BT/ Google Assistant working on ‘Personalized speech recognition’

Paradigm
Paradigm
Published in
41 min readJun 6, 2022

Biometrics biweekly vol. 40, 23rd May — 6th June

TL;DR

  • In March of 2021, Google started using federated learning on Android to improve “Hey Google” hotword accuracy. An upcoming “Personalized speech recognition” feature now looks to help Google Assistant get “better at recognizing your frequent words and names.”
  • Deutsche Telekom considers expanding the use of Nuance voice biometrics after early success
  • Similar arguments to have biometric data privacy suits were thrown out made by Amazon, Microsoft
  • Innovatrics releases semi-passive liveness detection for selfie biometrics checks
  • Sensity alleges biometric onboarding providers downplaying deepfake threat
  • e-con, Goodix launch 3D cameras for facial recognition, people counting, drones
  • Verint, Intelligent Voice partner to help financials meet compliance requirements
  • euCONSENT age verification interoperability: huge success, but the potential to fail
  • SecureAuth launches a continuous, passwordless authentication platform via behavioral modeling
  • Exadel updates open-source facial recognition service for UI, easier CCTV deployments
  • Onfido expands biometrics and AI fraud threat mitigation platform capabilities
  • Miaxis joins MOSIP with compliant biometric scanner SM-91M
  • Dermalog biometrics to power driver monitoring system through auto group partnership
  • Fingerprint Cards, Zwipe announce expansions of biometric payment card reach
  • IrisGuard looks to new tech for further use cases as it handles 25M interactions a day
  • Iris ID at IFSEC 2022: exploring new multimodal biometrics applications
  • Gucci-branded Oura Ring brings luxury to wearable biometrics
  • Ubisecure adds Svipe biometric authentication to IAM platform
  • iDenfy welcomes 500th partner, supports remote notary services with digital ID
  • Videosign partners for ‘eIDAS Qualified’ biometric electronic signatures
  • Orchestrate digital ID to simplify KYC process: Jumio
  • Indian government official claims $29B in savings from Aadhaar
  • $15.5M raised by Incognia to focus on mobile location authentication
  • 1Kosmos receives strategic investment to push passwordless authentication, zero trust
  • Yoti facial age estimation accuracy improves, approval expands in Germany
  • TSA enables Maryland residents to use mobile driver’s license
  • Certify’s face biometrics to ID hospital patients in Washington, D.C. area
  • Sri Lankan university deploys NtechLab facial recognition for security, attendance
  • India’s DigiLocker ties into WhatsApp to improve government service access with digital ID
  • Clearview enters the selfie biometrics market as KYC firms sign up onboarding clients
  • Colombia deploys Tech5 biometrics to streamline the issuance of gun permits, increase security
  • Biometric passports progress in Turkey, Denmark, Suriname
  • The heavy-handed Russian government still can’t easily pull off a massive biometric program
  • Pangea wins Jamaican multimodal biometric voter registry contract
  • Sumsub has released a KYC guide for the crypto industry
  • Researchers claim design flaws with the FIDO2 passwordless authentication standard
  • Dataset generating model boosts biometric performance and privacy, researchers say
  • Regulation to push biometric mobile payment authentication to $1.2T by 2027
  • Humanode invites devs to ‘Hack the Sybil’ in June hackathon featuring $30,000 in prizes
  • Biometric industry events. And more!

Biometrics Market

The Biometric system market size is projected to grow from USD 36.6 billion in 2020 to USD 68.6 billion by 2025; it is estimated to grow at a CAGR of 13.4% during the forecast period. Increasing use of biometrics in consumer electronic devices for authentication and identification purposes, the growing need for surveillance and security with the heightened threat of terrorist attacks, and the surging adoption of biometric technology in automotive applications are the major factors propelling the growth of the biometric system market.

Biometric Research & Development

Latest Research:

Researchers claim design flaws with FIDO2 passwordless authentication standard

A team of researchers has published a paper in the Cryptology ePrint Archive of the International Association for Cryptologic Research which they say identifies security design flaws with a core component of the FIDO2 passwordless authentication standard.

The paper, titled, ‘Provable Security Analysis of FIDO2,’ examines the World Wide Web Consortium’s (W3C) Web Authentication (WebAuthn) specification and the new Client-to-Authenticator Protocol (CTAP2) from the FIDO Alliance, which includes biometrics.

FIDO2 is a passwordless digital ID authentication standard based on public key cryptography that aims for a more secure and easy-to-use online authentication with possession credentials like biometrics. It has seen rapid adoption by popular web browsers, the Android operating system, and various biometric authentication systems like Windows Hello and Keyless.

The researchers write in the paper that there is a lack of analysis on the cryptographic provable security approach to the FIDO2 protocols or the CTAP2, and there are limited results on WebAuthn research. By performing a modular cryptographic analysis of the authentication properties guaranteed by FIDO2 using the provable security approach, the research team sought to uncover vulnerabilities and recommendations to bolster the security of FIDO2.

While WebAuthn’s provable security could be proven, the same could not be said of CTAP2. The team found that CTAP2’s “pinToken” generation at login could be a security vulnerability as it was repeated for subsequent communication, which could compromise security as a whole. It also used an unauthenticated Diffie-Hellman cryptographic key exchange that leaves it vulnerable to man-in-the-middle attacks.

To patch these flaws in CTAP2, the research team proposes strong PIN-based access control for authenticators (sPACA) to replace unauthenticated Diffie-Hellman key exchanges in the binding phase with a password-authenticated key exchange (PAKE) protocol. This would generate a strong key that can be used as the binding state to build the access channel. The team also says sPACA is more efficient, which should be another benefit.

