THE PERFORMANCE OF BIOCRYPTICS
The GenKey Process:
The challenge solved by the GenKey technology is to convert a biometric input signal with natural variations into a binary repeatable number. This industry break-through has been accomplished over a 6-year intensive research project and is utilizing state-of-the-art techniques from pattern recognition, statistics, and mathematics.
The first step in the proprietary GenKey algorithm is to decompose a fingerprint into three continuous vector fields.
Discriminatory information is then extracted and mapped into a 96 dimensional orthogonal feature space. This feature space is designed in such a way that distances between intra-class samples are minimized and distances between inter-class are maximized.
The 96-dimensional feature vector is then converted to crypto keys. GenKey currently supports two different keys, each with its unique characteristics and applications.
The Standard Key: Is a 1024 bit RSA compatible Public Key. Using these keys, the GenKey technology can be used to address the most demanding biometric authentication problems or elegantly introduce biometrics in applications today using RSA crypto keys.
The Compact Key: Is a shorter representation of the Standard Key consisting of 28 characters. The Compact Key is designed for biometric ID paper applications requiring 1:1 verification in an offline environment. The compact key can be stored as a 1 dimensional barcode together with selected metadata.
Whilst GenKey can make crypto keys out of all biometric modalities the current version support fingerprints only.
How does it Perform?
The GenKey technology has got competitive accuracy; “GenKey Standard Key and Feature Template each delivered genuine and impostor error rates near or below 1.00% at the optimal observed threshold. Given the difficulty of the dataset and the testing concept of operations, these error rates are competitive with higher-end commercial fingerprint matching technologies.” - IBG September 2007
Another third party did a test of the GenKey technology in August 2007 using a 7.500 image database of good quality. GenKey’s Equal Error Rate was 0,03% using two fingers:
“GenKey has developed a technology capable of generating cryptographic keys through data extracted from fingerprint presentations. By taking information from two different fingerprints and localizing recurring data on these two prints, GenKey is positioned to deliver a major breakthrough in biometric functionality. The emergence of this technology has implications for the use of biometrics in applications including but not limited to Civil ID, consumer transactions, and access control.” - IBG September 2007
Matching Speed without Extensive Matching Hardware;
The GenKey Technology is far superior to traditional biometric systems with regard to speed;
“Fingerprint-based identification against databases with over 1m records is a computationally intensive function. Fingerprint systems utilize complex, hardware-intensive architectures to provide matching speeds necessary to support operational throughput and response times. Results from IBG’s evaluation suggest that GenKey’s approach to template generation can provide substantial improvements in 1:N matching speeds. This is important for two reasons. First, GenKey should be capable of delivering reasonable performance in a much lighter hardware environment, reducing both implementation and operational costs. Second, real-time searches against databases should be achievable on portable systems, substantially expanding fingerprint systems’ range of deployment.” – IBG September 2007
In another speed test of the GenKey technology* the algorithm managed 479.000 comparisons pr second. Comparing numbers in stead of minutia templates makes GenKey approximately 100 times faster than traditional biometric systems.
(* Using one core of an Intel Core Duo 6400 2.13Ghz processor and 2 GB of memory with sequential memory access)
Reduced Cost and Effort for Large-Scale System Implementation
“By reducing enrolment and verification data elements to replicable keys, GenKey provides deployers with new alternatives in large-scale deployments. Large-scale biometric systems require complex system integration in order to provide distributed security and authentication functions. GenKey should reduce the cost, complexity, and time-to-usage of fingerprint systems used in many Civil ID, access control, logical access, and other mainstream biometric applications.” – IBG September 2007
Privacy and Revocability
Systems using GenKey's technology only store crypto keys and therefore avoid the need to keep sensitive biometric information in the system, guaranteeing complete privacy to its users. This is different from traditional technologies which rely on storing your images or templates centrally or locally - compromising security and privacy.
GenKey eliminates the need to distribute biometric templates around the networks for authentication purposes. Only the revocable Public Key is distributed.
Using this technology you can easily revoke biometric ID cards, generate new keys and reissue cards.
Offline Capabilities
The Compact Key can be printed as a 1 dimensional barcode on any printable surface such as ID cards, boarding passes, pharmaceutical samples, luggage tags, contracts, event tickets, visa stickers or mark sheets.
This creates a biometric link between a person and the paper with the barcode, allowing offline verification without use of central servers, databases or networks.
The GenKey can also be stored on any storage device like a smart chip or magnet strip.
Visa example: A person is granted a US visa in the US embassy in Moscow. The person’s fingers are scanned, and a visa sticker including a barcode with his Public Key printed and attached to the passport.
At the US border the visa is presented, the Public Key read, and the person is asked to present his fingers for verification. If verified you know for sure that the person in front of you is identical to the person that was granted the visa at the embassy.
This is accomplished without any database or network; there is no link between the embassy and the border.
