biometric applications in public sector

Our Vision: To be a role model and reference point in proofing individual identity and build wealth informatics that guarantees innovative and sophisticated services for the benefit of UAE

www.emiratesid.ae © 2010 Emirates Identity Authority. All rights reserved

Federal Authority| هيئــــــــة اتحــــــــــــادية

“Biometrics Applications in Public Sector”

2011 16 November 2011

Time: 14:50, Nov 16, 2011 (Wednesday)

CIBRA 11 VI Biometrics International Conference of the Argentine Republic November 14-16, 2011 | Ciudad Autonoma de Buenos Aires

© 2010 Emirates Identity Authority. All rights reserved هيئــــــــة اتحــــــــــــادية |Federal Authority

Presentation Content

• Introduction: United Arab Emirates

• National Identity Management Project

• Mission Critical Projects

• Biometric Projects / Applications

• Critical Considerations


4

Introduction

UAE oil reserves are ranked as the world's sixth-largest[12] and it possesses one of the most developed economies in West Asia.

• World 6th Largest: oil reserves.

• Most developed economies in West Asia.

United Arab Emirates

http://en.wikipedia.org/wiki/Oil_reserves_in_the_United_Arab_Emirates

http://en.wikipedia.org/wiki/List_of_countries_by_proven_oil_reserves



http://en.wikipedia.org/wiki/United_Arab_Emirates



http://en.wikipedia.org/wiki/West_Asia

http://en.wikipedia.org/wiki/West_Asia


5

• Population: 9 million.

• UAE Citizens 20% vs. 80% Foreigners

representing 200 nationalities.

• Growth Rate: 6.5%.

After financial crisis: 20%.

• Need for identification in midst of such

diverse and mixed population!

Demographics

Introduction


Strategic Objectives

Identity Management Infrastructure

enhance homeland security

minimise identity theft

improve access/delivery of public service

one card multi-uses

support strategic decision making

support e-Gov and e-Commerce

Economical

Security


Federal Identity Strategy

• In recognition of the UAE

government of the imperative

need of a National Identity

strategy

• Emirates Identity Authority was established in 2004

• with the Vision to be the principal reference for

establishing the personal identity and providing

population data in the UAE.


Enrolment Process?

E-Voting

CARD ISSUANCE

ID R

egis

trat

ion

-Cyc

le

ENROLMENT

BIOMETRIC CHECK

VERIFICATION

APPLICATION

FORM


Enrolment Process?

E-Voting

CARD ISSUANCE

ID R

egis

trat

ion

-Cyc

le

ENROLMENT

BIOMETRIC CHECK

VERIFICATION

APPLICATION

FORM

• capture photo

• hand signature,

• Fingerprints: Rolled , Palm, Writer .


Enrolment Process?

E-Voting

CARD ISSUANCE

ID R

egis

trat

ion

-Cyc

le

ENROLMENT

BIOMETRIC CHECK

VERIFICATION

APPLICATION

FORM

• checking government issued credentials

e.g., passports and visas

• online verification of presented docs

التدقيق على البيانات• وزارة

الداخلية

مكتب التدقيق

املقدمة لوثائقتدقيق البيانات مع ا •

نظام وزارة الداخليةتدقيق البيانات مع •

البصمات املدنيةتدقيق البصمة مع نظام •

البصمات اجلرميةتدقيق البصمة مع نظام •


Enrolment Process?

E-Voting

CARD ISSUANCE

ID R

egis

trat

ion

-Cyc

le

ENROLMENT

BIOMETRIC CHECK

VERIFICATION

APPLICATION

FORM

• background checks,

e.g., biometrics, watch lists…


Enrolment Process?

E-Voting

CARD ISSUANCE

ID R

egis

trat

ion

-Cyc

le

ENROLMENT

BIOMETRIC CHECK

VERIFICATION

APPLICATION

FORM

• Centralised card production

• Registered Mail Post delivery


Ministry of

Education Ministry of

Interior Ministry of

Health Ministry of

Labour

Ministry of

Ministry of

Justice

Population Register

ID Number

Keeping Database Updated (to the minute)

Support Decision Making

Higher Education

Local Authorities

Federal

Authorities

Private Sectors

Ministries

Law

Enforcement

Central

Bank

Integration Platform


Integration Platform

Birth – Marriage – Divorce – Nationality – Residency – Death – Education –

Health Record – Supporting Documents

Ministry of

Interior ...

