Conference Brussels - - PowerPoint PPT Presentation

lorenz
SMART_READER_LITE
LIVE PREVIEW

Lorenz November 6, 2009 ITechLaw 2009 European Conference Brussels - - PowerPoint PPT Presentation

Jan Dhont and Steven De Schrijver Lorenz November 6, 2009 ITechLaw 2009 European Conference Brussels Bishkek Geneva 1 Lorenz Brusse sels Bishk hkek Gene neva Table of Contents I. Introduction to Biometrics II. Privacy


slide-1
SLIDE 1

Lorenz

1

Brussels Bishkek Geneva

Jan Dhont and Steven De Schrijver November 6, 2009 ITechLaw – 2009 European Conference

slide-2
SLIDE 2

2

Table of Contents

Lorenz

Brusse sels Bishk hkek Gene neva

I. Introduction to Biometrics II. Privacy Protection under Regulatory Regimes

  • III. Other Legal Issues

A. Biometrics in the Workplace B. E-commerce C. Evidence D. Standardization

  • IV. Concluding Remarks and Questions
slide-3
SLIDE 3
  • I. INTRODUCTION TO BIOMETRICS

Brusse sels Bishk hkek Gene neva

3

Lorenz

slide-4
SLIDE 4

WHAT IS ‘BIOMETRICS’?

  • 1. Characteristic: The measurement of (i) psychological or (ii)

behavioural characteristics of an individual, for use in proving their identity.

  • 2. Process: The automated method of recognizing an individual

based on measurable characteristics.

Brusse sels Bishk hkek Gene neva

4

Lorenz

slide-5
SLIDE 5

Brusse sels Bishk hkek Gene neva

5

Lorenz

1. Sensor 2. Biometric Template 3. Data storage Components 4. Matching Algorithm 5. Decision Process

How does a biometric system work?

slide-6
SLIDE 6

Practical uses of biometric technology

1) Logical access – information and assets 2) Physical Access – facility or location

Brusse sels Bishk hkek Gene neva

6

Lorenz

slide-7
SLIDE 7

Verification Versus Identification

Verification systems compares sample to previously submitted templates. 1 = 1 Identification systems try to determine who the individual is by comparing to a closed set or open set of data. 1 = multiple

Brusse sels Bishk hkek Gene neva

7

Lorenz

slide-8
SLIDE 8

Characteristics Biometric Elements:

  • Universality
  • Uniqueness
  • Permanence
  • Accessibility and ability to be quantified

Lorenz

slide-9
SLIDE 9

Common Characteristics of Biometric Recognition Systems

  • System Performance (error rates)
  • User Tolerance
  • Robustness
  • Interface Ability

Lorenz

slide-10
SLIDE 10

Fingerprint recognition

Brusse sels Bishk hkek Gene neva

10

Lorenz

http://www.biometricsinfo.org/images/finger3.jpg

slide-11
SLIDE 11

Hand and Finger Geometry

Brusse sels Bishk hkek Gene neva

11

Lorenz

http://www.theage.com.au/news/national/schools-to-fingerprint-students-for-security/2007/09/01/1188067438565.html http://www.sandiacontrolsystems.com/img/HGU.jpg

slide-12
SLIDE 12

Brusse sels Bishk hkek Gene neva

12

Face Recognition

Lorenz

http://news.bbc.co.uk/2/shared/spl/hi/guides/456900/456993/html/nn2page1.stm

slide-13
SLIDE 13

Speaker Recognition

Brusse sels Bishk hkek Gene neva

13

Lorenz

http://www.acm.org/crossroads/xrds3-3/gfx/sound.jpg

slide-14
SLIDE 14

Brusse sels Bishk hkek Gene neva

14

Iris Recognition

Lorenz

http://www.cytrap.eu/files/ReguStand/2007/image/2007-11-28_iris-recognition-biometric- passport.jpg

slide-15
SLIDE 15

Brusse sels Bishk hkek Gene neva

15

Iris Recognition

Lorenz

http://www.cl.cam.ac.uk/~jgd1000/iriscollage.jpg

http://www.cytrap.eu/files/ReguStand/2007/image/2007-11-28_iris-recognition-biometric-passport.jpg

slide-16
SLIDE 16

Brusse sels Bishk hkek Gene neva

16

Lorenz

Biometric Passports

http://www.scienceprog.com/wp-content/uploads/RFID/e-passport.JPG

slide-17
SLIDE 17

Brusse sels Bishk hkek Gene neva

17

  • Dynamic signature
  • Keystroke dynamics
  • Circulatory recognition
  • Gait/body recognition
  • Facial thermography
  • DNA recognition ?
  • Etc.

Lorenz

Developing biometric technologies

slide-18
SLIDE 18

Brusse sels Bishk hkek Gene neva

Government uses:

  • E-passports
  • National Security
  • Transportation: Airport/airline

travel

  • Immigration
  • Information Security

Private sector uses:

  • Hardware
  • Information Security
  • Domestic Uses
  • Health care
  • HR Purposes
  • Assets

18

Brusse sels Bishk hkek Gene neva

Lorenz

Current Uses in the Market

slide-19
SLIDE 19
  • II. BIOMETRICS AND EUROPEAN PRIVACY

Brusse sels Bishk hkek Gene neva

19

Lorenz

slide-20
SLIDE 20

European Context

  • Right to data protection
  • Right to privacy
  • Human right approach

Brusse sels Bishk hkek Gene neva

20

Lorenz

slide-21
SLIDE 21

Brusse sels Bishk hkek Gene neva

21

Lorenz

Brusse sels Bishk hkek Gene neva

Biometrics and Human Rights

slide-22
SLIDE 22

Generic Concerns Article 29 Working Party

  • Special sensitivity biometric data :
  • behavioural and physiological characteristics of an individual
  • Unique identification
  • Potential re-use (both private and public sector actors)
  • Potential desensitization

Brusse sels Bishk hkek Gene neva

22

Lorenz

slide-23
SLIDE 23

Brusse sels Bishk hkek Gene neva

Purpose and Proportionality

  • Impact on legitimacy of biometric process used in a specific context (e.g.