Dataset generating model boosts biometric performance and privacy, researchers say

It is possible to create synthetic samples for facial recognition algorithms that simultaneously maintain code performance and cut privacy leakage, according to an international team of researchers.

The scientists created a two-stage framework they have named FaceMAE because it uses masked autoencoders, or MAEs. It is divided into two — the biometric training and deployment stages. Their work has been published, but not reviewed.

The headline here is that as it generates faces for use as training data, FaceMAE considers face privacy and recognition performance simultaneously, report researchers from the National University of Singapore; University of Edinburgh, Scotland; Tsinghua University, China; and InsightFace, an open-source two- and three-dimensional face analysis library.

The results are encouraging. FaceMAE cuts privacy leakage by about 20 percent. It reduced the error rate by 50 percent compared to the next-best performing method when it was trained on reconstructed images from three-quarter masked faces of the Casia-WebFace dataset.

Synthetic face biometric data generated for algorithm training is already drawing millions in investment, so a method achieving similar privacy protection with better accuracy would be in demand.

FaceMAE’s leak risk was measured based on face retrieval between reconstructed and original datasets. The team’s experiments indicate that the identities of reconstructed images are difficult to retrieve.

A researcher argues for more data to tap ECG biometrics’ potential

Heartbeat biometrics have come a long way over the past two decades, as explained to attendees of an event hosted by the European Association for Biometrics, but more data will be needed to bring the modality’s theoretical inherent advantages to practical applications.

The latest EAB lunch talk was titled ‘I know you by heart: The past and future of ECG biometrics,’ and presented by João Ribeiro Pinto of the University of Porto.

Pinto is a leading researcher in electrocardiogram (ECG) biometrics for the identification of drivers and passengers inside vehicles.

Pinto introduced the concept behind ECG biometrics, including the five waveforms that measure the electrical currents that make the heart relax and contract. The current which affects the heart in this way spread through other cells and can therefore be measured throughout the body through electrodes.

Because the heartbeat is affected by a range of factors, including emotions, fatigue and stress, it can be used to detect these characteristics.

ECG biometrics were also compared to other modalities, with the heartbeat’s complete universality, difficulty to circumvent, and relative distinctiveness and permanence, it is seen as effective for identification purposes.

Scenarios that require near-constant contact between the subject and a surface that can contain an electrode, like health watches and steering wheels, are the most popular for ECG biometrics.

ECG biometrics initially was based on fiducial (spatially represented) measurements of time, amplitude and angles, Pinto notes.

The first step in ECG biometrics is noise reduction, as the signal can be obscured by a range of elements, including the subject’s breathing. Feature extraction follows signal preparation.

The ECG data captured through the traditional configuration of electrodes on the body in medical settings is now known as ‘on-the-person signals,’ Pinto says. In addition to electrode placement, this method is impractical for real-world biometric applications as the subject must lie down and cease activity for the duration.

White paper explores multimodal biometrics advances for inclusive, secure online banking

With the rapid growth of online banking and financial services jolted by the COVID-19 pandemic, biometric authentication has also followed the trend. But concerns over the inclusivity of biometrics over race and gender may make some people disconcerted more than relieved. It is the state of mind that Mitek looks to allay in a white paper examining how multimodal biometric authentication (MBA) is leading inclusive biometric authentication while simultaneously matching convenience and security for financial institutions.

The white paper, titled, ‘Biometrics and bias: the science of inclusivity,’ consists of a question and answer exchange between the company’s chief marketing officer Cindy White and Stephen Ritter, Mitek’s chief technology officer and Alexey Khitrov, CEO and co-founder of ID R&D. As such, the white paper represents an early look at the combined vision of Mitek and its major acquisition from just under a year ago.

As banks used biometric authentication in increasing numbers during the pandemic and consumers showed more acceptance of biometrics to open accounts, MBA is seen as the ideal bridge between convenience and security for users.

The combination of several biometric modalities (for example, face and fingerprint) to authenticate users rather than one is said to address concerns over accuracy across race, ethnicity, age, gender, and transgenderism. With biometric algorithms facing numerous allegations that they contain biases in recognizing people with darker skin and women, Khitrov says ID R&D and Mitek collect a range of biometric data that is ”comprehensive and diverse” to ensure equal and comparable performance. The developers say they have also found a way to accommodate people who are transitioning to another gender without sacrificing biometric accuracy.

When asked how they aim to improve Mitek’s MBA capabilities, Khitrov and Ritter mention efforts to build “build balanced and representative data sets,” a method to measure bias, and supervised machine learning to train analytic models. More broadly, the two say that Mitek attempts to minimize bias through governance infrastructure to test and deliver the biometric models within two weeks.

“We still have room to improve, but continuous improvement is a big part of the agile approach,” says Ritter.

Unite biometric identification and authentication for superior results: white paper

Face biometrics are traditionally used for both biometric identification during the customer onboarding process and subsequent authentication, forcing the user to re-enroll the same modality. Yet the disjointed continuity from separating identification and authentication leads to friction, Consult Hyperion says, which harms the customer experience and introduces more risk. To combat this, Consult Hyperion and sponsor Daon write in a white paper that delivering ‘continuity’ in digital identity by integrating identification and authentication can smooth the customer experience and bolster security.

Consult Hyperion, a digital identity and payments consultancy, notes problems with separating identification and authentication, as it creates multiple digital identity systems that each focus on one element of the customer lifecycle. The white paper, ‘Customer identity continuity: why it’s critical,’ says that authentication should happen immediately after identification concludes, but often does not, which leads to no opportunity to leverage the presentation and validation of evidence that has just occurred. Also, fraudsters have the chance to inject themselves into this siloed process; because authentication has to be conducted repeatedly, it gives the criminal an opportunity to hijack the stage between the authentications.

