Identity News Digest – May 27, 2024

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Officials Voice Schengen EES Concerns from Both Sides of the Channel

French Transport Minister Patrice Vergriete has expressed concerns about the upcoming rollout of the Entry/Exit System (EES) at Schengen area entry points, citing potential operational issues due to insufficient equipment and police personnel. The EES, set to start in autumn, requires non-EU passengers to register personal and biometric data at kiosks, raising fears of significant delays and public order problems, particularly at busy locations like Charles de Gaulle Airport. UK Foreign Secretary David Cameron echoed these concerns, pointing to possible delays at key transit points like Dover and St Pancras. With the Paris Olympic Games approaching, Vergriete emphasized prioritizing pressing security concerns over the EES implementation.

Osaka Expo to Support Biometric Payments, Care of NEC

The 2025 Osaka Kansai Expo will implement a facial recognition system for payments and visitor access management, marking one of Japan’s largest uses of this technology. Developed by NEC, the system, called Myaku-pe!, aims to promote a cashless society by requiring attendees to register their biometric information in advance. The facial recognition payment system will be used at all Expo stores, except for food trucks, which will accept credit cards but not cash. Entry tickets will be issued as QR codes, with additional facial recognition checks for season and summer pass holders. NEC has been developing face-based payment systems in Japan since 2016, partnering with Sumitomo Mitsui Financial Group to trial contactless payments.

EU Calls for Digital ID Proposals, Setting Aside €20M

The European Union has issued a call for proposals under the Digital Europe Programme, setting aside €20 million to enhance the region’s digital ID ecosystem. The call, “DIGITAL-2024-BESTUSE-TECH-06 – Accelerating the Best Use of Technologies,” aims to support the development of a European Digital Identity and Trust Ecosystem aligned with the new European Digital Identity Framework. The objective is to provide all EU citizens with secure electronic identification means by 2030, enabling them to manage identity transactions and share personal data securely. The call encourages pilot projects by public and private entities to validate technical standards and infrastructure for digital identities and trust services. Eligible projects must involve a consortium of at least three independent applicants from different eligible countries and demonstrate cross-border functionality.

Leak of Biometric Police Data in India Signals Rising Risks

A significant data breach has exposed the sensitive biometric information of thousands of law enforcement officials and police applicants in India, including fingerprints, facial images, and other personal details. Discovered by security researcher Jeremiah Fowler on an exposed server linked to ThoughtGreen Technologies, the leak involved nearly 500 gigabytes of data from 2021 to early April. Compounding the issue, a Telegram channel was found advertising the sale of similar biometric data. The incident underscores the urgent need for stronger data protection laws and more stringent data handling practices, especially as the global reliance on biometric data for identity verification increases.

INTERPOL Issues Request for Mobile Biometric Devices

INTERPOL has issued “Open Call for Tender no. 7279”, seeking providers for mobile biometric collection devices and associated solutions. The mobile biometric systems will enable law enforcement officers to capture and verify biometric data such as fingerprints, facial images, and iris scans in real-time, enhancing their ability to identify and apprehend criminals, terrorists, and missing persons globally. The project supports INTERPOL’s Integrated Border Management Task Force (IBMTF) by providing advanced biometric tools for securing borders. The tender emphasizes INTERPOL’s ongoing commitment to modernizing its tools and enhancing international policing through biometric technology. Interested vendors can access details via INTERPOL’s e-tendering platform, with submissions due by June 28, 2024.

Updated EUDI Framework Addresses eSIMs, Authentication

Version 1.4.0 of the European Digital Identity Wallet Architecture and Reference Framework (ARF) has introduced several enhancements to improve usability, security, and interoperability. Key updates include the explicit inclusion of eSIM and SIM cards as Secure Elements (SE) for managing cryptographic keys, leveraging existing mobile infrastructure for secure key and data management. The framework now specifies the use of Secure Cryptographic Devices (SCD) and Qualified Signature Creation Devices (QSCD), along with hardware-based solutions like Trusted Execution Environments (TEEs) and Hardware Security Modules (HSMs) to meet high security standards. The framework also includes enhanced guidelines for GDPR compliance, secure lifecycle management of digital credentials, and refined certification processes to ensure trustworthiness and security within the EUDI ecosystem.

UK Digital ID Bill Falls as Surprise Election Gets Underway

Prime Minister Rishi Sunak’s call for a surprise election has stalled the passage of the “Data Protection and Digital Information Bill” (HL Bill 67), which had progressed through the House of Commons and the initial stages in the House of Lords. Now halted at the Report stage, the bill, which aimed to regulate personal data processing, enhance digital verification services, and improve oversight of digital information practices, is no longer active as Parliament is dissolved. If deemed important by the new government, the bill will need to be reintroduced in the next parliamentary session, restarting the legislative process. This bill was significant for the UK’s digital identity landscape, potentially impacting providers like Yoti.

—

May 27, 2024 — by Tony Bitzionis and Alex Perala