Storage of reference information; raw data may contain unnecessary information)

  • Affected population (in terms of quantity and quality)
  • Public sector uses v. Private sector uses

Brusse sels Bishk hkek Gene neva 23

Lorenz

slide-24
SLIDE 24

Brusse sels Bishk hkek Gene neva

Other Issues

  • Fair collection and information
  • Criteria for making data processing legitimate
  • Prior Checking – notification requirements
  • Security measures
  • Sensitive data
  • Unique identifier

Brusse sels Bishk hkek Gene neva 24

Lorenz

slide-25
SLIDE 25

Interpretations by member state DPAs

Brusse sels Bishk hkek Gene neva

25

Lorenz

slide-26
SLIDE 26
  • No harmonized approach (country by country)
  • Gradually but slowly more acceptance of biometrics

technology

  • Factors:
  • DPAs tend to be sceptical about storing templates in a central

database

  • DPAs promote the use of biometric applications that do not “leave

traces”

  • DPA are more lenient towards public sector purposes (private sector

purposes typically require stronger justification)

Lorenz

slide-27
SLIDE 27

Potential Bottlenecks For Companies

  • Biometrics technology industry
  • Users of biometrics technology

Brusse sels Bishk hkek Gene neva

27

Lorenz

slide-28
SLIDE 28

III. OTHER LEGAL ISSUES

  • A. BIOMETRICS IN THE WORKPLACE
  • B. E-COMMERCE AND CONTRACTS
  • C. POSSIBLE CONTRACTUAL ISSUES
  • D. EVIDENCE
  • E. STANDARDIZATION

Brusse sels Bishk hkek Gene neva

28

Lorenz

slide-29
SLIDE 29

Brusse sels Bishk hkek Gene neva

29

  • A. Biometrics in the workplace

Lorenz

Brusse sels Bishk hkek Gene neva

http://pagesperso-orange.fr/fingerchip/biometrics/fun/security4.gif

slide-30
SLIDE 30

Biometrics in the workplace (continued)

  • Need for employer to secure premises and IT Network

(physical and logical access control)

  • Monitoring of employees (e.g. prevention of ‘buddy

punching’)

30

Lorenz

slide-31
SLIDE 31

Biometrics in the workplace (continued)

  • Privacy Issues:

– Legitimacy of specific use of biometrics – Biometric information stored in central database or on individual carriers (e.g. badge)? – Are some biometric data to be considered as sensitive data (containing information on race, health,...)?

  • Consultation Issues

– Introduction of biometric system may have impact on the work

  • rganisation and the privacy of employees

– Involvement of employee representative bodies

Lorenz

slide-32
SLIDE 32

Brusse sels Bishk hkek Gene neva

  • B. Biometrics and E-commerce

Ability to identify the purchaser?

  • Better than passwords

Industry is slow to embrace biometric technology Costs

  • Non-portability of devices
  • Alternatives such as keystroke dynamics and speaker recognition could

solve these issues.

Brusse sels Bishk hkek Gene neva 32

Lorenz

slide-33
SLIDE 33

Brusse sels Bishk hkek Gene neva

Biometrics and E-commerce continued

Brusse sels Bishk hkek Gene neva 33

Lorenz

slide-34
SLIDE 34

Brusse sels Bishk hkek Gene neva

  • C. Possible Contractual Issues

1. Liability 2. Malfunctions and technical problems

Brusse sels Bishk hkek Gene neva 34

Lorenz

slide-35
SLIDE 35

Brusse sels Bishk hkek Gene neva

  • D. Evidence

Brusse sels Bishk hkek Gene neva 35

Lorenz

http://aftermathnews.files.wordpress.com/2008/08/biometric_passport.jpg

slide-36
SLIDE 36

Brusse sels Bishk hkek Gene neva Brusse sels Bishk hkek Gene neva 36

Lorenz

Outstanding problems with biometrics as evidence: 1.Lack of harmonization 2.Advantages and disadvantages experts 3.Right to counter-expertise 4.Rights of second experts

slide-37
SLIDE 37

Brusse sels Bishk hkek Gene neva

  • E. Standardization

Brusse sels Bishk hkek Gene neva 37

Lorenz

  • National and International efforts for standardization of

biometrics and biometric systems

  • International Standardizing Organization in cooperation with

the International Electro-technical Commission publishes standards

  • Importance of interoperability of systems
slide-38
SLIDE 38

Brusse sels Bishk hkek Gene neva

  • IV. CONCLUDING REMARKS AND

QUESTIONS

Brusse sels Bishk hkek Gene neva

38

Lorenz

slide-39
SLIDE 39

Brusse sels Bishk hkek Gene neva 39

Jan Dhont j.dhont@lorenz-law.com Steven De Schrijver s.deschrijver@lorenz-law.com Lorenz Troonstraat 14-16 B. 5 Rue du Trône 1000 Brussels

  • T. 32 2 239 2000 - F. 32 2 239 2002

www.lorenz-law.com

Lorenz