UNIVERSITY OF TWENTE. - SURF · UNIVERSITY OF TWENTE. ... Evaluation And Testing (BEAT) platform A...

Utrecht – Netherland, 03.02.2015

Didier Meuwly Principal scientist, NFI Forensic biometrics chair, UT

UNIVERSITY OF TWENTE. Faculty of Electrical Engineering, Mathematics and Computer Science

The Biometric Evaluation And Testing (BEAT) platform

A solution for a data privacy and open data policy

Didier Meuwly © 2015

UNIVERSITY OF TWENTE. EEMCS


03.02.2015

Outline

Netherlands Forensic Ins2tute Casework – R&D – Educa2on

Forensic Biometrics Defini2ons Modali2es Finger, face, speaker, so> biometrics (body measurements)

Scenarios ID verifica2on, intelligence, inves2ga2on, evalua2on

3




03.02.2015

Outline

Reproducible forensic biometric research

BEAT plaGorm Main objec2ves Legal aspects Data protec2on/privacy, intellectual property Technical aspects

Security, user management

Conclusion

4




03.02.2015

Netherlands Forensic Ins2tute @NFI.nl

Focuses on criminalis2cs Makes use of science for criminal inves2ga2on and evidence evalua2on

5

Staff

0

175

350

525

700

2001 2003 2005 2007 2009 20110

22500

45000

67500

90000

2001 2003 2005 2007 2009 2011

Cases

An integrated modelProducts

and services

R&D Innovation

Education & Training

http://NFI.nl




03.02.20156

Digitale Technologie en Biometrie 1200Front Office 300Forensisch Chemisch Onderzoek 8000Humane Biologische Sporen 41600Microsporen 1300Medisch Forensisch Onderzoek 2900

Netherlands Forensic Ins2tute @NFI.nl

http://NFI.nl




03.02.2015

Products & services

R&D

Educa2on and training

Main tasks

7

Interna2onalUnited nations

International criminal court

International forensic institutes

International CriminalTribunal Former Yugoslavia

Special Tribunal Lebanon

Court special Sierra Leone

International agency for Nuclear Energy

International organisation for migration

Prosecution

Law enforcement

Defense ministery

Secret services

Antitrust

Customs

Tax services

Immigrations services

Dutch




03.02.2015

Products & services

R&D

Educa2on and training

Main tasks

8

Real 2me, on site chemical iden2fica2on Forensic recogni2on and individualisa2on Big Data and Intelligent Data Analysis From source to ac2vity Advancing Forensic Medicine CSI Innova2ons CBRN Forensics Emerging technologies Process op2misa2on in Forensic Inves2ga2on




03.02.2015

Main tasks

Casework

R&D

Educa2on

Main tasks

9

NFI and other prac22oners Dutch and interna2onal law enforcement prac22oners (police and legal) University students (MSc, PhD) Amsterdam, Leiden, Twente European Network of Forensic Science Ins2tutes (ENFSI)




03.02.201510

Biometric data: means any personal data rela2ng to the physical, physiological or behavioural characteris2cs, such as facial images or dactyloscopic data, which allow to recognise individuals to a certain degree, depending on the: -‐ Modality: a complete fingerprint is more discriminant than a complete facial image -‐ Quality of the data: a fingerprint is more discriminant than a fingermark -‐ Applica2on: an open set of 500 millions of people is more challenging than a closed set of 10 persons

Forensic biometrics defini2ons

Forensic biometrics: Human-‐based and computerised biometric methods used to analyse and interpret forensic biometric traces to: – Demonstrate the existence of an offence – Inves2gate an offense – Describe the modus operandi (ac2vity level inference) – Individualise a perpetrator (source level inference)




03.02.201511

Forensic biometrics defini2ons




03.02.2015

Forensic biometrics modali2es

12




03.02.2015

Forensic biometric scenarios

13

Biometric Trace

Intelligence

Forensic evaluation

IDentity verification

Investigation

Criminal jus2ce ID management

List of M candidates

TraceReferenceDataBase

Strength of evidence

Trace fingermark

Suspect fingerprint

Disaster Vic2m Iden2fica2on (DVI)

Case A Case B




03.02.2015

Reproducible forensic biometric research

One terms that aggregates work comprising of: A publica2on describing a scien2fic experiment in all relevant details Code to reproduce all results Data required to reproduce the results Protocols to interpret the results Instruc2ons on how to apply the code-‐data-‐protocol to replicate the results on the paper

