Biometric ID

contactless biometrics as a growing trend

Why Contactless Biometrics is a Growing Trend

At Arana Security, we have worked with industry experts to create state-of-the-art contactless biometrics solutions. In this article, we delve into the drivers behind this growing industry. While contactless biometrics solutions are already widely used across some sectors, particularly in BFSI services, the technology is now being expanded for much broader applications across industries, including government and law enforcement, healthcare, military and defence, retail, hospitality and education. The range of touchless technology to be utilised across these industries includes: Facial recognition Contactless fingerprint recognition Iris recognition Palm vein recognition Gait recognition Voice recognition Contactless cards Recent market research published by P&S Intelligence found that in 2021 the contactless biometrics market was worth around $17.3 million and is expected to reach $59.5 million by 2030. So, what are the drivers behind this huge projection of 14.6% CAGR (Compound Annual Growth Rate) for the forecasted period? Health and Safety (Post Covid19) Since the outbreak of the Covid19 pandemic, every industry has been forced to go through a huge shift, quickly adapting to new global health and safety mandates. A key factor in the successful adaptation to the virus has been the integration of contactless biometric devices. The pandemic has inadvertently fast-forwarded the development and public acceptance of these touchless technologies. Even in 2022, there is still a global focus on hygiene and concern about the spread of the virus. Contactless biometric technology allows for the verification of an identity without any physical contact while remaining highly secure, and there is evidence it is becoming increasingly popular post-COVID-19. For example, 32% of businesses now plan to implement touchless access control according to ‘The 2022 State of Physical Access Control Report’ by HID Global. The surge in demand for this touchless tech because of the pandemic has improved accessibility as costs decrease and a growing number of companies worldwide discover the benefits of these solutions. Law Enforcement and Fraud Prevention The rapid development of these contactless biometrics has had huge implications for law enforcement worldwide, including tackling identity fraud and improving border control. For example: In Ireland police may soon be able to use real-time facial recognition and forensic face biometrics from public surveillance cameras. A recent report by Transparency Market Research has suggested North America will lead the global touchless biometrics market, adopting the tech for government and military applications. They highlight that since 2017, the El Paso Police Department has been using biometrics including facial recognition, iris scanning and fingerprint ID for border security. The market has also seen significant uptake across the Asia Pacific for defence purposes, particularly in the fight against increasing terrorist attacks. The implications of this technology for fraud prevention are clear. It is much more difficult to hack a password when it is physiological (facial authentication for your iPhone, for example). The improved security also lies in the accuracy of the technology. A 2020 study found that facial recognition technology is as accurate as 99.97%. The banking and finance sector has significantly contributed to the growth of the industry with their adoption of contactless biometric devices for fraud prevention, securing data and replacing more traditional security which is more susceptible to attacks (PINS and passwords). Government Adoption of Contactless Biometrics Market research shows that the government sector is the largest end user in the contactless biometrics market, driving its growth. As well as for virus control following the COVID-19 pandemic, national governments have been adopting these systems to control crime, improve immigration control and for the security of government buildings. For example, in 2021 the Immigration Department of Hong Kong announced the launch of their ‘Contactless e-Channel service,’ saying: ‘This initiative aims to provide faster, more convenient travel and a more hygienic immigration clearance service for residents.\” This contactless service for residents uses QR code scanning and facial recognition biometric technology. In 2021, the UK government\’s Home Office outlined a new plan to use automated gates and contactless corridors for identity and security checks at UK airports. This would mean passengers could verify their identity without their passport, using biometrics. They stated that new plans are aimed at improving ‘both security and the passage of legitimate travellers through the border’. Biometric Update has reported that Jamaica is implementing a pilot digital biometric ID system to help citizens access their cash assistance schemes. In April 2022, the government reported that $300 Jamaican dollars were still uncollected by beneficiaries. In Pakistan, a social intervention program using a biometrics-based ID card is being rolled out to help women benefit from cash support. Here at Arana Security, we have the latest contactless biometric solutions including touchless fingerprint recognition, multimodal recognition combining fingerprints and vein patterns, facial recognition and iris recognition. If you’d like to be part of the growing ‘contactless biometric trend’ or learn more about how it can benefit your business, speak to one of our team and schedule a security consultation today.