Rather than reduce risk and give the impression of safety, Consult Hyperion says the siloed approach fuels friction due to poorly designed and fragmented identity solutions, which makes for a less pleasant customer experience. The consultancy says it is more important than ever to repair this problem during a time when digital onboarding grew by leaps and bounds during the COVID-19 pandemic and poor onboarding affects customer retention. In 2021, Daon-supported market research found that customers say that a difficult authentication process reflects negatively on the company and showed a preference for biometrics over passwords.

The consultancy outlines the concept of ‘identity continuity’ in the paper and the different layers that it is composed of.

When biometrics are properly integrated into a workflow architected for identity continuity, Consult Hyperion says it will lead to a single customer identity that enables more consistent management of customer data, a more consistent user experience, better engagement and control with customers, cost savings, and reinforced security.

Professor wins IARPA subcontract to improve long-range, whole-body biometric identification

A West Virginia University (WVU) professor has earned a four-year, $750,000 subcontract to refine the collection of whole-body biometric data at a distance as part of an ongoing project by a research organization of the U.S. Intelligence Community.

Jeremy Dawson, an associate professor of the Lane Department of Computer Science and Electrical Engineering, will form a research group with undergraduate and graduate students enrolled in the university to collect whole-body imaging data from hundreds of voluntary participants to address the challenges of identifying people at extreme distances and angles. The dataset will then be used to train and test biometric algorithms.

“Face recognition performance is severely impacted by distance, the individual’s pose, the lack of adequate resolution; all those things weigh heavily on how well facial recognition systems have been able to correctly identify people,” Dawson comments. “The data that we collect will enable the development of new face recognition algorithms that are robust enough to handle those challenging conditions that are present in real world operational scenarios.”

Dawson says the biometric dataset will be collected at a “relatively close distance” with cameras, and then collect images from long distances and extreme angles while the participants are performing specific actions like walking or interacting with their phones. “Gathering enough data in situations that would make it harder to recognize people is our primary focus,” Dawson says.

The aim is to create a large-scale biometric database of images and videos of a person’s face, gait, body shape, and type to refine the identification accuracy of a biometric algorithm from low-quality images gained from a drone or security camera. Dawson adds that the face and whole-body imagery will help improve human recognition as a whole across age, gender, and ethnicity, thus making more equitable algorithms. WVU says the research will have potential in healthcare, law enforcement, and national security.

The subcontract is part of the Biometric Recognition and Identification at Altitude and Range (BRIAR) program organized by Intelligence Advanced Research Projects Activity (IARPA), a research and development arm of the U.S. Office of the Director of National Intelligence (ODNI). IARPA issued contracts to companies and universities in March as part of its effort to identify and recognize individuals from a distance and disturbances like atmospheric turbulence using drones.

WVU is a subcontractor to Systems and Technology Research (STR), which won the BRIAR contract in March. The university will provide the biometric data to STR and IARPA, which will be then used as a resource for the general research community in biometrics.

ODNI has taken efforts since 2019 to hone whole-body biometric recognition at a distance. In 2020, it published a request for information and released more details for what it was seeking, like the capability to identify people with biometrics from 300 meters being addressed by Dawson.

Main News:

Google Assistant working on ‘Personalized speech recognition’

A teardown by 9to5Google of the Google Assistant app it has uploaded to its Play Store reveals coding that suggests upcoming personalized speech recognition for Google Assistant users.

9to5Google decompiled the Android app file (APK) and found in the Google Assistant settings the description:

“Store audio recordings on this device to help Google Assistant get better at recognizing what you say. The audio stays on this device and can be deleted at any time by turning off personalized speech recognition. Learn more.”

As 9to5Google explains, such notes and coding are suggestions of upcoming features and do not necessarily manifest themselves later.

Recent notes from Google explain that it uses federated learning to improve hotword recognition for activation, already with voice files being stored on devices. This next step would go beyond improving the ‘Hey Google’ hotword, to personalized recognition of a user’s commands to the Assistant and particularly with contact names via analysis of recorded interaction, notes the report.

9to5Google states that smart home devices such as newer models of the Nest Hub are already using a machine learning chip to locally process common queries and this approach may now be coming to Android generally.

Privacy would come by opting out, which would delete any recordings.

Voice biometrics and speech recognition expand amid countermeasures, bad news for Walmart

Voice biometrics, voice recognition, and speech analysis are coming on leaps and bounds, heading to break through the $20 billion barrier as a sector in the next few years. Google looks to be gearing up for further personalization of speech recognition across Android devices while researchers discuss the risks of voice and speech data collection and some of the tools to stop it. Walmart’s bid to have another biometrics lawsuit in Illinois dismissed, this time for voice rather than palm biometrics, as a judge ruled that the privacy claims are plausibly alleged.

Deutsche Telekom considers expanding the use of Nuance voice biometrics after early success

The success of voice biometrics from Nuance for customer authentication has led Deutsche Telekom to consider expanding its use, according to a case study from the technology provider. Nuance is also participating in a new initiative to advance the use of artificial intelligence in healthcare.

The client relationship with Deutsche Telekom was originally formed in 2018, with the network operator using Nuance Voice Biometrics as part of Nuance Gatekeeper to authenticate customers calling into its customer service and support centers using their voice.

Deutsche Telekom currently counts more than 400,000 customers and roughly 30,000 contact center agents. Before customers and agents can be connected, however, they need to be authenticated, a process that can otherwise be time-consuming.

Deutsche Telekom completes authentication using Nuance’s voice biometrics when customers say “At Telekom, my voice is my password.” The system then matches the caller’s voice to the stored voice template, to verify that the caller is genuine.