14




03.02.201515

Reproducible Research (RR)Results

Review process




03.02.201516

Reproducible Research (RR)

Data privacy Standardisation

Intellectual PropertyCompatibility




03.02.201517

Reproducible Research (RR)

Data privacy Standardisation

Intellectual PropertyCompatibility




03.02.2015

Data Privacy and Protec2on

Ensure professional and social security principles Demonstrate legal and regula2on compliance

Ensure security and privacy of data owners Promote awareness at personal and organisa2on level

Ensure safe handling of available data Ensure con2nuity in the use of data

Prevent unsafe use and leakage of data Maintain incidents to an acceptable level

18




03.02.2015

Take the measures – Create the condi2ons

19

Availability

Integrity Confidentiality/exclusivity

Law and regulation

Business continuity

Security awareness

Measures Preven2ve Detec2ve Repressive Correc2ve

Condi2ons Policy Organiza2on Human-‐centered Physical Technical




03.02.2015

Common criteria evalua2on

20

Tippet plotDetec2on Trade-‐off Curve (DET)




03.02.2015

Hardware -‐ So>ware compa2bility

21

Vulnerabili2es evalua2on




03.02.2015

Biometric Evalua2on And Tes2ng

Beat PlaGorm main objec2ves Framework for standard opera2onal evalua2ons of biometric technologies

Evaluate performance of biometric technology Evaluate vulnerabili2es of biometric systems Evaluate privacy preserva2on mechanisms Standardise protocols and documents (cer2fica2on) Other legal aspects (IPR)

22

beat-eu.org




03.02.2015

BEAT infrastructure in forensic environment

23

Forensic Biometric Systems Biometric data

Fingerprints Face images Audio recordings

beat-eu.org

BEAT back-end server

Biometric data (finger, face, speech)

Forensic scenarios

Computer power

BEAT front-end server

Algorithms uploader Results downloader Results publisher





03.02.2015

BEAT infrastructure for forensic research

24


Biometric data (finger, face, speech) Forensic scenarios Computer power





beat-eu.org


http://www.beat-eu.org/




03.02.2015

beat-eu.org


25





Developed algorithms



Research





03.02.2015

beat-eu.org


26



Uploaded algorithms






Research





03.02.2015

beat-eu.org

BEAT infrastructure for forensic development

27



Uploaded algorithms






Develop- ment Research





03.02.2015

beat-eu.org


28



Uploaded algorithms






Selected algorithms






03.02.2015


29



Uploaded algorithms




NEW Forensic Biometric Systems Biometric data


Selected algorithms


beat-eu.org


User and time managementUser and time management




03.02.2015

beat-eu.org

30



Uploaded algorithms






Selected algorithms



Physical and network security

Intellectual property

Legal aspects




03.02.2015

beat-eu.org

31



Uploaded algorithms






Selected algorithms


EU-Open data policy ✔

EU-data privacy ✔


Legal aspects

R&D current and future projects




03.02.201532



Uploaded algorithms






Selected algorithms


beat-eu.org

Data protection of fingermark/prints in

forensic science

LLM thesis UTilburg-NFI 2014 Chloe Baartmans

Physical and network security of

the BEAT infrastructure Master thesis U?-NFI 2016

X - Y

Fingerprint databases Speaker databases Face databases

NFI intern projectsFingermark interpretation tool Speaker recognition tool

NFI intern projects

Worldwide Research Environment EU-project proposal – 2015





03.02.2015

ConclusionForensic biometric R&D need To select the most appropriate biometric technology for forensic systems (inves2ga2on, intelligence, evalua2on, ID verifica2on) Biometric data for R&D and casework A data protec2on and privacy framework Physical and network security Compa2ble so>ware and hardware Common criteria for evalua2on

33

The BEAT plaGorm offers a solu2on for reproducible research Online open plaGorm to test biometric technology in forensic scenarios Data security, protec2on and privacy Management and 2me monitoring of the users of the data Validated benchmarks Sustainability of the ressources through the availability and security of the data, experiments, results and protocols Management of the Intellectual Property Rights used and created in the the BEAT plaGorm




03.02.2015

Conclusion

34




03.02.2015

CreditsResults Dr. Rudolf Haraksim, University of Lausanne, Switzerland

BEAT-‐WIRE Dr. Sébas2en Marcel, IDIAP, coordinator BEAT and WIRE Dr. André Anjos, IDIAP, BEAT plaGorm designer

