biometric authentication via ieee 2410 and decentralized ... · 9/19/2018 · biometric...
TRANSCRIPT
![Page 1: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/1.jpg)
©Veridium All Rights Reserved
Biometr ic Authent icat ion
v ia IEEE 2410 and
Decentra l ized Ident i f iers (DIDs)
![Page 2: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/2.jpg)
National ID cards:no growth
85 Compulsory National ID card
(4+ w/biometrics)
93 w/no national ID card
15 Non-compulsory National ID card (FR w/biometrics)
![Page 3: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/3.jpg)
EVOLUTION
© 2017 Veridium IP Ltd. All Rights Reserved
![Page 4: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/4.jpg)
National biometric databases: growth
National Biometric Databases
(# of fingerprints)
National Biometric Databases for Voting
![Page 5: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/5.jpg)
Country Fingerprints
Australia 2
Brazil 10
Canada 2
China 10
France 2
Gambia 2
Germany 2
India 10
Iraq 2
Israel 10
Italy 2
Netherlands 10
New Zealand 2
Norway 10
Tanzania 2
Ukraine 2
United Kingdom 2
United States 1018 National Biometric Databases
(# of fingerprints)
![Page 6: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/6.jpg)
Armenia Malawi
Angola Mali
Bangladesh Mauritania
Bhutan Mexico
Bolivia Morocco
Brazil Mozambique
Burkina Faso Namibia
Cambodia Nepal
Cameroon Nicaragua
Chad Nigeria
Colombia Panama
Comoros Peru
Congo
(Democratic
Republic of) Philippines
Costa Rica Senegal
Ivory Coast Sierra Leone
Dominican
Republic,
Solomon
Islands
Fiji Somaliland
Gambia Swaziland
Ghana Tanzania
Guatemala Uganda
India Uruguay
Iraq Venezuela
Kenya Yemen
Lesotho Zambia
Liberia Zimbabwe
50 National Biometric Databases for Voting
![Page 7: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/7.jpg)
©Veridium All Rights Reserved
Proposed:
• Allow opening of bank accounts remotely
• NIST 800-63A allows IL3 remotely with witness
• Meet KYC & AML compliance
• Account in pending state until verified
Standard
fingerprint
matcher
KYC & AML ENROLLMENT VERIFICATION
Current:
• Required to open account
• Physically show up at a branch
• Prints must be compared to backend federal
systems (Mexico & Brazil)
![Page 8: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/8.jpg)
BUNQ VIDEO ONBOARDING
©Veridium All Rights Reserved
• Current:
• Video used to verify identity
• National ID card held up
• Proposed:
• Use facial recognition in video
• Interviewer prompts or uses
recording post-interview
• Verification process within
minutes against national records
![Page 9: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/9.jpg)
Video connection activatedUser installs app
IN IT IAL ONBOARDING & ENROLLMENT
User fills in data Onboard officer welcomes you Face enrollment & photo*
4 Fingers enrollmentOnboarding finished Scan both sides of ID
Data and hologram check
Realtime match between ID cardphoto and enrollment photo*
Mobile device registered
![Page 10: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/10.jpg)
AUTHENTICATION
![Page 11: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/11.jpg)
IEEE 2410-2017
Biometric Open Protocol Standard (BOPS)
![Page 12: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/12.jpg)
IEEE 2410-2017
Biometric Open Protocol Standard (BOPS)
![Page 13: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/13.jpg)
2410-2017 configuration options
StorageMatching
Mobile Server
Mobile✅
(FIDO UAF compliant)
✅
Server ✅ ✅
Shares(both mobile and server) ✅ ✅
13
![Page 14: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/14.jpg)
REVOLUTION
© 2017 Veridium IP Ltd. All Rights Reserved
![Page 15: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/15.jpg)
15
SELF-SOVEREIGN IDENTITY
Blockchains
Issuer Inspector
Holder
Cloud
Storage
![Page 16: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/16.jpg)
©Veridium All Rights Reserved
• Current:
• Biometrics held on device and/or
server (FIDO UAF & BOPS)
• Future:
• Biometric Self-Sovereign Identity (B-
SSI)
• References to identity shares via
blockchain
• Actual shares are stored off-chain:
IPFS, OpenPDS, etc.
• BOPS servers fetch shares to
combine from valid sources (aka
Horcruxes)
HORCRUX PROTOCOL
![Page 17: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/17.jpg)
Decentralized Identifiers (DIDs)
![Page 18: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/18.jpg)
Decentralized Identifiers (DIDs)
did:btcr:34832AEED3729DE891-0A237BBE42323C
did:sov:C4718341-031917223490EF231299A2210
did:ipid:AA323CF23187324-123430DAB34891490
did:v1:FF900987483409890ECD323489823488C7
![Page 19: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/19.jpg)
![Page 20: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/20.jpg)
Enrollment
VeridiumID(IEEE 2410)
scan enrollment
QR
create DID(with pubkey & ldsig)
DID
generate keys for DID*
blockchainenrollment
(with uid)
AD,LDAP,
Blockchain,…
phone #
uid
verify(via SMS or email)
2
3
4
5
67
8
* Mobile device holds DID, privkey, address of VeridiumD server, client cert, and uid
1
![Page 21: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/21.jpg)
RPUniversalResolver
VeridiumID(IEEE 2410)
Authentication
blockchain
(RP address, pub key)
![Page 22: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/22.jpg)
RPDID
(with VID address, uid & JWT
encrypted with privkey & RP’s
pubkey)
UniversalResolver
VeridiumID(IEEE 2410)
Authentication
blockchain
1
![Page 23: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/23.jpg)
RPUniversalResolver
DID
VeridiumID(IEEE 2410)
Authentication
blockchain
2
![Page 24: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/24.jpg)
RPUniversalResolverDID doc
(with pubkey)
VeridiumID(IEEE 2410)
Authentication
blockchain
3
![Page 25: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/25.jpg)
RPUniversalResolver
VeridiumID(IEEE 2410)
uid(decrypted with pubkey
in DID doc)
Authentication
blockchain
4
![Page 26: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/26.jpg)
RPUniversalResolver
VeridiumID(IEEE 2410)p
ush
no
tification
Authentication
blockchain
5
![Page 27: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/27.jpg)
RPUniversalResolver
VeridiumID(IEEE 2410)
Authentication
blockchain
6 biometric auth
![Page 28: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/28.jpg)
RPUniversalResolver
VeridiumID(IEEE 2410)
session
Authentication
blockchain
7
![Page 29: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/29.jpg)
RPDID
(with VID address, uid & JWT
encrypted with privkey & RP’s
pubkey)
UniversalResolver
DID
DID doc(with pubkey)
VeridiumID(IEEE 2410)
uid(decrypted with pubkey
in DID doc)
session
pu
sh n
otificatio
n
Authentication
blockchain
1
2
3
4
5
7
6 biometric auth
![Page 30: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/30.jpg)
30
![Page 31: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/31.jpg)
31
![Page 32: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/32.jpg)
32
![Page 33: Biometric Authentication via IEEE 2410 and Decentralized ... · 9/19/2018 · Biometric Authentication via IEEE 2410 and Decentralized Identifiers (DIDs) National ID cards: ... National](https://reader036.vdocuments.us/reader036/viewer/2022062415/5febb21a4c3bd04c666804c4/html5/thumbnails/33.jpg)
Proprietary and Confidential 33
InternetIdentityWorkshop
IIW 27 23-25 October 2018Computer History MuseumMountain View, CA