Countries applying biometrics

Australia

Visitors intending to visit Australia and returning Australian residents with an ePassport may have to submit to biometric authentication as part of the Smartgate system, linking individuals to their visas and passports. Biometric data are collected from some visa applicants by Immigration particularly in cases of Refugee or Humanitarian Visas. Australia is the first country to introduce a Biometrics Privacy Code, which is established and administered by the Biometrics Institute. The Biometrics Institute Privacy Code forms part of Australian privacy legislation. The Code includes privacy standards that are at least equivalent to the Australian National Privacy Principles (NPPs) in the Privacy Act and also incorporates higher standards of privacy protection in relation to certain acts and practices. Only members of the Biometrics Institute are eligible to subscribe to this Code. Biometrics Institute membership, and thus subscription to this Code, is voluntary.

Brazil

Since the beginning of the 20th century, Brazilian citizens have had user ID cards. The decision by the Brazilian government to adopt fingerprint-based biometrics was spearheaded by Dr. Felix Pacheco at Rio de Janeiro, at that time capital of the Federative Republic. Dr. Pacheco was a friend of Dr. Juan Vucetich, who invented one of the most complete tenprint classification systems in existence. The Vucetich system was adopted not only in Brazil, but also by most of the other South American countries. The oldest and most traditional ID Institute in Brazil (Instituto de Identificação Félix Pacheco) was integrated at DETRAN (Brazilian equivalent to DMV) into the civil and criminal AFIS system in 1999.

Each state in Brazil is allowed to print its own ID card, but the layout and data are the same for all of them. The ID cards printed in Rio de Janeiro are fully digitized using a 2D bar code with information which can be matched against its owner off-line. The 2D bar code encodes a color photo, a signature, two fingerprints, and other citizen data. This technology was developed in 2000 in order to enhance the safety of the Brazilian ID cards.

By the end of 2005, the Brazilian government started the development of its new passport. The new documents started to be released by the beginning of 2007, in Brasília. The new passport included several security features, like Laser perforation, UV hidden symbols, security layer over variable data etc. Brazilian citizens will have their signature, photo, and 10 rolled fingerprints collected during passport requests. All of the data is planned to be stored in ICAO E-passport standard. This allows for contactless electronic reading of the passport content and Citizens ID verification since fingerprint templates and token facial images will be available for automatic recognition.

Canada

Canada has begun research into the use of biometric technology in the area of border security and immigration (Center for Security Sciences, Public Security Technical Program, Biometrics Community of Practice). At least one program, the NEXUS program operated jointly by the Canada Border Services Agency and U.S. Customs and Border Protection, is already operational. It is a functioning example of biometric technology, specifically "iris recognition biometric technology" used for border control and security for air travellers. Canada is also the home for the world's biggest biometric access control company called Bioscrypt Inc..

Gambia

The Gambia Biometric Identification System (GAMBIS) allowed for the issuance of Gambia's first biometric identity documents in July 2009. An individual's data, including their biometric information (thumbprints) is captured in the database. A National Identification Number (NIN), unique to each applicant applying for a card, is issued to the applicant. Biometric documents issued for Gambia include national identity cards, residential permits, non-Gambian ID cards and driver licenses.

Germany

The biometrics market in Germany experienced enormous growth between the years 2005 and 2009. "The market size will increase from approximately 120 million € (2004) to 377 million €" (2009). "The federal government will be a major contributor to this development". In particular, the biometric procedures of fingerprint and facial recognition can profit from the government project. In May 2005 the German Upper House of Parliament approved the implementation of the ePass, a passport issued to all German citizens which contain biometric technology. The ePass has been in circulation since November 2005, and contains a chip that holds a digital photograph and one fingerprint from each hand, usually of the index fingers, though others may be used if these fingers are missing or have extremely distorted prints. "A third biometric identifier – iris scans – could be added at a later stage". An increase in the prevalence of biometric technology in Germany is an effort to not only keep citizens safe within German borders but also to comply with the current US deadline for visa-waiver countries to introduce biometric passports. In addition to producing biometric passports for German citizens, the German government has put in place new requirements for visitors to apply for visas within the country. "Only applicants for long-term visas, which allow more than three months' residence, will be affected by the planned biometric registration program. The new work visas will also include fingerprinting, iris scanning, and digital photos".

Germany is also one of the first countries to implement biometric technology at the Olympic Games to protect German athletes. "The Olympic Games is always a diplomatically tense affair and previous events have been rocked by terrorist attacks—most notably when Germany last held the Games in Munich in 1972 and 11 Israeli athletes were killed".

Biometric technology was first used at the Olympic Summer Games in Athens, Greece in 2004. "On registering with the scheme, accredited visitors will receive an ID card containing their fingerprint biometrics data that will enable them to access the 'German House'. Accredited visitors will include athletes, coaching staff, team management and members of the media".

As a protest against the increasing use of biometric data, the influential hacker group Chaos Computer Club published a fingerprint of German Minister of the Interior Wolfgang Schäuble in the March 2008 edition of its magazine Datenschleuder. The magazine also included the fingerprint on a film that readers could use to fool fingerprint readers.