Why Contactless Biometrics is a Growing Trend Read More »

Finger print scanner in use featuring Why biometrics is growing in developing countries

Why Biometrics is Growing in Developing Countries

At Arana Security, we’ve seen an increase in the instalment and use of biometrics in developing countries and wanted to explore why and how this has happened. The World Bank estimates that nearly 1 billion people in developing countries worldwide do not officially exist due to a lack of formal identification. This issue has serious implications for both individuals, businesses and governments, stunting the opportunity for political, economic and social development. The introduction and widespread adoption of biometric identification systems in these developing nations has been key in tackling this issue in recent years, with the rapid reduction of people without formal identities from 1.5 billion in 2016 to 1.1 billion in 2017. So, what have been the driving factors in the growth of biometrics in developing countries? Closing the ‘identity gap’ In parts of the world where it can be difficult to access ID cards, passports or birth certificates, individuals struggle to access services and rights that are taken for granted in developing countries. These include: Healthcare Voter registration Financial aid Payroll and pension services Education Formal employment Mobile phones Bank accounts Travel Without unique and reliable individual identifiers, governments cannot provide goods and services to the population and tax evasion and fraud tend to be prevalent. The resource-intensive paper system used in these countries is easily manipulated and fragile in nature. It has become clear to the governments in these nations that the identity gap is not just a symptom of underdevelopment, but a major contributing factor. Beyond the opportunities for individual citizens, ensuring the entire population has a legal identity is vital for national development, the ability to raise revenue and promoting and encouraging growth in the private sector. The United Nations Sustainable Development Goals include ensuring that everyone has a legal identity by 2030 which prompted groups like the World Bank to set up ID4D (ID for development) and ID4 Africa. With access to biometric technology like our Biometrics ID products, these groups are working to tackle the identity gap challenge and help grow the use of biometrics in developing countries. Developments in technology The technology behind biometrics in developing countries has not always been accessible due to a range of complex factors including cost, infrastructure, remoteness and environment. In recent years rapidly falling costs have opened the biometrics market up to parts of the world that need it desperately, and advancements in biometrics tech have made the identification and authentication of hundreds of millions of people a possibility. Extreme environmental conditions that previously seemed insurmountable have been overcome by tech innovation. Extreme temperature, dust and sunlight that would render tech ineffective have been combated with adaptable, lightweight mobile devices. Combining these devices with biometric technology has facilitated the successful implementation of identity programmes. A booming industry The scope of the identification issue in developing countries has created huge opportunities for biometrics companies which in turn drives innovation and progress. In Africa and the Middle East, the biometrics market is forecast to grow at an annual rate of 21%. By 2027, the global biometrics industry is expected to reach $82 billion, according to the report, ‘Biometrics – Global Market Trajectory & Analytics 2020,’ published by Global Industry Analysts.  In developed countries, biometrics evolved from law enforcement, through border control, to broader use purposes. Due to the identity gap, there has been a much broader application of biometrics in developing countries, especially for delivering public services, from health records and civil registries to public payrolls, pensions and voter registration to name a few. In the more affluent nations, governments have the capacity to carry out national identity programs while in the developing nations, solutions providers are better equipped and experienced. This means there are opportunities for companies to win large national contracts and gain a foothold in local and national markets. In Africa, where over half of the nearly one billion people without legal identity reside, there are many examples of how transformative biometric technology has been for individuals, companies and the way in which governments operate. Nearly 50 African nations have been issued e-passports in a drive to push biometric IDs. In Zimbabwe, the Public Service Commission implemented a biometric system and in 2020 they used it to discover 3,000 ‘ghost workers’ on the payroll. They were then able to remove them and save the country money. In Tanzania in 2020, the government made it mandatory for SIM card users to register their SIM cards biometrically, so now the majority of citizens have a biometric ID. This was a big step to successfully start rolling out biometrics in developing countries at a large scale, allowing the citizens time to adjust and paving the way forward for the installation of biometrics in other applications. There have been initiatives put in place across West Africa with the Bill and Melinda Gates Foundation naming biometrics, bank accounts and mobile phones the ‘trinity’ that will lead to digital inclusion.  The president of ID4 Africa, Dr. Joseph Atick commented on the scope of the issue, “If they don’t exist officially, they cannot have a stake in society, and as a consequence, it’s a priority to rectify. It’s a priority for development agencies because of the opportunity to empower the development indicators.’ To find out more about the biometric solutions we offer at Arana Security, click here.

Why Biometrics is Growing in Developing Countries Read More »

biometrics and cyber crime

Biometrics In the Fight Against Cyber Fraud.