According to Caroline Clemens, a senior expert in User Interface Design at Deutsche Telekom, deploying Nuance’s voice biometrics system has also helped increase the overall security posture of the company.

Deutsche Telekom was the first company in Germany to deploy Nuance’s conversational biometric technology.

In an eventful time for Nuance, the company has also recently joined forces with The Health Management Academy to launch The AI Collaborative, AINews reports.

The initiative will see various industry partners collaborate on the development of artificial intelligence (AI) and machine learning (ML) solutions for healthcare.

Nuance was acquired earlier this year by Microsoft, which also confirmed it will contribute to The AI Collaborative’s projects.

Onfido expands biometrics and AI fraud threat mitigation platform capabilities

Onfido has added four new products to its biometrics and artificial intelligence (AI)-powered identity verification and authentication service known as the ‘Real Identity Platform,’ promising superior results and performance.

The update is comprised of the Onfido Verification Suite, Onfido Studio, Onfido Smart Capture, and Onfido Atlas AI.

The Verification Suite is a curated library of trusted data sources and identity verification services to offer a user experience tailored around specific fraud and regulatory use cases, compliance requirements, global needs, risk appetite, and business objectives. It is integrated into Onfido’s document and biometric identity verification solution and carries trusted data verification sources like a U.S. social security number and sanctions watchlist, and fraud detection verification through geolocation and phone verification among other options.

Studio is described as an orchestration software built around a no-code platform and analytics tools for businesses. Onfido says it optimizes customer onboarding and authentication in a simple drag and drop interface that can move around documents and biometric checks as part of workflows that address fluctuating market conditions like regulations and new geographies.

Smart Capture is a software development kit (SDK) to build a fraud prevention onboarding experience. It features near field communication (NFC) scanning, image quality enhancements, face detection, and document capture features such as barcode, MRZ and, edge detection. Additional fraud detection capabilities like device tampering and IP intelligence are also included. The company says Smart Capture delivers first-time pass rates above 90 percent and a 20 percent overall capture success rate.

And powering the Real Identity Platform is the Atlas AI. Onfido says it can process 95 percent of identity verification in less than 10 seconds and resulted in a year-over-year improvement in fraud accuracy by 54 percent. Using micromodels, training sets, and oversight from the UK’s Information Commissioner’s Office, the company says it minimizes face biometrics bias by reducing false acceptance rates to 0.01 percent.

Alex Valle, chief product officer of Onfido, says:

“With the addition of multi-dimensional identity verification signals, organizations can now get a more holistic view of their customers and make faster, more informed decisions about which products or services to offer and when to offer them. By combining this with the flexibility of easily integrating identity verification at any point in the customer journey through drag-and-drop workflows, organizations can create the perfect user experience without compromising on fraud protection, all through a single API and best-in-class SDK.”

Yoti facial age estimation accuracy improves, approval expands in Germany

Yoti has published a report on the current state of the art in facial age estimation, and its technology has also been approved to the highest level of age assurance by German regulator KJM, and is being more broadly implemented by a social media platform customer.

The latest results from Yoti’s evaluations of its own technology show a true positive rate (TPR) of 99.65 percent for estimating the age of 13- to 17-year-olds as being under 23, and a TPR of 98.91 percent for estimating 6- to 11-year-olds as under 13. The mean absolute error for people from 13 to 19 years of age is now 1.52 years, and Yoti says gender and skin tone bias has been effectively minimized.

The new white paper on facial age estimation is 38 pages long, nearly half of which is made up of appendices, with the other half dedicated to explaining topics like the ability of humans to detect age, and why Yoti’s age estimation technology, as it does not allow the identification of an individual, does not meet the GDPR definition of ‘biometrics.’

The dataset used by Yoti and the scope of its age-checking test data has each grown. The company says its training dataset for children between 6 and 12 is more now balanced, and data is provided in the latest report for people aged 60 to 70.

Yoti is up to over 500 million age checks performed so far around the world, and the company says its solution can be scaled to support tens of millions of checks each day.

The company has updated its internal evaluations regularly as part of its transparency efforts, with the last issued in October 2021.

Germany’s KJM, which oversees the protection of minors from mass media, has approved Yoti’s age estimation for adult content restricted to those 18 years of age and older.

The new approval represents the first for age estimation at the highest level, according to the announcement. Adult websites operating in Germany were previously required to verify the age of their visitors by checking a physical identity document in person or through an app or video call.

The company’s technology was approved for ‘16+ (erotic)’ content in November, 2021.

Yoti says the combination of its accuracy and liveness detection gives regulators a high degree of assurance that minors will not be able to access material restricted to their age group.

Youth-focused social streaming app Yubo is planning to be the first social media platform to institute “wide age verification,” with the goal of verifying the age of all its users by the end of 2022 through Yoti’s technology, according to a company announcement.

Yoti has been providing its facial age estimation technology to Yubo since 2019, but under a new system will not request any identification documents unless the user’s estimated age does not match their claimed one.

Yubo users submit a selfie, which is checked with Yoti’s liveness detection before being analyzed for age estimation.

euCONSENT age verification interoperability: huge success, but the potential to fail

The encouraging results of the euCONSENT trials for browser-based interoperability for age verification and parental consent were shared at the recent euCONSENT 2022 Conference. However, France’s data regulator found no current options to be acceptable and has put forward its own based on cryptographic signatures, and the euCONSENT warns the project is destined to fail if it does not receive further funding.

‘Online Child’s Rights, Age Verification and Parental Consent: Delivering the Balance’ brought together in Athens the euCONSENT project team, stakeholders and regulators to discuss age verification and parental control in the European Union (and UK).

euCONSENT is a project for browser-based interoperability for age verification and parental control where a user can undergo age verification for one particular site with that site’s preferred verification partner, and then reuse that verification on subsequent sites whose own age verification partner communicates with the former.