India

India's national ID program called Aadhaar. It is a biometrics-based digital identity, instantly verifiable online at the point of service (PoS), at any time, anywhere, in a paperless way. Currently it has 500 million people (5 billion fingerprints, 1 billion iris image, 500 million face photo) with 6 peta byte of data. It will reach 1.25 billion people in few years, 15 PB of data and over 200 trillion biometric matches per day.

It is designed to enable government agencies to deliver retail public service securely based on biometric data (fingerprint, iris scan and face photo), along with demographic data (name, age, gender, address, parent/ spouse name, mobile phone number) of a person. The data is transmitted in encrypted form over internet for authentication, aiming to free it from limitations of physical presence of a person at a given place. Thus is can be used for casting vote from anywhere, availing social security benefits from anywhere e.g. PDS ration form any shop etc.

Using multiple biometrics

UIDAI registrars collect both iris image, ten fingerprints, and a digital photograph from each enrollee. This multi-modal system is advantageous because different biometrics are better suited to different tasks. Iris scans provide more data than fingerprints, essential for de-duplication, but fingerprints are easier and cheaper to authenticate. Having multiple measures also reduces the failure-to-enroll rate, as some people have worn fingerprints or damaged eyes.

Supports public- and private-sector applications

The UID program is designed to be an "identity service provider" for both government programs and the private sector. Users from public and private agencies can verify people's identity against their fingerprints and Aadhar number. When queried, the UID database returns a simple yes or no response to the match; no personal information is provided, but users can prove their identity.

Competitive, standards-based procurement

The UID program includes opportunities for vendors to compete and bring down costs, also promoting innovation.

Card-less design has advantages, but depends on internet for authentication

Aadhaar is a number, not a card, written on paper letter. It requires minimum 2G internet access for instant validation. Aadhaar serves the purpose if Aadhaar holder verbally tells the AN and it gets instantly verified online through KYC or E-KYC process in a paperless way; which provides high reliability of identity. Only show of paper Aadhaar card / letter provides low reliability of identity as it can be easily faked.

A variety of devices have been developed to verify identity at the point of service. With cellular coverage, a biometric-enabled Bluetooth device can reach rural areas to authenticate ration payments, health insurance, and so on. Card-less operation has advantages, particularly as cards are susceptible to hacking, forging, theft, and loss. However, card-less systems may not be possible in areas that lack internet access or complete mobile network coverage.

Open technology versus proprietary systems and foreign providers

UID contracts out de-duplication to three private non-Indian service providers to take advantage of the latest technology. This may not be essential for a small country where requirements are less stringent, but it suggests the need to carefully consider the roles of national and foreign providers and the relative advantages of proprietary and open-source technology in designing a national biometric system.

Iraq

Biometrics are being used extensively in Iraq to catalogue as many Iraqis as possible providing Iraqis with a verifiable identification card, immune to forgery. During account creation, the collected biometrics information is logged into a central database which then allows a user profile to be created. Even if an Iraqi has lost their ID card, their identification can be found and verified by using their unique biometric information. Additional information can also be added to each account record, such as individual personal history.

Israel

The Israeli government has passed a bill calling for the creation of a biometric database of all Israeli residents; the database will contain their fingerprints and facial contours. Upon enrolling, a resident would be issued a new form of an identification card, containing these biometrics as well as being harder to counterfeit and having a smart-card chip with a digital certificate, allowing for digital signatures. In addition, smart-chip passports can be issued. The law is currently in its trial period, during which enrollment is optional; pending on successful trial, enrollment would be mandatory for all residents upon issuance or replacement of Teudot Zehut .

Opponents of the proposed law, including prominent Israeli scientists and security experts, warned that the existence of such a database could damage both civil liberties and state security, because any leaks could be used by criminals or hostile individuals against Israeli residents.

Italy

Italy has standardized protocols in use to police forces. Specialist and University Faculty *Enrico Manfredi d'Angrogna Luserna v. Staufen Rome University Tor Vergata – Siena University.

Netherlands

Starting 21 September 2009, all new Dutch passports and ID cards must include the holder's fingerprints. Since 26 August 2006, Dutch passports have included an electronic chip containing the personal details of the holder and a digitised passport photograph. The chip holds following data: your name (first name(s) and surname); the document number; your nationality, date of birth and sex; the expiry date; the country of issue; and your personal ID number (Dutch tax and social security (SoFi) number).

Recent requirements for passport photographs

Since 28 August 2006, under EU regulation '2252/2004' all EU member states have been obliged to include a digital image of the holder's passport photograph.

New Zealand

SmartGate was launched by the New Zealand government at Auckland International Airport on Thursday 3 December 2009. The program is available at Auckland, Wellington and Christchurch international airports for arriving travellers, and also for travellers departing from Auckland (with plans to extend the program for departures from Wellington and Christchurch by mid-2011).

The kiosk and gate system will allow all New Zealand and Australian electronic passport holders over 18 to clear passport control without needing to have their identity checked by a Customs officer. The system uses "advanced facial software" which "compares your face with the digital copy of your photo in your ePassport chip".