In the not so distance future, we see a digital world where using passwords for protection and identification will be obsolete. Remembering, storing and using user generated password information to access sensitive and personal material will become a thing of the past, as biometrics security will become a far more widespread and sophisticated way to securely access sensitive information. Password or passcode access control is not secure as it does not rely on the actual human, being present at the time of the transaction. Instead, it relies only on the constructed elements i.e., the password, memorable answers, passcodes. Etc being available, which are devolved from the human themselves. All information that can and is readily stolen from unsuspecting victims. As we know, at the heart of biometrics is its ability to differentiate between us based on our biological and personal characteristics like voice, language, iris or fingerprints.  Not in the artifice of protection we give to ourselves through the creation of passwords and memorable phrases. Password/ passcode access control is not secure as it does not rely on the actual human being present at the time of the transaction. Unlike biometric security. As digital fraud is on the increase, the necessity to keep evolving is essential. We know through our own solutions at Arana Security, such as our Biometric Access Control and Biometric ID platform that biometric security offers a vital defence against the rising wave of criminal fraud. In a recent report on cyber fraud by UK Finance, the organisation states that fraud in UK has reached a level where it ‘poses national security threat’.   Figures, reveal that during the first half of 2021, £754 million ($100 million) has already been stolen from digital consumers. According to business internet service provider (ISP) Beaming, small businesses in the UK were particularly impacted, with two-thirds of UK companies, employing between 10 and 49 people, falling victim to some form of cybercrime. This equated to a total cost of 17bn or an average loss of £65,000 per small business in damaged assets, financial penalties and business downtime. We know at Arana Security that biometrics offers a vital defence against the rising wave of criminal cyber fraud. Criminal gangs use a variety of tactics to get our passwords and other sensitive information.  Tactics including phishing, hacking and malicious software. Different and complex approaches which all amount to the same thing, obtaining of personal details to access finances. Cybercrime has the potential to affects us all, even the savviest of consumer or company. Each year the UK Office for National Statistics (ONS) releases a Crime Survey for England and Wales. In the most recent survey for the year ending in March 2018, the ONS estimates that around 4.5 million cybercrimes were committed in England and Wales during that twelve-month period. Of those, around 3.24 million were fraud offences. Recently Chief Technology Evangelist Benoit Grangé, told the Digital Journal that the responsibility for security and consumer protection was firmly at feet of banks, financial institutions and big tech firms, “Big tech needs to be held to account and recognise the role they must play to ensure that consumers are protected from fraud and retain control over their personal data.”   More and more institutions are adopting biometrics security to protect themselves and their consumers including the big high street players such as Allied Irish bank, Barclaycard and Natwest, who all use voice biometrics to authenticate callers. Interesting voice biometrics can be used in reverse too and not only give clearance to the genuine consumers but also identify the fraudulent ones. NatWest Bank recently compared the voices of callers to its contact centre with a library of untrusted voiceprints and shockingly was able to identify 1 in every 3500 calls as a fraud attempt. The future sees biometrics technology continuing to be developed across linguistics and online biometric behaviour too. Different to voice biometrics, which is how we sound, linguistic biometrics tracks the grammar, sentence construction and vocabulary used by a person to create an even more comprehensive digital identity print that is highly unique. Taking this even further and overlaying this information with ‘online behaviour biometrics’, which monitors the way a person holds a mouse, types or swipe/ tap their device, and sends an alert if this is radically different, will offer a level of sophistication currently lacking but fundamentally needed in all online transactions. Biometrics security control offers a lifeline against the swell of fraud, as it is simply much more difficult to obtain someone’s biometrics compared to someone’s password. Arana Security supports business of all size to future proof and protect their concerns through biometric applications that are bespoke and agile to your business needs. If you invest fully now in biometric technology, you will be arming your assets and customers against all forms of criminal cyber activity in the future that sadly is not a case of if it may happen but when.

Biometrics In the Fight Against Cyber Fraud. Read More »

Biometric Liveness, What, Why and How?