The first trial of 1,600 users — adults and children — in five European countries was already announced as a success and now the results show that interoperability among age verification and parental control providers was reliable in almost 100 percent of cases, announced Vangelis Bagiatis, product owner at AGEify, one of the providers involved.

“Interoperability was one of the more if not most important technical objectives of the euCONSENT project, so being able to verify that it works that reliably makes us very, very happy,” said Bagiatis.

Slightly over 50 percent of adults gave the scheme a full 10 points for ease of use and 80 percent gave six points or higher. Among children, 17 percent had to ask for help from parents. Eighty-two percent of parents were happy with the way it worked with children. Ninety-six percent of parents said this approach should be used every time a website wants data from child.

Parental control is the more time-consuming part of the project, according to Bagiatis, but 65 percent managed the process in less than two minutes and 92 percent managed in under five.

A demonstration of the system in action can be viewed here from 12 minutes in.

A further, smaller-scale trial of 400 volunteers will take place in the same five countries from 20 to 30 June to test some of the improvements in UX identified in the first trial and to provide an opportunity to ask more questions of participants. It will test the age verification services from AgeChecked, AGEify and Yoti as well as parental control from JusProg and UpcoMinds.

“Our conclusion at the moment is that there are no real practical solutions that can match all the necessary requirements for security, privacy protection etc,” said Erik Boucher de Crèvecoeur, IT expert at the Digital Innovation Lab (LINC) of France’s data regulator, CNIL.

LINC explores the future of digital society, anticipates the impact of tech innovations on privacy and freedoms, and helps create links between the actors of digital society.

Following France’s 2020 legislation that pornography websites are required to do more for age verification than just provide a checkbox, CNIL issued recommendations on the decree in 2021. These affect biometrics and face analysis.

No direct identity data should be collected by the pornography sites; no biometric identification; no age estimation based on browsing history; and a trusted third-party should be involved in the age verification scheme.

Their analysis finds no solution that matches all these. Requiring an ID credential only works if it is checked biometrically against the website user. Boucher de Crèvecoeur said LINC is precious about the use of biometrics as they are “not proportional I would say for day to day use.”

Third-party databases also pose risks due to the issue of “linkability” between individual identity and tokens used to access particular online services.

His CNIL colleague, Jérôme Gorin, Research and Development engineer at LINC, presented an alternative proof of concept for privacy and security by design for age verification, this time using well-tested cryptographic signatures.

In their version, with a demonstration available, a website creates a ‘challenge’ that needs to be signed. The website user downloads this challenge and takes it to a third party that already knows this individual such as his bank or her utility provider.

This third party, which would be certified by an external certifying authority, would sign this challenge. The website user would then upload the certified, signed challenge to the site which would be able to match it with the first challenge it originally generated.

The website would not know the identity of the site user nor of the third party involved from the signature. This would mean far fewer risks to the user and match France’s requirements. Only the certifying authority would know which third parties had signed which certificates in case it needed to revoke them.

The current process of downloading and uploading could be automated in the future.

SecureAuth launches continuous, passwordless authentication platform via behavioral modeling

SecureAuth has combined behavioral modeling, identity orchestration, continuous authentication and passwordless technology for the first time with the launch of its Arculix platform. It can be used either as a full end-to-end solution or be added to existing digital identity and access management (IAM) systems with out-of-the-box integration with any industry-standard identity provider.

The platform works on AI and ML-powered risk-based behavioral modeling to ensure the right user journey for the right users, across mobile, desktop and SSO. Arculix can be used to manage all customer, employee and contractor identities from a single platform, according to the announcement.

While Arculix can integrate with multi-factor authentication (MFA) methods, its continuous authentication evaluates a user’s level of assurance and if required will step up authentication by communicating with the user via mobile app.

“Organizations are trying to balance the user experience and security of workforce access while also addressing supply chain security, which is crucial for B2B transactions,” comments Paul Trulove, CEO at SecureAuth.

“With Arculix, our customers are getting the best of passwordless, continuous authentication across all users to address the challenges of a diverse threat landscape, digital identity demands and productivity.”

SecureAuth Advisory Board member Tomás Maldonado, CISO at the National Football League, comments:

“Even the large tech players recently announced a commitment to passwordless. SecureAuth’s upcoming Arculix solution seems to have the right vision that goes beyond passwordless to adaptive, continuous authentication that’ll allow organizations a strong security posture while having a frictionless user experience.”

Innovatrics releases semi-passive liveness detection for selfie biometrics checks

Slovak biometrics firm Innovatrics has released a semi-passive liveness check as a presentation attack detection (PAD) method that seeks the best of both worlds from passive and active liveness detection with a selfie.

Innovatrics says the ‘Smile Liveness’ check requires the user to submit a selfie and only smile. The Innovatrics software development kit can detect changes in the user’s mouth and capture the frames of varying facial expressions. These frames are then evaluated by iBeta Level 2-accredited liveness detection algorithms.

“Some of our customers want their users to have a certain level of involvement during the liveness check of the onboarding process. Our goal was to offer them, of course, high security and the best user experience possible. That’s why we developed Smile liveness — it’s easy and natural to smile,” says Daniel Ferak, business unit director of the Digital Onboarding Toolkit (DOT) at Innovatrics.

Innovatrics claims that semi-passive liveness detection offers the benefits of both passive and active liveness detection with strong security and little to no user experience trade-off.

