Considerations for the social implementation of SSRBA －Secure and Safe Remote Biometric Authentication－

Abstract

The safety and security of cybersociety is supported by reliable identity verification (remote authentication) of users via the Internet. Aiming to achieve more reliable identity verification in society, the author proposes a concept for safe and secure remote biometric authentication (SSRBA) that utilizes users' biometric characteristics. SSRBA uses biometric information (biometric template) collected by a trusted third-party organization and a biometric matcher that has been issued a certificate of functional, performance, and security evaluation results by a trusted biometric matcher model evaluation organization. This allows biometric matching to be performed locally by the user, while the service system can verify the reliability of the matching results. This paper presents a concrete implementation proposal for the SSRBA concept and considers the risks for both service providers and users. Based on this, we propose an example of a biometric matcher configuration that can meet the functional, performance, and security requirements for the biometric matcher, which is the core component of SSRBA. Finally, we summarize future issues to be considered for the social implementation of SSRBA.