Biometric Authentication Systems

Fujitsu
PalmVein Sensor

The key is in your hand

FUJITSU Europe Ltd. Group

The neccessity for biometric systems

‹ Various incidents

z Social conditions following the ‘’9-11’’ Î Severe identification

z Increase of fraudulent financial transaction Î Prevention of loss/forgery
z Leakage of classified / private information Î Prevention of leak from

‹ Completion of the “Law protecting personal information”

z Credit card / online banking Î Prevention of criminal access

z Personal data for authorities Î Prevention unauthorized usage

‹ Clear identification, clear verification to accelerate workflows

z Logistics Î Prevention of unauthorized operations

z Travelling Î Prevention of illegal immigration

FUJITSU Europe Ltd. Group

PalmVein sensor's basic method of operation

• Place a hand • Near-infrared • Take a near-infrared • Store the scanning

over the sensor is emitted image data as a template

DB
or

Palm vein sensor

Absorption level (cm-1 mmol-1)

Oxygenated hemoglobin
Deoxygenated hemoglobin

<< Absorb waves near the 760nm

Wavelength (nm) Near-Infrared Vein Pattern

image image

FUJITSU Europe Ltd. Group

Palm veins' characteristics

Straum disjunctum

Epidemis Straum corneum

Clear straum
‹ The palm vein pattern is
Straum granulosum unique.
Melanin granule
Straum spinosum

Melanin cell
‹ There is no secular
Straum basale Keratin cell
change.
Demis

‹ It is difficult to be stolen
Subcutaneous

Cell because the information

tissue

is inside the body.

‹ Palm vein pattern are

Structures of Skin accepted by the sensor
Kenji Ikeda, et.al. Shujun-Sya
“Biological Properties /
only, if the hand is
Medical Equipment Engineering "alive".
(Clinical Engineering Library Series 2)” (2000)

FUJITSU Europe Ltd. Group

Comparision of biometric authentication systems

Biometric System Applications Strenghts Weaknesses Authentication

reliability

¾ suitable for the ¾ low cost ¾ Affected by noise, ¾ Low

Voice
voice reply system health conditions, ect.

Face ¾ combating crime ¾ direct view ¾ Sensitive to light ¾ Low

remote authentication of person Forgery by cosmetics
Twins can be not determined

Signature ¾ contracts ¾ natural ¾ Can be forged by other ¾ Low

operation persons, difficult to sign
the same way everytime
¾ low security ¾ low cost, ¾ Affected by dry/wet ¾ Medium
Fingerprint log in applicability skin, abrasion, dirt on
the sensor's surface

¾ person identification, ¾ high ¾ Affected by size of eyes, ¾ High

Iris
access control accuracy eyeglasses, contactlenses,
can be also forged, costs

Palm Vein ¾ High level ¾ high accuracy ¾ Sensitive against ¾ High

security log in, no forgery, direct light influence
access control contactless

FUJITSU Europe Ltd. Group

Benefits of Fujitsu's PalmVein technology

• Contactless operation

Less resistance by people (see IRIS)

Suitable for public usage (hygenic)

• Applicability rate

Almost everybody can register

(Fingerprint 2-3% cannot register)
More complex, there are more factors
to be differentiated to avoid failures

• Using information from inside the body

Difficult to forge palm vein data

Palm veins are unique and permanent
among every person from birth to dead
PV pattern is only accepted from alive hand
Fingerprint-, Facial-, Voice,
• High performance
Sign- & Iris systems
FRR = 0.01% can be forged.
(rejection rate for authorized person) But until today nobody was able to forge
FAR = 0.00008%
(rejection rate for unauthorized person) palm veins

FUJITSU Europe Ltd. Group

Business applications of Fujitsu's PalmVein sensor

• Access Control

• ATMs

• Web Applications • Automobile Industry

• Biometric ID Card • Health Care

• PC Logon • Airline Check-in

• Time Recorder

• Mobile Phone

• CRM

FUJITSU Europe Ltd. Group

 1. Access Control

Standalone Type Network Type

Electrical Lock Template
PV-AC Controller
Management PC

PV sensor
for registration

Compare a pre-registered PV
scan data to PV scan data of
person trying to get an
access to certain facilities Electrical Lock

Applicable Area Hotel Apartment Office … Highly Secured

Area
Reference
University of Tokyo’s hospital for Room Access Security
Meiwa Estate's Clio Shonan-Chigasaki Condominium for front entry security

FUJITSU Europe Ltd. Group

 2. ATM

Smartcard Type Server Type

Smartcard with Server containing
pre-registered Cardholder’s PV scan PV scan data
PV scan data data in microchips

No No
Match PINs Match PINs
Reject Reject
& PV scan data & PV scan data
WAN LAN
Yes Yes

(Financial Transaction)

ATM with PV ATM with PV

sensor sensor

Applicable Area ATMs Small Indoor ATMS …

(Banks)
Reference
Tokyo-Mitsubishi Bank’s ATMs in Japan

FUJITSU Europe Ltd. Group

3. Web applications

In UK, 29% of people are putting

Online
off using online banking services
Transaction
due to security concerns.
Match the equality
PC with PV
sensor of PV scan data Yes Financial institutions will lose about
$8 billion to identity theft every year.
No
- Meridian Research
Reject