The Smile Liveness software merges Innovatrics’ previous developments in liveness detection using a selfie. It started with an active liveness detection app that required the user to follow a moving dot on the screen. Later, in 2020, it launched a passive liveness capability that does not command the user to perform any action to authenticate their liveness.

e-con, Goodix launch 3D cameras for facial recognition, people counting, drones

German camera manufacturer e-con Systems and Chinese biometrics developer Goodix have each announced the launch of their latest time of flight cameras that can determine the time it takes for a wave to return to a sensor, and can be applied to 3D facial recognition.

Verint, Intelligent Voice partner to help financials meet compliance requirements

Long Island-based security software provider Verint and speech analysis provider Intelligent Voice have integrated their technologies to offer a new voice biometrics and record-keeping solution, Verint Financial Compliance Profiling, which will enable financial and capital market trading organizations to improve compliance oversight and other difficulties related to distributed specialized workforces.

The new solution brings together Verint’s communications capture, data management, operational assurance and analytics offerings, and from Intelligent Voice, speech-to-text algorithms, voice analytics, voice biometrics, and sentiment and behavior analysis capabilities, to address the unique challenges of compliance in equities trading environments.

The new solution can be trained to recognize an organization’s unique lexicon, and can transcribe 25 languages and dialects and multilingual conversations, and enables proactive analysis of trader’s voices through various channels, trading turrets, Microsoft Teams, and other unified communications tools.

This will help tackle some of the challenges that come with a distributed workforce, such as analytics and compliance issues for traditional speech analytics solutions.

“Deployable across a variety of environments to satisfy regulatory and security concerns, Verint Financial Compliance Profiling has unique capabilities purpose-built for the financial services market,” says Ben Shellie, CEO of Intelligent Voice.

“With increasing regulatory requirements driving organizations to capture and analyze more data in less time, the solution’s intuitive engine enables expeditious review of audio that is subject to an alert.”

“For the first time, Verint Financial Compliance Profiling brings together enhanced aComms and eComms voice capture and review features powered by next-gen AI, machine learning, natural language processing, and biometrics technologies into one solution,” Verint’s John Bourne, SVP of Global Channels and Alliances, says. “These capabilities will improve data completeness for our customers.”

Verint says its Financial Compliance solution supports automated policies and compliance workflows, offers an open approach to ease integration and provides a broad range of capabilities to help the financial industry tackle communication compliance, operational assurance, and data governance.

Exadel updates open-source facial recognition service for UI, easier CCTV deployments

Silicon Valley-based software consultancy and engineering provider Exadel has added a slew of features to its CompreFace open-source facial recognition service that aims to smooth out the customer experience and broaden its integration with other systems.

An initial version of CompreFace, a face biometrics app that uses deep neural networks, was released in November 2020 for a variety of industries like retail, hospitality and travel. Exadel released the 1.0 version to improve the user experience through its new user interface (UI), no-code options, ease of deployment, and additional integrations.

The updated UI manages subjects and images to commence facial collection without scripts or code. Exadel says it also helps resolve facial recognition problems by allowing users to check for correct images saved in each subject.

CompreFace now integrates facial recognition from closed caption television (CCTV) managed by the open-source home automation named Home Assistant. This addition allows CompreFace developers to write integrations that allow CCTV facial recognition without writing any custom code with the open-source library Double Take. It also connects Frigate, a network video recorder with real-time local object detection, to CompreFace for facial recognition. File server system unRAID is also given the option of integration using CompreFace and Double Take templates.

Serhii Pospielov, head of the AI practice at Exadel, says:

“With the support of the developer community, Exadel has continued to improved the CompreFace user experience. As AI practices continue to rise, we are seeing more use cases emerge for facial recognition. This open-source service allows anyone to enter the facial recognition market and access highly reliable services without needing deep coding or machine learning experience.”

Miaxis joins MOSIP with compliant biometric scanner SM-91M

Miaxis Biometrics has joined the MOSIP (Modular Open Source Identity Platform) as an ecosystem partner after its SM-91M optical fingerprint authentication scanner has achieved MOSIP compliance.

The device features FIPS 140–2 level 3 secure processor to provide FTM (Foundational Trust Module) capabilities, which in turn enable the scanner to encrypt and digitally sign biometric data in authentication transactions.

Miaxis confirmed FTM keys will be provisioned securely during the production chain, and FTM certificate details burned to OTP memory before the device ships out from the factory for extra security.

The company also said it has invited biometric device and FTM technology providers to submit their devices as compliant with MOSIP, in a self-compliance exercise based on Secure Biometric Interface (SBI) Specification 2.0.

In terms of hardware, the SM-91M scanners are wide enough to perform the reading of a single fingerprint, are powered by USB 2.0/3.0, and support Windows, Linux, and Android-based operating systems.

SM-91M scanners were recently selected by Indian system integrator NPrime Technologies for biometric authentication.

Dermalog biometrics to power driver monitoring system through auto group partnership

Dermalog is partnering with Rheinmetall AG, a defense and automotive technology group, on a joint venture to supply advanced biometric technology to vehicle manufacturers for next-generation driver monitoring systems that can enhance road safety.

The new Rheinmetall Dermalog SensorTec GmbH will develop a system utilizing biometric technology to detect driver distraction and deliver a warning.

The announcement notes that distracted driving is blamed for 100,000 collisions and 500 deaths per year in Germany alone.

“The joint venture with Rheinmetall AG is now set to introduce biometrics into the field of automotive applications. The technology can offer real added value for vehicle safety and even has the potential to save lives when applied to effective driver monitoring,” says Günther Mull, founder and CEO of Dermalog.

Dermalog’s biometrics and AI expertise will be combined with Rheinmetall’s radar technology to develop the system, which will also monitor the rest of the vehicle’s cabin, offering additional features such as alerts if a child is left behind. Object recognition could warn occupants if they have left something behind.

