Background
Digital identities are indispensable: whether for online banking or for digital federal applications. Secure authentication is also necessary to make various types of applications securely usable for the user. In this call for proposals, three novel forms of biometric authentication are to be researched and the requirements for their encryption developed.
Zielstellung
Biometrics
- Behavioral Biometrics
This method captures data that can be clearly assigned to a person based on their behaviour (e.g. gait, keyboard/mouse/touchpad operating patterns or brain activity). We are particularly interested in the technical realisation of a new type of continuous authentication.
- Stimulus-Induced Biometrics
We use this term to describe a form of biometric authentication in which a specific variable stimulus (e.g. image or sound) is paired with the body’s own reaction to this stimulus (e.g. eye movement, brain activity or bone resonance). The resulting stimulus/response relationship serves as an authentication key.
- Universal Patterns
This refers to biometric procedures in which the body’s own reaction is the same across test subjects (e.g. EKP, eye movements). When adding a personal trigger stimulus a universal pattern is created that can be used for authentication.
Usability & Social Embedding
In the field of behavioural biometrics, we focus on usability and the social acceptance of authentication procedures, too.
When using continuous biometric procedures, additional methods should be developed to ensure that the population gains confidence in the technology and any existing fears can be reduced.
At the same time, the process must be simple and intuitive to use. User interfaces and design principles should therefore be utilised and developed to promote usability.
Cryptography
Cryptographic security must also be provided for each of the three biometric procedures. The biometric procedures for behavioural and stimulus-induced biometrics should be secured in such a way that they meet all requirements for biometric template protection. In the area of universal patterns, we are calling for the development and investigation of specific requirements and attack scenarios. All developments must also be secure with regard to the migration to post-quantum cryptography.
Disruptive Risk Research
Digital identity affects us all. The task of making authentication not only faster and more intuitive, but also more secure, is highly relevant in social, economic, and legal areas. This development will not only have a noticeable impact in the context of the federal government (e.g. in public authorities), but also in the personal lives of citizens, who will be able to authenticate themselves more quickly and securely when shopping online, for example.