Individual Record

Ministry of

Justice Ministry of

Education Ministry of

Health

Local

Health Authorities

Local

Education Authorities

Re

liab

ility, c

on

ve

n-

ien

ce

, av

aila

bility

,

co

mp

atib

ility

Inte

rna

tion

al sta

nd

ard

s, an

d

too

ls to p

rote

ct th

e se

cu

rity

an

d c

on

fide

ntia

lity o

f the

da

ta

Population Register

Update procedures

Infrastructure Population Register Identity Management

Changes in Personal data ID Number (primary reference)

Integration Platform General Architecture


UAE Identity Card


8th Generation of Smart Cards (144 KB)


Smart Chip

• Personal information

• 4 digit PIN Code

• Fingerprints

• Digital and Encryption Certificates

• Digital Signature

UAE Identity Card Capabilities


Complexity

Risks

Class I Class II Class III Class IV

None

Pin/

Password

PKI/Digital

Signature

Biometrics

with PKI

* as the level of risk associated with the transactions increases, the choices of authentication gets higher in complexity ..

Authentication Choices

Examples of Transactions


Supporting Public Sector Development: e-Services

The development of a

Secure and Integrated

Infrastructure

to provide

validation and

authentication

services over physical

and digital networks

Need Analysis ?


Primary Objectives

• Authenticating Cardholder

• Validating Card

• Digital Signature and

Time Stamping

(Authentication)

(Card validation )

Central Certification Authority Emirates Identity Authority

Re

liab

ility, c

on

ve

n-

ien

ce

, av

aila

bility

,

co

mp

atib

ility

Inte

rna

tion

al sta

nd

ard

s, an

d

too

ls to p

rote

ct th

e se

cu

rity

an

d c

on

fide

ntia

lity o

f the

da

ta

Certification Authority Services


Service Providers

Sharjah e-Gov

Dubai e-Gov

Abu

Dhabi e-Gov

Federal e-Gov ...

Private Sector

Abu

Dhabi e-Gov

Public and Private Sectors

(Electronic Card Readers)

Re

liab

ility, c

on

ve

n-

ien

ce

, av

aila

bility

,

co

mp

atib

ility

Inte

rna

tion

al sta

nd

ard

s, an

d

too

ls to p

rote

ct th

e se

cu

rity

an

d c

on

fide

ntia

lity o

f the

da

ta

Banking Sector

Central Certification Authority Emirates Identity Authority

Certification Authority General Architecture


Abu Dhabi e-Government Portal [ www.abudhabi.ae ]


29

• Automated passenger

clearance system at Airports .

• Since 2002: 1st in the region and 3rd in world.

• 4 million travelers in 2010

• Government Plan: Compulsory .

Passport Control

E-Gate


30

• 20,000 travellers .

• Since 2001: 1st in the world,

land, sea and airports.

• 2.4 million database >15 billion cross comparisons in an

exhaustive (1:n) comparison

• 320,000 people detected.

Border Control

Iris Recognition


31

• Detect persons

who might pose a threat to the country. (People who should be

denied entry or detained).

• Since 2008: at airports (Trial).

• Expected to be rolled at all points of entry in the

coming 2 to 3 years.

Facial on the Move

Facial Recognition


32

• Since 2010.

• Objective: collect DNA

samples of 10 million people

both national citizens and foreign residents in the next

few years.

• contribute to areas related

to crime detection and

identification of criminals.

Crime Detection

Federal DNA Project


33

National Council Elections E-Vote :

Instant Results!

UAE ID Card







• Critical Considerations • Critical Considerations


Biometrics Systems: Chicken or Egg Dilemma !


36

• Current Practices:

services before enrolment !

Governments worldwide

Biometrics Systems


Interoperability

Systems need to be

interconnected…

Systems today are

bigger than ever

before…

complexity

increases

exponentially

with size…


38

Fragmented Field

Interoperability of Systems

Static User Interface

Semantic Ambiguity

Locational Ambiguity

Different Data Structures

Different Data Models

Different Data Models

Heterogeneous Computing Networks

• Few vendors talk much

about it

• Interoperability problem

actually consists of many smaller, but in themselves,

extremely complex

problems.

Interoperability issues


39

• Level to which diverse systems can exchange and

process information (data) without human intervention.



Defines the degree to which the information

can be successfully “transported” between systems.

Ensures that the information sent and

received between systems is unaltered in its meaning.

Degree to which the integrity of workflow

processes can be maintained between systems.


40

• Functionality: Full interoperability

between all

devices

• Simplicity: implementation

• Serviceability: 24 x 7 x 365

coverage and monitoring




41

• Systems

Modelling

• Cloud Computing:

SaaS, PaaS,

IDaaS

• SOA

Architecture

UAE Approach !

Service Oriented Architecture


Ali M. Al-Khouri | Director General |

Emirates Identity Authority | [email protected]

Thank you

www.emiratesid.ae

biometric applications in public sector

Technology

listsfederal authority

wednesdayfederal authority

ecommercefederal authority

identity theft

federal identity strategy

proofing individual

evotingenrolment process

credentials card issuance