NFI data protec2on and privacy Dhr. Joop Bijlsma, NFI, adviseur Integrale Beveiliging

35




03.02.2015

Tijd voor vragen

36




03.02.201538

Abstract

In het kader van zakenonderzoek en R&D processen maakt Het Nederlands Forensisch Instituut (NFI) gebruik van biometrische gegevens. De primair vraag aan het NFI, in verband met biometrische gegevens is: wie is de bron van het spoor? Dit maakt dat het primaire doel van het NFI is om de bewijskracht van een biometrische spoor te kunnen toewijzen, op basis van de vergelijking van dit spoor met een referentie monster van een persoon, meestal verdachte of slachtoffer in een strafrechtelijke zaak. Met de term spoor kan bijvoorbeeld gedacht worden aan een vingerspoor, een gezicht/foto of een stemopname. Een van de R&D programma's van het NFI heet “Forensic Recognition and individualisation”. Meerdere R&D projecten focusen zich op het kunnen toewijzen van een meer objectieve bewijskracht, op basis van biometrische vergelijkingstechnologie en grote aantallen gepseudonimiseerde biometrische data. Echter zelfs al zijn biometrische gegevens gepseudonimiseerd, blijft de privacy van de betrokkene tot wie deze biometrische gegevens behoren in het geding. Met deze reden is het NFI op zoek naar een duurzame oplossing om parallel aan het hanteren van een open data policy, gegevensbescherming te kunnen hanteren. Het EU project Biometric Evaluation And Testing-BEAT (BEAT-EU.org) is momenteel




03.02.201539

Abstract

bezig met de ontwikkeling van een platform dat ook beide aspecten (gegevensbescherming/privacy en open data policy) integreert. Het concept van BEAT is het gebruik maken van de gegevens zonder direct toegang te verschaffen aan deze gegevens. Het BEAT platform biedt ook belangrijke operationele oplossingen voor het forensische biometrische R&D proces: - de fysieke en netwerk beveiliging van de biometrische gegevens, - de management en tijd monitoring van de gebruikers van de gegevens, - de mogelijkheid voor reproduceerbare forensische onderzoek door een online open platform om biometrische systemen in forensische scenarios (opsporing, intelligence, bewijsvoering, identiteit verificatie) transparant en onafhankelijk te kunnen evalueren tegen gevalideerde benchmarks, - de duurzaamheid van de middelen door de constant beschikbaarheid en beveiliging van de gegevens, de experimenten, de resultaten, het ontwerpen van protocollen en instrumenten voor de kwetsbaarheid van de analyse, en het ontwikkelen van standaardisatie documenten voor Common Criteria evaluaties. - de aanpak van de intellectuele eigendom die in het kader van BEAT worden gebruikt en gecreëerd.




03.02.201540

CV

Didier Meuwly is born in 1968 in Fribourg, Switzerland. After a classical education (Latin/Philosophy), he graduated (1993) and obtained his PhD (2000) at the School of Forensic Science (IPS) of the University of Lausanne. Currently he shares his time between the Forensic Institute of the Ministry of Security and Justice of the Netherlands (NFI) where he is a principal scientist and the University of Twente where he holds the chair of Forensic Biometrics. He specialises into the automation and validation of the probabilistic evaluation of forensic evidence, and more particularly of biometric traces. He was previously the leader of a project about the probabilistic evaluation of fingermark evidence, and responsible of the fingerprint section within the NFI. From 2002 to 2004, he worked as a senior forensic scientist within the R&D department of the Forensic Science Service (UK-FSS), at the time an executive agency of the British Home Office. From 1999 to 2002 he was responsible of the biometric research group of the IPS. He is also a founding member of 2 working groups of the European Network of Forensic Science Institutes (ENFSI): the Forensic Speech and Audio Analysis Working Group (FSAAWG) in 1997 and the European Fingerprint Working Group (EFPWG) in 2000. He is still active within the EFWPG. He is also a member of the editorial board and a guest editor of Forensic Science International (FSI).

UNIVERSITY OF TWENTE. - SURF · UNIVERSITY OF TWENTE. ... Evaluation And Testing (BEAT) platform A...

Documents

Transcript of UNIVERSITY OF TWENTE. - SURF · UNIVERSITY OF TWENTE. ... Evaluation And Testing (BEAT) platform A...