What is Biometric Liveness? Biometric data is the unique information that can be used to identify a person with accuracy. It includes uniquely identifiable features such as fingerprint, face recognition, iris, voice recognition. The increased acceptance of biometrics by consumers has encouraged the uptake of these systems on a wider scale. While larger businesses and organisations have embraced the use of biometric systems to have the added security to their systems, it also more cost-effective in the long run not having to use cards and FOBs for access. There is however a need to take biometric systems further so to mitigate against the potential risks of spoofing. This is where biometric liveness will help, a term coined by Dorothy E. Denning in 2001 when she envisioned biometric systems to have an added Liveness element for authentication. “A good biometrics system should not depend on secrecy,\” and,   “… biometric prints need not be kept secret, but the validation process must check for liveness of the readings.\” Liveness is a system ability to detect whether a biometric is from a live person or a spoof, so artefact or lifeless body part. By using AI systems in biometric detection it can help to make a much more secure system. Why is it required? Its’ never been as important to have tools to prevent spoof attacks when biometric systems are used significantly more often in critical infrastructures such as border control, law enforcement, health organisations and voter registrations. Systems need to be designed to protect against current and future spoof attacks. As technology is quickly advancing and developing it brings with it upgrades to security but also potential tools with which security can be compromised. Technology such as 3D printers that can produce highly accurate reconstructions of faces or fingers to be used against biometric systems, the threat of spoofing is serious. # How is it done? Biometric system detection algorithms are not set up to detect ‘live’ from not live, they only need to match what is presented to the enrolled data and so granting or denying authentication. Liveness will not match but will look for other markers that ‘prove’ live presentation and so significantly reduce risks of a spoof attack. There are 3 categories of liveness algorithms that can be used; Active Liveness detection. This requires a challenge and response, for example, the user will be prompted to make a facial action during a facial recognition capture, like a smile or blink. Users are fully aware of the liveness detection measure and so is less secure and poses more risk to fraud. Passive liveness detection. This will rely on background algorithms that assess artefacts in an image, such as an edge or skin texture as well as motion detection. This process does not require the user’s active participation and so is hidden to them so making it the most secure as it’s more difficult for fraudsters to attempt to circumvent it. Hybrid is also one that does not require user interaction but is not opaque and is observable by the fraudsters, making it potentially more vulnerable. Machine learning has allowed for biometric data matching algorithms to become extremely accurate and it’s expected that liveness algorithms will follow suit. It’s important to note that as with biometric matching algorithms, liveness detection must consistently and reliably work for anyone regardless of appearance, device use or environmental factors such as lighting.

Biometric Liveness, What, Why and How? Read More »

Contactless Payment Solutions and How They Work?

Payments that are made using contactless cards or smart devices by touching the reader with the contactless card or device, or to bring in to close proximity to it, without the need for signature or pins to authorise payments. For the reason that no other authentication is required banks limit the maximum payment amount that can be made this with to £45 per transaction. Contactless payment system is a method for consumers to make secure payments by use of; credit and debit cards Smart cards Key fobs Smart devices e.g mobile phones Biometrics How do contactless payments work? Contactless payment solutions use one of two related technologies; RFID and NFC. RFID in simple terms is technology uses radio frequency waves to transmit data between a microchip (tag) and the reader. There are 2 types of RFID chips, passive and active depending on how they are powered. RFID has many applications in different industries and not restricted to Conactless payments. RFID is an industry that is worth $12.08 globally and expected to reach $16.23 billion by 2029. The origin of the technology that made contactless payments possible dates back to 1898, when Nikola Tesla created a system using radio signals to control a device without the need to directly touch it. Not until 1983 was a patent for RFID (radio frequency identification) technology issued to Charles Watson, for one of the two technologies used to make contactless payments. The second technology being NFC (near field communication) which was only accepted as a standard in 2003. NFC technology enables the contactless transfer of data over short distances, unlike RFID can transmit over much longer distances. It’s also the technology that enables the use of mobile phone devices as contactless payment solutions. Two NFC-ready devices brought into close proximity (Max. 4cm apart) can transmit, once they are linked they can exchange data. The fact that they have to be as such close proximity means that it’s more secure as less likely that the transmission can be intercepted.  It was only in 2011 that Barclays and Orange teamed up to allow for Europes first mobile phone payments. It worked by allowing users to top up their phone with £100 and make £15 transactions at a time using their mobile phone. With the technology developing whilst becoming cheaper makes the rise of the Cashless society more likely scenario sooner rather than later. What’s the Future for Contactless? In 2020 the accelerate growth and acceptance of contactless payment caused by the Pandemic has meant a significant number of retail transactions are contactless as people aim to reduce the risk of contracting the virus. Even before the pandemic, contactless card payments accounted for 50% of all debit card transactions for the first time last year. However, contactless payments are now advancing beyond the point of the use of cards and to biometric verification. A number of retailers in the UK are trialing the use of fingerprint biometric terminals. The significant benefits of biometric contactless payments, from increased security, compared to other forms of payment, to the increased ease and speed of carrying out transactions, it’s likely that consumer desire for convenience will drive trends up. For retailers, the benefit is even higher as research has shown that consumers using contactless payments will actually spend more than when using cash, so it’s easy to see why such payment methods will only get further promoted. Arana Security offer a biometric payment terminal using IDEMIA\’s MorphoWave Compact. For more information, please click here. So the question is how soon will the UK catch up to Sweeden’s advancement towards becoming an almost totally cashless society?