Deputy comptroller of customs John Secker said SmartGate represented probably the biggest single development in border processing in New Zealand in the past two decades. People will have a choice whether they want to use the system or go through normal passport control.

Norway

The introduction of biometric passports to Norway began in 2005 and supplied by Setec, a Gemplus International company. The chips used in Norway employ security features recommended by the International Civil Aviation Organization (ICAO) although security and privacy concerns from civil liberties groups remain.

In 2007 the Norwegian government launched a ‘multi-modal’ biometric enrolment system supplied by Motorola. Motorola's new system enabled multiple public agencies to digitally capture and store fingerprints, 2D facial images and signatures for passports and visas.

Steria and IDEX ASA are two of the leading biometrics software and product manufacturers in Norway.

Tanzania

Tanzania began its biometric voter registration (BVR) system in February 2015 and planned to use it first in a constitutional referendum and subsequent general elections.

Ukraine

A bill on biometric passports was approved by Ukraine's Parliament on February 15, 2012. These passports are to be used for foreign travel only. Internal passports so far don't have biometric information. An updated version of the law was passed by the Verkhovna Rada of Ukraine on November 20, 2012, taking into account proposals made by the president, and was subsequently signed by the president. The new biometric passports are one of the conditions placed on Ukraine by the European Union on the path to easing its visa requirements and eventually moving towards a visa-free regime with the EU. These national ID cards will be valid for 10 years and issued at birth, instead of at the age of 16, as previous Ukrainian passports were. Verkhovna Rada Commissioner for Human Rights, Valeriya Lutkovska, had criticized the law as it “does not comply with the Constitution of Ukraine and European standards in the sphere of personal data protection, and might infringe on human rights and freedom.” The law was also criticized by Oleksandr Hladun from the Institute for Demography and Social Studies of Ukraine. He said the adoption such a law on a unified demographic register threatens “to create a police state” in Ukraine, where any information can be collected about any person and used without the person’s knowledge.

According to the new law, each Ukrainian citizen, regardless of his or her age, is obliged to obtain such a passport. The previous version of the Ukrainian passports will remain valid until their official expiration dates.

Ukraine's law on biometric passports came into force on December 6, 2012. The document foresees the introduction of electronic passports containing electronic chips with biometric information for traveling abroad, according to the standards of the International Civil Aviation Organization (ICAO). According to the law, the passports of Ukrainian citizens will be produced in the form of cards with contactless smart chips and issued no later than 30 calendar days from the date of the submission of a relevant application. The electronic passports will include the name of the state, the name of the document, the full name of the holder, the holder's gender, citizenship, date of birth, and a unique number in the register, the number of the document, the document's date of expiration, the date of issue of the document, the name of the agency that issued the document, the place of birth, a photo and the signature of the holder. Information about the parents or the guardian of the holder may be included to the document upon a relevant written request. At the president's request, a new provision has been included in the law that says that people who refuse to enter their personal information in an electronic chip due to their religious beliefs have the right to refuse to use this document or the insertion of such information into the chip.

The United Nations High Commissioner for Refugees has suggested that the new law does not fully comply with international standards.

United Kingdom

Fingerprint scanners have been used in some schools to facilitate the subtraction of funds from an account financed by parents for the payment of school dinners. By using such a system nutritional reports can be produced for parents to survey a child's intake. This has raised questions from liberty groups as taking away the liberty of choice from the youth of society. Other concerns arise from the possibility of data leaking from the providers of school meals to interest groups that provide health services such as the NHS and insurance groups that may end up having a detrimental effect on the ability of individuals to enjoy equality of access to services.

United States

Starting in 2005, US passports with facial (image-based) biometric data were scheduled to be produced. Privacy activists in many countries have criticized the technology's use for the potential harm to civil liberties, privacy, and the risk of identity theft. Currently, there is some apprehension in the United States (and the European Union) that the information can be "skimmed" and identify people's citizenship remotely for criminal intent, such as kidnapping.

The US Department of Defense (DoD) Common Access Card, is an ID card issued to all US Service personnel and contractors on US Military sites. This card contains biometric data and digitized photographs. It also has laser-etched photographs and holograms to add security and reduce the risk of falsification. There have been over 10 million of these cards issued.

According to Jim Wayman, director of the National Biometric Test Center at San Jose State University, Walt Disney World is the nation's largest single commercial application of biometrics. However, the US-VISIT program will very soon surpass Walt Disney World for biometrics deployment.

The United States records all fingerprints and a picture of foreign airline passengers visiting the U.S. (excepting Canadians), keeping it in databases for seventy-five years. It is suggested that such information should be shared among the U.S. and other countries that have similar systems. Privacy advocates are worried about data leakage and misuse.

NEXUS is a joint Canada-United States program operated by the Canada Border Services Agency and U.S. Customs and Border Protection. It is designed to expedite travel cross the US-Canada border and makes use of biometric authentication technology, specifically "iris recognition biometric technology". It permits pre-approved members of the program to use self-serve kiosks at airports, reserved lanes at land crossings, or by phoning border officials when entering by water.