“This joint venture is an important step forward in our transformation strategy that will allow us, in future, to offer cutting-edge technology in the fields of monitoring, authentication and safety to customers in the automotive and industrial sectors,” says Rene Gansauge, CEO of the Sensors and Actuators Division at Rheinmetall.

Gucci-branded Oura Ring brings luxury to wearable biometrics

Oura Health is dipping its toe into the luxury fashion world through collaboration with Gucci. The wearable technology specialist has released a new Gucci-branded version of its third-generation Oura Ring for shoppers who are as interested in appearance as they are in function.

In terms of utility, the Gucci x Oura Ring has all of the same health tracking features as the standard Gen 3 Oura Ring, which debuted in 2021 and retails for about $300 USD. The Gucci version, on the other hand, has a pair of 18-carat gold chains running around the band and bears the Gucci logo repeated in black and gold. Those embellishments come with a hefty cost, to the point that the Gucci x Oura Ring is roughly triple the price of the base model.

As a health tracker, the Oura Ring is able to monitor sleep and activity levels in addition to more conventional metrics like heart rate and body temperature. The company behind it has previously partnered with several high-profile sports organizations, including the Seattle Mariners and the National Basketball Association. In those cases, the data from the Oura Ring can be used to improve athletic performance. With Gucci, the partnership speaks to Oura’s belief that wearable devices can be as forward-thinking in fashion as they are in technology.

“As a health and wellness platform at our core, we recognize that what you wear also impacts how you feel,” said Oura COO Michael Chapp. “Oura’s ring form factor has consistently set us apart in biometric accuracy, comfort and style and with the Gucci x Oura Ring, we’ve brought fashion and function even closer together.”

Humanode invites devs to ‘Hack the Sybil’ in June hackathon featuring $30,000 in prizes

The blockchain specialist Humanode is finishing up its first Humanode Conference. The virtual event took place online this week, on May 31 and June 1, and included 10 sessions spread out over the course of the two-day event. Those in attendance were treated to lectures, panel discussions, and other activities related to blockchain advocacy.

But the conference was just the beginning. Humanode will move on to a Hackathon as soon as the conference wraps up. As the name would suggest, the Hack the Sybil Hackathon is intended to help combat the use of Sybil attacks in blockchain environments. In a Sybil attack, malicious actors create multiple accounts to take control of and manipulate blockchain transactions. Humanode is trying to solve that problem with its proof of existence concept, which uses FaceTec biometrics to link each blockchain node to a single human user to thwart multi-account attacks.

The Hackathon is being set up to encourage other developers to come up with new applications of that technology. Humanode is asking competitors to submit decentralized apps (dapps) that are resistant to Sybil manipulation, and stressed that they can use any technology they want to realize those goals. The apps themselves can similarly be built for any purpose, though Humanode is dividing the competition into five primary categories.

Those five categories are the UI/UX track, the chain tool track, the DAO track, the dapps for human nodes track, and the more open-ended special track, which encapsulates apps in industries like arts and gaming. Humanode will hand out a $6,000 reward to the winner of each track, and its partners are expected to supplement that with additional prizes.

The Hackathon will officially kick off with an opening ceremony on June 2, while submissions are due by June 15. Demos will be displayed on the 16th, and winners will be announced on June 21. Humanode is then planning to follow up on the Hackathon with a grant program in the third quarter of the year.

Humanode secured $2 million in seed funding at the beginning of the year. FaceTec will be participating in the upcoming conference, and recently upped the payout for its spoof bounty challenge to a healthy $200,000.

Similar arguments to have biometric data privacy suits thrown out made by Amazon, Microsoft

Amazon did not use the biometric data of Illinois residents contained in the Diversity in Faces dataset or benefit from the data, the company argues in a motion requesting a summary judgment in Federal Court.

The motion, spotted by Law360, also argues that Amazon had no knowledge of the data of Illinois residents protected by the state’s Biometric Information Privacy Act (BIPA) within the dataset.

Finally, the dataset was only downloaded by the company in Washington and Georgia, as three of the company’s research scientists evaluated it, according to the motion. This, Amazon’s representation argues, puts its actions outside the scope of BIPA, due to the dormant commerce clause of the U.S. Constitution.

Plaintiff Tim Janecyk even invited viewers of his Flickr account, from which the images were taken, to “PLEASE STEAL MY PHOTOS!” and himself did not know the state of residence of the people in his photos, the motion states.

A notably similar motion has been filed by Microsoft and reported by Law Street Media, likewise arguing for summary judgment.

In the Microsoft case, the plaintiff was recently granted additional time for discovery and halted its motion for class certification, which could be revisited.

Microsoft’s argument is that it did not use the dataset within Illinois, had no knowledge of state residents’ data within it, and any alleged violations did not occur “‘primarily and substantially’ in Illinois,” invoking the dormant commerce clause.

Microsoft further contends that it would have been impossible for it to notify or obtain consent from people whose data is in the biometric dataset prior to downloading it, which the company argues nullifies the claim under BIPA Section 15(b).

A hearing regarding the summary judgment will be held on June 10.

China and the EU regulate AI, US speculates

While the European Union is playing the long game in drafting regulations for AI, China has been surprising many with quick yet profound regulations. A report compares the situation for both jurisdictions. On a different tack, the U.S. government looks at ways to improve its AI research infrastructure.

The European Union has a long-standing reputation for regulating many facets of life. Its GDPR has been something of a global hit. With its upcoming AI Act, it attempts to safeguard human rights and society generally. China has also brought in regulations on AI, with something of a scrum between regulators as to who controls it.

A report for CNBC compares the approaches to ask whether one could become the dominant version of regulation, albeit with the EU’s project much broader (and slower) than China’s.

