European Union's TURBINE (TrUsted Revocable Biometric IdeNtitiEs) Research Project

Aug-29-08
TURBINE (TrUsted Revocable Biometric IdeNtitiEs) is a research project awarded 6.3 Million Euro funding by the European Union under the Seventh Framework Programme (FP7) for Research and Technology Development.

Lasting three years, TURBINE aims to develop innovative digital identity solutions, combining:

• secure, automatic user identification thanks to electronic fingerprint authentication
• reliable protection of the biometrics data through advanced cryptography technology.

Research efforts will focus on transformation of a description of fingerprints, so that the result can only be re-generated by the person with the fingerprints. TURBINE will hence provide the assurance that:

1. the data used for the authentication, generated from the fingerprint, cannot be used to restore the original fingerprint sample

2. the individual will be able to create different "pseudo-identities" for different applications with the same fingerprint, whilst ensuring that these different identities (and hence the related personal data) cannot be linked to each other, and

3. the individual is enabled to revoke an identity for a given application in case it should not be used anymore.
The outcome of the project is intended to meet usage requirements for various market segments, such as ebanking, eGovernment, eHealth, physical access control, and mobile telecommunications.

The TURBINE consortium comprises major players in biometrics and cryptography, including Sagem Sécurité, Philips Research Europe, Sagem Orga, Precise Biometrics in Sweden, Cryptolog and ARTTIC in France, 3D-GAA S.A. in Greece, as well as academic research groups from Katholieke Universiteit Leuven in Belgium and Gjøvik University College in Norway. In addition, two expert groups have been set up to advise the consortium on:

• The Data Protection Advisory Board (DPAB), dealing with data protection and privacy regulations

• The User Advisory Board (UAB), dealing with the business requirements for eID management of stakeholders of different application sectors.

The project work plan has 4 main Sub-Projects (SP) focussing on research and technology development and a central Sub-Project covering non-technical activities, shortly described here below.

SP1: Requirements and Operational Configuration for Fingerprint PETs
SP1 addresses the application requirements, services schemes, application architecture and operational configuration for Privacy Enhancing Technologies able to ensure a secure management of identity and pseudo-identities using protected biometrics for the benefit of the citizen and of the identity provider. The result of SP1 is the technical and legal framework of TURBINE. SP1 drives the overall TURBINE research and solution selection relative to a practically deployable identity management scheme.

SP2: Interoperable Template Protection Schemes for Fingerprints
SP2 is dedicated to research on the criteria and mechanisms ensuring that protected biometric information cannot be inverted or used to retrieve the original biometric sample, and that multi-vendor solutions for protected biometric identity will interoperate. Research is dedicated to the definition and implementation of a technology solution that allows revoking a protected biometric identity, and to the processing of a biometric sample to generate different protected biometric templates, whereby an individual, when his protected biometric identity is revoked, can be issued with a new protected biometric identity.

SP3: Cryptographic Protocols for Trusted Identity
SP3 deals with security and identity trust. Research consists in setting up cryptographic protocols to manage identity based on the requirements identified in SP1 and the algorithms developed in SP2. Attack's scenarios are defined and assessment of the security is evaluated. The result of SP3 is a security evaluation of the trusted identity scheme of TURBINE.

SP4: Evaluation of Performance, Privacy and Interoperability
Research activities in SP4 concern protection mechanisms and interoperability benchmarking and the evaluation of core performance capabilities against project goals. Demonstration activities are organised in two axes: on the one hand, an extensive biometric performance interoperability test is conducted; on the other hand, direct end-user and eService provider demonstrators are assessed and their evaluation will show in each case how a single identity (based on the biometric characteristic of an individual) may generate several identities with different levels of trust, how these can be used, and how a "pseudo-identity" could be revoked, and new identity re-generated based on the same biometric characteristic of an individual. Protection mechanism on biometric references are also evaluated for the generic and real-life application demonstrators.

For more information please see:
http://www.turbine-project.org/index.php

Editor:findBIOMETRICS