- Status: Project phase
Background
Digital identities are indispensable: whether for online banking or for digital applications of the federal government. Secure authentication is also necessary to make various types of applications secure for users. In this call for proposals, three new forms of biometric authentication are to be researched and the requirements for their encryption developed.
Aim
Biometrics
- Behavioral Biometrics
This method records data that can be clearly assigned to a person by their behavior (e.g. gait, keyboard/mouse/touchpad operating patterns or even brain activity). We are particularly interested in the technical implementation of a new type of continuous authentication.
- Stimulus-Induced Biometrics
We use this term to describe a form of biometric authentication in which a specific variable stimulus (e.g. image or sound) is paired with the body’s own reaction to this stimulus (e.g. eye movement, brain activity or bone resonance). The resulting stimulus/response relationship serves as an authentication key.
- Universal Patterns
This refers to biometric procedures in which the body’s own reaction is the same across test subjects (e.g. EKP, eye movements). Combined with a specific personal trigger, this creates a universal pattern that can be used for authentication.
Here, the Self-ID research project aims to implement measurable cognitive reactions to individual self-recognition – i.e. the recognition of one’s own face – as a new biometric authentication feature. The 36-month project is being carried out by Bundesdruckerei, the software company neXenio and the University of Potsdam(Authentifizierung durch Eigenerkennung ► Projekt mit der Bundesdruckerei Gruppe).
Usability & Social Embedding
In the field of behavioural biometrics, we focus on usability and the social acceptance of authentication procedures, too.
When using continuous biometric procedures, additional methods should be developed to ensure that the population gains confidence in the technology and any existing fears can be reduced.
At the same time, the process must be simple and intuitive to use. User interfaces and design principles should therefore be used and developed to promote usability.
Cryptography
Cryptographic protection must also be provided for each of the three biometric procedures. The biometric procedures for behavioral and stimulus-induced biometrics should be secured in such a way that they meet all requirements for biometric template protection. In the area of universal patterns, we call for the development and investigation of specific requirements and attack scenarios. All developments must also be secure with regard to the migration to post-quantum cryptography.
Disruptive Risk Research
Digital identity affects us all. The task of making authentication not only faster and more intuitive, but also more secure, is highly relevant in social, economic and also in constitutional areas. This development will not only have a noticeable impact in the context of the federal government (e.g. in public authorities), but also in the personal lives of citizens, who will be able to authenticate themselves more quickly and securely when shopping online, for example.