Published September 5, 2024 | Version v1
Conference paper Open

Biometrics Data Space: Ensuring Trustworthy and Secure Data Exchange for Suspect Identification

  • 1. Department of Electrical and Computer Engineering, University of Thessaly, Volos, Greece
  • 2. CERTH, The Centre for Research & Technology, Hellas, Volos, Greece
  • 3. Research & Innovation Development, Netcompany-Intrasoft S.A., Luxembourg, Luxembourg
  • 4. Dept. of Electronic Engineering, Hellenic Mediterranean University, Crete, Greece

Description

Concerns about privacy protection, ethics, and the urgency to adhere to EU regulations for personal data protection are increasing as digital biometric technologies are widely being adopted in order to improve the accuracy of the identification and verification processes. This paper proposes the formation of a Biometrics Data Space, a trusted ecosystem that is based on the Data Spaces technology and offers secure sharing and exchange capabilities of biometric data in potential use cases, such as foreign Law Enforcement Agencies (LEAs) and forensic agencies, with an aim to facilitate the process of reliable identification of the suspects. The suggested identification framework incorporates Privacy Enhancing Technologies (PETs), such as homomorphic encryption, to address data protection concerns. Moreover, Large-Scale Data Indexing is applied to the biometric data to provide a fast and efficient comparison o fag iven facial image with ones stored in owners' local premises and without disclosing any personal information during the search and match process. Furthermore, automated access rights control is implemented by Blockchain Smart Contracts that are integrated into the Biomet-rics Data Space framework. The main objective of the suggested framework is to offer a reliable and automated identification system that ensures trust, data sovereignty, interoperability, and robust data protection.

Files

Biometrics Data Space Ensuring Trustworthy and Secure Data Exchange for Suspect Identification.pdf

Additional details

Funding

European Commission
TENSOR - Reliable biomeTric tEhNologies to asSist Police authorities in cOmbating terrorism and oRganized crime 101073920

References

  • B. Otto, "The evolution of data spaces," in Designing Data Spaces: The Ecosystem Approach to Competitive Advantage. Springer International Publishing Cham, 2022, pp. 3–15.
  • B. Otto, S. Steinbuss, A. Teuscher, and S. Lohmann, "IDS Reference Architecture Model," Jul. 2021. [Online]. Available: https://doi.org/DOI:10.5281/zenodo.5105529
  • K. R. Moses, P. Higgins, M. McCabe, S. Prabhakar, and S. Swann, "Automated fingerprint identification system (afis)," The fingerprint sourcebook, vol. 1, pp. 6–1, 2011
  • H. M. El-Bakry and N. Mastorakis, "Personal identification through biometric technology," in 9th WSEAS International Conference on Applied Informatics and Communications (AIC09), Moscow, Russia, 2009, pp. 325–340
  • E. Commission, C. Directorate-General for Communications Networks, and Technology, "The Assessment List for Trustworthy Artificial Intelligence (ALTAI) for self assessment"'. Publications Office, 2020
  • "EUR-Lex - 52021PC0206 - EN - EUR-Lex, "Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts"." [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52021PC0206
  • "Member States and Commission to work together to boost artificial intelligence "made in Europe"." [Online]. Available: https://ec.europa.eu/commission/presscorner/detail/en/IP_18_6689
  • H. Pettenpohl, M. Spiekermann, and J. R. Both, International Data Spaces in a Nutshell. Cham: Springer International Publishing, 2022, pp. 29–40. [Online]. Available: https://doi.org/DOI:10.1007/978-3-030-93975-5_3
  • "EUR-Lex - 32016R0679 - EN - EUR-Lex, "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)" ." [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679
  • M. Axton, A. Baak, N. Blomberg, J.-W. Boiten, L. B. da Silva Santos, P. E. Bourne, J. Bouwman, A. J. Brookes, T. Clark et al., "The fair guiding principles for scientific data management and stewardship," Scientific data, vol. 3, p. 160018, 2016
  • Gaia-X Association, "Overview - Gaia-X Architecture Document - 22.10 Release," 2022. [Online]. Available: https://docs.gaia-x.eu/technical-committee/architecture-document/22.10/overview/
  • "Eclipse dataspace connector — projects.eclipse.org." [Online]. Available: https://projects.eclipse.org/proposals/eclipse-dataspace-connector
  • U. Ahle and J. J. Hierro, "Fiware for data spaces," Designing Data Spaces, p. 395, 2022
  • "FIWARE TRUE (TRUsted Engineering) Connector: easing data sharing in Gaia-X." [Online]. Available: https://www.eng.it/en/case-studies/true-connector-per-facilitare-la-condivisione-di-dati-in-gaiax
  • M. H. G. Giussani, S. Steinbuss and N. Gras, "Data Connector Report," Jan. 2024. [Online]. Available: https://doi.org/DOI:10.5281/zenodo.10591027
  • V. Dhir, A. Singh, R. Kumar, and G. Singh, "Biometric recognition: A modern era for security," International Journal of Engineering Science and Technology, vol. 2, no. 8, pp. 3364–3380, 2010
  • H. T. Tavani and J. H. Moor, "Privacy protection, control of information, and privacy-enhancing technologies," ACM Sigcas Computers and Society, vol. 31, no. 1, pp. 6–11, 2001
  • X. Yi, R. Paulet, E. Bertino, X. Yi, R. Paulet, and E. Bertino, Homomorphic encryption. Springer, 2014
  • M. Kolvart, M. Poola, and A. Rull, "Smart contracts," The Future of Law and etechnologies, pp. 133–147, 2016
  • C. Esposito, R. Horne, L. Robaldo, B. Buelens, and E. Goesaert, "Assessing the solid protocol in relation to security and privacy obligations," Information, vol. 14, no. 7, p. 411, 2023
  • "EUR-Lex - 52021PC0784 - EN - EUR-Lex, "Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on automated data exchange for police cooperation ("Prum II"), amending Council Decisions 2008/615/JHA ¨ and 2008/616/JHA and Regulations (EU) 2018/1726, 2019/817 and 2019/818 of the European Parliament and of the Council"." [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=COM%3A2021%3A784%3AFIN