Identity News Digest – July 16, 2024

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

New Study Flags Vulnerabilities of “Fingerphoto” Biometrics

Researchers from the Norwegian University of Science and Technology (NTNU) have identified vulnerabilities in fingerprint-based smartphone authentication in a new study. The research paper, “Fingerphoto morphing attack generation using texture descriptors based landmarks,” details methods for generating morphing attacks on “fingerphoto” biometrics captured by smartphones. The study shows that these morphing techniques can effectively compromise commercial off-the-shelf (COTS) fingerprint verification systems, posing a significant security threat. The researchers also propose detection methods using deep features like ResNet, though these methods struggle to achieve high accuracy, highlighting the ongoing risk of such attacks.

Swiss e-ID Head Says Pilot ‘Already a Success’

At the recent “Digital Identity unConference Europe 2024,” Beat Jans, head of Switzerland’s digital ID project, highlighted the success of a pilot program in Appenzell Ausserrhoden. Despite the pilot’s early achievements, including issuing nearly 1,000 credentials with minimal support cases, Jans acknowledged ongoing challenges and the need for improved communication. The project faces complexities due to evolving approaches to digital ID and the pending details of the European Union’s eIDAS 2.0 regulation. Switzerland also lacks a legal basis for a federal digital ID system after voters rejected a proposed “eID Act” in 2021. A new version is currently under parliamentary consideration. Jans emphasized that the new legislation aims to define the core functionalities and trust infrastructure for the e-ID, while maintaining neutrality regarding the technologies to be used, including decentralized identifiers and cryptographic protocols.

Florida Shuts Down Mobile ID, Seeks New Vendor for Re-Try

The Florida government has abruptly shut down its mobile ID service and is seeking a new vendor to build a replacement. The state initially collaborated with Thales, launching the mobile driver’s license app in 2022 after spending around $1.5 million on the project. Approximately half a million users had signed up, but are now being asked to delete the app, which has been deactivated. The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has not provided a reason for the shutdown, though there were user complaints about difficulties with the selfie-based enrollment system. Thales’ contract expired on June 30, and the company chose not to bid for the project’s revival. The FLHSMV has informed users that a new app is expected to be developed by early 2025.

Biometric Border Prep Will Disrupt Olympics Travel, Warns Port of Dover Head

Doug Bannister, head of Britain’s Port of Dover, has warned that the European Union’s forthcoming Exit-Entry System (EES) will cause significant travel disruptions for tourists headed to the 2024 Summer Olympics in France, even before it officially launches later this year. From July 18, processing times at the port are expected to reach up to two hours during peak hours. Bannister advised travelers to avoid arriving more than two hours before their ferry crossings and to ensure they have bookings. The port, along with ferry operators and border authorities, has implemented measures to manage the increased demand, including adding more border control posts and a new freight permit system. Preparations at major Channel crossing points continue to mitigate potential chaos when the EES goes live, requiring non-EU nationals to register biometric information at their first border crossing.

SITA Clears Regulatory Hurdles in Materna IPS Acquisition

SITA has completed the acquisition of Materna IPS, finalizing regulatory and legal procedures to create the world’s most comprehensive passenger service portfolio for airports and digital travel. This strategic integration is expected to accelerate the digitalization of global aviation, improving check-in, baggage handling, and security processes, thereby reducing wait times and enhancing passenger experiences. Materna IPS’s expertise in common use check-in solutions complements SITA’s offerings, which include biometrics, computer vision, and digital travel management. With operations in about 120 airports, Materna IPS bolsters SITA’s capabilities in self-bag drop, biometrics, and Common Use Terminal Equipment (CUTE) and Common Use Self Service (CUSS) kiosks.

Former White House Lawyer Joins Plurilock Advisory Council

Plurilock has appointed Bryan Cunningham to its Industry Advisory Council. Cunningham, a former White House cyber and national security lawyer, brings extensive experience in cybersecurity, national security, and data protection. His notable career includes being among the first 20 staff members at Palantir, serving as Executive Director of Palantir’s outside advisory board on privacy and civil liberties, and acting as a Senior Advisor to the Chertoff Group. He has also held significant government roles, including Deputy Legal Adviser to National Security Advisor Condoleezza Rice and drafting key sections of the Homeland Security Act. Currently, Cunningham is the Executive Director of the University of California, Irvine’s Cybersecurity Policy & Research Institute. This appointment follows Plurilock’s recent extension of a professional services engagement with a major semiconductor company, adding $294,000 in revenue.

Over 7 Million Ethiopians Registered for Digital ID

The Office of the National ID Program in Ethiopia has announced that over 7 million citizens have enrolled for a digital ID, as part of an ambitious plan to enroll over 90 million people, potentially making it one of the largest digital ID systems globally. The project, guided by the motto “one person, one ID,” is a collaborative effort with various institutions. The digital ID system records demographic and biometric data, assigning a unique ID number to each resident, utilizing technologies such as biometrics, machine learning, and cryptography for security. Last summer, the National Bank of Ethiopia launched two major initiatives: one to onboard all financial sector customers onto a robust digital ID platform, serving as a “primary Bank ID” accepted across financial institutions, and another to leverage the digital ID for electronic Know Your Customer (eKYC) processes, enhancing service delivery and enabling trusted digital services like remote onboarding.

South Korean Banking Apps to Include Digital ID by Year’s End

Commercial banks in South Korea are set to introduce digital identification cards on their mobile apps within this year to expand their services into non-banking sectors. The initiative is part of the Ministry of the Interior and Safety’s project to enable private companies to link services to the public sector. The new digital ID service will eliminate the need for users to carry physical IDs for verification at various locations, including polling stations, government offices, and hospitals. Selected banks, including KB Kookmin Bank, NH NongHyup Bank, and a consortium of Kakao and KakaoBank, will offer mobile IDs through their apps. These banks have been expanding their app services to include shopping, event tickets, GPS navigation, and more. In 2022, the South Korean government announced plans to use blockchain technology for digital IDs, aiming to enroll approximately 45 million citizens within two years, potentially saving around 60 trillion won ($42 billion) over a decade.

—

July 16, 2024 — by Tony Bitzionis and Alex Perala