|
|
|
ENHANCING ASSISTIVE
TECHNOLOGIES:
|
|
Standard Biometric Header |
Signature Block |
Biometric Data Block |
Table 1 – Standard Biometric Header Followed by the BDB and the SB.
| Field Name |
Required or Optional |
Notes |
|---|---|---|
|
SBH Security Options |
Required |
‘00’ = plain Biometric ‘10’ = with Privacy (Encryption) ‘20’ = with Integrity (Signed or MACed) ‘30’ = with Privacy and Integrity |
|
Integrity Options |
Optional |
‘01’ = MACed ‘02’ = Signed This field only exists if Integrity is used (i.e. SBH Options=’20’ or ‘30’). |
|
CBEFF Header Version |
Optional |
Version of the CBEFF header. Currently set to: Major: ‘01’, Minor: ‘00’ |
|
Patron Header Version |
Version of header (of a patron format specification or standard) |
|
|
Biometric Type |
Optional |
Indication of biometric type |
|
Biometric Feature |
Optional |
Indicate a choice within a biometric type |
|
Record Data Type |
Optional |
Indication of record data type. Currently set to ‘02’ (Processed, the default). This field doesn’t exist if the default is used. |
|
Record Purpose |
Optional |
Intended use of the data. Currently set to ‘04’ (Enroll for Verification Only, the default). This field doesn’t exist if the default is used. |
|
Record Data Quality |
Optional |
Indication of the quality of the biometric data |
|
Creation Date |
Optional |
Creation date and time of the biometric data |
|
Validity |
Optional |
Valid From and until Dates |
|
Creator (PID) |
Optional |
Unique identifier of the entity that created the biometric data (also known as a Product Identifier – PID). |
|
Index |
Optional |
Unique identifier for the biometric reference (enrollment) data |
|
Challenge/Response |
Optional |
Information used to present a challenge to a user of system. |
|
Payload |
Optional |
Reference data captured during enrollment and used in conjunction with the biometric data. |
|
Subheader/Basic Structure Count |
Optional |
Number of CBEFF Structures that follow this header. Used to help process nested structures. |
|
BDB Format Owner |
Required |
ID of the Group or Vendor which defined the BDB |
|
BDB Format Type |
Required |
Type as specified by the Format Owner |
|
Biometric Data Block (BDB) |
Required |
Defined by the Format Owner |
|
Signature |
Optional |
Signature or MAC. Only present if the SBH value is ‘20’ or ‘30’ |
Please keep in mind that this is work in progress and that the standard is not expected to be finalized, until the end of December 2003. However, the assumption is that only four of the available twelve hexadecimal digits of the Payload Field would be used to identify an individual’s ability limitations and/or access requirements. The two-digits of the Challenge-Response Field would be used to determine which biometric out of the biometrics available to the individual has priority. What's more, given that the ALF will be incorporated into the CBEFF and will therefore be part of the biometric template we had to ask the question. What biometric template storage platforms are available to the ALF and which one of the available platforms primarily embodies the elements of security, accessibility, and privacy? While it is true that the ALF can be deployed on all storage platforms, I believe that the fusion of a contactless smart card with a contactless biometric would be the best platform choice.
Additionally, I have recommended that a two-stage interface process be adopted. What is meant by a two-stage interface process? Stage one is that the individual’s access requirements are established by the electronic device or technology that person is attempting access. Stage two is that the proper biometric authentication challenge or response is presented to the person requesting access.
For example, if a vision impaired individual were attempting to gain access to a public facility. He or she would approach the entrance of the facility where a series of strategically placed proximity sensor would acquire the Accessibility Level Field (ALF). If at this point authentication was not required then the doors would automatically open and the individual could be presented with an audible greeting (i.e. Welcome to the public court house). This would be the completion of stage one. To continue with the scenario, as the individual transverses through the facility he or she may come upon an entry point where authentication of a persons identity is required. At this point stage-one will be repeated whereas the Accessibility Level Field (ALF) would be acquired. In stage-two the Challenge-Response Field will trigger the appropriate biometric application. For this scenario a vision impaired individual could be issued an audible challenge and the user could then reply in the same fashion (voice verification biometric). There are many more scenarios and a multitude of other biometric applications.
In closing to further demonstrate the need for a universal standard, let's say that a government issued universal biometric identification (UBID) contactless smart card is issued to the public. The UBID would ultimately become the standard means of proving your identity, when using an ATM, purchasing goods, buying services, and gaining access to facilities. Furthermore, the CBEFF would comply with legal statues/laws throughout the international communities (i.e. sections 504 & 508 of the ADA).
References
Biocentric Solutions Inc. (n.d.). White paper: Why use a biometric and a card in the same device? Retrieved Jul 3, 2002 from http://www.biocentricsolutions.com /media/whitepaper.pdf
Gill, J. (2002). Design of smart card systems to meet the needs of disabled and elderly persons. Retrieved Jan 3, 2003 from Royal National Institute for the Blind. http://www.tiresias.org/reports/ecart.htm
Gill, J. (1994) (Ed.). Proceedings of the COST 219 seminar on smart cards and disabilities. Retrieved Jan 3, 2003 from Royal National Institute for the Blind. http://www.stakes.fi/ cost219/smartc94.doc
Gill, J. (2002). Smart cards: Interfaces for people with disabilities. Retrieved Jan 3, 2003 from Royal National Institute for the Blind. http://www.tiresias.org/ reports/urcai.htm
Gindin, S. E. (1997). Lost and found in cyberspace: Informational privacy in the age of the Internet. Retrieved Aug 28, 2002 from http://www.info-law.com/ lost.html
INCLUsion of Disabled and Elderly people in telematics (INCLUDE). SATURN Case Study. Retrieved Jan 3, 2003 from http://www.stakes.fi/include/cases.html
National Institute of Standards and Technology. (n.d.). Common Biometric Exchange File Format (CBEFF) Website. Retrieved July 23, 2002 from http://www.itl.nist.gov/ div895/isis/bc/cbeff
The Biometric Foundation. (n.d.). Why Biometrics? Retrieved Jan 10, 2003 from http://www.biometricfoundation.org/whybiometrics.htm
Thieme, M. (n.d.). Biometric usage on a privacy continuum. International Biometric Group LLC. Retrieved Jan 10, 2003 from http://www.bioprivacy.org/ continuum.htm
Thieme, M. (n.d.). Privacy concerns and biometric technologies. International Biometric Group LLC. Retrieved Jan 10, 2003 from http://www.bioprivacy.org/ privacy_fears.htm
Westin, A. (2002). Public attitudes toward the uses of biometric identification technologies by government and the private sector: Summary of survey findings. Opinion Research Corporation (ORC) International. Retrieved Jan 9, 2003 from http://www.search.org/ policy/bio_conf/Biometricsurveyfindings.pdf
|
Copyright © 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007 International Center for Disability Resources on the Internet Disclaimer and Privacy Policy |