The report looks at whether China’s requirement that firms must inform users if an algorithm is in use to push certain information to them and give them the choice to opt-out is for the public’s interest or government’s. Or perhaps it is simply a large-scale experiment the rest of the world can learn from.

In some ways the technical objectives of the EU and China are similar, and the West should pay attention to China’s moves, according to a commentator. A notable difference is China’s willingness to test novel approaches directly on the public.

Some commentators foresee a divide in approaches to AI development, and particularly in its policing. Firms may have to adapt their products to comply with local regulation, something they are already good at, a commentator tells CNBC.

  • First steps towards federal AI research cross-pollination for the US

The U.S. National AI Initiative Act of 2020 became law in 2021 and brings together AI research across the Federal government to accelerate processes for economic and security gains. As part of the National Artificial Intelligence Initiative, the law established a team to create the roadmap for shared research infrastructure, the National Artificial Intelligence Research Resource (NAIRR) task force in June 2021.

It has published its first assessment of the situation via public meetings and expert consultations. ‘Envisioning a National Artificial Intelligence Research Resource (NAIRR): Preliminary Findings and Recommendations’ establishes a landscape where access to AI development resources is too limited to large firms and rich universities.

“The strategic objective for establishing a NAIRR is to strengthen and democratize the U.S. AI innovation ecosystem in a way that protects privacy, civil rights, and civil liberties,” states the report. It also calls for the NAIRR’s day-to-day operations to be independent of government, for it to sets standards for responsible AI research, be accessible and resource elements, including testbeds, “be accessible in user-friendly ways.”

Testbeds are where the NAIRR crosses with biometrics, as examples of driving research in specific areas. It gives NIST and its Face Recognition Vendor Test as an example for testing biometrics.

To protect NAIRR, it calls for using zero trust architecture with strong identity and access controls, although this is in line with the move for all Federal agencies to adopt the technology.

However, some think the U.S. has already fallen behind China, with other groups such as AI Now also calling for a democratization of AI research.

$15.5M raised by Incognia to focus on mobile location authentication

Incognia, a Silicon Valley-based behavioral biometrics and location authentication provider, has raised a $15.5 million Series A from Point72 Ventures to better position its mobile identity authentication software and diversify its platform.

In May, the company added three location identity modules — location spoofing detection, global mobile address validation and trusted device intelligence — to its digital identity and fraud detection mobile products that leverage location as a potent form of authentication.

Collecting anonymous GPS, Wi-Fi, cellular and Bluetooth radio data produces what Incognia CEO Andre Ferraz calls a “device fingerprint” that locates the device and whoever is carrying it as they try to enter a secured facility.

From there, it compares a log-in attempt to a location template of the user that produces a risk score that enables entry or denies it.

Transitioning Incognia from a behavioral biometrics firm to one that is centered on location authentication is a return to Ferraz’ roots, he says in an interview.

He started his career in security research with passive authentication for Internet of Things applications. After founding a company that analyzed location data for marketing, he revisited the cybersecurity field in 2020 with Incognia to leverage location technology for authentication use.

“The reason why we didn’t execute this business in 2010 when I was a security researcher was basically because the market wasn’t ready. But it’s good to finally, 12 years later, be working on this,” Ferraz says.

The CEO says he initially positioned Incognia in location-based biometrics because it was a “hot space” at launch, but the company later concluded that location authentication was “more powerful” compared to behavioral biometrics, which led it to reposition to location intelligence for mobile devices.

The location authentication technology developed by Incognia is claimed to have a false acceptance rate of 1 in 17 million, which the company says is 10 times more powerful than FaceID’s facial recognition.

Ferraz says there were challenges with introducing location authentication. It created additional pressure to evangelize his new form of authentication.

Yet, being a pioneer in location authentication also bore fruit, as most of its clients were onboarded as an inbound lead because they were searching for location authentication solutions and found Incognia first on search engines. He sees the company becoming a reference in the market now, rather than competing in an existing market.

Despite the switch of direction, Ferraz views the location authentication technology as complementary to biometrics. “For me, there is no silver bullet when it comes to security and authentication. It really depends on the use case and the sensitivity of the transactions.”

Ferraz says he has found the ideal stack for authenticating users securely without introducing too much friction. It is a combination of device fingerprinting, location intelligence, behavioral biometrics and on-device biometrics.

“If you combine these four things, I think you can create a fantastic user experience, but at the same time, secure the users with confidence,” he says. “These things are complimentary in many use cases, where our solution is used as the primary signal and there are other use cases in which where it is the secondary use signal.” But he notes that it depends on the industry, use case, and the type of transaction.

These Weeks’ News by Categories

Access Control:

Consumer Electronics:

Mobile Biometrics:

Financial Services:

Civil / National ID:

Government Services & Elections:

Facial Recognition:

Fingerprint Recognition:

Iris / Eye Recognition:

Voice Biometrics:

Liveness Detection:

Biometrics Industry Events

Critical Infrastructure Protection & Resilience Europe: Jun 14, 2022 — Jun 16, 2022

The Future of Data Protection: Effective Enforcement in the Digital World: Jun 16, 2022 — Jun 17, 2022

Identity Week Europe: Jun 28, 2022 — Jun 29, 2022

ICT Spring: Jun 30, 2022 — Jul 1, 2022

Identity India 2022: Jul 7, 2022 — Jul 8, 2022

Identity Week Asia: Sep 6, 2022 — Sep 7, 2022

Future Tech Expo & Summit: Sep 12, 2022 — Sep 13, 2022

MISC

  • The Race to Hide Your Voice:

Subscribe to Paradigm!

Medium. Twitter. Telegram. Telegram Chat. Reddit. LinkedIn.

Main sources

Research articles

Biometric Update

Science Daily

Identity Week

Find Biometrics

--

--