Put Identity at the Heart of Security Strong Authentication via - - PowerPoint PPT Presentation

Strong Authentication via Hitachi Biometric Technology

Put Identity at the Heart of Security

Tadeusz Woszczyński

Country Manager Poland, Hitachi Europe Ltd. 20 September 2017

Financial security in the old world

Assets were physical KYC was easy The Perimeter Threats were local

Financial security in the digital world

The new Perimeter Assets are digital Who are you dealing with? Threats are remote

§ Securing assets inside the perimeter is well understood.

‒ Firewalls ‒ Reverse proxies ‒ Intrusion detection ‒ DMZ ‒ SSL/TLS ‒ Etc.

We’re good at securing the digital perimeter...

§ How do we protect

• ur customers out

in the Big Wide World? § Remote customers are sometimes easy prey

… but outside the perimeter is out of control

Hitachi’s Digital Security Portfolio

Protecting Society Beyond The Perimeter

Strong authentication with biometrics

§ In cyber-theft, a user’s identity has been subverted § Many “solutions” to this issue:

‒ What you know,

‒ Username, Passwords, PIN

‒ What you have,

‒ Cards, Devices, OTP

§ But these are all just proxies:

‒ They are not you.

Why biometrics?

§ What makes a good biometric:

‒ Accurate

‒ Low false match

‒ Usable

‒ Low false reject ‒ Convenient ‒ Acceptable

‒ Secure ‒ Private

A good biometric is indisputably you

Hitachi’s Finger VeinID technology

Acquire Normalise Extract Transform

VeinID is strong across the board

Modality Accuracy Security Speed Ease

• f

use Privacy User resist- ance Size Cost Finger vein High High Fast High High Low Small Low Finger- print Low Low Fast High Very Low High Small Low Iris High Medium Slow Low Medium High Large High Face Low Low Medium Low Low Low Medium to Large Medium

VeinID is secure and private

Moderate Easy Very Difficult Easy Known technology Vein Special technology required Voice Hand Face Fingerprint Iris

Replication Acquisition Resistance to Forgery

Case study: Barclays corporate banking

Why did Barclays adopt this solution?

This solution is at the leading edge of innovation and is in direct response to client concerns about the threat of online fraud. We have shown the technology to a range of businesses and the interest and enthusiasm for the product is tremendous. Ultimately, I hope this will pave the way for other institutions to adopt equally robust technology in the fight against online crime.

– Ashok Vaswani CEO Barclays PCB

A novel combination of mature technologies

Our powerful biometric Smartcard PKI infrastructure Sign-what-you-see displays

End-to-end transaction integrity

Bank Customer

• 1. Create transaction
• 2. Verify transaction
• 3. Sign transaction
• 4. Check transaction

No opportunity for an attacker

Form factors

Desktop USB + PKI Smartcard (SIM or standard format) Portable BlueTooth + PKI Smartcard (SIM)

Security with convenience

Finger vein mass transit gate

§ Finger vein technology identifies pre-registered users § No second factor § Totally contactless § Near-instant identification § Suitable for any turnstile application

§ Finger vein technology identifies customers § No second factor § Links to payment and loyalty systems § Speed and convenience § Scales to millions of customers

Pay-by-finger

§ Identity assurance for

‒ access control ‒ time and attendance ‒ workforce management

§ Deployed for

‒ cryptographic vaults ‒ schools ‒ retail environments ‒ domestic residences…

Access control

The take away

Take back control with Hitachi’s VeinID

The (extended) Perimeter The perimeter is extended User experience is enhanced Threats are excluded

Poland Use Case of Finger Vein

USE Case: PBS Bank

Bank BPH was the first in Europe to introduce in the branch network the possibility to authenticate basing on Hitachi’s Finger Vein biometrics (1765 Finger Vein readers). Since January 2013 all the branches are using Finger Vein as the primary authentication method, and since 2016 Finger Vein had been used by the network of partner outlets.

FIRST IN EUROPE BIOMETRIC ATM NETWORK

2009 first ATM

Start of benefit withdrawal solution for unemployment people

2011 all ATMs with FV

All ATMs of the Bank equipped by FV devices. Service open for all PBS customers

32,000 active users

Finger Vein biometrics has been used by citizen of Podkarpackie region every day

FUNCTIONALITY

§ withdrawal of benefit payments § cardless withdrawals in 100% of ATM of PBS in Poland § customer’s identity verification before the execution of operations and transactions. § customer’s operations authentication in the branch, including cashier desk operations § login to the system and authentication of branch employees during transactions.

BUSINESS CASE

§ reduction of the cost of manual processing of benefit payments § reduction of the cost fo card withdrawals in the ATMs

Source: PBS

USE Case: BPH S.A. (GE Capital)

Bank BPH was the first in Europe to introduce in the branch network the possibility to authenticate basing on Hitachi’s Finger Vein biometrics (1765 Finger Vein readers). Since January 2013 all the branches are using Finger Vein as the primary authentication method, and since 2016 Finger Vein had been used by the network of partner outlets.

FIRST IN EUROPE BIOMETRIC BRANCH FINGER VEIN SYSTEM

266,140 customers

Number of customers with registered in total 532280 Finger Vein templates.

16,200 operations

Daily number of customer operations authentication in bank’s branches.

160 registrations

Daily number of customer registrations in Finger Vein system (maximum 700).

FUNCTIONALITY

§ customer’s identity verification before the execution of operations and transactions. § customer’s operations authentication in the branch, including cashier desk operations § login to the system and authentication of branch employees during transactions.

BUSINESS CASE

§ reduction of external and internal frauds § reduction of time spent on customer service (CX) § reduction of paper documents produced for cashier transactions

Source: BPH S.A.

One Hitachi approach in Poland

Hitachi as „One Stop Shop” for the market

ID MANAGEMENT (Identity Management, Priviledge Acces Management, Password Management) STORAGE SOLUTIONS (Flash and hybrid enterprise storage, software and professional services) BIOMETRICS Biometric systems (Finger Vein, voice, hand written signature) PAPERLESS Document management systems, WORM repository, cloud signature, hand-written signature ANTI-MALWARE Cloud antimalware/antiphishing solutions COMPLIANCE Solutions for regulations (GDPR, Durable Medium, MIFID2) BIG DATA Data analytics solutions (Pentaho) VIDEO ANALYTICS Video data storage, video analytics, face recognition, video management system.

Q & A

Thank You

tadeusz.woszczynski@hitachi-eu.com