Contactless Payment Solutions and How They Work? Read More »

Regulations of Biometric Data for Use in Security

With the increasing popularity of biometric technology in security, companies are moving towards the use of it rather than the more traditional forms. It offers businesses flexibility and enables them to streamline their authentication processes. Biometric security provides a more robust and advanced level of security over traditional forms. It’s important to consider the regulations around the use of such technology and how the data is processed and stored in terms of data privacy laws. With over 120 of the world countries having some sort of data privacy laws but not many speak specifically about biometrics. With some countries, such as Germany, having much stricter privacy laws than others. Are there UK Biometric Laws? There is no single law that specifically governs the collections and storage of Biometric data in the UK, there are a number of laws that legislate on data privacy and include Biometric data. The Information Commissioners Office (ICO) is a government body that is responsible for regulating data privacy issues. The ICO sets out a code of practice but is not a legal act itself. The practical advice that is offered will help organisations comply with the legal framework. In the UK, the  the Protection of Freedom Act 2012 is one that regulates the use of biometrics in two specific instances. It stipulates that Police are unable to retain DNA and fingerprint data, collect from people not convicted of a crime. It also states that schools using Biometrics can only enrol students with consent of both arent and Child, and it includes any type of biometric data. Classification of Biometric Data Biometric data that is used to identify an individual it is designated as ‘sensitive data’ under data privacy laws and so must be treated with particular care and under stricter regulations. The ICO provides guidance on, what it calls, “special data category”. There are several forms of personal data included under this category but the relevant aspect is that it includes Biometric data where it’s used for identification purposes. Under GDPR biometric data is classified as personal data  and its processing requires explicit consent as well as lawful basis. There is an obligation for organisations to consider whether in fact, they need the data and how it will be kept securely. What are the considerations? Organisations crucially need to have lawful basis to process personal data but they also need to be certain weather they need it. Points to consider; Why is the data being collected? What will be done with it? Where will it be stored? Who will have access to it? How will it be secured? Its also important to determine whether the data needed for the identity verification is more sensitive that the information it gives users access to. If this is the case a less rigorous authentication process would be more suited. To carry out a data protection impact assessment (DPIA) will set out the details and considerations and so allowing for an informed decision weather or not the implementation of Biometric system is the way forward. With the biometric technologies booming in the current pandemic the use of non contact authentication is sure to be further adopted by companies worldwide, to overcome health risk concerns. Using biometric authentication will also allow for more remote working in some sectors where security is of the most paramount importance.

Regulations of Biometric Data for Use in Security Read More »

Biometric Data Security – How Safe is Biometric Data

Biometric data is the unique information that can be used to identify a person with accuracy. With every industry being enrolled into the use of biometric authentication, the concerns and reluctance of consumers with regards to the safety of their biometric data becomes ever more important to address them. In 2019 survey showed that 56% of Europeans expressed concern over the security of biometric data.   Although data security has always been an issue, hacking and stolen information has caused many issues for companies/businesses over the years, once a breach is known then passwords and usernames can be changed. However, biometrics cannot be changed as they are unchangeable human features which adds to the complication of securing the data.   To use biometrics for authentication, the data must first be collected, analysed and converted to data, in the form of a biometric template. This will help to keep the biometrics in a more secure format.   The biometric data can be stored in different ways:   Hardware based recognition system  The data is stored locally onto a hardware that will work with the Biometric device to recognize the data. This will give a rapid response as it doesn’t require an external response, instead the data is stored locally. This is one of the more secure methods for storage of the data, as it doesn’t need to be transferred.   Portable Token System The biometric data is stored within a token and be part of a 2-part authentication process, using ID card and the token. This can be a more costly method but as you need 2 step verification, then security is increased, reducing risk of compromise and fraud.   End-user Device Most commonly smartphone device, stores the data on a chip, separate to the device network. This method means that the implementer or the biometric data has no control over it. This is a more secure method as the data is not stored on large database and little risk of hacking.   Biometric Server A cost-effective but potentially susceptible method. The biometric data is held on an external server and should be encrypted when transfer is happening to protect it. It is more susceptible to hacking.   Distributed Data Storage This uses both a server and device to store the data. This system is makes it more difficult for data to be compromised and gives the business complete control of the data. Business must continuously look to the security of their data and improve processes. Also, to opt for the solutions that gives the most secure options for the biometric data and to meet their responsibility to the consumer whose data they must protect.

Biometric Data Security – How Safe is Biometric Data Read More »