Server with PV
scan database

Guaranteeing “Secure Financial Transaction” over the Internet

eCommerce mCommerce
Applicable
(online using mobile devices
Area Banking/Shopping/Trading)

FUJITSU Europe Ltd. Group

4. Biometric ID card
Smartcard with
PV scan data Kiosk Terminals
Located on Affected by 9/11, countries
Campus
Student are tightening security on
Records
“Identity Theft / Forgery”

1.British National Identity Card

2.Europe-wide biometric ID
3.U.S. biometric passport program

Applicable Student ID National ID

Area card card
Reference
Chiba Institute of Technology / First Student ID System using Palm Vein
Technology with Smartcards to securely access Student Records

FUJITSU Europe Ltd. Group

5. PC/Notebook log in
PC with PV sensor (or IC card reader) Match pre- registered PV scan data
to PV scan data of the current user
No
Reject to Logon
Request
+ Allow the user
to log on the PC
Yes

Pre-registered PV scan data is

stored either on PC or IC card
Lenovo, which acquired IBM’s personal
computing division, is incorporating biometrics
(fingerprint readers) in some of its ThinkPads.

Toshiba is using signature authentication

for its Tablet PCs.
Logon to Network equipments
such as router, switch, etc

Applicable PC & Server Network Equipment …

Area Manufacturer Maker

FUJITSU Europe Ltd. Group

6. Automobile applications

Every 25 seconds, a motor vehicle is

being stolen in the United States.

Steering Anti-Theft
Wheel Locks Door Locks
Luxury car makers have already been
incorporating
“Biometrics Identification Technology”.

e.g., adjustment of the interior to

driver’s personal settings by the
Ignition fingerprint identification, etc.
Steering Wheel
Control
Auto Adjustment

Applicable Area Aircraft Manufacturing Shipbuilding Defense Industry

FUJITSU Europe Ltd. Group

7. Healthcare
Health Care Hospital’s
Workers Medical Records
Hygienic Contact-less Palm Vein
Via PV
authentication Authentication is an ideal
solution for physical access
inside the hospital.
Hospital Room
Access e.g., operating room, recovery
room, medicine storage room, X-
ray room, etc

St. Vincent Hospitals of U.S. is using Biometric Authentication to improve

the security and simplicity of access demanded by its health care workers.
Catholic Health System of N.Y. is implementing fingerprint identification for
the patients and the compliance rate of patients is as high as 85%.

Applicable Access to Medical Access to Hospital …

Area Records Room

FUJITSU Europe Ltd. Group

8. Airport/airline

Ticketing Security Check Immigration Baggage Claim

Point

Reliability

+ +
Smartcard Smart Baggage Tags

Reduced System Cost Speed

Applicable Travel … Ticket-less Check-

Area Industry in

FUJITSU Europe Ltd. Group

9. Time attendance application
Managing data such as
Management “time to enter”, “time
Server to leave”, etc.
Who is
Attendance
missing
today?

PV sensor Leaving the office Time/Attendance Recorder manages or

monitors the time worked by employees for
the purpose of efficiently processing
payroll and other personnel data.

Applicable Retail Chain Scho Office …

Area Store ol

FUJITSU Europe Ltd. Group

10. Mobile phone application (near future)
Mobile Phone
with PV sensor
After user Allow Mobile
authentication
using PV scan data Transaction

IC chip inside Mobile

Phone (PV scan
data)

Like an embedded fingerprint

reader in mobile phone, a
built-in PV sensor in mobile
phone will soon be realized.
+
“Mobile Phone Wallet”
microchip-laden “mobile phone," which let
people make electronic payments for
everything from lunch to the daily commute.

Applicable Wireless Mobile phone as debit

Area transaction cards

FUJITSU Europe Ltd. Group

11. CRM (near future)
Company Intranet
Sales Force Data Request

Authentication using PV Confidential Database

data

Customer Records, Sales Data, etc

As mobile sales people need to access inside The ASP-type (Application Service Provider)
data regardless of location and time, hosted CRM service is increasing rapidly
growing 105% in 2004 alone. (Source: AMR
biometrics will provide secure and efficient
Research)
authentication against illegal access to critical
data.
More stringent user
authentication will be
Applicable Mobile ASP
needed
Area CRM Service

FUJITSU Europe Ltd. Group

New options for Fujitsu PalmVein sensor (Nov 2005)

PalmSign + Smartcard

¾ Registration
¾ Verification
¾ Identication
¾ Web technology support

To be used for:

¾ Client / server authentication

¾ Web authentication
¾ Web kiosk authentication
¾ Access control
¾ ATM
¾ Vending machine
¾ Video on demand
¾ Logistic operations

FUJITSU Europe Ltd. Group

Thank you, for your attention!

FUJITSU Europe Ltd. Group